Common IRS audit red flags include unreported income, mismatched information (1099s/W-2s), excessive deductions relative to income, and high-risk items like, home office deductions, or cryptocurrency transactions. Other triggers include, failing to report foreign accounts, running cash-heavy businesses, and making large, disproportionate charitable donations.
Not reporting all of your income is an easy-to-avoid red flag that can lead to an audit. Taking excessive business tax deductions and mixing business and personal expenses can lead to an audit. The IRS mostly audits tax returns of those earning more than $200,000 and corporations with more than $10 million in assets.
You know the IRS might be investigating you through official mail (first contact), phone calls (often with automated messages to IRS.gov), or in-person visits, but signs of a criminal probe include contact with IRS Criminal Investigation (CI) agents, subpoenas to you or your bank, questions to your accountant/bank, unusual account activity (freezing/refusing transactions), or agents suddenly going silent after an audit. Key indicators are official IRS letters, contact from CI special agents, third-party inquiries, and formal summonses for records, signaling serious scrutiny beyond a simple audit.
Businesses that show losses are more likely to be audited, especially if the losses are recurring. The IRS might suspect that you must be making more money than you're reporting. Otherwise, why would you stay in business? Most likely to be audited are taxpayers reporting small business losses.
There are five potential threats to auditor independence: self-interest, self-review, advocacy, familiarity, and intimidation. Any lack of independence compromises the integrity of financial markets.
If the deductions, losses, or credits on your return are disproportionately large compared with your income, the IRS may want to take a second look at your return. Taking a big loss from the sale of rental property or other investments can also spike the IRS's curiosity.
Remember, you will be contacted initially by mail. The IRS will provide all contact information and instructions in the letter you receive. If we conduct your audit by mail, our letter will request additional information about certain items shown on the tax return such as income, expenses, and itemized deductions.
Here's a list of seven symptoms that call for attention.
The IRS will never initiate contact demanding immediate payment via gift cards, prepaid debit, or wire transfers; threaten immediate arrest or deportation; or contact you first by email, text, or social media; these tactics, especially involving urgent demands for specific payment types or threats, are key signs of a tax scam, as the IRS always mails a bill first and allows time to appeal.
Who must file. Generally, any person in a trade or business who receives more than $10,000 in cash in a single transaction or in related transactions must file a Form 8300.
The 5 Cs of audit (Criteria, Condition, Cause, Consequence, Corrective Action) are a framework for structuring clear, actionable audit findings, explaining what should be (Criteria), what is found (Condition), why it happened (Cause), what the impact is (Consequence/Effect), and how to fix it (Corrective Action/Recommendation) to drive organizational improvement and compliance.
The law requires trades and businesses report cash payments of more than $10,000 to the federal government by filing IRS/FinCEN Form 8300, Report of Cash Payments Over $10,000 Received in a Trade or Business PDF.
The "20k rule" refers to the traditional IRS threshold for reporting income from payment apps and online marketplaces on Form 1099-K: over $20,000 in gross payments AND more than 200 transactions in a calendar year. While a law (the American Rescue Plan) temporarily lowered the threshold to $600, recent legislation, the One Big Beautiful Bill Act (OBBBA) (OBBBA), has reinstated the $20,000/200-transaction rule for tax years starting in 2025, providing relief for casual sellers and gig workers.
Key Takeaways
If a business intentionally disregards the requirement to provide a correct Form 1099-NEC or Form 1099-MISC, it's subject to a minimum penalty of $660 per form (tax year 2025) or 10% of the income reported on the form, with no maximum.
You know the IRS might be investigating you through official mail (first contact), phone calls (often with automated messages to IRS.gov), or in-person visits, but signs of a criminal probe include contact with IRS Criminal Investigation (CI) agents, subpoenas to you or your bank, questions to your accountant/bank, unusual account activity (freezing/refusing transactions), or agents suddenly going silent after an audit. Key indicators are official IRS letters, contact from CI special agents, third-party inquiries, and formal summonses for records, signaling serious scrutiny beyond a simple audit.
Audit evidence is critical for verifying the accuracy of financial statements and supporting auditors' opinions. Different types of audit evidence include physical examination, documentation, observations, inquiries, confirmations, analytical procedures, and reperformance.
Types of ethical threats: self-interest, self-review, advocacy, familiarity, and intimidation. Safeguards to manage threats to ethical principles. The purpose of ethics codes for audit and accountancy professionals.
There are three main types of audit risk—inherent risk, control risk, and detection risk—along with a fourth related concept, sampling risk, which can affect the reliability of audit evidence.