Hong Kong audit and tax remediation after inaccurate outsourced filings

This case is based on an authorised project record. Identifying details of the client, former service provider and signatories have been removed. Tax, interest, penalties and processing times are case records only and do not promise any authority decision or level of mitigation.

Background

In December 2024, a Shenzhen-based cross-border ecommerce operator (the “client”) sought assistance with a Hong Kong tax review. The Hong Kong company had approximately HK$15 million in actual revenue for 2023, while the audit and tax filing previously submitted reported approximately HK$8 million. The filing therefore differed materially from receipts shown in the bank account.

The client had given bank statements, invoices and electronic contracts to a low-cost outsourced provider to coordinate annual compliance, bookkeeping and audit work. The client then signed the filing without a sufficient review. In November 2024, the Inland Revenue Department asked the company to explain the mismatch between reported revenue and bank receipts. The initial estimate of additional tax, penalties and interest was approximately HK$130,000 to HK$150,000.

Initial review

The team performed three checks:

1. Review the former audit and filing: the project materials showed a material gap between the bookkeeping process, audit evidence and final signing chain. Some cost entries lacked source documents.
2. Assess the tax issue: the bank records had been provided to the outsourced service provider, so the revenue information had not been wholly concealed. Nevertheless, the director remained responsible for the company’s filing and could not transfer all responsibility to an agent.
3. Set the communication principle: acknowledge the under-reporting, reconstruct the accounts, pay the shortfall voluntarily and provide a documented explanation of how the error arose and how it would be corrected.

The objective was not to “guarantee cancellation of the penalty”. It was to restore reliable accounts, contain continuing-compliance risk and give the IRD verifiable corrective material.

Remediation

Step 1: request more time to respond

On 12 December 2024, the team explained that the former audit materials contained material errors and that a new audit had begun. A 60-day preparation period was requested. The case record states that on 18 December the IRD extended the response deadline to 28 February 2025.

Step 2: re-perform the bookkeeping and audit

Between 15 December 2024 and 20 January 2025, the accounting team reconstructed the 2023 accounts. The work included:

• matching ecommerce platform data to bank transactions and verifying approximately HK$15 million of revenue;
• reviewing purchase invoices, logistics bills, platform charges and other cost evidence;
• removing unsupported or incomplete cost entries and rebuilding the working papers to Hong Kong financial-reporting and audit requirements; and
• having a properly qualified Hong Kong auditor complete a replacement audit report.

The reconstructed record showed approximately HK$2 million in reportable profit and approximately HK$330,000 in profits tax. After tax already paid and supported cost adjustments were taken into account, the additional tax for the remediation was approximately HK$80,000. That calculation reflects only the materials ultimately used in this case.

Step 3: submit the explanation and corrected evidence

On 25 January 2025, the team submitted an explanatory letter, the re-audited financial statements and the source documents on behalf of the company. Arrangements were also made to pay the tax shortfall and related interest. The letter acknowledged the inaccurate filing and explained the client’s reliance on the outsourced service and lack of financial expertise, without avoiding the director’s responsibility for the accuracy of the return.

The IRD was asked to reconsider the penalty percentage in light of the first occurrence, voluntary correction, full disclosure and continuing cooperation. The request did not bind the authority to provide mitigation.

Step 4: implement the IRD decision

The case record states that the penalty percentage, initially estimated at 50% of the tax undercharged, was adjusted to 20%. The penalty moved from approximately HK$40,000 to approximately HK$16,000. Together with approximately HK$80,000 of additional tax and HK$4,000 of interest, the client paid approximately HK$100,000 in total. The decision was implemented around 14 February 2025.

Step 5: establish a continuing bookkeeping process

After the remediation, the company introduced a monthly handover process for bank statements, invoices, platform settlement reports and contracts. The accounting team posted transactions monthly and retained supporting documents so the year-end financial statements and audit could be prepared from reconciled books.

Outcome

• The principal remediation took approximately two months, from 10 December 2024 to around 14 February 2025.
• The replacement audit fully reported revenue and costs supported by evidence.
• The total payment moved from an initial risk estimate of approximately HK$150,000 to approximately HK$100,000, a difference of approximately HK$50,000.
• The case record indicates that the bank account remained operational during the remediation.
• The company replaced ad hoc year-end reporting with monthly bookkeeping and document retention.

Lessons from the case

1. Before signing tax and audit documents, directors should still review revenue, principal costs, bank balances and unusual items. Appointing an agent does not transfer statutory responsibility.
2. Audit providers should be assessed by the entity performing the work, auditor qualifications, working papers and evidence chain—not price alone.
3. When a filing error is found, evidence should be preserved and the issue explained and corrected promptly. Any penalty remains an IRD case-by-case decision.
4. Cross-border ecommerce accounts should connect platform orders, payment channels, bank receipts, procurement and logistics costs, and refunds rather than being reconstructed once a year.

This content is not audit, accounting, legal or tax advice. A company that has received an IRD enquiry, assessment or penalty notice should obtain case-specific advice using the notice deadline and original records.