Any size business can be audited by the IRS, but risk increases with revenue, particularly for businesses with gross receipts over $100,000, where field audits become more common. While public companies face mandatory annual audits, smaller private firms may face audits due to high-risk triggers, such as excessive deductions relative to income, or if they have 100+ participants in a 401(k) plan.
The likelihood of your small business being audited
For the returns it had examined as of May 2024, the IRS has audited business tax returns at the following rates: Partnership: 0.1 percent. S-corporation: 0.1 percent. All corporations: 0.4 percent.
What is the 5% Rule for Materiality? Under US GAAP, the 5% rule suggests that if a misstatement is less than 5% of a financial statement item, it is generally considered not material. However this is not an absolute rule and must be applied with professional judgment.
IRS audits are triggered by discrepancies the IRS's automated systems catch, like unreported income from 1099s, claiming excessive deductions (charity, business meals, home office) compared to your income bracket, large business losses, math errors, significant income jumps, or claiming hobby losses as business expenses, with higher-income earners generally facing more scrutiny.
Companies may need to issue audited financial statements to comply with the requirements of regulators in specific industries, for example, or to obtain insurance. Contractors and companies in certain industries may need audited financial statements to gain surety bonding.
What triggers the requirement for a Single Audit? Any non-federal entity that expends $1 million or more in federal funds during its fiscal year is required to obtain a Single Audit (or Program-specific Audit, if applicable.)
LLC is taxed as a corporation and meets corporate audit triggers. In the case of partnership firms, an audit is only required if it is there in the partnership agreement; it is generally required by the IRS under the Bipartisan Budget Act of 2015 (BBA) for large partnerships.
The IRS uses a combination of automated and human processes to select which tax returns to audit. Not reporting all of your income is an easy-to-avoid red flag that can lead to an audit. Taking excessive business tax deductions and mixing business and personal expenses can lead to an audit.
Any business where the total sales, turnover, or receipts exceed Rs. 1 crore in a year should have a tax audit in India. As a professional, receipts over Rs. 50 lakh makes you eligible for a tax audit.
Materiality thresholds are mutually agreed upon amounts that are used as a guide for both the IRS and the taxpayer in determining which issues and transactions to review. There are separate thresholds for permanent and timing items and tax credits.
06 To plan the nature, timing, and extent of audit procedures, the auditor should establish a materiality level for the financial statements as a whole that is appropriate in light of the particular circumstances. This includes consideration of the company's earnings and other relevant factors.
Late filings are one thing, complete failure is another. A failure to report your payroll taxes is just about the biggest red flag of all for the IRS. Not reporting your own personal income is also another warning sign. The IRS wants to ensure that you aren't withholding income in your calculations.
The two-year rule. The “two-year rule” is a provision that applies when determining a company's size for corporate reporting purposes. A company qualifies as micro, small or medium-sized once it has met the size limits in its first ever financial year or otherwise in two consecutive financial years.
A successful internal audit function relies on four fundamental pillars, often referred to as the “4 C's”: Competence, Confidentiality, Communication, and Collaboration. These principles guide auditors in delivering meaningful and impactful results. Let's explore each of these elements in detail.
1) Correspondence Audit
The first of the four types of tax audits are correspondence audits are the most common type of IRS audits. In fact, they comprise roughly 75% of all IRS audits.
The 7 steps in the audit process generally cover Planning, Risk Assessment, Internal Control Testing, Fieldwork/Evidence Collection, Reporting, and Follow-Up, focusing on a systematic review from initial engagement to ensuring corrective actions are taken for operational improvement. This framework ensures comprehensive evaluation, from understanding the client's business to delivering actionable insights and ensuring accountability for identified issues.
The 5 Cs of audit (Criteria, Condition, Cause, Consequence, Corrective Action) are a framework for structuring clear, actionable audit findings, explaining what should be (Criteria), what is found (Condition), why it happened (Cause), what the impact is (Consequence/Effect), and how to fix it (Corrective Action/Recommendation) to drive organizational improvement and compliance.
The IRS 7-year rule primarily applies to keeping records for claiming a deduction for bad debts or losses from worthless securities, allowing a longer period to file for a credit or refund, but it's not a universal audit limit; it's often a recommended safe buffer for general record-keeping, with the standard IRS audit period usually being 3 years, extending to 6 years for substantial income omission (over 25%) or foreign income issues, and indefinitely for fraud.
If the deductions, losses, or credits on your return are disproportionately large compared with your income, the IRS may want to take a second look at your return. Taking a big loss from the sale of rental property or other investments can also spike the IRS's curiosity.
An LLC can technically go without making a profit for years, even 5+, as long as you have capital to cover expenses and show a genuine intent to become profitable, but the IRS may reclassify it as a hobby after two or three consecutive years of losses, blocking you from deducting losses and expenses. To avoid this, you must actively demonstrate a profit motive through a solid business plan, good records, and actions showing you're trying to make money, not just have fun.
Even when corporations or LLCs are meant to shield individuals, the IRS can still collect from those deemed “responsible persons.” A responsible person is anyone in the company with the authority or duty to collect, account for, or pay taxes.
The IRS audits between 1-3 percent of business income tax returns. They can occur at random, but there are things that can trigger an income tax audit, such as underreported income. (We'll get into the red flags in the section about audit triggers.)