How to Survive an IRS Audit: Small Business Owner's Defense Guide

The IRS audited about 0.4% of all individual returns and roughly 0.6% of small business returns in 2024 per the IRS Data Book. Low odds — but high stakes when it happens.

What an audit actually looks like

Three flavors, in increasing severity:

1. Correspondence audit (most common) — letter mailing asking you to substantiate specific line items. Resolved by mail. Examples: home office deduction, vehicle mileage, contributions.
2. Office audit — you visit an IRS office with documentation. Lasts a few hours. The auditor reviews specific issues.
3. Field audit (rarest) — IRS agent visits your business location. Reviews multiple years and broad categories. Days-to-weeks engagement.

The CP-series notices (CP2000, CP2501, CP3219A) are NOT audits — they're automated under-reporter notices proposing changes based on 1099/W-2 mismatches. Respond within 30 days.

What triggers an audit

Per IRS analysis and tax practitioner consensus:

1. High income — > $1M AGI: 4× audit rate; > $10M: 8×
2. Schedule C losses 3+ consecutive years — hobby loss presumption (§ 183)
3. Large deductions vs income — claiming $80K of meals on $100K of revenue stands out
4. Cash-intensive businesses — restaurants, salons, laundromats, contractors
5. DIF score outliers — IRS's Discriminant Information Function scores returns; outliers in "expected" deduction ratios get pulled
6. Round numbers — $10,000 of "office supplies" suggests guessing
7. 1099/W-2 mismatches — automatic CP2000 trigger
8. Foreign accounts — FBAR / FATCA non-disclosure
9. Cryptocurrency — Form 1040 Q1 lying about crypto activity
10. R&D credit claims — heavy scrutiny since the 2024 Schedule M-3 changes

The 7-year retention rule

Per IRC § 6501 and IRS Reg. § 1.6001-1:

• 3 years — standard statute of limitations on most issues
• 6 years — substantial omission (>25% of gross income left off)
• Indefinite — fraud, no return filed
• 7 years — practical retention recommended (covers all civil cases; SEC § 17a-4 also requires 7 years for accounting firms)

Keep: bank statements, receipts, invoices, mileage logs, contracts, deposit slips, prior tax returns, depreciation schedules.

Documentation that bulletproofs deductions

Deduction	Required documentation
Vehicle	Mileage log (date, miles, business purpose), receipts for actual-method
Home office	Square footage + total square footage, photos, exclusive-use evidence
Meals	Receipt + business purpose + attendees noted on the receipt
Travel	Itinerary, business purpose, receipts > $75
Contract labor	W-9 collected, 1099-NEC filed, contracts
Charitable	Acknowledgment letters for contributions ≥ $250
Section 179 / depreciation	Invoice, in-service date, business-use percentage

The IRS Cohan rule sometimes allows reasonable estimates without receipts, but DON'T rely on it — it's eroded by Reg. § 1.274-5 for travel, meals, gifts, and listed property.

The 5 rules of dealing with an auditor

1. Engage a CPA, EA, or tax attorney before responding — they can represent you under Form 2848 (Power of Attorney). Costs $1,500–$5,000; saves multiples of that.
2. Answer only what's asked — don't volunteer documents or information. Auditors expand scope when they find new issues.
3. Get everything in writing — verbal agreements with auditors don't bind the IRS.
4. Don't lie or destroy records — civil audit can become criminal investigation fast (§ 7201, § 7206).
5. You can appeal — if you disagree, request the IRS Independent Office of Appeals. Independent of the agent, often more lenient.

How Accountaxed reduces audit risk

Accountaxed keeps a transparent audit trail: every transaction is linked to its source statement, every category to a rule, every depreciation deduction to its asset schedule. The Audit & Compliance tab grades your books pre-filing on the same DIF-style metrics the IRS uses (large round numbers, off-by-one totals, missing receipts > $75, suspicious deduction ratios).

Run an audit-readiness check → · IRS Audit Techniques Guides