CRA audits are commonly triggered by significant discrepancies between reported income and third-party data (T-slips), claiming unusually high expenses or credits, consistent business losses, or operating in high-risk, cash-based industries. Other factors include late filings, frequent errors, or random selection.
Let's explore the IRS audit triggers to keep you in the clear.
Discrepancies between tax returns and bank statements
One of the most significant red flags for CRA auditors is the mismatch between reported income on tax returns and actual bank deposits. This discrepancy often indicates unreported income, which can trigger an immediate audit.
The IRS uses a combination of automated and human processes to select which tax returns to audit. Not reporting all of your income is an easy-to-avoid red flag that can lead to an audit. Taking excessive business tax deductions and mixing business and personal expenses can lead to an audit.
Individuals who are self-employed are, perhaps, the most audited. The CRA may review income declarations, expenses, deductions etc. In particular, individuals claiming large or unusual deductions have a higher chance of an audit.
The four key components of audit risk, as defined by the Audit Risk Model, are Inherent Risk, Control Risk, Detection Risk, and Acceptable Audit Risk (or Overall Audit Risk), representing the susceptibility of accounts to misstatement, failures in internal controls, the auditor's chance of missing errors, and the acceptable level of risk for the audit, respectively, all combining to determine if a materially misstated financial statement receives an inappropriate opinion.
The CRA chooses a file for an audit based on a risk assessment. The assessment looks at a number of factors, such as the likelihood or frequency of errors in tax returns or whether there are indications of non-compliance with tax obligations.
While most taxpayers' chance of audit is less than 1%, the odds increase once you earn $500,000 or more in taxable income. Those reporting more than $10 million have the highest risk of a tax audit. To make the most of its resources, the IRS focuses on examinations where it feels more tax liability can be uncovered.
If the deductions, losses, or credits on your return are disproportionately large compared with your income, the IRS may want to take a second look at your return. Taking a big loss from the sale of rental property or other investments can also spike the IRS's curiosity.
After your tax return is processed, you'll receive a notice of assessment. Your tax return could be selected for review before or after you receive your notice. A tax audit may be triggered if the CRA is not satisfied with your review, or if they suspect fraud or non-compliance.
It's good to be specific, but there's a danger in words such as “everything,” “nothing,” “never,” or “always.” “You always” and “you never” can be fighting words that can distract readers into looking for exceptions to the rule rather than examining the real issue.
The overall odds of an IRS audit are low, about 4 out of every 1,000 returns. However, high-net-worth individuals are more likely to be targeted due to complex income sources, large deductions, and sophisticated financial structures.
The IRS usually reviews receipts during an audit — if you don't have the receipts, you can sometimes use bank statements or credit card statements to prove your claims instead. Consequences of being audited without receipts can include additional taxes, interest, and financial penalties.
Audit rates are generally highest for high-income taxpayers, taxpayers with business income, large corporations, and earned income tax credit claimants.
Business- Section 44AB(a)
A business is required to get an income tax audit if its total sales/turnover/gross receipts exceed ₹1 crore in a financial year. However, the limit for tax audit has been relaxed to ₹10 crore if: Cash receipts ≤ 5% of total receipts, and. Cash payments ≤ 5% of total payments.
Unreported Income
If your business income doesn't match CRA records (e.g., T4A, T5 slips, bank deposits), the CRA may suspect underreporting. This is a common red flag, especially for cash-heavy businesses.
Ten Red Flags that Could Trigger an IRS Audit
However, you can reduce the chance of audit significantly by paying careful attention to detail and recognizing whether you are reporting a transaction of special interest to the IRS. And if you do get audited, having accurate and complete records and professional advice can make the process go more smoothly.
The 5 Cs of audit (Criteria, Condition, Cause, Consequence, Corrective Action) are a framework for structuring clear, actionable audit findings, explaining what should be (Criteria), what is found (Condition), why it happened (Cause), what the impact is (Consequence/Effect), and how to fix it (Corrective Action/Recommendation) to drive organizational improvement and compliance.
There are five potential threats to auditor independence: self-interest, self-review, advocacy, familiarity, and intimidation. Any lack of independence compromises the integrity of financial markets.