Are you still asking "Can I expense this...?" Use our free tool!
How Your Business Can Respond to an IRS Audit
Table of content

IRS Audit and Notice Guide for Small Business Owners

Most small business owners panic when an IRS envelope arrives. Most of those envelopes are computer-generated notices that resolve by mail with documents. A small minority are actual audits, and even those are usually narrower than people fear. Here is what triggers IRS attention, what the different types of audit look like, and how to handle a notice without losing more than you owe.

How likely is your small business to get audited?

The IRS audits roughly 0.4% of individual tax returns and about 0.5-1% of small-business returns, depending on revenue and structure. The audit rate climbs as income climbs: returns reporting over $1M of total income are audited at roughly 2-4%, returns over $10M at 8-10%.

S-Corporations and partnerships are audited at lower rates than sole proprietorships (0.2-0.3%), partly because the entity-level audit only adjusts pass-through items, not direct tax. Corporations with assets over $10M are audited at much higher rates.

What triggers an IRS audit?

The IRS uses a Discriminant Information Function (DIF) score to identify returns with audit potential. The DIF score is not public, but practitioners have identified common patterns that correlate with higher audit risk.

  • Income discrepancies: Reporting different income than third parties (employers, banks, brokers) reported via 1099/W-2
  • Repeated Schedule C losses: Multiple consecutive years of losses on a business activity raises hobby-versus-business questions
  • Disproportionate deductions: Home office, vehicle, meals, charitable contributions all flagged when high relative to revenue
  • Round numbers: Deductions of $5,000, $10,000, $25,000 (suggesting estimation rather than tracking)
  • Large cash businesses: Restaurants, salons, gas stations, retail with high cash mix attract more scrutiny
  • Cryptocurrency / digital asset gaps: Failure to report digital asset transactions when the IRS knows you have an account

What are the different types of IRS audits?

  • Correspondence audit: Most common. Conducted by mail. Usually targets a single issue (charitable deduction, business expense category, missing income). Resolved by submitting documents.
  • Office audit: Conducted in person at an IRS office. Targets 2-3 issues. Requires bringing documents to a scheduled appointment.
  • Field audit: Conducted at your business location by an IRS Revenue Agent. Reserved for complex cases, larger businesses, or where books require examination on-site.
  • Criminal investigation: Rare. Pursued when the IRS suspects intentional fraud. Different unit (IRS Criminal Investigation Division), different rules — get a criminal tax attorney immediately if contacted.

How should you prepare for an IRS audit?

Gather the requested documents in the format requested for the specific year(s) requested. Do not volunteer documents for years or topics not in scope. Organize chronologically with a clear index. Make copies — do not send originals.

Reconcile your return to your underlying records: bank statements should tie to deposits reported on Schedule C, expense categories should tie to QuickBooks or your bookkeeping system, mileage logs should reconcile to vehicle deductions claimed. Gaps in reconciliation are where penalties happen.

Engage a CPA or enrolled agent before responding. The cost of representation is almost always less than the cost of unrepresented mistakes. The auditor is doing their job, but the rules favor the prepared. See our about page for how our team handles audit representation.

How long can the IRS audit you?

The standard statute of limitations is 3 years from the date you filed the return (or the due date if filed early). The IRS cannot audit returns older than this except in specific situations.

  • 3 years: Standard statute for most audits
  • 6 years: If you understated gross income by more than 25%
  • 7 years: If you claimed a worthless-securities deduction or bad-debt deduction
  • No limit: If you filed a fraudulent return or did not file at all

For tax planning purposes, keep records for 7 years to cover most extension scenarios. For business owners with carryover items (NOLs, capital loss carryovers, basis records for stock), keep those records as long as they affect any open year.

What should you do when an IRS notice arrives?

Read the notice carefully and identify three things: the tax year, the specific issue (look at the notice number — CP2000, CP12, CP14, etc.), and the response deadline. Most IRS notices give you 30 days to respond.

Common notices: CP2000 (proposed adjustment based on income mismatch), CP14 (balance due), CP12 (math error corrected), Letter 525 (examination report). Each has a specific response procedure.

Do not ignore the notice — interest and penalties accrue and the proposed adjustment becomes final by default. Do not call the IRS without documents and a written response strategy. Engage a CPA if the dollar amount is material or the issue is complex.

How do you handle a CP2000 notice?

A CP2000 is the IRS computer-matching notice — your reported income did not match what employers, banks, or brokers reported. It is NOT an audit. It is a proposed adjustment with a 30-day response window.

Response options: (1) Agree and pay — sign the response form and submit payment. (2) Partially agree — explain which items are correct, provide documentation for the rest. (3) Fully disagree — provide documentation showing the IRS computer matching is wrong (e.g., the 1099 was issued in your business name but the income was already reported on your return under the business entity).

Most CP2000 notices resolve by mail without escalation. If you ignore it, the proposed adjustment becomes final and you owe the assessed tax plus penalty and interest.

Should you handle an audit yourself or hire a CPA?

For correspondence audits on a single straightforward issue with clear documentation, self-handling is reasonable. For office audits, field audits, multi-year examinations, or any case involving more than $5,000 of proposed adjustment, professional representation almost always pays for itself.

A CPA or enrolled agent who handles audits routinely knows what auditors look for, how to limit scope, what compromises are typical, and when to appeal. The cost of representation is usually 10-30% of the proposed adjustment but can save 50-90% of the proposed liability through proper documentation, scope limitation, and negotiation.

Until next time.

Common Questions

What triggers an IRS audit on a small business?

Common audit triggers include large schedule C losses repeated year over year, reporting income materially different from third-party 1099/W-2 reports, claiming round-number deductions, high home-office or vehicle deductions relative to revenue, large cash businesses, unusual deduction patterns (charitable giving disproportionate to income), and crypto/digital asset reporting. The IRS audits roughly 0.4% of individual returns and slightly higher for self-employed business returns.

How long do you have to keep tax records?

The IRS standard is 3 years from the filing date for most situations. Extend to 6 years if you underreported gross income by more than 25%, 7 years if you claimed a worthless securities deduction, and indefinitely if you filed a fraudulent return or did not file at all. Practical recommendation for business owners: keep returns and supporting documents 7 years.

How should you respond to an IRS notice?

Read it carefully, identify the tax year and the specific issue, gather supporting documents, and respond within the deadline stated (usually 30 days). Do not ignore it. Do not call the IRS without documents in front of you. For straightforward arithmetic notices (CP2000) you can often respond by mail with documents. For more complex notices, engage a CPA or enrolled agent before responding.

What is a CP2000 notice?

A CP2000 is the IRS computer-generated notice you receive when income reported on your return does not match income reported by third parties (employers, payers, brokers). It is NOT an audit — it is a proposed adjustment. You have 30 days to agree (sign and pay), partially agree, or fully disagree (with documentation). Most CP2000 notices are resolved by mail without escalation.

What should you do if the IRS audits your small business?

Get representation immediately — a CPA or enrolled agent who handles small-business audits routinely. Do not meet the auditor alone. Limit the scope: provide only what is specifically requested, in the format requested, for the specific year(s) requested. Document everything in writing. Most small-business audits are conducted by mail (correspondence audit) or in person at the IRS office (office audit); field audits at your business location are reserved for larger or more complex cases.

About the Author

Adam Traywick, CPA

Adam Traywick, CPA is the President and founding CPA of Adam Traywick, LLC, a Fort Worth small-business accounting firm. He has over 20 years of experience helping small business owners across home-services trades, hair salons, real estate, and insurance agencies optimize taxes, run cleaner books, and avoid the surprises that come from once-a-year accountants.

More about Adam  ·  Talk to Adam’s team