How to Identify IRS Audit Triggers and Defend Business Clients Through Examination

The IRS audited approximately 0.44% of individual returns in fiscal year 2023 (IRS Data Book, FY 2023) — but that average conceals enormous variation. Schedule C filers with gross receipts above $100,000 face materially higher scrutiny. S-Corp returns with distribution-to-salary ratios above 3:1 are among the most reliably examined small-business returns. And while raw audit rates are low, the cost of an undefended examination — back taxes, penalties, interest, and professional representation fees — routinely exceeds the original tax savings by a significant margin. For CPAs, audit defense is not a reactive service; it is built into the work product from the first return. This guide covers the selection mechanisms the IRS uses, the return characteristics that elevate risk, and the documentation practices that make an audit manageable when it arrives.

Prerequisites

The client's most recent two or three federal returns (individual and entity), to identify pattern-based triggers that span multiple years
Entity type and income structure: sole proprietor (Schedule C), S-Corp, partnership, or C-Corp
Year-to-date financial statements and known large deduction items for the current year
Current-year estimated tax payment history, to assess information-return matching exposure

Step 1: Understand How the IRS Selects Returns for Examination

Most practitioners underestimate how methodical return selection is. The IRS does not audit randomly. Understanding the selection mechanisms allows you to anticipate exposure before it materializes.

The Discriminant Information Function (DIF) Score

The primary return selection tool is the IRS's Discriminant Information Function system, a proprietary statistical model that assigns each return a numeric score based on how its deductions compare to other returns with similar income, filing status, and entity type. Returns scoring above threshold are flagged for human review. The IRS does not publish the DIF formula, but decades of examination patterns reveal what drives high scores: deductions that are large relative to income, unusual combinations of expense types, or amounts inconsistent with the taxpayer's industry and location. For a complete breakdown of how DIF scoring works, the parallel UIDIF system for unreported income, and what CPAs can conclude from NRP research, see How the IRS DIF Score Works.

Document Matching (the Information Return Processing Program)

Every third-party information return — Form W-2, 1099-NEC, 1099-K, 1099-INT, Schedule K-1 — is matched against the taxpayer's return by the IRS's Automated Underreporter (AUR) program. Discrepancies between reported amounts and information returns generate CP2000 notices — proposed adjustments, not formal audit findings, but they require a timely written response and can escalate to examination if unresolved. For S-Corp shareholders, K-1 income mismatches are a common trigger; for cash-intensive businesses, 1099-K totals from payment processors frequently diverge from reported gross receipts.

Specific Program Targeting

Beyond DIF, the IRS runs targeted examination programs focused on known high-noncompliance areas: S-Corp reasonable compensation, worker classification, virtual currency, conservation easements, and micro-captive insurance arrangements. Returns that involve these items are evaluated on substantive criteria beyond the DIF score. For virtual currency specifically, the IRS has issued Letters 6174, 6174-A, and 6173 to known exchange customers, contracted with blockchain analytics firms to trace unreported wallet activity, and obtained account-holder data from major exchanges via summons. Starting with 2025 transactions, Form 1099-DA broker reporting creates information-return matching exposure for most centralized exchange activity. Clients with unreported cryptocurrency transactions in open years should be counseled on the elevated detection risk. For the complete cryptocurrency reporting framework — how every disposal is taxable, cost basis methods, Form 8949 mechanics, and the mining and staking income rules — see Cryptocurrency Tax Reporting for CPAs.

The IRS also enforces the ACA employer shared responsibility provisions through a separate compliance program. Applicable large employers (those averaging 50+ full-time equivalent employees) that fail to offer qualifying coverage — or fail to file Forms 1094-C and 1095-C — receive Letter 226-J penalty assessments under IRC §4980H. These letters arrive 12–18 months after the plan year ends and require a timely response. CPAs are frequently the first call when a Letter 226-J arrives, even though the underlying issue is a benefits design or reporting failure. For the full ACA compliance framework — FTE counting rules, coverage requirements, and the two-tier §4980H penalty structure — see ACA Employer Mandate: The 50-Employee Threshold, Coverage Requirements, and Penalties Explained.

Related Examination and Whistleblower Claims

A taxpayer whose partnership, S-Corp, or trust is under examination may receive a related audit of their personal return. Whistleblower claims filed under IRC §7623 can also trigger examination independent of any statistical selection.

Step 2: Identify the Highest-Risk Items on Business Returns

Certain return characteristics consistently generate IRS scrutiny, either because they are high-scoring DIF items or because they fall within targeted examination programs. Review each of these categories for every business-owning client before filing.

S-Corp Reasonable Salary

The single most audited area in small-business taxation. When an S-Corp owner takes distributions significantly exceeding their W-2 salary, the IRS can reclassify the excess distributions as wages — assessing back FICA taxes at 15.3% on the reclassified amount, plus failure-to-deposit penalties of 2–15% and compounding interest. Distribution-to-salary ratios above 3:1 are consistently cited in Tax Court cases as evidence of unreasonable compensation. A full-time professional generating $400,000 in business revenue who takes a $50,000 salary is among the most audit-prone profiles in small-business practice. For the complete salary determination methodology — BLS OEWS data lookup, the reasonableness factors courts examine, and board minute documentation — see How to Calculate and Document a Reasonable S-Corp Salary.

Schedule C Net Losses — Especially Across Multiple Years

A Schedule C that reports a net loss in two or more consecutive years draws attention both from the DIF system (low reported income relative to deductions) and from potential IRC §183 hobby loss scrutiny. Under the hobby loss rules, an activity is presumed not engaged in for profit unless it shows a profit in three of the five consecutive tax years ending with the current year (IRC §183(d)). The presumption can be rebutted, but requires strong affirmative documentation of profit motive: business plan, marketing activity, time spent, client development, and historical profitability or comparable businesses' profitability.

Home Office Deductions

The IRS scrutinizes home office deductions because the regular-and-exclusive-use requirement (IRC §280A(c)(1)) is routinely overstated. A dedicated room used solely for business qualifies; a dining table also used for homework and meals does not. Return preparers should document the square footage calculation, the area's exclusive business use, and the basis of allocation (actual expenses vs. simplified method) in the workpapers. Disproportionately large home office deductions relative to business revenue are reliable high-DIF items. For the complete eligibility analysis, method comparison, and S-Corp trap, see Home Office Deduction for Self-Employed Clients: The CPA's Complete Guide.

Vehicle Mileage and Business Use

Vehicle deductions — whether by actual cost or standard mileage — require contemporaneous mileage logs under IRC §274(d). This is a strict substantiation rule, meaning the Cohan rule (substantial compliance without precise records) does not apply. A client who deducted 18,000 business miles using the IRS standard rate but cannot produce a contemporaneous log will have the entire deduction disallowed. For clients with high vehicle expense deductions, require a mileage log — or a log-reconstruction methodology with a written explanation — before filing.

Meal and Entertainment Deductions

Post-TCJA, entertainment expenses are generally nondeductible (IRC §274(a)). Business meals remain 50% deductible under IRC §274(n) with adequate substantiation: the amount, the business purpose, and the business relationship of each attendee. Disproportionately large meal deductions relative to the nature of the business are a consistent DIF flag. The IRS examiner handbook specifically identifies meal deductions without adequate documentation as a common adjustment in correspondence exams.

Large Charitable Contributions Relative to AGI

Non-cash charitable contributions — clothing, household goods, vehicles, and real estate — require qualified appraisals for property valued above $5,000 (Treas. Reg. §1.170A-13(c)) and are among the highest-error areas in individual returns. Conservation easement deductions have been the subject of IRS large case examination programs since 2016. For cash contributions, written acknowledgment from the charity is required for any single contribution of $250 or more (IRC §170(f)(8)).

Net Operating Loss Carryforwards

Clients with large NOL carryforwards applied against current-year income can trigger IRS scrutiny of both the loss year and the carryforward computation. The IRS's right to examine the loss year extends as long as the carryforward affects an open return — in practice, this means the documentation for the original loss year must be retained until the carryforward is exhausted plus the statute of limitations period, which can span a decade or more.

Cash-Intensive Businesses

The IRS applies heightened scrutiny to businesses where cash is the primary revenue vehicle — restaurants, contractors, auto repair, personal services — because revenue underreporting is statistically elevated in these industries. The IRS's Financial Status Audit Techniques Guide allows examiners to reconstruct income using indirect methods: net worth analysis, bank deposit analysis, markup calculations, and lifestyle indicators. Returns for cash businesses that report unusually low net margins relative to industry benchmarks are DIF-flagged.

Refundable Credit Claims — EITC, ACTC, and AOTC

The IRS estimates an improper payment rate of 31–35% on Earned Income Tax Credit claims — the highest overclaim rate of any refundable credit in the federal tax code — making EITC correspondence audits one of the most common exam contacts for lower-income individual clients. When a CP75 or CP75A notice arrives, the IRS requires documentation of every qualifying child's residency (school records, medical records, childcare receipts, government assistance records) and relationship (birth certificate, adoption records, foster placement letters). Retain residency documentation at filing time — not at audit notice time — since clients often cannot reconstruct school-year records 18 months after the fact. For paid preparers, the §6695(g) due diligence requirements — including Form 8867 completion and the knowledge standard — carry their own per-return penalties for failure to satisfy them, regardless of whether the client's claim was ultimately correct. For the complete eligibility rules, qualifying child tests, and preparer due diligence requirements, see Earned Income Tax Credit: Eligibility, 2025 Limits, and §6695(g) Due Diligence.

Employee Retention Credit Claims

The IRS launched a dedicated ERC examination program following a September 2023 moratorium on new filings (IR-2023-169). Tens of thousands of ERC audits are in progress, targeting claims based on tangential government-order suspension arguments, inflated wage calculations, large-employer-limitation errors, and related-party wage exclusions. Clients who received ERC payments — particularly those who used third-party promoters — carry active examination risk under the extended five-year statute of limitations (Inflation Reduction Act of 2022, P.L. 117-169, §80604). For clients with outstanding ERC claims, review the eligibility analysis before the IRS does, gather the complete documentation package (government orders, quarterly gross receipts, payroll records by employee and quarter), and understand the options if the claim does not hold up. For the full ERC examination defense methodology, see Employee Retention Credit Audit Defense: How CPAs Protect Clients Through IRS Examination.

Step 3: Conduct a Pre-Filing Risk Review

Before filing, review each return against the risk profile above. This is not a separate engagement; it is the last step in return preparation.

Match information returns against reported items. Every W-2, 1099, and K-1 received by or on behalf of the client should appear somewhere on the return. Unexplained gaps between a 1099-NEC total and reported gross receipts generate automatic CP2000 notices. Verify that 1099-K totals from payment processors are either included in gross receipts or explained in a reconciliation note.

Flag deductions that are large relative to industry norms. The IRS's MSSP (Market Segment Specialization Program) audit guides identify normal expense ratios for dozens of industries. A Schedule C for a graphic designer where meal deductions equal 40% of gross receipts is an anomaly worth reviewing before submission. Substantiate or reduce.

Review the distribution-to-salary ratio for all S-Corp clients. Before signing the Form 1120-S, calculate total owner-employee distributions relative to W-2 wages. If the ratio exceeds 3:1, flag it and confirm the salary is defensible under BLS OEWS data. A salary revision before the return is filed — processed through actual payroll — is far less costly than addressing it in an examination. For how this interacts with SE tax and the QBI deduction, see How to Minimize Self-Employment Tax for High-Earning Business Clients and QBI Deduction in 2025: How Section 199A Works After OBBBA.

Check for round numbers and consistent deductions. Returns where every expense category is rounded to the nearest $1,000 suggest estimation rather than actual recordkeeping. Round numbers are not prohibited, but a return where every Schedule C line ends in exactly $5,000 is a DIF flag and an examination credibility issue.

Step 4: Build a Documentation Trail That Survives IRS Scrutiny

Audit defense is primarily a documentation problem. Most adjustments result not from disallowed deductions but from unsubstantiated deductions — the client had the expense, but cannot prove it. Require documentation contemporaneously, not at examination time.

The standard: IRC §274 strict substantiation for listed property

Listed property — vehicles, computers, cell phones, and other property with significant personal use potential — is subject to strict substantiation rules under IRC §274(d). For each item, the taxpayer must establish: (1) the amount of the expense, (2) the time and place of the use, (3) the business purpose, and (4) the business relationship. A contemporaneous log satisfies the requirement; a reconstructed log created after the fact does not.

The Cohan rule (and when it does not apply)

For business expenses not subject to IRC §274 strict substantiation, courts sometimes allow a deduction based on credible estimates if the expense is established to have been made and the amount can be reasonably inferred (Cohan v. Commissioner, 39 F.2d 540 (2d Cir. 1930)). The Cohan rule cannot be used for listed property, meals, entertainment, travel, gifts, or any item subject to IRC §274 — a category that covers the majority of contested deductions in small-business audits. Do not counsel clients that approximate records will survive examination for these categories.

Year-end documentation requirements to establish

Vehicle log: Date, destination, odometer reading, business purpose, and business relationship for each business trip. The log should be contemporaneous — recorded at or near the time of the trip, not reconstructed at year-end
S-Corp board minutes: Annual salary resolutions with BLS OEWS documentation, adopted before the first payroll run of the year
Charitable contribution acknowledgments: Written acknowledgment from the charity for each contribution of $250 or more, received before the return is filed
Business meal receipts: Receipt plus note identifying the business purpose and the attendees' names and business relationships
Home office: Photographic documentation of the dedicated space; square footage measurements; basis for allocation between business and personal use

For clients with significant depreciable asset purchases, maintain Form 4562 election documentation and the placed-in-service date evidence — delivery receipts, commissioning records, or operational logs. The IRS frequently challenges bonus depreciation and Section 179 elections by questioning whether property was genuinely placed in service by December 31. For the documentation requirements for those elections, see How to Apply Bonus Depreciation and Section 179 for Business Clients in 2025.

Document retention periods under IRC §6501

The general statute of limitations for assessment is three years from the later of the return's due date or the date it was filed (IRC §6501(a)). Two significant extensions apply:

Situation	Limitation Period
Standard return, filed timely	3 years from due date or filing
Return filed with substantial omission of income (>25% of gross income)	6 years (IRC §6501(e)(1))
False or fraudulent return	No limitation (IRC §6501(c)(1))
Failure to file a return	No limitation (IRC §6501(c)(3))
NOL or credit carryback	3 years from carryback year's due date

The practical minimum retention period is seven years for most client records — three years beyond the six-year substantial omission statute — to cover both standard and extended limitation scenarios. For clients with large NOL carryforwards, retain records for the source year through the carryforward's exhaustion plus the statute period on the year the carryforward is applied. For the complete client-facing retention schedule organized by document category — including capital asset records, S-Corp board minutes, QSBS documentation, and electronic records requirements — see Document Retention Requirements for Business Clients: A CPA's Complete Guide.

Step 5: Respond to IRS Contact Appropriately

When an examination notice arrives, the response process determines outcomes as much as the underlying facts.

Identify the type of IRS contact

CP2000 Notice (Automated Underreporter): A proposed adjustment based on information-return discrepancies, not a formal examination. Respond within 60 days with documentation reconciling the discrepancy. These are often resolved without escalation.
Correspondence Examination (CP75, Letter 566, etc.): The IRS requests documentation for specific return items by mail. This is the most common form of examination — no in-person meeting unless the taxpayer requests one. Respond within the deadline with targeted documentation; do not volunteer information beyond what was asked.
Office Examination: The taxpayer is requested to appear at an IRS office with records. More intensive than correspondence; the examiner reviews broader return items in person.
Field Examination: An IRS revenue agent visits the taxpayer's place of business to review books and records. Reserved for complex returns or suspected substantial noncompliance. Requires the most intensive representation.

Immediate steps when a notice arrives

Read the notice in full before responding or calling the IRS. Identify the specific items in question and the response deadline.
File for Power of Attorney (Form 2848) immediately if you are not already authorized to receive IRS correspondence on the client's behalf. Once a POA is on file, all IRS communications come through you — reducing the risk of an uninformed client response.
Do not respond to the IRS without reviewing the record. A quick, incomplete response that concedes items the client could have substantiated is irreversible.
Do not volunteer additional returns or information beyond the scope of the examination notice. An IRS examiner who finds something in a response not connected to the original issue may expand the examination scope.

Navigating the examination

Prepare a document package specifically responsive to the items raised — organized, labeled, and with a summary explanation. Examiners who receive well-organized materials resolve items more efficiently.
For any deduction that is partially documented, prepare a written explanation of the computation methodology and the supporting evidence available. Courts have recognized partial substantiation with credible explanation.
If the examiner proposes adjustments you disagree with, request a supervisor conference before accepting the examination report. The appeals process (IRS Office of Appeals) offers a separate administrative review with a strong settlement record. For clients who exhaust administrative appeals and receive an assessed liability they cannot pay in full, an Offer in Compromise under IRC §7122 is the primary IRS settlement mechanism — evaluated on reasonable collection potential and processed through IRS Collection. See How to Evaluate and Submit an IRS Offer in Compromise for Business Clients for the full evaluation and submission process.
The IRS Internal Revenue Manual (IRM) at irm.irs.gov governs examiner conduct, including what documentation they can require and the timelines they must follow. Knowing the IRM creates leverage in examination negotiations.

When to involve a tax attorney

Field examinations with potential fraud indicators, examinations involving criminal referral risk, investigations involving summonses or John Doe summonses, and cases involving significant penalties or criminal tax exposure warrant referral to a tax attorney who can assert attorney-client privilege. CPAs have no statutory privilege in IRS administrative proceedings except in limited non-criminal matters under IRC §7525 — and that privilege does not cover tax return preparation advice. For the full scope of CPA practice obligations during IRS representation — including the competence standard, tax return position rules, and OPR sanction exposure under Circular 230 — see IRS Circular 230: A CPA's Complete Guide to Practice Ethics and Professional Responsibilities.

Common Mistakes

Preparing returns without reviewing information returns first. A 1099-NEC received but not reported generates an automatic CP2000. Match all information returns against the return before filing. For S-Corp clients, reconcile K-1 income allocations to the 1120-S before the individual return is filed.

Failing to document S-Corp salary decisions annually. Reasonable salary is not a one-time determination. A salary set four years ago without annual review or documentation is an unsupported position in an examination. Require board minutes with BLS data for every S-Corp client, every year — before the first payroll run.

Overpreparing the CP2000 response. A CP2000 response that provides documentation for every item on the return, not just the items raised, can prompt the examiner to expand scrutiny to areas outside the original notice. Respond specifically to the items identified.

Missing the response deadline. IRS notices have statutory response windows. A CP2000 not responded to within 60 days typically converts to a formal assessment. A correspondence exam not responded to within the stated deadline moves toward default assessment. Calendar every IRS deadline and confirm client receipt of the original notice.

Reconstructing records at examination time. Backdated mileage logs, reconstructed receipts, and manufactured board minutes are distinguishable and create civil fraud exposure (75% penalty under IRC §6663) or criminal referral risk (18 U.S.C. §1001). Advise clients before filing that contemporaneous records are required — not when the examination letter arrives.

Accepting adjustments without requesting a supervisor conference. Revenue agents are not the final word. A supervisor conference before accepting an examination report has no downside and frequently produces reduced adjustments. The IRS Office of Appeals resolves a significant portion of cases on terms more favorable than the initial examination report.

FAQs

What is the actual audit rate for small businesses in 2025?

The IRS audited approximately 0.44% of individual returns in fiscal year 2023 (IRS Data Book, FY 2023). For Schedule C filers with gross receipts above $100,000, the rate is substantially higher. S-Corp returns with low salary-to-distribution ratios and Schedule C returns with consistent losses are among the highest-risk profiles in small-business practice. Audit rates in any given year are also affected by IRS staffing — the agency's examination workforce declined significantly between 2010 and 2022, suppressing aggregate rates; the Inflation Reduction Act appropriated $80 billion for IRS enforcement expansion, though the ultimate allocation has been subject to ongoing legislative adjustment.

How long does the IRS have to audit a return?

The general statute of limitations for assessment is three years from the later of the return's due date or the filing date (IRC §6501(a)). The IRS has six years if the taxpayer omitted more than 25% of gross income (IRC §6501(e)(1)). There is no limitation for fraudulent returns or failures to file. For clients with large NOL carryforwards, maintain source-year records until the carryforward is exhausted and the statute on the application year has run.

Can the IRS audit multiple years at once?

Yes. The IRS routinely examines two or three consecutive years together, particularly when a specific deduction appears across multiple returns. A home office or vehicle deduction questioned in one year often expands to adjacent years in a correspondence or office examination.

Does filing a tax extension increase audit risk?

No. An extension of time to file does not affect audit selection and does not signal anything to IRS return reviewers. Extensions are filed by millions of taxpayers each year. The decision to extend should be based on return readiness and accuracy, not on audit risk.

What triggers a field audit versus a correspondence exam?

Field examinations are reserved for complex returns, significant income amounts, business-of-any-scale returns, and cases where the IRS suspects systematic underreporting rather than a specific deduction error. Correspondence exams are for targeted single-item discrepancies and lower-complexity returns. S-Corp reasonable salary issues may be addressed in either format; a cash-intensive business with reconstructed records is more likely to generate a field examination.

How do I respond to an IRS CP2000 notice?

Read the notice to identify the specific income items the IRS believes were underreported. Respond in writing by the deadline (typically 60 days) with: (1) either documentation showing the income was in fact reported, or (2) an explanation and documentation if the discrepancy reflects a reporting error on the third-party form. If the discrepancy is correct and income was omitted, calculate the additional tax and include payment with the response to stop interest from accruing. File Form 2848 to ensure all subsequent communication goes through you rather than the client directly. For the complete step-by-step response methodology — including how to structure the documentation package, address S-Corp K-1 mismatches, contest inaccurate information returns, and manage escalation to the 90-day Notice of Deficiency — see How to Respond to an IRS CP2000 Notice.

What is the accuracy-related penalty and when does it apply?

The accuracy-related penalty under IRC §6662 is 20% of the underpayment attributable to a substantial understatement of tax (a shortfall exceeding the greater of 10% of the correct tax or $5,000), negligence, or disregard of rules or regulations. Adequate disclosure of a position on the return — including an attached statement explaining the treatment — can reduce or eliminate the penalty for positions not supported by substantial authority. For tax shelters and reportable transactions, higher thresholds apply. The civil fraud penalty under IRC §6663 is 75% of the fraudulent underpayment and is reserved for knowing misrepresentation; the IRS bears the burden of proving fraud.

What is the IRS's reasonable cause exception to penalties?

Reasonable cause and good faith reliance on incorrect advice — including reliance on a tax professional's advice that turns out to be wrong — can eliminate accuracy-related penalties under IRC §6664(c). To establish reasonable cause, document that the client provided complete and accurate information, that you or another qualified professional provided a written or substantive oral opinion on the position, and that the client followed that advice. Reliance on a CPA's return preparation alone — without additional advisory analysis — typically does not constitute reasonable cause for a return position that turns out to be wrong.

Arvori helps CPAs track audit risk indicators across their client roster, maintain S-Corp salary documentation, and manage examination response deadlines in one place. Learn more at arvori.app.

IRS Audit Triggers and Defense: A CPA's Guide to Protecting Business Clients