Finding one document years later when LHDN asks

The letter or email is polite and very specific. LHDN wants the supporting documents for a list of transactions from a client’s accounts three or four years ago. A RM4,800 payment in the general ledger. Two purchase invoices from one supplier. The receipt behind a travel claim.

Somewhere, those documents exist. Maybe in a lever-arch file in the storeroom, maybe in a box at the client’s shop, maybe in a folder on a PC belonging to a staff member who left in 2024. Finding them takes a senior clerk two days, and one of them is never found.

The 7-year rule is not really about keeping paper. It is about being able to find one piece of paper, fast, years after anyone remembers it.

What the rule actually asks for

Section 82 of the Income Tax Act 1967 requires a business to keep sufficient records. LHDN explains what that means for companies in Public Ruling 4/2000, and rulings for other types of taxpayer are in the public rulings index. For companies, the ruling says:

• What to keep. Books of account, plus the invoices, vouchers, receipts and other documents needed to verify the entries in them: bank statements, pay-in slips, cheque butts, payroll records, copies of receipts issued.
• How long. At least 7 years from the end of the year to which the income relates. The ruling’s own example: a financial year ending 30 June 2002 means records kept until 31 December 2009.
• Longer in two cases. If the return was furnished late, 7 years runs from the end of the year it was actually furnished. If an assessment is under appeal, the records stay until the appeal is finally decided.
• Sufficient. Records, manual or electronic, should be enough to explain each transaction.
• Language and place. In Malay or English, kept at the registered office or business premises in Malaysia.

The key phrase is explain each transaction. A document that exists but can’t be linked to the ledger line it supports doesn’t explain anything.

For SST-registered clients there is an extra layer: records kept 7 years, in Malay or English, in Malaysia, and paper originals kept in their original form even after scanning. See SST record keeping.

What “organised” means in practice

Paper originals of receipts and invoices still have to be kept: LHDN’s Public Ruling 4/2000 asks for original source documents to be retained even where the books are on computer. But the paper is rarely what you search. What lets you answer LHDN in minutes is an organised record alongside it, and “organised” is the word firms underestimate. A practical definition:

1. From the ledger to the document. Given any line in the accounts, you can find the document behind it.
2. From the document to the ledger. Given any document, you can see where it was posted.
3. Readable. The copy you find is legible: amount, date, vendor, tax.
4. Complete for the period. Nothing is “somewhere else”: not on a former staff member’s PC, not in the client’s car.
5. Still there in year 7. Not lost in a software switch, a flood or a hard disk failure.

A shelf of lever-arch files passes test 1 only if someone wrote a reference on each entry. A Google Drive folder full of photos called IMG_4471.jpg fails most of them.

A filing system that works

Whatever you store documents in, paper or digital, the structure can be the same.

Folders. One level per thing you’ll search by:

Client code / Financial year / Month / Type

For example KRM001 / FY2026 / 03-Mar / Purchases. Use the client’s financial year, not the calendar year, so a whole year of records sits together for the 7-year count.

File names. Make every file describe itself, so it still makes sense outside its folder:

YYYY-MM-DD_Vendor_Amount_Type

For example 2026-03-14_Syarikat-Hardware-Jaya_RM1250.00_INV.pdf. Date first so files sort in order. Vendor so you can search. Amount because that is what a query letter or a bank line gives you.

Reference in the books. When you post an entry, put the file name or a document number in the description or reference field of your accounting software. That’s the link that makes tests 1 and 2 pass.

One owner. Records for each client live in one place the firm controls, not on personal drives or phones.

The two-minute test

Try this on a client today:

1. Open their ledger for a year three or four years back.
2. Pick five lines at random: a large purchase, a small expense, a deposit, a bank charge, a payroll entry.
3. Time how long it takes to put the supporting document for each one on screen or on the table.

If all five appear inside two minutes, the system works. If one takes half an hour, or can’t be found, that’s what an LHDN query or an audit will feel like, multiplied by every line they ask about.

Common ways documents go missing

• The bag never got sorted properly. Documents went into the books but back into the bag, not a file. (A method for that is in how to sort a client’s year of receipts.)
• Thermal receipts faded. The document is there, the ink isn’t. Capture early; see why thermal receipts fade.
• Staff turnover. Each person had their own system.
• Software switch. The old system’s attachments didn’t come across.
• The client kept the originals. And moved premises.

Where AccPilot fits

AccPilot keeps every document a firm captures (by upload, phone, email or the client upload link) stored and searchable by vendor, date and amount for 7 years. Each document is read when it comes in, so the details you’d search by are already there; you don’t need to rename files by hand. When LHDN gives you a date and an amount, you type them in and the document comes up. Matching bank statement lines to documents also means gaps show up as a chase list that month, not four years later.

What AccPilot doesn’t do is decide what’s sufficient for a particular case, or replace the paper originals your clients must keep. That judgement stays with the firm. More on retention periods in how long to keep receipts in Malaysia.

To run the two-minute test on your own documents, book a free demo.