Skip to main content

Tax planning

IRS Audit Guide for Business Owners: How Audits Work, What Triggers Them, and How to Respond

Most IRS audits of small businesses are correspondence audits — the IRS sends a letter asking about a specific item. Field audits are more thorough. Here's what triggers audits, what to do when you get the letter, and how proper documentation prevents most problems.

Written by Matt Reese, CPA · 7 min read · Published April 2026·Share on LinkedIn

Key Takeaways

  • Most IRS audits are correspondence audits — a letter asking you to document a specific item. They're resolved by mail, without a face-to-face meeting, by providing the requested documentation.
  • The most common small business audit triggers: high business expense deductions relative to income, large vehicle deduction with no mileage log, home office deduction on a rented residence, and cash-intensive businesses with round-number income.
  • The three-year statute of limitations: the IRS generally has 3 years from the later of the return filing date or the due date to audit. For substantial underreporting (25%+ of gross income), the limitation extends to 6 years. Fraud has no statute.
  • Never respond to an IRS audit without your CPA or enrolled agent involved. What you say and what you produce can expand or limit the scope of the audit.

Types of IRS audits

Audit typeHow it worksFrequencyTypical triggers
Correspondence auditLetter requesting documentation for one or a few items. Resolved by mail.Most common — 70%+ of auditsDiscrepancy on return vs information IRS received; large specific deduction
Office auditYou bring records to an IRS office. More comprehensive than correspondence.Less commonSchedule C deductions, home office, vehicle mileage
Field auditIRS examiner comes to your place of business or CPA's office. Most thorough.Least common — mostly for complex returnsHigh-revenue businesses, complex returns, suspected underreporting
TCMP auditComprehensive audit examining every line item — rare research auditsVery rareRandom selection for compliance research

A correspondence audit is a letter, not an invasion. Most resolve in 30–60 days with organized documentation. Respond promptly, provide exactly what’s requested, and don’t volunteer anything extra.

Common audit triggers for small business owners

TriggerWhy it attracts attentionHow to protect yourself
Large deductions relative to income on Schedule CHigh expense ratio relative to revenue is a statistical anomalyLegitimate deductions are defensible; document everything
Vehicle deduction with no mileage logIRS auto deductions are a known abuse areaKeep a contemporaneous mileage log with dates, destinations, purposes
Home office deductionHistory of overclaiming; IRS uses statistical comparisonsMust meet exclusive-use test; document dedicated workspace
Cash business with round-number incomeRound numbers suggest estimation, not recordingMaintain daily receipts, deposit all income, reconcile
Large meal and entertainment deductionsPost-TCJA, entertainment is disallowed; meals must be documentedKeep receipts with business purpose and attendees noted
Claiming business losses repeatedly3 of 5 years profitability test for hobby loss rulesDocument business intent; maintain professional business practices
Large charitable deductionsValuation and documentation requirements for non-cash donationsGet appraisals for non-cash; written acknowledgments for cash
Failure to report 1099 incomeIRS matches 1099s; unreported income is easily detectedReport all 1099 income; if 1099 is wrong, report correct amount and explain

What to do when you receive an IRS letter

  1. Don’t panic. Most letters are routine. Read the entire letter before doing anything.
  2. Identify what’s being requested. Is this a notice about a math error, a missing form, a CP2000 matching issue, or an actual audit? The type determines the response.
  3. Note the deadline. IRS letters have response deadlines. Missing them can result in automatic assessments or default judgments. Put the deadline on your calendar immediately.
  4. Call your CPA or EA. Before responding to anything more complex than a math error notice, loop in a professional. What you say and what you produce matters.
  5. Gather documentation. For any item being questioned, assemble bank statements, receipts, contracts, and any other substantiation. Organized documentation resolves most correspondence audits quickly.
  6. Respond in writing. Always respond in writing, even for phone-call invitations. Keep copies of everything you send.

Never send original documents to the IRS

Send copies, not originals. The IRS often loses or misplaces submitted documents. Keep originals in your possession and only provide certified copies when absolutely required. Date-stamp your submissions.

The three-year statute of limitations

The IRS has a limited window to audit most returns:

SituationStatute of limitations
Standard return filed on time3 years from later of due date or actual filing date
Return filed late (past deadline)3 years from actual filing date
Substantial understatement (25%+ of gross income omitted)6 years
Fraudulent return or no return filedNo statute — unlimited
Employment taxes3 years from due date of the quarterly return
FBAR (foreign account) violationsVaries — up to 6 years

Documentation that prevents most audit problems

The IRS burden of proof generally falls on the taxpayer — you must prove your deductions. The following documentation prevents most audit adjustments:

  • Vehicle deductions: A contemporaneous mileage log with date, starting and ending odometer (or miles driven), destination, and business purpose for each trip
  • Business meals: Receipt plus notation of business purpose and names of attendees
  • Home office: Photographs of the dedicated workspace, measurements, lease or mortgage statement showing the address
  • Travel: Itinerary, receipts, meeting logs showing business days vs personal days
  • Equipment and major purchases: Receipts showing business purpose; for Section 179 or bonus depreciation, a record of placed-in-service date
  • Contractors (1099 recipients): Signed W-9, copies of 1099s filed, descriptions of services performed

The best audit defense is a clean, well-documented return

Most audits are resolved without any additional tax owed when the taxpayer has genuine documentation. The problem isn’t legitimate deductions — it’s the gap between what was claimed and what can be proven. Spend 15 minutes at the end of each trip or event documenting the purpose. The contemporaneous record beats a reconstruction every time.

Frequently asked

Questions owners actually ask

What is the IRS audit rate for small businesses?
Overall audit rates are very low — less than 1% of returns for most income ranges. However, self-employed Schedule C filers have higher audit rates than W-2 employees, and business owners with large home office deductions, vehicle deductions, or travel deductions are examined at higher rates. IRS resources have declined significantly, so most returns are never examined.
I received an IRS notice. Does that mean I'm being audited?
Not necessarily. The IRS sends millions of CP notices for routine matters — math errors, missing forms, balance due notices, and matching issues (when your return doesn't match information documents the IRS received). These are not audits. A CP2000 (proposed changes) or an actual audit notice (Letter 2202 or similar) is different. Read the notice carefully to understand what's being asked before panicking.
Can I represent myself in an IRS audit?
You have the right to represent yourself, but it's rarely advisable for anything beyond a simple correspondence audit. An IRS auditor is trained to find additional issues; a CPA or enrolled agent who does representation work knows how to limit scope, what to produce, and what not to volunteer. The cost of professional representation is almost always less than the additional tax from an unrepresented audit.
What if I disagree with the IRS's audit findings?
You have multiple levels of appeal. First, appeal within the IRS to the Office of Appeals — an independent function that resolves many disputes. If that fails, you can petition the U.S. Tax Court (don't have to pay first), the U.S. District Court (must pay first, then sue for refund), or the U.S. Court of Federal Claims. Most audit disputes are resolved at the IRS Appeals level.
How long should I keep tax records?
The IRS recommends keeping records at least 3 years from the later of the return due date or filing date (matching the basic statute of limitations). For property records (equipment, real estate), keep records until the statute runs from the year of disposition — which may be many years longer. If you have foreign accounts, NOL carryforwards, or complex transactions, keep indefinitely. Employment tax records: 4 years.

Take the next step

Turn tax questions into a plan. Talk with Matt or see how we work with operating business owners.

Educational content only.This article is for informational purposes and does not constitute tax, legal, or investment advice. Every owner’s facts are different; consult a qualified CPA and advisor before acting. Tax and accounting services are provided through Matt Reese, CPA; investment advisory services are provided through Measured Risk Portfolios, a registered investment adviser. Matt Reese, CPA and Measured Risk Portfolios are separate entities; clients are not required to engage both.