Taxpayer Portal Access, Security and Password Recovery in Nepal

Government filing access belongs to the taxpayer or its authorised representative. The official IRD Taxpayer Portal provides private filing and taxpayer functions, with access requirements depending on the service. Public CMA reading and downloads remain open. Do not give passwords to a website content form, an unsolicited message or a person claiming that a tax credit requires remote access to your device.

This guide covers access management for FY 2083/84. Portal screens and recovery methods can change. Follow the current official instructions and competent-office requirements. This article does not promise that one recovery method is available to every account.

Confirm the taxpayer PAN, legal name, authorised person and registered contact information. Identify whether access already exists before requesting a new account. Establish who may prepare, check and confirm filings, and keep the taxpayer able to recover access when employees or advisers leave. Use a password manager or other secure credential store with access restricted to authorised people.

Start from the official IRD site and confirm the address of the service. Use the displayed password-recovery facility if available. Where identity or authority needs office verification, prepare the documents the authority requests and use that process. Do not register another PAN because a password is lost. The taxpayer's returns, payments and credits remain associated with the existing identity.

Never repeatedly submit a payment or return simply because the page becomes blank. First determine whether the transaction completed, whether a reference was issued and whether the taxpayer's record reflects it. Preserve the original evidence and investigate through the official channel.

A company replaces its accountant before an annual return is due. The incoming team should obtain the filing calendar, prior acknowledgements, current return working papers, payment records and unresolved notices. The director or authorised officer confirms access authority. The former accountant's retained copy of a password should not be the company's only recovery mechanism. Reconcile unfinished submissions before the new team files, so the same return is not entered twice.

Review the PAN, taxpayer name and period after signing in and before submission. Use separate preparation and checking where practical. Log out after use, avoid leaving private taxpayer records on shared devices and keep sensitive downloads in controlled storage. Do not assume a browser's saved login means the displayed taxpayer is the intended one.

Record who approved material changes and the acknowledgement of each completed filing. Retain the documents needed to respond to a later query without retaining unnecessary copies of identity records. If suspicious activity affects a bank payment as well as portal access, address both through the appropriate official channels. The tax filing record and bank transaction each need their own investigation and evidence.

Before staff or advisers leave, identify the accounts, approved contact details, current filing status and secure handover requirements. Confirm that the taxpayer retains control of the registered communication channel. A former employee’s personal email or telephone can make later recovery difficult even when every previous return was filed correctly. The handover should list pending submissions, payment reconciliations, notices and authorised representatives without distributing passwords in a public document. Change access through the applicable official process and keep proof of acceptance. A signed engagement letter alone does not establish that a private government account has been transferred successfully.

If recovery is needed, use the current official instructions and required identity or authority evidence. Record the request and resolution. Do not respond to a message demanding a password or remote computer access in exchange for a tax refund. Verify the sender through official contact information obtained independently. After access is restored, check the latest return, contact record and outstanding notices before resuming work. A recovered login proves access; it does not prove that the preceding filings or allocations are correct. Preserve the audit trail of who prepared, checked and submitted each significant obligation.