Audit risks increase with higher income (especially over $200,000–$500,000), unreported income (mismatched 1099s/W-2s), and claiming deductions, such as business meals or home offices, that far exceed the average for your income level. Other major triggers include operating a cash-heavy business, filing a Schedule C with consistent losses, or claiming 100% business use of a vehicle.
Higher income, higher audit rates
Taxpayers with more than $5 million in income were by far the most likely households to be audited in 2022. Source: Internal Revenue Service Data Book, 2024.
Not reporting all of your income is an easy-to-avoid red flag that can lead to an audit. Taking excessive business tax deductions and mixing business and personal expenses can lead to an audit. The IRS mostly audits tax returns of those earning more than $200,000 and corporations with more than $10 million in assets.
IRS audits are triggered by discrepancies the IRS's automated systems catch, like unreported income from 1099s, claiming excessive deductions (charity, business meals, home office) compared to your income bracket, large business losses, math errors, significant income jumps, or claiming hobby losses as business expenses, with higher-income earners generally facing more scrutiny.
The 5 Cs of audit (Criteria, Condition, Cause, Consequence, Corrective Action) are a framework for structuring clear, actionable audit findings, explaining what should be (Criteria), what is found (Condition), why it happened (Cause), what the impact is (Consequence/Effect), and how to fix it (Corrective Action/Recommendation) to drive organizational improvement and compliance.
Should your account be selected for audit, we will notify you by mail. We won't initiate an audit by telephone. Assistance is available to help you understand the letter/notice received: Understanding your IRS notice or letter.
It's good to be specific, but there's a danger in words such as “everything,” “nothing,” “never,” or “always.” “You always” and “you never” can be fighting words that can distract readers into looking for exceptions to the rule rather than examining the real issue.
There are five potential threats to auditor independence: self-interest, self-review, advocacy, familiarity, and intimidation. Any lack of independence compromises the integrity of financial markets.
Many people worry about IRS audits. But the chances of being audited are actually very low for most individuals. Recent IRS data shows the IRS examined 0.40% of individual returns filed and 0.66% of corporation returns filed. Most of the IRS's focus is on large businesses and high-income earners.
One-time forgiveness, officially known as First-Time Penalty Abatement (FTA), is an IRS program that allows qualified taxpayers to have certain penalties removed from their tax accounts.
The four key components of audit risk, as defined by the Audit Risk Model, are Inherent Risk, Control Risk, Detection Risk, and Acceptable Audit Risk (or Overall Audit Risk), representing the susceptibility of accounts to misstatement, failures in internal controls, the auditor's chance of missing errors, and the acceptable level of risk for the audit, respectively, all combining to determine if a materially misstated financial statement receives an inappropriate opinion.
You know the IRS might be investigating you through official mail (first contact), phone calls (often with automated messages to IRS.gov), or in-person visits, but signs of a criminal probe include contact with IRS Criminal Investigation (CI) agents, subpoenas to you or your bank, questions to your accountant/bank, unusual account activity (freezing/refusing transactions), or agents suddenly going silent after an audit. Key indicators are official IRS letters, contact from CI special agents, third-party inquiries, and formal summonses for records, signaling serious scrutiny beyond a simple audit.
Most taxpayers will do anything they can to avoid tax audits. Filling out an accurate tax return is the best way to avoid an audit. Additionally, you should ensure you double-check your math and only claim legitimate tax deductions. E-filing may also be helpful.
Too many deductions taken are the most common self-employed audit red flags. The IRS will examine whether you are running a legitimate business and making a profit or just making a bit of money from your hobby. Be sure to keep receipts and document all expenses as it can make things a bit ore awkward if you don't.
A successful internal audit function relies on four fundamental pillars, often referred to as the “4 C's”: Competence, Confidentiality, Communication, and Collaboration. These principles guide auditors in delivering meaningful and impactful results. Let's explore each of these elements in detail.
Big Five
The IRS usually reviews receipts during an audit — if you don't have the receipts, you can sometimes use bank statements or credit card statements to prove your claims instead. Consequences of being audited without receipts can include additional taxes, interest, and financial penalties.
As your family's income and assets increase, so does the likelihood of drawing attention from tax authorities. And with the IRS now using data analytics to help flag returns with certain markers, it's important to understand the most common audit triggers and ways to manage this risk.