How does HMRC decide who to audit?

Asked by: Audrey Weissnat  |  Last update: September 11, 2026
Score: 4.5/5 (30 votes)

HMRC decides who to audit primarily by using a sophisticated computer system called Connect, which analyzes vast amounts of data from banks, employers, land registry, and social media to identify anomalies and high-risk behavior. Audits are triggered by inconsistencies in tax returns, suspicious industry patterns (e.g., cash-heavy businesses), or tip-offs.

What triggers an HMRC audit?

someone alerting HMRC to unusual activity in your accounts. noticeable inconsistencies between tax returns (e.g, a big fall in income from one year to the next) frequently filing tax returns late. your accounts not matching the industry norms.

How do they pick who gets audited?

The IRS uses several different selection methods: Random selection and computer screening - sometimes returns are selected based solely on a statistical formula. We compare your tax return against "norms" for similar returns.

How does HMRC decide who to investigate for tax?

Technically, all businesses are at risk of being investigated by HMRC due to random selection; 7% of tax investigations per year are selected at random. But, In most cases, tax investigations are triggered through some kind of wrongdoing, mistakes on accounts, or through a tip-off.

How does the IRS determine who gets audited?

The Unreported Income DIF (UIDIF) score rates the return for the potential of unreported income. IRS personnel screen the highest-scoring returns, selecting some for audit and identifying the items on these returns that are most likely to need review.

How Does HMRC Decide Who to Investigate in the UK? (2025-26 Guide) | Pro Tax Accountant

25 related questions found

Who gets IRS audited the most?

Who gets audited by the IRS the most? The overall odds of an IRS audit are low, about 4 out of every 1,000 returns. However, high-net-worth individuals are more likely to be targeted due to complex income sources, large deductions, and sophisticated financial structures.

What typically triggers a tax audit?

Not reporting all of your income is an easy-to-avoid red flag that can lead to an audit. Taking excessive business tax deductions and mixing business and personal expenses can lead to an audit. The IRS mostly audits tax returns of those earning more than $200,000 and corporations with more than $10 million in assets.

What are red flags for HMRC?

Document any legitimate reasons for income fluctuations, such as a new business venture or a change in your personal circumstances. Large or frequent cash transactions can be a red flag, particularly if they are not typical for your industry or personal financial habits.

How to avoid HMRC investigation?

Avoid HMRC Investigations: Top 8 Triggers for Tax Audits in the...

  1. Inconsistent or Unusual Figures: The Financial Outliers. ...
  2. Consistently Reporting Losses: The Unviable Business Question. ...
  3. Late or Incorrect Filings: The Administrative Mishaps. ...
  4. Discrepancies Between Reported Income and Lifestyle: The “Flashy” Factor.

How likely are my taxes to be audited?

What percentage of tax returns are audited? Your chance is actually very low — this year, 2022, the individual's odds of being audited by the IRS is around 0.4%. However, keep alert for the IRS audit triggers. Are you a high income earner?

Who's most likely to get audited?

Which Taxpayers the IRS Audits Most Often. Oddly, people who make less than $25,000 have a relatively high audit rate. This higher rate is because many of these taxpayers claim the earned income tax credit, and the IRS conducts many audits to ensure that the credit isn't being claimed fraudulently.

How likely am I to be investigated by HMRC?

This means that as long as you have prepared all your tax documentation correctly, there is statistically very little chance that you'll be investigated by HMRC. That said, around 7% of tax investigations are thought to be selected at random.

How long can HMRC chase you for taxes?

According to Section 37 of the Limitation Act 1980, there is no time limit for HMRC to pursue a tax debt once it begins an enquiry. However, the key phrase is 'once it begins an enquiry'.

Do HMRC look at social media?

HMRC has stated that it only uses the AI tools within Connect to look at social media accounts as part of criminal investigations into tax fraud and not as part of its day-to-day activity for regular taxpayers.

How does HMRC find out about undeclared income?

Tax returns (income tax, VAT, corporation tax, PAYE). Financial records (bank account statements, debit/credit card accounts, credit reference agencies, insurance companies, crypto asset platforms). Online sales records (eBay, Amazon, Zoopla, Rightmove, etc).

How do I tell if I have red flags?

Red flags in relationships are warning signs that indicate unhealthy or manipulative behavior. Examples include controlling behavior, lack of respect, love bombing, and emotional or physical abuse. These behaviors may start subtly but tend to become more problematic over time, potentially leading to toxic dynamics.

How long does it take HMRC to investigate tax evasion?

It can take as little as 3 months for an aspect enquiry, to 12 months or longer for a full enquiry.

What are the 5 stages of audit?

What happens during an audit? Internal audit conducts assurance audits through a five-phase process which includes selection, planning, conducting fieldwork, reporting results, and following up on corrective action plans.

What should you not say during an audit?

It's good to be specific, but there's a danger in words such as “everything,” “nothing,” “never,” or “always.” “You always” and “you never” can be fighting words that can distract readers into looking for exceptions to the rule rather than examining the real issue.

What are the 4 types of audit risk?

The four key components of audit risk, as defined by the Audit Risk Model, are Inherent Risk, Control Risk, Detection Risk, and Acceptable Audit Risk (or Overall Audit Risk), representing the susceptibility of accounts to misstatement, failures in internal controls, the auditor's chance of missing errors, and the acceptable level of risk for the audit, respectively, all combining to determine if a materially misstated financial statement receives an inappropriate opinion.
 

What are the 4 C's of auditing?

A successful internal audit function relies on four fundamental pillars, often referred to as the “4 C's”: Competence, Confidentiality, Communication, and Collaboration. These principles guide auditors in delivering meaningful and impactful results. Let's explore each of these elements in detail.

Which audit type is most common?

1) Correspondence Audit

The first of the four types of tax audits are correspondence audits are the most common type of IRS audits. In fact, they comprise roughly 75% of all IRS audits.

What are the 7 steps in the audit process?

The 7 steps in the audit process generally cover Planning, Risk Assessment, Internal Control Testing, Fieldwork/Evidence Collection, Reporting, and Follow-Up, focusing on a systematic review from initial engagement to ensuring corrective actions are taken for operational improvement. This framework ensures comprehensive evaluation, from understanding the client's business to delivering actionable insights and ensuring accountability for identified issues.