Filing a return
Getting Back Into IRIS
IRIS has two recovery routes, not one. Forgot Password works where you still have your registered email and mobile. Account Recovery exists for where you have lost access to either, and recovers the account by updating the mobile number registered against your CNIC. It is self-service: you do not need to visit an RTO, and you should not be paying an agent for it.
We do this for clients:Income Tax Return Filing in Pakistan
Where these figures come from
- Statutory basis
- Income Tax Ordinance, 2001, as amended by the Finance Act 2026, for tax year 2027 (1 July 2026 to 30 June 2027).
- Last checked against the statute
- by BarrioVibe, which files income tax returns through FBR IRIS.
These figures are an estimate computed from the rates above, not tax advice for your situation. Your return depends on facts a form cannot see, so treat the number as a starting point and speak to us before you file on it.
Why Forgot Password fails for so many people
The ordinary route requires both channels. FBR issues a code to your registered email and a code to your registered mobile, and you need both, so losing either one breaks it. That is stricter than most portals and it is why the second branch had to exist.
It also explains a common frustration: someone who still has their phone but registered with an old work email finds Forgot Password unusable even though they can receive the SMS. That is the case Account Recovery covers.
What you can change online, and what needs a visit
From FBR's own change-of-particulars page. The split is the reason a lost email is a harder problem than a lost phone.
| Change | How |
|---|---|
| Mobile number | Online, through Form 181 |
| Email address | RTO visit |
| Residential or business address | Online, through Form 181 |
| Bank account | Online, through Form 181 |
| CNIC number | RTO visit |
| Jurisdiction, or deregistration | RTO visit |
The asymmetry explains the design
A mobile number can be updated online and an email cannot. That is exactly why the Account Recovery branch works the way it does: it recovers your account by updating the mobile registered against your CNIC, using the one channel FBR is willing to let you change without a counter visit.
A modification is decided by the Commissioner, and where it is refused there is a representation to the Chief Commissioner available within thirty days. No FBR source we read documents a biometric or NADRA verification requirement for changing particulars, although vendors frequently assert one.
Registration is not finished when you can log in
This is a different problem that presents the same way, and it is worth ruling out before assuming an access fault. FBR's own guide warns that just after login you cannot file a return unless the registration process is completed by submitting the registration application.
Form 181 has to be submitted from the Draft folder. Creating the login, seeing a dashboard and stopping there is the single most common structural failure in the whole process, and the symptom is that filing options appear absent rather than that anything looks broken.
Questions
The questionspeople ask
I lost access to my registered email and phone. Can I still recover my IRIS account?
Yes, and without visiting an RTO. The IRIS recovery screen has a second branch, Account Recovery, for exactly that case: where you do not have access to either your registered mobile or email, and want to recover the account by updating the mobile number registered against your CNIC.
How do I reset my IRIS password?
Through Forgot Password, which requires both your registered email and your registered mobile, because FBR sends a code to each. If you have lost access to either, use the Account Recovery branch instead.
How do I reset my IRIS PIN?
There is no forgot-PIN flow. Change PIN requires you to be logged in, so recovery is password-first: log in with your password and have a new PIN issued to your registered email. Guides describing a PIN reset link are describing something that does not exist.
What is the difference between the IRIS password and the PIN?
The password logs you in. The PIN authorises submissions, which is why it is asked for when you file rather than when you sign in. Both are issued together at e-enrollment, to your email and mobile.
Can I change my registered email in IRIS online?
No. FBR allows the mobile number, addresses and bank account to be changed online through Form 181, but the email address, CNIC, jurisdiction and deregistration all require an RTO visit. That asymmetry is why a lost email is harder than a lost phone.
Can I use the same mobile number for my company registration?
Not if it is already registered with FBR. For an association or company registering at a facilitation counter, the SIM must be registered against the person's own CNIC and not already registered with FBR, so a principal officer generally needs a second number.
Why can I log into IRIS but not file a return?
Most likely because registration was never completed. FBR warns that just after login you cannot file unless the registration application has been submitted, which means Form 181 has to go from the Draft folder. A dashboard appearing does not mean registration finished.
What is FBR's helpline number for IRIS problems?
[email protected], and (051) 111 772 772 nationally, 9am to 11pm Monday to Friday. A widely circulated 0800 number appears in no FBR source we could find.
Also here
Relatedguides
Filing your return
The IRIS screens in order with the amount codes you will actually see, the wealth statement nobody expects, and what it costs if you are late.
How to get an NTN
Registration is free, a salaried person attaches no documents, and the step most people miss is the one that actually completes it.
Rather have someone handle it?
We file returns through IRIS every day. If the answer above raises a question about your own case, that is the conversation to have before the deadline rather than after it.