Skip to main content
9 min read

How to Avoid an IRS Audit: Common Red Flags for Small Businesses

Learn what triggers an IRS audit and how to reduce your risk. Covers common red flags, recordkeeping requirements, and what to do if the IRS contacts you.

Bizee Brand

Bizee Editorial Staff

Editorial Team

RELATED CONTENT
Trustpilot
Excellent 4.8 out of 5

Introduction

You can't guarantee you'll never be audited, but you can reduce the odds. The IRS flags returns that look unusual compared to similar filers — things like disproportionate deductions, unreported income, or repeated business losses. Understanding what draws scrutiny is the first step to keeping your return off that list.

What triggers an IRS audit

The IRS selects returns for audit in a few ways. Most are flagged by an automated scoring system that compares your return against statistical norms for similar filers. Returns that deviate significantly — unusually high deductions, income that doesn't match third-party forms, or patterns that suggest a hobby rather than a business — score higher and draw more attention.

The IRS also selects some returns because of their connection to another return already under review — a business partner, investor, or related entity. That's worth knowing if you share ownership with someone whose finances are complicated.

The most common triggers for small business owners fall into a few categories: math errors or missing information, unreported income, deductions that look disproportionate to income, and repeated losses on Schedule C. Each of those is addressable — and the sections below cover how.

File electronically and check your math

Filing electronically is one of the most straightforward ways to reduce audit risk. IRS-approved tax software performs the math, flags common errors, and prompts you for missing information before you file — which means fewer mistakes reach the IRS in the first place.

The IRS flags basic computational and clerical errors through its math error authority — a separate automated process that is not the same as a full audit. A math error notice means the IRS corrected a calculation on your return, not that you're under examination. Still, those notices create extra work and can escalate if the underlying numbers are wrong.

Before filing, check that your Social Security number is correct, that names match Social Security records, and that all figures add up. These are the errors the IRS explicitly lists as the most common — and the easiest to prevent.

Report all income — including cash and 1099s

The IRS matches the income on your return against Forms W-2 and 1099 filed by employers, banks, and other payers. If those numbers don't line up, the IRS issues an underreporter notice — and that can lead to additional tax, penalties, and a closer look at your return.

You're required to report all taxable income — wages, self-employment income, interest, dividends, capital gains, and other income — whether or not you receive a tax form for it. That includes cash payments, tips, gig work, and income from platform apps. The IRS is clear: if it's taxable, it goes on the return.

Most people know to report their W-2 income. The gap that catches people off guard is unreported 1099 income — especially from side work, freelancing, or online sales. If a payer filed a 1099 and you didn't report it, the IRS will notice.

Keep records that support every deduction

The IRS expects every deduction on your return to be backed by records — receipts, invoices, paid bills, canceled checks, or deposit slips. If you're audited, the IRS will ask for documents that support the income, credits, and deductions you claimed. Good records don't prevent an audit, but they make one far less painful.

Each supporting document should show the payee, the amount paid, proof of payment, the date, and a description of what the expense was for. A receipt without context — no note about the business purpose — is harder to defend than one with a brief annotation.

If you're ever asked to send records to the IRS, send organized copies grouped by year and by type of income or expense — not originals. The IRS instructs taxpayers not to mail original documents during an audit.

Avoid deductions that look out of proportion

Deductions that are disproportionately high relative to your reported income are one of the most common audit triggers. The IRS compares your deductions against what's typical for similar filers — and returns that fall far outside that range score higher in the automated screening process.

For business owners, the categories that draw the most scrutiny are auto, travel, and entertainment expenses — especially when they're large relative to the size or profitability of the business. Charitable contributions that spike significantly compared to prior years can also prompt a closer look. If you donated more than $250 to a single charity, you need a written acknowledgment from that organization to substantiate the deduction.

The IRS requires business deductions to be both ordinary — common and accepted in your industry — and necessary — helpful and appropriate for your business. Deductions that don't meet both standards can be disallowed, and a pattern of them can increase audit risk. A tax professional can help you figure out which expenses qualify and how to document them.

Watch for business loss and hobby loss flags

Self-employed filers and small business owners who report repeated losses on Schedule C face heightened IRS scrutiny. The IRS may question whether the activity is truly a business or a hobby — and if it's classified as a hobby, the deductions you claimed can be disallowed.

Under IRS hobby loss rules (Internal Revenue Code section 183), there's a presumption that an activity is for profit if it produces a profit in at least 3 of 5 consecutive years. Activities that don't meet that pattern — especially those with large deductions and little or no income — are more likely to draw attention.

Mixing personal and business expenses is a separate but related risk. Claiming personal living or family expenses as business deductions is prohibited — and doing so can both get those deductions disallowed and flag your return for a closer look. Keep personal and business finances separate, and document the business purpose for every expense you deduct.

How long to keep your tax records

For most returns, the IRS has 3 years from the filing date to assess additional tax. Keeping supporting records for at least that long is the standard baseline. But the window extends in certain situations — and knowing when matters.

  • 3 years — the standard retention period for most returns

  • 6 years — if you omitted more than 25% of your gross income from a return

  • Indefinitely — if a return was fraudulent or never filed

  • 4 years — for employment tax records, counted from when the tax was due or paid, whichever is later

The IRS says to keep records for as long as they may be material to administering the tax law — which generally means until the limitations period for that return has expired. When in doubt, keep more than you think you need.

What to do if the IRS contacts you

If the IRS selects your return for audit, it will notify you by mail — not by phone. Any call claiming to be from the IRS demanding immediate payment or threatening arrest is a scam. The real IRS sends a written notice that explains what it needs and the deadline for your response.

Most audits for small business owners are conducted by mail. The IRS asks for specific documents, you send organized copies, and the matter is resolved without an in-person meeting. In-person audits happen, but they're less common for straightforward returns.

Read the notice carefully. It will tell you exactly what the IRS is questioning and what documentation it wants. Respond by the deadline, send only what's requested, and keep copies of everything you send. If the audit involves complex issues or significant amounts, talk to a tax professional before responding.

FAQ

It depends on income level and return type, but self-employed filers and small business owners who file Schedule C face higher audit rates than W-2 employees. Returns with large deductions relative to income, unreported 1099 income, repeated business losses, and high cash-intensive business activity draw the most scrutiny. High-income returns also see elevated audit rates.

The most common red flags for self-employed filers are: reporting losses on Schedule C for multiple years in a row, claiming unusually high deductions for auto or travel expenses, mixing personal and business expenses, and not reporting all 1099 income. Deductions that are disproportionate to your reported income — especially in categories the IRS watches closely — are the fastest way to score higher in the automated screening process.

It depends on what you're missing and how much. Without receipts, the IRS can disallow the deductions you claimed — which means you'd owe the additional tax on that income, plus interest and possibly penalties. In some cases, bank statements, credit card records, or other documentation can substitute for missing receipts. A tax professional can help you figure out what alternatives the IRS will accept for your specific situation.

Yes, in a limited but real way. Electronic filing reduces math errors and flags missing information before your return reaches the IRS — which means fewer computational mistakes that could trigger a notice. It doesn't protect against audit triggers related to the amounts you report, but it removes one category of preventable errors from the equation.

Generally, 3 years from the filing date covers most situations — that's the standard window the IRS has to assess additional tax. Keep records for 6 years if you omitted more than 25% of your gross income from a return. For employment tax records, keep them for at least 4 years. If a return was fraudulent or never filed, there's no time limit, so keep those records indefinitely.

No. The IRS initiates audits by mail, not by phone. If you receive a call from someone claiming to be the IRS and demanding immediate payment or threatening legal action, it's a scam. A legitimate IRS audit notice arrives as a written letter that explains what the IRS is reviewing and what you need to provide.

Business formation and compliance dashboard displaying LLC status, EIN tracking, annual report deadlines, and corporate documents
Excellent 4.8 out of 5 Trustpilot

Start your business today

From formation to compliance, we handle the details so you can focus on what you do best.