IRS Audit Guide: What Triggers One and How to Be Ready

What Is an IRS Audit?

An IRS audit is a review of your tax return to check that your income and deductions are reported correctly and that the tax is right. Most audits are not agents at your door. The IRS opens the majority of them by mail, asking you to send records that back up one or two lines on your return. If your records prove the number, the audit closes. If you cannot document the number, the deduction is disallowed and you owe the extra tax plus interest.

This guide covers how the IRS selects returns, the three ways an audit happens, how far back the agency can reach, what draws scrutiny to a self-employed return, and the records that make the whole thing routine. Everything below is anchored to the IRS's own pages, because a blog's guess about audit rules is worth nothing when a real letter lands.

How the IRS Picks Returns to Audit

Selection is not personal. The IRS names two main paths on its audits page. The first is random selection and computer screening: "sometimes returns are selected based solely on a statistical formula" that compares your return against norms for similar returns. The second is related examinations, where "we may select your returns when they involve issues or transactions with other taxpayers," such as a business partner or investor whose return is already under review.

There is a third path the IRS runs constantly, and it is the one most self-employed filers meet in practice. Third parties report your income directly to the IRS: employers file W-2s, clients file 1099-NEC forms, banks and payment platforms file their own information returns. A computer matches those against what you reported. When the numbers disagree, the IRS sends a CP2000 notice proposing changes because "the income or payment information we received from third parties, such as employers or financial institutions, doesn't match what you reported on your tax return."

A CP2000 is technically an underreporter notice, not a formal audit. It feels like one, and you respond to it the same way: with documentation, by the date on the letter. Treat it with the same seriousness.

The Three Ways an IRS Audit Happens

The IRS conducts audits "either by mail or through an in-person interview to review your records." That splits into three formats, and the format tells you how much is at stake.

Correspondence audits are the common case for individuals and small businesses. You get a letter listing exactly what the IRS wants substantiated, you mail copies of the records, and most cases resolve there. An office or field audit signals the IRS wants to look wider, which is when representation earns its cost.

How Far Back the IRS Can Go

The clock matters because it decides how long you have to keep proof. On the audits page the IRS says it "can include returns filed within the last three years," may "add additional years" if it finds a substantial error, and "usually" does not "go back more than the last six years." In practice, "most audits will be of returns filed within the last two years."

The record-retention periods on the IRS's how long to keep records page line up with those limits, and they set the real deadline for your files:

The two "no limit" rows are the reason accuracy beats speed. File nothing, or file something false, and there is no year at which the IRS loses the right to look. For a typical self-employed filer who files on time and reports honestly, the working answer is to keep records at least seven years and stop worrying about the exact row. A deeper breakdown lives in our guide on how long to keep receipts.

What Triggers a Small-Business Audit

Self-employed returns draw more scrutiny than W-2-only returns for a structural reason: a large share of your income and nearly all of your deductions are self-reported rather than confirmed by a third party. The IRS leans on documentation to close that gap. A few patterns reliably invite a letter.

Income that does not match the 1099s. This is the CP2000 engine. Every 1099-NEC a client files is also filed with the IRS. Leave one off your return, or transpose a figure, and the match fails automatically. Report every dollar a client paid you, then reconcile against the forms you receive. Our Schedule C receipt guide walks the income side alongside the expense side.

Deductions the IRS holds to a stricter standard. Travel, meals, vehicle mileage, and listed property fall under strict substantiation in the tax code, which means the IRS expects records created at the time of the expense, not reconstructed later. A missing mileage log can cost the entire vehicle deduction, and business meal records must show who you met and why, not just the amount.

Deductions that look large next to the income. A return claiming heavy expenses against thin revenue, or reporting losses year after year, sits outside the statistical norm the IRS screens against. The deduction can be perfectly legitimate. The point is that it needs to be provable, because it is more likely to be asked about.

Round numbers and estimates. Exactly $5,000 of supplies and exactly $2,000 of "other" reads as a guess, and a guess is what an examiner is looking to test. Real receipts produce specific figures. If your books are built from captured documents rather than year-end estimates, the numbers defend themselves.

None of these is a rule that "the deduction demands." Each is a place where the IRS's automated screening or an examiner is more likely to ask you to prove a number. The defense is the same in every case: a contemporaneous record.

What to Do When an Audit Notice Arrives

First, confirm it is real. The IRS "will notify you by mail" and "won't initiate an audit by telephone." A phone call or text claiming to open an audit is a scam, full stop. A real notice is a letter that names the tax year and the specific items in question.

Then work the letter, not your anxiety:

1. Read what the letter is asking. A correspondence audit lists specific lines. You are proving those, not re-defending the whole return.
2. Gather the records for those items. Receipts, invoices, bank and card statements, mileage logs, 1099s. Send copies, not originals.
3. Respond by the date on the notice. Missing the deadline lets the IRS decide against you by default.
4. Use your rights. The Taxpayer Bill of Rights includes the right to retain representation, the right to challenge the IRS's position and be heard, and the right to appeal an IRS decision in an independent forum. You can bring in a CPA, enrolled agent, or attorney at any point.

If you disagree with the outcome, you are not stuck with the examiner's conclusion. The right to appeal routes the case to the IRS Independent Office of Appeals, a separate function from the one that ran the audit.

What It Costs to Lose an Audit

An audit you cannot document does more than reverse the deduction. Once the tax is recalculated, the IRS can add an accuracy-related penalty of "20% of the portion of the underpayment of tax that is attributable to negligence or disregard" of the rules. For individuals, a substantial understatement means understating your tax "by 10% of the tax required to be shown on your tax return or $5,000, whichever is greater."

Interest runs on top. The IRS charges interest on both the unpaid tax and the penalty, accruing from the original due date, so a bill from a two-year-old return has already been growing. There is an exit: the IRS may "remove or reduce some penalties if you acted in good faith and can show reasonable cause." Reasonable cause is a documentation argument. The filer with organized, contemporaneous records is the one who can make it.

How SparkReceipt Keeps You Audit-Ready

An audit is won or lost on records you created at the time, not on paperwork you scramble to rebuild two years later. That is the whole game, and it is exactly what a receipt tracker built for taxes is for.

SparkReceipt captures each receipt the moment you get it: the AI reads the vendor, date, total, tax, and line items, and files a categorized record before the thermal paper fades. Because the IRS accepts digital records that faithfully reproduce the original, a scanned receipt is valid proof, as our IRS receipt requirements guide explains. When a letter names a specific expense, you filter to it and produce the record in seconds instead of digging through a shoebox.

For the income side and the reconciliation an examiner cares about, the bank statement extractor matches every transaction against a receipt and flags the charges missing documentation, so gaps surface long before the IRS finds them. When a notice arrives, one-click expense reports hand you or your accountant a tax-ready summary with every original image attached. You can compare plans on our pricing page and get started before your next tax year, not after the letter.

Frequently Asked Questions

How likely am I to be audited? Audits are uncommon, and most are conducted by mail over a narrow set of items. Self-employed and cash-heavy returns draw more attention than W-2-only returns because more of the numbers are self-reported. Likelihood matters less than readiness: the cost of an audit is low when your records prove your figures.

Does an IRS notice mean I did something wrong? No. Returns are selected by statistical screening and by matching against third-party forms, and plenty of flagged items turn out to be correct once documented. A CP2000, for example, is a proposed change you can accept or dispute with records.

How far back can the IRS audit my return? Generally the last three years. The IRS may add years for a substantial error and usually does not go back more than six. If you did not file or filed a fraudulent return, there is no time limit at all.

What records does the IRS accept as proof? Records that show the amount, date, place, and business purpose of each expense. Receipts, invoices, bank and card statements, and mileage logs all qualify, and digital copies are accepted as long as they reproduce the original accurately.

Can I represent myself in an audit? Yes, and for a simple correspondence audit many people do. You also have the right to retain a CPA, enrolled agent, or attorney to represent you, which is worth it for an office or field audit or any case with real money at stake.

What happens if I ignore an audit letter? The IRS decides the item against you by default, disallows the deduction, and bills the extra tax plus interest and possibly a penalty. Respond by the date on the notice even if you only ask for more time.

Key Takeaways

• Most IRS audits are letters, not agents at the door, and they ask you to document specific items rather than re-defend the entire return.
• The IRS selects returns by statistical screening, by related examinations, and by matching your return against 1099s and other third-party forms.
• The agency generally reaches back three years, up to six for a substantial understatement, and with no limit if you did not file or filed a fraudulent return.
• Self-employed returns draw scrutiny because income and deductions are self-reported; contemporaneous records are the entire defense.
• Losing a documented deduction can add a 20% accuracy-related penalty plus interest from the original due date, so keeping records beats reconstructing them.
• Capturing every receipt, invoice, and mileage entry as it happens turns an audit from a crisis into a filing exercise.