Most small business owners panic when an IRS envelope arrives. Most of those envelopes are computer-generated notices that resolve by mail with documents. A small minority are actual audits, and even those are usually narrower than people fear. Here is what triggers IRS attention, what the different types of audit look like, and how to handle a notice without losing more than you owe.
The IRS audits roughly 0.4% of individual tax returns and about 0.5-1% of small-business returns, depending on revenue and structure. The audit rate climbs as income climbs: returns reporting over $1M of total income are audited at roughly 2-4%, returns over $10M at 8-10%.
S-Corporations and partnerships are audited at lower rates than sole proprietorships (0.2-0.3%), partly because the entity-level audit only adjusts pass-through items, not direct tax. Corporations with assets over $10M are audited at much higher rates.
The IRS uses a Discriminant Information Function (DIF) score to identify returns with audit potential. The DIF score is not public, but practitioners have identified common patterns that correlate with higher audit risk.
Gather the requested documents in the format requested for the specific year(s) requested. Do not volunteer documents for years or topics not in scope. Organize chronologically with a clear index. Make copies — do not send originals.
Reconcile your return to your underlying records: bank statements should tie to deposits reported on Schedule C, expense categories should tie to QuickBooks or your bookkeeping system, mileage logs should reconcile to vehicle deductions claimed. Gaps in reconciliation are where penalties happen.
Engage a CPA or enrolled agent before responding. The cost of representation is almost always less than the cost of unrepresented mistakes. The auditor is doing their job, but the rules favor the prepared. See our about page for how our team handles audit representation.
The standard statute of limitations is 3 years from the date you filed the return (or the due date if filed early). The IRS cannot audit returns older than this except in specific situations.
For tax planning purposes, keep records for 7 years to cover most extension scenarios. For business owners with carryover items (NOLs, capital loss carryovers, basis records for stock), keep those records as long as they affect any open year.
Read the notice carefully and identify three things: the tax year, the specific issue (look at the notice number — CP2000, CP12, CP14, etc.), and the response deadline. Most IRS notices give you 30 days to respond.
Common notices: CP2000 (proposed adjustment based on income mismatch), CP14 (balance due), CP12 (math error corrected), Letter 525 (examination report). Each has a specific response procedure.
Do not ignore the notice — interest and penalties accrue and the proposed adjustment becomes final by default. Do not call the IRS without documents and a written response strategy. Engage a CPA if the dollar amount is material or the issue is complex.
A CP2000 is the IRS computer-matching notice — your reported income did not match what employers, banks, or brokers reported. It is NOT an audit. It is a proposed adjustment with a 30-day response window.
Response options: (1) Agree and pay — sign the response form and submit payment. (2) Partially agree — explain which items are correct, provide documentation for the rest. (3) Fully disagree — provide documentation showing the IRS computer matching is wrong (e.g., the 1099 was issued in your business name but the income was already reported on your return under the business entity).
Most CP2000 notices resolve by mail without escalation. If you ignore it, the proposed adjustment becomes final and you owe the assessed tax plus penalty and interest.
For correspondence audits on a single straightforward issue with clear documentation, self-handling is reasonable. For office audits, field audits, multi-year examinations, or any case involving more than $5,000 of proposed adjustment, professional representation almost always pays for itself.
A CPA or enrolled agent who handles audits routinely knows what auditors look for, how to limit scope, what compromises are typical, and when to appeal. The cost of representation is usually 10-30% of the proposed adjustment but can save 50-90% of the proposed liability through proper documentation, scope limitation, and negotiation.
Until next time.
Common audit triggers include large schedule C losses repeated year over year, reporting income materially different from third-party 1099/W-2 reports, claiming round-number deductions, high home-office or vehicle deductions relative to revenue, large cash businesses, unusual deduction patterns (charitable giving disproportionate to income), and crypto/digital asset reporting. The IRS audits roughly 0.4% of individual returns and slightly higher for self-employed business returns.
The IRS standard is 3 years from the filing date for most situations. Extend to 6 years if you underreported gross income by more than 25%, 7 years if you claimed a worthless securities deduction, and indefinitely if you filed a fraudulent return or did not file at all. Practical recommendation for business owners: keep returns and supporting documents 7 years.
Read it carefully, identify the tax year and the specific issue, gather supporting documents, and respond within the deadline stated (usually 30 days). Do not ignore it. Do not call the IRS without documents in front of you. For straightforward arithmetic notices (CP2000) you can often respond by mail with documents. For more complex notices, engage a CPA or enrolled agent before responding.
A CP2000 is the IRS computer-generated notice you receive when income reported on your return does not match income reported by third parties (employers, payers, brokers). It is NOT an audit — it is a proposed adjustment. You have 30 days to agree (sign and pay), partially agree, or fully disagree (with documentation). Most CP2000 notices are resolved by mail without escalation.
Get representation immediately — a CPA or enrolled agent who handles small-business audits routinely. Do not meet the auditor alone. Limit the scope: provide only what is specifically requested, in the format requested, for the specific year(s) requested. Document everything in writing. Most small-business audits are conducted by mail (correspondence audit) or in person at the IRS office (office audit); field audits at your business location are reserved for larger or more complex cases.
Adam Traywick, CPA is the President and founding CPA of Adam Traywick, LLC, a Fort Worth small-business accounting firm. He has over 20 years of experience helping small business owners across home-services trades, hair salons, real estate, and insurance agencies optimize taxes, run cleaner books, and avoid the surprises that come from once-a-year accountants.