How to Avoid an IRS Audit: Common Red Flags for Small Businesses
Learn what triggers an IRS audit and how to reduce your risk. Covers common red flags, recordkeeping requirements, and what to do if the IRS contacts you.
Bizee Editorial Staff
Editorial Team
Introduction
You can't guarantee you'll never be audited, but you can reduce the odds. The IRS flags returns that look unusual compared to similar filers — things like disproportionate deductions, unreported income, or repeated business losses. Understanding what draws scrutiny is the first step to keeping your return off that list.
What triggers an IRS audit
The IRS selects returns for audit in a few ways. Most are flagged by an automated scoring system that compares your return against statistical norms for similar filers. Returns that deviate significantly — unusually high deductions, income that doesn't match third-party forms, or patterns that suggest a hobby rather than a business — score higher and draw more attention.
The IRS also selects some returns based on their connection to another return already under examination — for example, a business partner or investor whose return was flagged. Random selection accounts for a smaller share. Most audits aren't random. They follow patterns the IRS has seen before.
- Deductions that are high relative to your reported income
- Income that doesn't match W-2s, 1099s, or other third-party forms
- Repeated Schedule C losses over multiple years
- Large charitable contributions inconsistent with prior years
- Excessive auto, travel, or entertainment deductions
- Mixing personal and business expenses
File electronically and check your math
Filing electronically is one of the most straightforward ways to reduce audit risk. IRS-approved tax software performs the math, flags common errors, and prompts you for missing information before you file. Math mistakes don't trigger a full audit — the IRS corrects them through an automated process — but they do generate notices that take time to resolve and can lead to additional scrutiny.
The IRS flags incorrect or missing Social Security numbers, names that don't match Social Security records, and basic arithmetic errors as common return problems that e-filing helps prevent. Double-check those fields before submitting. A clean return with no computational errors gives the automated scoring system less to work with.
Report all income — including cash and 1099s
The IRS matches the income on your return against W-2s, 1099s, and other information returns filed by employers, banks, and payment platforms. If the numbers don't line up, you'll get a CP2000 notice — and depending on the gap, a closer look at your return. Omitting a 1099 amount is one of the most common reasons the IRS issues underreporter notices.
All taxable income needs to be reported — wages, self-employment income, interest, dividends, capital gains, gig work, and cash payments for services. That applies whether or not you received a tax form for it. Income from side jobs, platform work, and tips is taxable even if you were paid in cash or through an app and never got a 1099.
Keep records that support every deduction
The IRS expects every deduction to be backed by records — receipts, invoices, paid bills, canceled checks, or bank statements. If you're audited, the IRS will ask for documents that support the income, credits, and deductions on your return. Records that don't clearly connect to a specific transaction won't hold up on their own.
Each supporting document should show the payee, the amount paid, proof of payment, the date, and a description of what the expense was for. When you organize records for an audit, the IRS asks for copies grouped by year and by type of income or expense — not originals. Add a note to each receipt explaining how the expense relates to your business. That context matters more than people expect.
Avoid deductions that look out of proportion
Deductions that are high relative to your reported income are one of the most consistent audit triggers. The IRS compares your return against similar filers, and deductions that fall well outside the norm for your income level and industry draw attention — especially for auto, travel, entertainment, and charitable contributions.
For charitable contributions, large donations that are inconsistent with your prior-year giving can prompt a closer look. If you donate more than $250 to a single charity, you need a written acknowledgment from that organization to substantiate the deduction. The IRS expects documentation — bank records, receipts, or a letter from the charity — for any significant contribution.
The rule for business deductions is that they need to be both ordinary — common and accepted in your industry — and necessary — helpful and appropriate for your business. Deductions that don't meet both standards are at risk of being disallowed, and claiming personal expenses as business expenses can mean disallowed deductions and increased scrutiny.
Watch for business loss and hobby loss flags
Self-employed filers and small business owners who report repeated losses on Schedule C face heightened scrutiny. The IRS may question whether the activity is a real business or a hobby — and if it's classified as a hobby, the deductions you claimed can be disallowed. This is one of the audit triggers that catches people off guard, especially in the early years of a side business.
Under IRS hobby loss rules, there's a presumption that an activity is for profit if it produces a profit in at least 3 of 5 consecutive years. If your business doesn't meet that pattern, the IRS may take a closer look at your deductions. Keeping records that show genuine business intent — a business plan, marketing activity, separate finances — helps demonstrate that the activity is a real business, not a personal pursuit.
How long to keep your tax records
For most returns, the IRS has 3 years from the filing date to assess additional tax. Keeping supporting records for at least that long is the standard baseline. But the window extends to 6 years if you omit more than 25% of your gross income — and there's no time limit at all if a return is fraudulent or was never filed.
For employment taxes, keep records for at least 4 years after the tax becomes due or is paid, whichever is later. The IRS says to keep records as long as they may be material to administering the tax law — which generally means until the limitations period for that return has expired. When in doubt, keep more rather than less.
- Standard returns: keep records at least 3 years from the filing date
- Returns with omitted income over 25% of gross: keep records at least 6 years
- Fraudulent returns or unfiled returns: keep records indefinitely
- Employment tax records: keep at least 4 years after the tax is due or paid
What to do if the IRS contacts you
If the IRS selects your return for audit, it will notify you by mail — not by phone. The notice will explain what the IRS is examining, what documents or information you need to provide, and the deadline for responding. Read it carefully before doing anything else.
Most audits are handled by mail. You respond by sending organized copies of your supporting records — grouped by year and by type of income or expense — along with a summary of the transactions in question. Don't send originals. If the audit is more complex, it may be conducted in person at an IRS office or at your place of business. A tax professional can help you figure out the right approach for your situation and represent you during the process.
FAQ
It depends on income level and return type, but self-employed filers and small business owners who file Schedule C face higher audit rates than W-2 employees. Returns with large deductions relative to reported income, repeated business losses, and income that doesn't match third-party forms like W-2s and 1099s are among the most common triggers.
The most common red flags for self-employed filers are high deductions relative to income, repeated Schedule C losses, excessive auto or travel deductions, and unreported income. Mixing personal and business expenses is another consistent trigger — the IRS expects business deductions to be both ordinary and necessary, and personal costs claimed as business expenses can be disallowed.
It depends on the deduction and how much documentation you can reconstruct. Without receipts, the IRS may disallow the deduction — which means you'd owe the additional tax, plus interest and possibly penalties. Bank statements, credit card records, and other secondary documentation can sometimes substitute for missing receipts. A tax professional can help you figure out what's recoverable and how to respond.
Generally, keep records for at least 3 years from the filing date — that's the standard IRS assessment window for most returns. The window extends to 6 years if you omit more than 25% of gross income. For employment tax records, keep them at least 4 years. If a return was fraudulent or never filed, there's no time limit, so keep those records indefinitely.
No. The IRS notifies you of an audit by mail, not by phone. If someone calls claiming to be from the IRS and says you're being audited, that's a scam. The official notice will arrive by mail, explain what's being examined, and give you a deadline to respond. Never provide personal or financial information to someone who contacts you by phone claiming to be the IRS.
The IRS will ask for records that support the income, credits, and deductions on your return. That typically includes receipts, invoices, bank statements, canceled checks, and any third-party forms like W-2s and 1099s. Records should show the payee, amount, date, and what the expense was for. Organizing copies by year and by type of income or expense before responding makes the process faster.
