Identity Theft Beyond the Grave: How Uncancelled KRA PINs Are Fueling Fraud in Kenya

There is a quiet, cunning economy that thrives in the shadows of death.

In Kenya, some unscrupulous individuals have been exploiting the identities of the deceased, using dead people’s ID cards to register for Kenya Revenue Authority PINs, open companies, and transact business as if the departed were still among the living.

It is a chilling reality: a person is buried, mourned, and remembered, yet somewhere in the digital corridors of commerce, “they” are signing contracts, registering firms, and moving money.

This is not just fraud. It is identity theft beyond the grave.

And that is precisely why the law is clear and deliberate about what happens when a taxpayer dies.

What the Law Says About Death and Tax Registration

Under the Tax Procedures Act, specifically Section 10, a person who ceases to be required to be registered under a tax law must apply to the Commissioner for deregistration.

Death, obviously, qualifies.

The law requires that deregistration:

• Be done in the prescribed form
• Be initiated within 30 days of the person ceasing to be required to be registered
• Be supported by relevant documentation
• This is not optional. It is a legal obligation.
• But more importantly, it is a protective mechanism.

Who Is Responsible After Death?

The responsibility shifts to the legal representative or appointed officer of the deceased.

This could be:

• An executor named in a will
• An administrator appointed through a grant of probate
• A legally gazetted representative

The legal representative must initiate PIN cancellation or stoppage by submitting supporting documents such as:

• A death certificate
• Copy of the will
• Grant of probate or letters of administration

Gazettement of administrators and beneficiaries

Once submitted, a verification task is created for an authorised officer. If the officer is satisfied, approval is granted. If the deceased had an account manager, the case is escalated to the relevant Tax Service Office for further approval.

If the officer is not satisfied, the application is rejected, but with clear reasons.

The Service Level Agreement (SLA) for this process is 60 days. And interestingly, if the Commissioner fails to respond within six months, the applicant is deemed to be deregistered by default.

This structured process exists for one simple reason: to protect both the estate and the integrity of the tax system.

Why Deregistration Matters More Than You Think

When a PIN remains active after death, it becomes vulnerable.

An active PIN tied to a deceased person can be used to:

• Register shell companies
• File fraudulent returns
• Facilitate money laundering schemes
• Obtain loans or contracts under a false identity

In a country where identity theft has become increasingly sophisticated, leaving a deceased person’s tax records open is like leaving the door unlocked in a neighborhood known for burglary.

The danger is not theoretical. Fraudsters look for weak spots, and unclosed tax registrations are prime targets.

The Hidden Cost to Families

Beyond fraud, there is another layer: financial and legal exposure to families.

If a deceased person’s PIN remains active and is misused:

• The estate could be linked to tax liabilities it never incurred
• Legal representatives could face compliance headaches
• Beneficiaries could experience delays in estate distribution

In some cases, families only discover the problem years later — when a demand notice surfaces or when they attempt to finalise succession matters.

Deregistration is therefore not merely bureaucratic housekeeping. It is estate protection.

A Call for Vigilance

There are two lessons here.

First, families must treat PIN cancellation as part of the succession checklist — just like bank accounts, land titles, and insurance policies.

Second, the tax authority must continue strengthening verification systems to ensure that no new PIN or company registration can be processed using the identity of a deceased person.

Digital systems must speak to each other. Civil registration data must synchronise with tax databases. Real-time flagging of deceased IDs should not be aspirational; it should be automatic.

Death Should Close the File

A tax PIN is meant to serve a living, economically active individual. When life ends, the administrative footprint must also close, cleanly and securely.

The Kenya Revenue Authority has provided a legal pathway through the Tax Procedures Act. The framework exists. The timelines are defined. The safeguards are outlined.

What remains is awareness and compliance.

Because in a system where even the dead can be “revived” for fraudulent business, the simplest protection is this: ensure that when a life ends, the PIN ends too.

Read Also: KRA Onboards Over 500 Fuel Stations onto eTIMS Fuel Module