If your small business gets audited, it means the IRS is asking you to prove that some or all of what you reported on a tax return is accurate - by mail, in an IRS office, or with an agent visiting your business. Most audits are handled entirely through the mail and are narrow in scope: one or two items, resolved with documents. A full "you're being investigated" scenario is rare. Getting a notice is not an accusation of wrongdoing, and it does not mean you did anything illegal - it means a return got flagged and the IRS wants records that back it up.
How returns get picked for audit
The IRS describes a few different ways a return ends up under examination:
Random selection and computer screening. Some returns are selected purely on statistical formulas - software compares your return to "norms" for similar returns, built from a large sample of past examinations. A return that scores as an outlier gets a closer look. The IRS is explicit that a return can be picked this way even when there is nothing wrong with it.
Document mismatches. A 1099, W-2, or other information return that a bank, client, or payment platform filed doesn't match what you reported. This is a common trigger and often produces a straightforward correspondence audit.
Patterns that draw a second look. Recurring losses year after year (especially from an activity that looks more like a hobby than a business), unusually large or suspiciously round deductions, vehicle or meal expenses that look high relative to income, businesses that run mostly on cash, a home-office deduction that seems large relative to the home, or workers treated as independent contractors when the facts look more like an employment relationship.
Related examinations. The IRS may pull your return in because it involves a partner, investor, or business associate whose return is already being examined.
None of this means any one of these patterns is automatically a problem - businesses legitimately run at a loss, work mostly in cash, or claim large vehicle expenses. It just means those returns draw more attention, so the records behind them matter more.
The three types of audits
Correspondence audit. Handled entirely by mail. The IRS asks for documentation on a specific item or two - proof of a deduction, a missing 1099, a credit you claimed. You mail or upload copies, and if they support the return, the audit closes. This is the most common type and usually the least burdensome.
Office audit. You (or your representative) bring records to a local IRS office for an interview with an examiner. These typically cover a broader set of items than a correspondence audit but are still limited in scope.
Field audit. An IRS revenue agent conducts the examination at your business, your home, or your representative's office, reviewing books and records in person. Field audits are the most extensive - they can reach your full set of business records, your accounting practices, and how the business actually operates - and they take longest.
What a real IRS notice looks like - and what it never does
This is worth being blunt about, because impersonation scams targeting business owners are common and convincing. The IRS initiates an audit with a letter sent by mail. In the IRS's own words, it won't initiate an audit by telephone - and it will not start an examination by text message, email, or social media, or send a first-contact email asking you to click a link or reply with financial information.
Red flags that you're dealing with a scammer, not the IRS:
A phone call, text, or email out of the blue claiming an audit is underway or that you owe money right now
Any threat of immediate arrest, deportation, or license revocation if you don't pay or respond instantly
A demand to pay by gift card, prepaid debit card, wire transfer, or cryptocurrency
Pressure not to contact your accountant or attorney, or not to verify the call independently
If you get a call or message like this, don't engage with it - hang up or don't reply, and verify any claimed IRS matter by looking up the IRS's official contact information yourself rather than using a number or link the caller gave you. Real audit notices reference a specific tax year and issue, and give you a mailing address and a deadline to respond.
What actually happens once you're notified
Read the notice carefully. It will identify the tax year(s) under examination and the specific items or issues the IRS wants documented. It is not usually asking about your entire financial life - stick to what's actually asked.
Gather your records for those specific items. Receipts, invoices, bank and credit card statements, mileage logs, canceled checks, contracts - whatever supports the deduction, credit, or income figure in question. Records created at the time of the transaction (contemporaneous records) are far more persuasive than a reconstruction assembled after the fact. This is the single biggest factor in how an audit turns out.
Decide whether to get representation. You have the right to represent yourself or to be represented, and for a simple correspondence audit on one or two items, many owners handle it themselves. For an office audit or especially a field audit, it's generally worth having a CPA, enrolled agent, or tax attorney represent you - someone who can speak for you, knows what the examiner is and isn't entitled to ask, and can keep the scope from drifting into unrelated years or issues. A representative who deals with the IRS without you present will need a power of attorney (Form 2848) on file.
Answer what's asked, and no more. Provide the documents and information tied to the specific issue under review. Volunteering unrelated records or unprompted explanations can open new questions the audit wasn't originally about.
Meet the deadline, or ask for more time. Notices come with a response window, and the exact window depends on the notice you got. If you need longer to gather records, you can generally ask for an extension - do this before the deadline passes, not after.
Review the examiner's findings. At the end, the IRS either accepts the return as filed or proposes changes (and possibly additional tax, interest, and penalties).
Be straightforward throughout. Giving the examiner accurate records and honest explanations is the fastest route out; altering records or leaving income off the table turns a routine examination into a much more serious problem.
If you disagree with the result
You are not required to simply accept an examiner's proposed changes. You can start by asking for a conference with the examiner's manager. If the IRS proposes additional tax, it will send a letter with the examination report explaining your appeal rights - generally giving you 30 days from the date of that letter, though the deadline that governs is the one printed on your letter - to request review by the IRS Independent Office of Appeals. Appeals is a separate function inside the IRS, independent of the examiner who worked your case; it looks at the dispute fresh and often resolves it without going to court. For smaller proposed amounts, Appeals allows a short request (Form 12203) instead of a full written protest - check the current dollar cutoff on irs.gov, since it's a procedural threshold that can change.
Beyond Appeals, you generally retain the right to petition the U.S. Tax Court for many types of disputes if you receive a notice of deficiency, and there are formal paths to reopen a closed audit if new facts come to light. Those deadlines are strict - if you're heading that way, talk to a tax professional before the date on the notice passes.
If you're stuck - the process is dragging on, you're facing financial hardship because of it, or normal IRS channels aren't working - the Taxpayer Advocate Service is a free, independent organization inside the IRS that helps taxpayers resolve problems and protects your rights as a taxpayer. It doesn't cost anything to contact them.
How far back can the IRS go?
As a general rule, the IRS can include returns filed within the last three years in an audit, and it has three years from when you filed a return to assess additional tax. In practice most examinations focus on the most recent year or two. That window extends to six years if you omitted a substantial amount of income - the tax code sets that trigger as understating gross income by more than a set percentage of what you reported, with a separate rule for certain omitted foreign financial asset income. If a return was never filed, or if fraud is involved, there is no time limit at all on assessment. The exact percentage and dollar thresholds behind the six-year rule live in the tax code and are worth confirming directly on irs.gov or with a tax professional, since how they apply can turn on the specific facts of a return.
You may also be asked to sign a consent extending the assessment period so the examiner has more time. That's a real decision with tradeoffs, not a formality - it's worth getting advice before you sign one.
In practice, this is another reason contemporaneous records matter: the IRS usually only looks at your last few years of returns, but if a real problem is found, the reach-back can be longer than owners expect.
State tax audits are a separate thing
An IRS examination is federal. Your state's tax agency runs its own audits - income tax, sales tax, payroll and unemployment tax - under its own rules, notices, deadlines, and appeal process, and those vary a lot from state to state. A federal adjustment can also trigger a state one, because many states require you to report a federal change. If you get a letter from a state revenue or taxation department, don't assume the IRS process described here applies; check that agency's own instructions.
What to do right now if you're worried about an audit
Keep receipts, invoices, mileage logs, and bank records as you go, not reconstructed later - this is the difference between a fast correspondence audit and a drawn-out one.
Separate business and personal accounts and spending; commingled funds make every deduction harder to prove and can undercut your liability protection too.
If a notice arrives, respond by the deadline listed - ignoring it doesn't make it go away and can escalate the situation.
For anything beyond a simple one-item correspondence audit, get a CPA, enrolled agent, or tax attorney involved early rather than after things have gone sideways.
Free help exists: the IRS's own audit guidance and Taxpayer Bill of Rights at irs.gov, the Taxpayer Advocate Service, SBA resources, SCORE, and your local Small Business Development Center, which can point you toward qualified help if you can't afford a paid preparer.
Sources: IRS, IRS audits (irs.gov/businesses/small-businesses-self-employed/irs-audits); IRS, Preparing a request for Appeals (irs.gov/appeals/preparing-a-request-for-appeals); IRS, Statutes of limitations for assessing, collecting and refunding tax (irs.gov/filing/statutes-of-limitations-for-assessing-collecting-and-refunding-tax); IRS, Taxpayer Bill of Rights (irs.gov/taxpayer-bill-of-rights); Taxpayer Advocate Service (taxpayeradvocate.irs.gov); IRS newsroom guidance on identifying IRS impersonation scams (irs.gov/newsroom).
This article is general information, not legal, tax, or financial advice.
Frequently asked questions
Does the IRS call or text you if you're being audited?
No. The IRS initiates audits by mail and says plainly that it won't initiate an audit by telephone. It also doesn't open an examination by text message, email, or social media, and any message threatening immediate arrest or demanding payment by gift card is a scam, not a real audit notice.
Do I need a lawyer or CPA for an audit?
Not always. Many correspondence audits on a single item can be handled by mailing in documentation yourself - you have the right to represent yourself. For an office audit, and especially a field audit, it's generally worth having a CPA, enrolled agent, or tax attorney represent you; a representative dealing with the IRS without you present needs a power of attorney (Form 2848) on file.
What triggers a small business audit?
Returns are selected by random selection and computer screening against statistical norms, by mismatches between your return and a 1099 or other information return, and through related examinations of partners or associates. Recurring losses, unusually large deductions, and cash-heavy operations also draw attention. None of these guarantee an audit, and none by itself proves a problem.
How far back can the IRS audit my business?
Generally the IRS can include returns filed within the last three years, and most exams focus on the most recent year or two. That extends to six years if you left off a substantial amount of income, and there's no time limit at all if you never filed a return or if fraud is involved. Confirm the exact thresholds on irs.gov, since they turn on the specific facts of a return.
What happens if I disagree with the audit results?
You can request a conference with the examiner's manager, and you can request review by the IRS Independent Office of Appeals - generally within 30 days of the letter explaining your appeal rights, but follow the deadline printed on your own notice. Beyond that you generally retain the right to petition the U.S. Tax Court if you receive a notice of deficiency, and the free Taxpayer Advocate Service can help if the process stalls.
This article is general legal information, not legal advice, and may not reflect the most current law or the law in your jurisdiction. Laws vary by state and change over time. For advice about your specific situation, consult a licensed attorney.
Knowing your rights is the first step
Join thousands committing to calmly and consistently exercise their constitutional rights.