The Federal Board of Revenue (FBR) has firmly pushed back against accusations of violating taxpayers’ financial privacy, defending its practice of sending targeted SMS alerts to income tax filers about their bank accounts and property transactions — a policy that has drawn sharp criticism from senators and sparked a broader national debate on data protection and the limits of state surveillance.
What Triggered the Controversy
The FBR sent SMS alerts to income tax filers regarding their bank accounts and movable and immovable property transactions, raising concerns among taxpayers over how such sensitive financial information was being obtained and communicated.
The issue came to a head at a session of the Senate Standing Committee on Finance and Revenue, chaired by Saleem Mandviwala, where lawmakers described the FBR-issued messages as bordering on financial surveillance. Senators argued that unsolicited tax messaging raised serious questions about data protection, consent, and the potential misuse of financial information.
FBR’s Defence: Compliance Nudges, Not Surveillance
In a detailed briefing submitted to the Senate Standing Committee on Finance, the FBR clarified that the recent text messages were part of a behavioral compliance initiative aimed at improving tax awareness and encouraging voluntary filing.
According to the FBR, the information used in these messages pertains solely to each taxpayer’s own financial profile and is shared exclusively with the individual concerned. No third party is involved at any stage, and all communications are carried out through secure official channels.
FBR Chairman Rashid Mahmood Langrial told the committee that messages were sent to relevant taxpayers only, noting that the authority sends congratulatory messages to taxpayers upon property purchases and simply asks them to include such transactions in their tax returns. He further claimed that this initiative increased the number of tax return filers by one million and led to a significant drop in the number of taxpayers declaring zero income.
Legal Basis for Collecting Third-Party Data
Responding to questions about the source of the financial data, FBR said it is legally empowered under the Income Tax Ordinance, 2001, to obtain third-party data for tax compliance purposes. Under Section 165A, banks are required to share details of deposits, withdrawals, and payments above certain thresholds with the FBR. Meanwhile, Section 175A authorizes real-time access to databases of designated agencies such as NADRA, the State Bank of Pakistan, FIA, provincial land authorities, and utility companies.
All such data sharing is governed by Section 216, which ensures strict confidentiality and limits its usage exclusively to tax-related purposes. The FBR stated that all financial information is stored within its secure systems and utilized only for risk-based analysis and taxpayer facilitation, in full compliance with data protection laws.
Finance Minister Backs FBR’s Position
Finance Minister Muhammad Aurangzeb told the committee that FBR messages for tax recovery did not breach taxpayers’ financial privacy, disclosing that he personally received one of the FBR SMS alerts and found nothing objectionable. He maintained that there should be no concern with such messages as long as they are delivered only to the intended taxpayer.
Senators Remain Unconvinced
Despite the government’s assurances, the issue was far from settled in the committee room.
Senators remained unconvinced by the official position, insisting that the practice raised legitimate questions about consent, data protection, and the risk of eroding public trust in the financial system. The committee also took aim at commercial banks during the same session, condemning the practice of charging account holders fees for SMS alerts — a move senators described as monetizing basic banking transparency — and directing the State Bank of Pakistan to return with a compliance briefing.
FBR’s Commitment Going Forward
The FBR maintained that its messages constitute an evidence-based approach to strengthening voluntary compliance, ensuring taxpayers are aware of both their own declared financial data and information reported by third-party institutions. The authority reaffirmed its commitment to cooperating with all parliamentary oversight forums and to upholding transparency, data protection, and respect for taxpayers’ rights.
The controversy comes at a time when the FTO has separately raised red flags over FBR’s IT security vulnerabilities, and the revenue body is navigating intense scrutiny over its data governance practices — making the question of taxpayer privacy increasingly central to Pakistan’s ongoing tax reform debate.