IRS Audits and Record Keeping: What Small Businesses Need to Know

Small businesses reduce IRS audit risk by reporting all taxable income, claiming only supportable deductions, and maintaining records that connect each tax-return entry to a real transaction. The IRS generally has three years to assess additional tax, but substantial income omissions can extend that period to six years, and fraud or an unfiled return can leave it open indefinitely.

How IRS audits work—and what raises your risk

An audit examines whether your return correctly reports income, deductions, credits, and other tax items. Selection can result from computerized screening, information mismatches, related-party examinations, or statistical sampling. An audit does not automatically mean you made a mistake or owe additional tax.

Examinations may occur by mail, at an IRS office, or at your business or representative’s office. A document-matching notice, such as a CP2000 proposing changes based on third-party information, is not itself an audit. Either way, compare the notice with your records before agreeing to a change.

Patterns that invite questions

• Missing income: Forms 1099-NEC, 1099-K, and other information returns do not reconcile with reported receipts.
• Unusual deductions: Expenses are unusually large relative to revenue or inconsistent with the business’s activities.
• Personal costs presented as business expenses: Family travel, commuting, and household purchases appear in deductible accounts.
• Recurring losses: Repeated losses can raise questions about profit motive, particularly when operations resemble a hobby.
• Weak cash controls: Deposits, point-of-sale reports, and cash receipts do not support reported sales.

These are reasons to improve documentation, not reasons to skip legitimate deductions. There is no published deduction-to-income percentage that guarantees an audit or protects you from one. Our guide to red flags that trigger IRS audits for small businesses explains how to evaluate these patterns.

The three-year rule, six-year rule, and longer exceptions

The assessment statute limits how long the IRS generally has to assess additional tax. It usually runs from the filing date; a return filed before its statutory due date is generally treated as filed on that due date. Filing late generally starts the clock later. Special rules and signed extensions can change the deadline.

For example, assume a service business reports $200,000 of gross income but omits another $60,000. The omission equals 30% of reported gross income, potentially triggering six years. An omission of exactly $50,000 equals 25%, not more than 25%. Gross-income definitions, adequate-disclosure rules, and other exceptions can affect the analysis.

Certain basis overstatements can count as income omissions. Missing required international information returns can also keep assessment periods open under special rules. The IRS’s assessment deadline is different from its collection period, which is generally ten years after assessment, subject to suspension and extension rules.

Before destroying records or signing Form 872 to extend an assessment deadline, review the actual dates and issues. Read Does the IRS Really Have a 6-Year Rule for Tax Audits? for a closer look at these exceptions.

What documentation supports a business deduction?

A deductible expense generally must be ordinary and necessary for your business, properly timed, and supported by evidence. Depending on the expense, you may need to establish the amount, payment date, vendor, business purpose, and applicable allocation. A bank statement proves money moved; it rarely proves every element of deductibility.

Build a complete evidence trail

• Purchase documentation: Keep itemized receipts, invoices, contracts, and order confirmations showing what you bought.
• Payment evidence: Preserve bank statements, credit-card statements, canceled checks, and payment-platform records.
• Business explanation: Record the client, project, operational need, or other business connection.
• Allocation support: Document how you separated personal use from business use.

For a $2,400 annual software subscription used exclusively by the business, retain the invoice, payment record, subscription dates, and a short description of its function. Your accounting method and prepaid-expense rules determine whether the full amount is deductible immediately; documentation alone does not settle timing.

Travel, meals, vehicles, and home offices

Travel and vehicle expenses face heightened substantiation requirements. Keep timely records of dates, destinations, amounts, and business purposes. For vehicle deductions, track business miles and total annual mileage; ordinary commuting is generally personal. Choosing the standard mileage method does not eliminate the need for a mileage log.

For business meals, document attendees and the business purpose alongside the receipt. Qualifying business meals are generally 50% deductible, subject to exceptions, while entertainment is generally nondeductible. Under applicable travel substantiation rules, documentary evidence is generally required for expenses of $75 or more and for lodging regardless of amount. Smaller expenses still require supporting records; this is not a universal receipt exemption.

A home-office deduction generally requires regular and exclusive business use, with specific exceptions. Keep measurements, photographs, and expense-allocation calculations. Sole proprietors using the actual-expense method generally use Form 8829; vehicle reporting may involve Schedule C and Form 4562.

Our checklist of receipts and records you need to keep for deductions explains how to assemble support by expense category.

Reconcile income before filing

Information returns are cross-checks, not substitutes for your books. Taxable business income generally must be reported even when no Form 1099 is issued. Conversely, adding every information return together can double-count transactions.

Suppose customers pay $120,000 through a processor, which withholds $3,600 in fees and deposits $116,400. Assuming no refunds or other adjustments, record $120,000 of revenue and $3,600 of processing expense—not simply $116,400 of sales. Save processor reports showing how gross payments become net deposits.

Reconcile Forms 1099-K and 1099-NEC to customer-level records and investigate overlap or errors. Separately identify loans, owner contributions, transfers, refunds, and sales tax collected. A documented loan deposit is not sales revenue, but an unexplained deposit may become an audit issue.

How long should you keep business records?

Keep records until all relevant tax periods close, not merely until a receipt reaches its third anniversary. A seven-year retention policy can be a useful operating baseline, but it does not cover every situation and is not a universal IRS requirement.

• Returns and filing proof: Retain complete filed returns, e-file acknowledgments, and mailing evidence long term.
• Ordinary supporting records: Keep them through the applicable assessment period and longer when another rule requires it.
• Employment taxes: Generally retain records for at least four years after the tax becomes due or is paid, whichever is later.
• Assets: Keep acquisition, improvement, depreciation, and basis records through the limitations period for the year of taxable disposition.
• Losses and credits carried forward: Preserve origin-year support through the relevant periods for years in which the carryovers affect tax.
• Bad debts and worthless securities: Refund claims involving these losses generally have a special seven-year filing period; retain supporting evidence accordingly.

State tax rules, contracts, litigation holds, and employment laws may require longer retention. Do not delete records connected to an open examination, appeal, or dispute.

Build an audit-ready monthly workflow

1. Separate accounts. Use dedicated business banking and cards; clearly classify owner contributions and distributions.
2. Capture documents promptly. Upload legible receipts and attach them to transactions before paper fades or vendor access disappears.
3. Add context. Record business purpose and allocation while the details are fresh.
4. Reconcile monthly. Tie bank balances, processor reports, payroll filings, and bookkeeping totals together.
5. Review unusual entries. Investigate negative expense balances, large journal entries, and unexplained deposits.
6. Archive securely. Maintain searchable records, access controls, backups, and exports that remain readable after changing software.

Electronic records are generally acceptable when accurate, complete, accessible, and reproducible. Check scans for missing pages and unreadable totals. Our tax advisory and compliance services help connect bookkeeping evidence with return preparation, while our business tax strategies address planning before transactions occur.

Where this goes wrong: responding without a plan

Common mistakes include ignoring notice deadlines, sending disorganized files, manufacturing replacement receipts, and assuming every business-account charge is deductible. If records are missing, seek duplicates and reconstruct an honest trail. Estimates cannot replace the strict substantiation required for certain expenses.

Read the notice, verify its authenticity independently, calendar the response date, and preserve relevant records. Identify the tax years and issues, then provide an organized response addressing the request truthfully. Representation may require Form 2848, Power of Attorney and Declaration of Representative. Suspected fraud, payroll-tax exposure, or missing foreign disclosures warrants prompt professional review.

SWITCH is a US tax advisory firm, not a law firm. We pair CPAs with tax-law expertise, with a CPA and a tax attorney on every file. Rules change, so confirm thresholds, forms, and figures for the current tax year and the year under examination.

Our initial consults and quotes are free; assessments are paid. To discuss your records or an IRS notice, Request A Free Consult.