What are red flags for CRA?

Asked by: Maureen Wiegand II  |  Last update: July 21, 2026
Score: 4.1/5 (54 votes)

Key red flags that trigger Canada Revenue Agency (CRA) audits include unreported income, consistent business losses, exaggerated deductions (home office, vehicle), and mismatched T-slips. Other major triggers are high-volume cash transactions, excessive salaries to family members, and failure to report foreign assets.

What is a red flag for CRA?

Consistent Operating Losses

While it is normal for start-ups or businesses in transition to report losses, consecutive losses over multiple years can be a red flag. The CRA may investigate to determine whether the corporation is legitimately operating as a business or simply writing off personal expenses.

What will trigger a CRA audit?

The CRA chooses a file for an audit based on a risk assessment. The assessment looks at a number of factors, such as the likelihood or frequency of errors in tax returns or whether there are indications of non-compliance with tax obligations.

What does the IRS consider a red flag?

Not reporting all of your income is an easy-to-avoid red flag that can lead to an audit. Taking excessive business tax deductions and mixing business and personal expenses can lead to an audit. The IRS mostly audits tax returns of those earning more than $200,000 and corporations with more than $10 million in assets.

What looks suspicious to the IRS?

If the deductions, losses, or credits on your return are disproportionately large compared with your income, the IRS may want to take a second look at your return. Taking a big loss from the sale of rental property or other investments can also spike the IRS's curiosity.

10 Red Flags That Can Cause a Tax Audit

23 related questions found

What income bracket gets audited the most?

Which Taxpayers the IRS Audits Most Often. Oddly, people who make less than $25,000 have a relatively high audit rate. This higher rate is because many of these taxpayers claim the earned income tax credit, and the IRS conducts many audits to ensure that the credit isn't being claimed fraudulently.

What are the 4 types of audit risk?

The four key components of audit risk, as defined by the Audit Risk Model, are Inherent Risk, Control Risk, Detection Risk, and Acceptable Audit Risk (or Overall Audit Risk), representing the susceptibility of accounts to misstatement, failures in internal controls, the auditor's chance of missing errors, and the acceptable level of risk for the audit, respectively, all combining to determine if a materially misstated financial statement receives an inappropriate opinion.
 

What should you not say during an audit?

It's good to be specific, but there's a danger in words such as “everything,” “nothing,” “never,” or “always.” “You always” and “you never” can be fighting words that can distract readers into looking for exceptions to the rule rather than examining the real issue.

What deductions raise audit flags?

Ten Red Flags that Could Trigger an IRS Audit

  • Large charitable donations. ...
  • Gambling losses. ...
  • Unreported income. ...
  • Rental income and deductions. ...
  • Home office deductions. ...
  • Casualty losses. ...
  • Business vehicle expenses. ...
  • Cryptocurrency transactions.

What are the 5 C's of audit issues?

The 5 Cs of audit (Criteria, Condition, Cause, Consequence, Corrective Action) are a framework for structuring clear, actionable audit findings, explaining what should be (Criteria), what is found (Condition), why it happened (Cause), what the impact is (Consequence/Effect), and how to fix it (Corrective Action/Recommendation) to drive organizational improvement and compliance.

What are 5 red flag symptoms?

Here's a list of seven symptoms that call for attention.

  • Unexplained weight loss. Losing weight without trying may be a sign of a health problem. ...
  • Persistent or high fever. ...
  • Shortness of breath. ...
  • Unexplained changes in bowel habits. ...
  • Confusion or personality changes. ...
  • Feeling full after eating very little. ...
  • Flashes of light.

What does CRA investigate?

Overview. The CRA's Criminal Investigations Program (CIP) plays a crucial role in protecting Canada's tax base by investigating significant cases of tax evasion and other tax crimes.

What are the 8 risk categories?

  • Operational risk. ...
  • Financial risk. ...
  • Cybersecurity risk. ...
  • Information security risk. ...
  • Regulatory and compliance risk. ...
  • Strategic risk. ...
  • Environmental, social, and governance (ESG) risk. ...
  • Reputational risk.

What are the 5 audit risks?

Below are the types of audit risks:

  • Inherent Risk. Inherent risk is the risk of material misstatements in financial statements before considering any internal controls. ...
  • Cyber-security & data breaches. ...
  • ESG reporting & sustainability disclosures. ...
  • Digital business models / cloud migration. ...
  • Need Help Minimize Audit Risks?

What are the 7 audit assertions?

Let's take a closer look at each of the different assertion types and how they work.

  • Accuracy. When testing for accuracy, auditors compare specific records to the actual associated transactions. ...
  • Classification. ...
  • Completeness. ...
  • Cut-Off. ...
  • Existence. ...
  • Occurrence. ...
  • Rights and Obligations. ...
  • Understandability.

What is the IRS 7 year rule?

The IRS 7-year rule primarily applies to keeping records for claiming a deduction for bad debts or losses from worthless securities, allowing a longer period to file for a credit or refund, but it's not a universal audit limit; it's often a recommended safe buffer for general record-keeping, with the standard IRS audit period usually being 3 years, extending to 6 years for substantial income omission (over 25%) or foreign income issues, and indefinitely for fraud.

What can the IRS not touch?

A portion of your wages are protected from levy. The protected amount is the equivalent to the standard deduction, plus any deductions for personal exemptions. The IRS can't seize certain personal items, such as necessary schoolbooks, clothing, undelivered mail and certain amounts of furniture and household items.

What are the IRS red flags?

Owning a small business such as auto dealership, a restaurant, a beauty salon, a car service or cannabis dispensary is an IRS red flag, as they typically have many cash transactions. Red flags are also raised on outliers – businesses with margins that are too low or too high.

What information does the IRS never ask for?

The IRS and its authorized private collection agencies will never ask a taxpayer to pay using any form of pre-paid card, store or online gift card. Taxpayers can review the IRS payments page at IRS.gov/payments for all legitimate ways to make a payment.