IRS Audit Best Practices: Minimizing Risks for a Small Business Tax Audit

Understanding IRS Audits: The Basics

Every small business tax audit starts the same way, with a letter in the mail. The IRS states it flatly on its own IRS audits page: “We won’t initiate an audit by telephone.” So the caller demanding immediate payment isn’t an examiner.

An audit is a review of the records behind a filed return. An examiner checks that the income, deductions, and credits you reported are supported by something you kept at the time. It isn’t an accusation of fraud, and most examinations never involve meeting anyone.

In fiscal year 2025 the IRS closed 497,621 tax return audits and recommended $26.8 billion in additional tax, while its Automated Underreporter program closed another 987,460 document-matching cases producing $5.9 billion in assessments, per the agency’s compliance presence data for FY2025. The honest answer to how to avoid an IRS audit is that selection was never fully in your hands. What’s in your hands is whether the return survives one.

How the IRS picks returns

The IRS names four selection paths, and they work nothing alike.

• Computer scoring. Every return gets a Discriminant Function System (DIF) score rating the potential for a change in tax, plus a separate Unreported Income DIF score. The IRS calls DIF “a mathematical technique used to classify income tax returns as to examination potential” in The Examination (Audit) Process, FS-2006-10. The formula and the weights have never been published. Anyone who tells you what sits inside that score is guessing.
• Random selection. Some returns are chosen “based solely on a statistical formula” comparing them against norms developed through the National Research Program.
• Related examinations. Returns get pulled in when they involve transactions with other taxpayers already selected, such as business partners or investors. For an S corporation or partnership owner this is the underrated one. A partner’s exam can pull the entity in, and an entity exam pushes adjustments out to every K-1 holder.
• Document matching. Run outside the examination function by the Automated Underreporter program, which compares Forms W-2, 1099-NEC, 1099-K, 1099-MISC, and 1098 against what the return reports.

The three formats, and how far back they reach

Correspondence audits, conducted entirely by mail, are the highest-volume format by a wide margin. The National Taxpayer Advocate reported they made up roughly 76 percent of all audits, business and individual, as of fiscal year 2018. Office audits are an interview at an IRS office. Field audits happen at your home, your place of business, or your representative’s office.

The lookback window is narrower than most owners assume. The IRS generally includes returns filed within the last three years, and where substantial errors turn up it may add years, though it usually doesn’t go back more than six. Those two numbers are why the retention rules further down this page matter.

Every audit ends one of three ways. No change, agreed, or disagreed. If you disagree, you can request a conference with an IRS manager, use mediation, or file an appeal. If a letter has already landed, start with our walkthrough on what to do if you get audited by the IRS.

Small Business Tax Audit: What to Expect

An IRS examination runs on named letters, and the number printed on the page tells you what stage you’re in and how long you have to respond. Learn the ladder once. It removes most of the panic.

The notice ladder, in the order you’ll see it

• CP2000. This is not an audit. The IRS sends the CP2000 series notice when third-party income information “doesn’t match what you reported on your tax return.” It proposes changes, it isn’t a bill, and it requires a reply by the date listed. Many are resolved by showing the income was already reported elsewhere, such as gross receipts on Schedule C that already include the 1099-NEC.
• Letter 566-B, 566-S, or 566-E. The correspondence exam opener. Letter 566-B is the initial contact letter for a mail examination and encloses Form 4549, Report of Income Tax Examination Changes, showing where you land if nothing gets substantiated. Letter 566-S generally covers a single item, and Letter 566-E typically covers wages, withholding, and refundable credits.
• Letter 2205-A. The in-person exam opener. Issued with Publication 1, Your Rights as a Taxpayer, and Notice 609. The first document request usually isn’t enclosed with it. That arrives later, attached to the appointment confirmation letter.
• Form 4564, Information Document Request. The formal request instrument during an examination. Internal Revenue Manual procedure requires each one to be issue-focused and to state the issue, and the first typically asks for the general ledger, the bank statements, and the tie between the two.
• Letter 525 or Letter 915. The 30-day letter. Publication 556 describes the package: notice of your right to appeal within 30 days, the examination report, an agreement or waiver form, and a copy of Publication 5. Letter 525 follows a mail audit, Letter 915 an in-person one.
• Letter 3219 or Letter 531. The 90-day letter. Formally the statutory notice of deficiency. It gives 90 days to petition the United States Tax Court, or 150 if the notice is addressed outside the country. That deadline is statutory, and nobody at the IRS can extend it by agreement.

What the examiner actually asks for

The IRS publishes the list on its audits records request page, and it’s more specific than most owners expect. Receipts organized “by date with notes on what they were for and how the receipt relates to your business.” Bills naming the payee and the type of service. Canceled checks grouped with the bills they paid, loan agreements showing terms and interest, logs or diaries with travel dates, business purpose, and mileage, and Schedules K-1.

Answer the request completely, and answer it once. Partial responses generate follow-up requests, and every follow-up stretches the examination.

The IRS won’t publish an average duration, only that length depends on the type of audit, the complexity of the issues, and how quickly the information arrives. You control exactly one of those three. Most of the audit preparation that shortens an exam happens long before the notice shows up.

Two rules most owners never hear about

The repetitive audit rule. Publication 556 says that if your return was examined for the same items in either of the two previous years and no change was proposed, contact the IRS to see whether the examination should be discontinued. Most owners have no idea this exists.

Who carries the burden of proof. Under IRC 7491 the IRS takes the burden on a factual issue only if you introduced credible evidence, met all substantiation requirements of the Code, maintained all records the Code requires, and cooperated with reasonable requests. For a corporation, partnership, or trust the shift also requires net worth of $7 million or less and no more than 500 employees. The burden only moves for taxpayers who already kept the records.

On appeals, Publication 556 allows a small case request instead of a formal written protest when the total for a tax period is $25,000 or less. A formal protest is required in all partnership and S corporation cases regardless of the amount at issue. Handling that correspondence is part of what indinero’s tax team does inside the same engagement that files the return, and our guide to IRS audit help covers what that support looks like.

Best Practices for Minimizing IRS Audit Risk

Audit risk falls when three things are true. Every dollar of third-party-reported income appears on the return, every deduction has a record created at the time of the expense, and the return’s numbers are consistent with the business those records describe. Real IRS audit prevention happens before filing, not after a letter arrives.

The IRS audit triggers the IRS actually documents

• Third-party income mismatch. The largest documented volume driver by a wide margin. Automated Underreporter closed 987,460 cases in FY2025, and the IRS names failing to report income shown on Forms 1099 as an example of negligence for penalty purposes.
• Hobby-loss exposure. Under IRC 183(d) an activity is presumed to be for profit if gross income exceeds deductions in 3 or more of 5 consecutive years, and 2 of 7 for horse breeding, training, showing, or racing. The IRS publishes an examiner playbook for it, Publication 5558, built on the nine factors in Treasury Regulation 1.183-2(b). The first factor on the agency’s plain-language list is whether the taxpayer runs the activity in a businesslike manner and keeps complete and accurate books. Your bookkeeping quality is itself a profit-motive factor.
• Worker classification. The IRS applies common law rules across behavioral control, financial control, and type of relationship, and states there’s no set number of factors. Form SS-8 requests a determination and may take at least six months. Section 530 relief exists for consistent treatment plus proper information returns, and the Voluntary Classification Settlement Program offers prospective reclassification on Form 8952.
• Related-party and pass-through linkage. The IRS’s Large Business and International division runs a Pass-Through Entities Practice Area, and its stated program includes developing machine learning models that identify partnership and S corporation returns with examination potential.
• Industry-specific exam programs. The IRS publishes Audit Techniques Guides across roughly 25 industries and topics, from construction to child care providers to attorneys, and says outright that they’re useful to small business owners and the people who prepare their returns. Reading the guide for your own industry is the closest thing to seeing the examiner’s checklist in advance.
• Employee Retention Credit claims. Still an open enforcement lane. As of the week ending August 29, 2026 the IRS reported roughly 14,900 ERC claims in process, including 3,600 under audit and 1,400 with the Independent Office of Appeals. Disallowances arrive as Letter 105-C.

The IRS audit risk factors that are practitioner observation, not IRS policy

Most red-flag listicles present what follows as settled fact. It isn’t, and the distinction is the point.

Round-number deductions, deductions that are large relative to gross receipts, 100 percent business use of a single vehicle when there’s no second personal car, and a home-office claim on a return that also deducts a full commercial lease all draw attention. Nobody can honestly say these sit “in the DIF formula,” because the weights have never been published. What is defensible is the substantiation point. Every item on that list falls under IRC 274(d), which leaves no room for estimating, so a thin record fails the moment it’s examined.

Amended returns get the same treatment. The IRS has never stated that amending prompts an examination. It has stated that a claim for credit or refund extends your record retention clock.

The recordkeeping standard, and the retention clock

IRC 6001 requires every person liable for tax to keep records, and Treasury Regulation 1.6001-1(a) requires books sufficient to establish gross income, deductions, and credits. Publication 583 adds that in most cases the law doesn’t require any specific kind of records, only a system that clearly shows income and expenses. Its sharpest line for anyone running a business off bank feeds: “Proof of payment of an amount, by itself, does not establish you are entitled to a tax deduction.”

Retention periods come from IRS guidance on how long to keep business records.

Situation	Keep records
General rule	3 years
Claim for credit or refund after filing	3 years from filing the original return, or 2 years from paying the tax, whichever is later
Omitted income over 25% of gross income shown on the return	6 years
Claim for worthless securities or a bad debt deduction	7 years
Employment tax records	At least 4 years after the tax becomes due or is paid, whichever is later
No return filed, or a fraudulent return filed	Indefinitely
Property and assets	Until the limitations period expires for the year of disposal

For travel, meals, gifts, and vehicles, Publication 463 sets the IRC 274(d) standard. Prove the amount, the time, the place or description, the business purpose, and for meals and gifts the business relationship. Records must be timely kept, made at or near the time of the expense rather than reconstructed later, and documentary evidence is required for expenses of $75 or more and always for lodging. In practice that means a mileage log with date, destination, purpose, and miles, a meal record naming who was there, and a home office file with measured square footage and the utility bills behind Form 8829.

This is where the shape of your accounting engagement decides the outcome. Substantiation built during the month it happened is worth far more than a file assembled after a notice arrives. Indinero’s CPA-led team runs bookkeeping and the business return inside one engagement, so the records and the return are built by the same hands.

Two habits carry more weight than any others. Tie your small business tax deductions to documentation as you go, and don’t commingle personal and business funds, which is what turns a short examination into a long one.

IRC 6662 sets the price of getting this wrong. It imposes a 20 percent accuracy-related penalty on the portion of an underpayment attributable to negligence or a substantial understatement, which for individuals means one exceeding the greater of 10 percent of the tax required to be shown or $5,000. That threshold drops to 5 percent for taxpayers claiming the Section 199A qualified business income deduction, and interest runs on the penalty itself.

Additional Tips for Small Business Owners

Enforcement capacity is down sharply, the 1099-K threshold moved back up, and neither fact changes the standard a deduction has to meet.

The enforcement picture, with dates attached

The IRS examination and collection workforce went from 20,098 employees at the end of FY2023 to 27,217 at the end of FY2024, then down to 19,612 at the end of FY2025 and 17,517 as of January 10, 2026. That’s a 27 percent decline in one fiscal year, per TIGTA’s report on compliance activity trends through fiscal year 2025, issued August 2026. Individual examination starts fell 30 percent from FY2024 to FY2025, including a 27 percent drop for taxpayers with income above $400,000, as the Journal of Accountancy reported in August 2026. The agency also exhausted its remaining Inflation Reduction Act enforcement funding on December 31, 2025, and the January 2026 appropriation allocated $5 billion to enforcement, 8 percent below the prior year.

Read that carefully before relaxing. Fewer examiners doesn’t mean fewer notices. Document matching is automated and doesn’t depend on headcount, and in FY2025 the Automated Underreporter program closed 987,460 cases while the Automated Substitute for Return program closed 592,773.

The human side of compliance shrank. The machine side didn’t.

The odds themselves deserve dates. Individual examination coverage for tax year 2021 ran 6.6 percent for total positive income of $10 million or more and 0.9 percent from $1 million to $5 million. Overall individual coverage fell from 0.9 percent for tax year 2010 to 0.25 percent for tax year 2019, which the GAO attributed to reduced staffing, and the GAO has reported the IRS typically examines about 0.4 to 0.5 percent of partnership and S corporation returns per year. Since August 2022 Treasury has directed the IRS not to raise audit rates for households and small businesses under $400,000 against a tax year 2018 baseline, though TIGTA found in August 2024 that the agency had made limited progress measuring it.

What changed for the 2025 and 2026 returns

• Form 1099-K reverted. The One, Big, Beautiful Bill retroactively reinstated the pre-2021 threshold, so a third party settlement organization isn’t required to file unless gross payments exceed $20,000 and transactions exceed 200. Two caveats most articles skip. A platform may still issue one below the threshold and some states set lower thresholds, and the income is taxable whether a form arrives or not.
• The standard mileage rate splits at midyear. It was 70 cents for 2025. The IRS set the 2026 business rate at 72.5 cents effective January 1, then modified it to 76 cents for travel on or after July 1. A 2026 mileage log has to be split at midyear to compute correctly.
• New payroll reporting surfaces. Qualified tips can be reported on Form W-2, Form 1099-NEC, Form 1099-MISC, Form 1099-K, or Form 4137, and the overtime deduction is capped at $12,500, or $25,000 for joint filers, phasing out above $150,000 of modified AGI. For an employer that means new fields that have to tie back to the return.

A short list to work from

1. Read the Audit Techniques Guide for your industry before you file, not after you’re examined.
2. Reconcile every third-party form to a line on the return, and keep the reconciliation.
3. Separate business and personal banking completely, with no exceptions for convenience.
4. Never respond to a phone call claiming to open an audit. Audits open by mail.
5. Watch the 30-day and 90-day clocks, and treat the 90-day one as immovable.
6. If the file is thin, fix it going forward. Timely kept records can’t be created retroactively.

Most of this belongs to the ordinary rhythm of small business tax planning, the same discipline that keeps you clear of the tax penalties any small business can avoid. An audit isn’t a verdict on your business. It’s a request to see the work behind the return, and the work either exists or it doesn’t.

Indinero has kept books and filed business returns under one roof through continuous operations since 2009, so the substantiation gets built month by month instead of assembled against a deadline. If you’re not confident your current records would hold up, reach out for a free consultation with our business tax services team. We’d love to learn about your business.

Frequently asked questions

Once the subject comes up, owners tend to ask the same handful of questions, and almost all of them are about odds, timing, and what happens when the records aren’t perfect. Here are the ones we field most often.

What are the odds of a small business being audited?

The IRS examines roughly 0.4 to 0.5 percent of partnership and S corporation returns each year, so a small business tax audit is unlikely. That estimate comes from a 2014 GAO report, and individual audit coverage fell from 0.9 percent for tax year 2010 to 0.25 percent for tax year 2019. Odds aren’t the useful number anyway. Document matching runs on volume, and the IRS closed 987,460 Automated Underreporter cases in fiscal year 2025 outside the examination function entirely.

Does claiming the home office deduction trigger an IRS audit?

No, the IRS has never published the home office deduction as an audit trigger, and the DIF scoring weights have never been released. What’s true is that the deduction has to be provable. The IRS requires regular and exclusive business use of the space and proof it’s your principal place of business. Keep measured square footage, a floor plan or photo, and the utility bills behind Form 8829. Indinero builds that file during monthly close so it exists before anyone asks for it.

How long does an IRS audit take?

The IRS publishes no average audit duration, saying length depends on the audit type, the complexity of the issues, and how fast records arrive. You control exactly one of those three. Correspondence exams, which the Taxpayer Advocate put at roughly 76 percent of all audits as of fiscal year 2018, move fastest. Answer the first document request completely and once, because partial answers generate follow-ups. Indinero’s tax team handles that correspondence inside the same engagement that files the return.

Can the IRS audit an LLC or S corp?

Yes, the IRS audits LLCs, S corporations, and partnerships, and an entity exam pushes adjustments out to every K-1 holder’s personal return. Selection also runs the other direction. A partner’s or shareholder’s own exam can pull the entity in under the IRS’s related examinations path. Pass-through returns are a stated IRS focus, and its Large Business and International division is building machine learning models to flag partnership and S corporation returns with examination potential.

What’s the penalty if you lose an IRS audit?

No penalty applies to an audit that ends in no change, and an agreed adjustment costs tax plus interest unless IRC 6662 applies. That section adds a 20 percent accuracy-related penalty on underpayments traced to negligence or a substantial understatement, and interest runs on the penalty itself. Relief exists, and it requires showing you acted in good faith with reasonable cause, which is far easier when the records were kept at the time.

Do I need a CPA to handle an IRS audit?

You can respond to an IRS audit yourself, though a CPA or enrolled agent who already knows the return usually resolves it faster. Representation matters most where the mechanics get technical. Appeals is one example, because a formal written protest is required in all partnership and S corporation cases regardless of the dollar amount. Indinero’s CPA-led team keeps bookkeeping and the business return in one engagement, so the person answering the examiner is the person who built the records.

, –