How to Fix FBR IRIS 2.0 Login Errors and File the 2026 Return

Most IRIS 2.0 login errors come down to four things: a password you no longer have, a code that goes to a mobile number or email you no longer use, a session that closes after 15 minutes of no activity, or a wealth statement that does not balance. Each one has a fix that does not need a tax consultant. The return form itself also changed on 2 September 2026, when FBR notified SRO 1495(I)/2026 with four new electronic return forms for tax year 2026, four weeks before the 30 September deadline for individuals and associations of persons.

The login screen at iris.fbr.gov.pk now carries the name IRIS 2.0, and the dashboard behind it is laid out differently from the portal most people learnt on. That is where the confusion starts. Your registration number, password and PIN are the same ones you had before. What changed is where the buttons sit, and how quickly the system throws you out if you stop typing.

FBR received nearly 2 million returns for tax year 2026 by 5 September 2026, about 400,000 more than at the same point last year, as reported by ProPakistani from FBR figures. The other 4 million or so who filed last year are still to come, and most of them will try in the last ten days. We read FBR's own Iris FAQs, its IRIS Help document, its personal details page and the SRO itself to put the fixes below in order, most common first.

Why does IRIS 2.0 reject my password?

The portal rejects a password for two reasons: the password is wrong, or you are typing the wrong thing in the first box. The first field wants your registration number, which for an individual is the 13 digit CNIC without dashes. Fix both by using Forgot Password, which sends a six digit code to your registered mobile and email.

Caps lock catches more people than you would think, and so does a browser that autofills an old password from 2023. Type the password by hand once before you do anything else. If it still fails, do not keep trying. Reset it.

How to reset an IRIS password

FBR's Iris FAQs set out the reset in six steps, and IRIS 2.0 has not changed the logic, only the screen.

1. Open iris.fbr.gov.pk and click Forgot Password under the login box.
2. Enter your registration number, CNIC and the other fields the dialog asks for.
3. Type the captcha and click Submit.
4. Wait for a six digit code on your registered mobile and a second code on your registered email.
5. Type them into the SMS-Code and Email Code fields and click Verify.
6. Set a new password. Then log in and change the PIN too, from the Change PIN link at the top right, if you have forgotten that as well.

Both codes are needed. That is the part that trips people, because the SMS usually arrives in seconds and the email sits in a spam folder. Check spam before you request the code again, since a second request can cancel the first.

What if the OTP never arrives?

A code that never arrives almost always means the mobile number or email FBR holds for you is not the one in your hand. The number is the one you gave at registration, or the last one you changed through Form 181. Fix the number online if you can still log in, and at the tax office if you cannot.

FBR's personal details page lists what you can change yourself by logging into IRIS and filing Registration Form 181 for modification: mobile number, personal or residential address, business address, business branches, legal representative and bank account. Email is not on that list. If your email has changed and you have lost access to the old one, your route is the Regional Tax Office with your original CNIC, or the helpline on 051 111 772 772, which FBR staffs from 9am to 11pm, Monday to Friday, according to its own FAQs.

And if you have lost both the number and the email? Then nothing online will work, because every reset needs both codes. Go to the office. Take the CNIC, and if you are a salaried person, take the salary certificate too, because the same visit can sort out a registration query.

Two things we could not confirm on an FBR page: the claim on several consultant blogs that the SIM must be registered on your own CNIC for the SMS to arrive, and the claim that the email change is a counter service at every RTO. Both sound right. Neither is written down by FBR, so treat them as reported.

Why does IRIS log me out in the middle of the return?

IRIS closes any session after 15 minutes of no activity, as a security measure. FBR's Iris FAQs state the limit plainly. Clicking Calculate or moving between tabs counts as activity, but reading your bank statement for 20 minutes with the form open does not. Save often, and gather your figures before you open the form.

The same FAQ document answers two other complaints we see every September. Links that stop working after login are a cookie problem, and FBR's own fix is Ctrl + Shift + Del to clear them, then retry. And yes, you can log in from more than one session at once, which is useful when a consultant is helping you on another machine.

Slow loading in the last week is a different problem, and FBR has not published a fix for it. Flare reported on 16 September 2026 that FBR had acknowledged the complaints about slow loading, failed logins and submission errors, without citing a document. Our advice is the boring one. File before 25 September. Every year the portal is at its worst between 28 and 30 September, and every year people discover that at 11pm on the last night.

What does the wealth statement mismatch error mean?

The wealth statement will not submit until the unreconciled amount is zero. FBR's IRIS Help puts it in one line: revisit the data until the value in that field becomes 0. The field is comparing the change in your net assets over the year with your income minus your expenses. If those two numbers differ, something is missing.

Tax practitioner sites quote the on-screen message as an unreconciled amount against code 703000 that must be zero before submission. We could not see the message ourselves without a live return, so take the code number as reported. The logic, though, is not in doubt. Work through it in this order.

• Opening wealth must equal last year's closing wealth, to the rupee. A rounded figure breaks the reconciliation.
• Every bank balance on 30 June 2026 has to appear, including the account you forgot you opened.
• A car or plot bought this year needs its source: salary saved, a loan, a gift, or a sale of something else.
• Personal expenses have to be believable. A household of five on Rs 20,000 a month is the entry the system, and later an officer, will question.
• Loans taken and loans repaid both move the number, in opposite directions.

Do not force the field to zero by inventing an expense. That converts a mismatch into a false declaration, and the return stays on record for years.

What changed in the 2026 return form under SRO 1495(I)/2026?

FBR issued SRO 1495(I)/2026 on 2 September 2026 and added four new parts to the Second Schedule of the Income Tax Rules 2002: Part-II-ZE, ZF, ZG and ZH. They are the electronic return forms for tax year 2026 for individuals, SMEs, associations of persons and companies, covering income from 1 July 2025 to 30 June 2026. We read the notification on FBR's download server.

The SRO says the forms were first published as a draft, SRO 835(I)/2026, in May 2026, under the section of the Ordinance that requires public comment. So the shape of the form has been public for four months. What is new on 2 September is that the draft became the rule.

The salary section now asks who paid you

The notified document is 26 MB of scanned screenshots, and the field text in it is not readable by machine, so the detail below comes from the draft stage. When the draft was issued on 7 May 2026, pkrevenue.com reported that salaried taxpayers would have to enter the employer's registration number, the employer's name and the details of tax deducted during the year, in the salary section itself. The same draft added a Summary of Economic Transactions screen, and we can see that heading in the final notification.

For a person with one employer this is a copy job from the salary certificate. For anybody who changed jobs during the year, it means two employers, two NTNs and two deduction figures, and the total has to match what the employers actually deposited. Get the certificate from the old employer now, not on 29 September.

Tax lawyers quoted by Business Recorder on 3 September called the timing confusing, since the statutory deadline is 30 September 2026 and returns prepared on the older screens might need rework. FBR has not said whether returns already submitted on the earlier version are affected. If yours was filed before 2 September and accepted, leave it alone unless FBR writes to you.

What is the deadline and what does missing it cost?

The return for tax year 2026 is due on 30 September 2026 for individuals and associations of persons, and FBR repeated that date in a public message on 14 September, as reported by 24NewsHD. Companies file later. We did not open section 118 of the Ordinance for this article, so the date here is as FBR stated it, not as we read it in the law.

Missing the date has two separate costs, and people mix them up. The first is a penalty under section 182, reported by tax practitioner sites at Rs 1,000 for each day of default with a minimum amount. The second is the surcharge to get back on the Active Taxpayer List, which the Finance Act 2026 is reported to have raised to Rs 25,000 for an individual, and the late filing surcharge now costs Rs 25,000 rather than the Rs 1,000 that older pages still print. We have not read either figure on an FBR page this week, so both stay marked reported.

Being off the list is the cost that actually hurts, because a non-filer pays higher withholding tax on property, vehicles, bank profit and cash withdrawals from the day the new list is published. You can check your filer status with one SMS after you file to confirm the return landed.

Extensions have been granted in some years and refused in others. Do not plan on one.

Which steps should I take before the last week?

Do the login test today, not on the day you file. Log in, log out, and reset anything that fails. Then collect the documents, because the 15 minute timeout punishes people who search for figures with the form open. The full walkthrough of filing the income tax return covers the screens; this list covers what to have beside you.

1. Salary certificate from every employer in the year, with the employer's NTN on it, and you can verify an NTN online if the certificate leaves it out.
2. Bank statements to 30 June 2026 for every account, with closing balances.
3. Tax deduction certificates from the bank, the mobile operator and the electricity company, since banks report your withholding to FBR and the return is matched against it.
4. Last year's wealth statement, because this year's opening figure must match it exactly.
5. Purchase or sale papers for any property, vehicle or shares bought or sold in the year.
6. Your PIN, which is separate from the password and is needed at the Verify step before Submit.

If you have never registered, the same portal handles it. Somebody who wants to become a tax filer in Pakistan for the first time starts with e-enrolment, and FBR's FAQs say the password and PIN arrive by email and SMS after two verification codes, which is one more reason the contact details must be right before anything else.

Common questions about IRIS 2.0

Is IRIS 2.0 a different account from the old IRIS?

No. IRIS 2.0 is the new interface on the same portal, and your registration number, password and PIN carry over. Only the layout changed.

How long is the IRIS session before it logs out?

15 minutes of no activity, according to FBR's Iris FAQs. Any click inside the form resets the clock, so save as you go.

Can I change my registered mobile number online?

Yes, if you can still log in. Log into IRIS and file Form 181 for modification, which FBR's personal details page lists as the route for mobile number, address and bank account changes.

What is the FBR helpline number and when does it answer?

051 111 772 772, from 9am to 11pm Monday to Friday, per FBR's FAQs, and helpline@fbr.gov.pk by email. Have your CNIC ready.

What did SRO 1495(I)/2026 change?

It added the tax year 2026 electronic return forms for individuals, SMEs, AOPs and companies to the Income Tax Rules 2002 on 2 September 2026, after a May draft. The salary section is reported to ask for each employer's NTN and deductions.

When is the last date to file the 2026 return?

30 September 2026 for individuals and associations of persons, as FBR stated in its 14 September message. Companies have a later date.

What if I filed before 2 September on the older screens?

FBR has not said those returns must be redone. If the return was accepted, leave it unless FBR issues a notice or a clarification.

Last checked and sources

Last checked 17 September 2026. We read S.R.O. 1495(I)/2026 dated 2 September 2026 on FBR's download server, which cites section 237(1) of the Income Tax Ordinance 2001, states that the forms were previously published as S.R.O. 835(I)/2026 in May 2026, and adds Part-II-ZE, ZF, ZG and ZH headed Electronic Return for Individuals, SMEs, AOP and Companies for tax year 2026, tax period 1 July 2025 to 30 June 2026, with a Summary of Economic Transactions screen; the document is scanned screenshots, so the field text could not be read. We read FBR's Iris FAQs PDF for the 15 minute session limit, the six digit reset codes to registered mobile and email, the SMS-Code and Email Code fields, the Change Password and Change PIN links, the cookie fix, the multiple session answer, and the helpline number and hours. We read FBR's IRIS Help PDF for the rule that the unreconciled value must be 0 and for the Verify PIN step before Submit. We read FBR's Change Your Personal Details page for the Form 181 list, which names mobile number, addresses, branches, legal representative and bank account and does not name email. We opened iris.fbr.gov.pk and its account recovery page, which both answered but are JavaScript applications our tool could not read. Reported rather than read at source: the 30 September 2026 deadline, from FBR's public message as carried by 24NewsHD on 14 September 2026 and from Business Recorder and ProPakistani on 3 September; the nearly 2 million returns and Rs 3.5 billion paid by 5 September, ProPakistani citing FBR; the employer NTN, name and deduction fields, pkrevenue.com on the 7 May 2026 draft; the code 703000 message text, from practitioner blogs; the Rs 1,000 per day penalty and the Rs 25,000 ATL surcharge, from practitioner sites and our own earlier coverage; and FBR's acknowledgment of portal problems, Flare, 16 September 2026, which cited no document. Not used: the claim that the SIM must be on your own CNIC, and the 24 to 48 hour NADRA sync claim, neither of which appears on an FBR page.