Tax planning
IRS Audit Guide for Business Owners: How Audits Work, What Triggers Them, and How to Respond
Most IRS audits of small businesses are correspondence audits — the IRS sends a letter asking about a specific item. Field audits are more thorough. Here's what triggers audits, what to do when you get the letter, and how proper documentation prevents most problems.
Written by Matt Reese, CPA · 7 min read · Published April 2026·Share on LinkedIn
Key Takeaways
- Most IRS audits are correspondence audits — a letter asking you to document a specific item. They're resolved by mail, without a face-to-face meeting, by providing the requested documentation.
- The most common small business audit triggers: high business expense deductions relative to income, large vehicle deduction with no mileage log, home office deduction on a rented residence, and cash-intensive businesses with round-number income.
- The three-year statute of limitations: the IRS generally has 3 years from the later of the return filing date or the due date to audit. For substantial underreporting (25%+ of gross income), the limitation extends to 6 years. Fraud has no statute.
- Never respond to an IRS audit without your CPA or enrolled agent involved. What you say and what you produce can expand or limit the scope of the audit.
Types of IRS audits
| Audit type | How it works | Frequency | Typical triggers |
|---|---|---|---|
| Correspondence audit | Letter requesting documentation for one or a few items. Resolved by mail. | Most common — 70%+ of audits | Discrepancy on return vs information IRS received; large specific deduction |
| Office audit | You bring records to an IRS office. More comprehensive than correspondence. | Less common | Schedule C deductions, home office, vehicle mileage |
| Field audit | IRS examiner comes to your place of business or CPA's office. Most thorough. | Least common — mostly for complex returns | High-revenue businesses, complex returns, suspected underreporting |
| TCMP audit | Comprehensive audit examining every line item — rare research audits | Very rare | Random selection for compliance research |
A correspondence audit is a letter, not an invasion. Most resolve in 30–60 days with organized documentation. Respond promptly, provide exactly what’s requested, and don’t volunteer anything extra.
Common audit triggers for small business owners
| Trigger | Why it attracts attention | How to protect yourself |
|---|---|---|
| Large deductions relative to income on Schedule C | High expense ratio relative to revenue is a statistical anomaly | Legitimate deductions are defensible; document everything |
| Vehicle deduction with no mileage log | IRS auto deductions are a known abuse area | Keep a contemporaneous mileage log with dates, destinations, purposes |
| Home office deduction | History of overclaiming; IRS uses statistical comparisons | Must meet exclusive-use test; document dedicated workspace |
| Cash business with round-number income | Round numbers suggest estimation, not recording | Maintain daily receipts, deposit all income, reconcile |
| Large meal and entertainment deductions | Post-TCJA, entertainment is disallowed; meals must be documented | Keep receipts with business purpose and attendees noted |
| Claiming business losses repeatedly | 3 of 5 years profitability test for hobby loss rules | Document business intent; maintain professional business practices |
| Large charitable deductions | Valuation and documentation requirements for non-cash donations | Get appraisals for non-cash; written acknowledgments for cash |
| Failure to report 1099 income | IRS matches 1099s; unreported income is easily detected | Report all 1099 income; if 1099 is wrong, report correct amount and explain |
What to do when you receive an IRS letter
- Don’t panic. Most letters are routine. Read the entire letter before doing anything.
- Identify what’s being requested. Is this a notice about a math error, a missing form, a CP2000 matching issue, or an actual audit? The type determines the response.
- Note the deadline. IRS letters have response deadlines. Missing them can result in automatic assessments or default judgments. Put the deadline on your calendar immediately.
- Call your CPA or EA. Before responding to anything more complex than a math error notice, loop in a professional. What you say and what you produce matters.
- Gather documentation. For any item being questioned, assemble bank statements, receipts, contracts, and any other substantiation. Organized documentation resolves most correspondence audits quickly.
- Respond in writing. Always respond in writing, even for phone-call invitations. Keep copies of everything you send.
Never send original documents to the IRS
The three-year statute of limitations
The IRS has a limited window to audit most returns:
| Situation | Statute of limitations |
|---|---|
| Standard return filed on time | 3 years from later of due date or actual filing date |
| Return filed late (past deadline) | 3 years from actual filing date |
| Substantial understatement (25%+ of gross income omitted) | 6 years |
| Fraudulent return or no return filed | No statute — unlimited |
| Employment taxes | 3 years from due date of the quarterly return |
| FBAR (foreign account) violations | Varies — up to 6 years |
Documentation that prevents most audit problems
The IRS burden of proof generally falls on the taxpayer — you must prove your deductions. The following documentation prevents most audit adjustments:
- Vehicle deductions: A contemporaneous mileage log with date, starting and ending odometer (or miles driven), destination, and business purpose for each trip
- Business meals: Receipt plus notation of business purpose and names of attendees
- Home office: Photographs of the dedicated workspace, measurements, lease or mortgage statement showing the address
- Travel: Itinerary, receipts, meeting logs showing business days vs personal days
- Equipment and major purchases: Receipts showing business purpose; for Section 179 or bonus depreciation, a record of placed-in-service date
- Contractors (1099 recipients): Signed W-9, copies of 1099s filed, descriptions of services performed
The best audit defense is a clean, well-documented return
You might also read
What Counts as a Business Write-Off?
The ordinary-and-necessary standard, common deductible expenses, and why personal charges don't become write-offs just because they clear the business account.
Tax planningHow to Choose a CPA for Your Business: What to Look For, What to Ask, and Red Flags to Avoid
Not all CPAs do the same thing. A filing CPA prepares your return; a planning CPA calls in October with recommendations. Questions to ask, red flags to avoid, specialization matters, and what a reasonable engagement costs.
Tax deductionsVehicle and Auto Deductions: Standard Mileage vs Actual Expense
Two methods to deduct business vehicle use — standard mileage (70¢/mile in 2025) or actual expense. How to choose, what documentation is required, and the luxury car and SUV limits that change the math.
Frequently asked
Questions owners actually ask
- What is the IRS audit rate for small businesses?
- Overall audit rates are very low — less than 1% of returns for most income ranges. However, self-employed Schedule C filers have higher audit rates than W-2 employees, and business owners with large home office deductions, vehicle deductions, or travel deductions are examined at higher rates. IRS resources have declined significantly, so most returns are never examined.
- I received an IRS notice. Does that mean I'm being audited?
- Not necessarily. The IRS sends millions of CP notices for routine matters — math errors, missing forms, balance due notices, and matching issues (when your return doesn't match information documents the IRS received). These are not audits. A CP2000 (proposed changes) or an actual audit notice (Letter 2202 or similar) is different. Read the notice carefully to understand what's being asked before panicking.
- Can I represent myself in an IRS audit?
- You have the right to represent yourself, but it's rarely advisable for anything beyond a simple correspondence audit. An IRS auditor is trained to find additional issues; a CPA or enrolled agent who does representation work knows how to limit scope, what to produce, and what not to volunteer. The cost of professional representation is almost always less than the additional tax from an unrepresented audit.
- What if I disagree with the IRS's audit findings?
- You have multiple levels of appeal. First, appeal within the IRS to the Office of Appeals — an independent function that resolves many disputes. If that fails, you can petition the U.S. Tax Court (don't have to pay first), the U.S. District Court (must pay first, then sue for refund), or the U.S. Court of Federal Claims. Most audit disputes are resolved at the IRS Appeals level.
- How long should I keep tax records?
- The IRS recommends keeping records at least 3 years from the later of the return due date or filing date (matching the basic statute of limitations). For property records (equipment, real estate), keep records until the statute runs from the year of disposition — which may be many years longer. If you have foreign accounts, NOL carryforwards, or complex transactions, keep indefinitely. Employment tax records: 4 years.
Take the next step
Turn tax questions into a plan. Talk with Matt or see how we work with operating business owners.
Educational content only.This article is for informational purposes and does not constitute tax, legal, or investment advice. Every owner’s facts are different; consult a qualified CPA and advisor before acting. Tax and accounting services are provided through Matt Reese, CPA; investment advisory services are provided through Measured Risk Portfolios, a registered investment adviser. Matt Reese, CPA and Measured Risk Portfolios are separate entities; clients are not required to engage both.