Getting a notice from the IRS is one of those moments that can stop a small business owner cold. Your stomach drops. Your mind races. You start wondering what you missed, what they found, and how bad it could get.

Here’s the truth: most small business audits are not disasters. They’re paperwork problems. The business owners who come out clean are not the ones who did everything perfectly. They’re the ones who kept good records and knew what to expect.

This guide walks you through exactly what to do before, during, and after a tax audit so you’re never caught off guard.

What Actually Triggers a Small Business Audit

The IRS audits returns that look unusual compared to similar businesses. Some of the most common triggers include:

• High deductions relative to income — if your expenses seem out of proportion to your revenue, that gets flagged
• Consistently reporting losses — three or more loss years in a row raises questions about whether the business is legitimate
• Large cash transactions — cash-heavy businesses like restaurants, salons, and retail stores receive more scrutiny
• Mismatched income — if a 1099 filed by a client does not match what you reported, the IRS will notice
• Round numbers — reporting exactly $5,000 for every expense category looks invented rather than real
• Home office or vehicle deductions — these are legitimate but frequently abused, so they attract attention

Knowing these triggers is not about gaming the system. It’s about making sure your records are solid enough to back up every number you claim.

The Three Types of IRS Audits

Not all audits are the same. The IRS uses three methods depending on the scope of what they want to review:

Correspondence Audit

This is the most common and least scary. The IRS sends you a letter asking you to verify or explain one specific item on your return. Usually it’s a deduction, a form that was missing, or income that did not match a third-party document. You respond by mail with the supporting documentation. Done.

Office Audit

The IRS asks you to come to a local office and bring documentation for specific items. This is more involved but still focused. You show up prepared, answer questions, and provide records.

Field Audit

An IRS agent comes to your business or your accountant’s office and reviews your records in person. This is the most comprehensive type and usually reserved for larger or more complex issues. If you receive notice of a field audit, get a CPA or tax attorney involved before doing anything else.

How Long to Keep Business Records

One of the most common audit problems is not having records anymore. Business owners assume they can toss old receipts after a year or two. That assumption is wrong.

Here is the general IRS guidance on record retention:

• 3 years — for most returns where you reported income honestly and filed on time
• 6 years — if you underreported income by more than 25% (even accidentally)
• 7 years — if you claimed a loss from worthless securities or bad debt
• Indefinitely — if you did not file a return or filed a fraudulent return

The safest practice for most small business owners is to keep all financial records for at least seven years. Digital storage is cheap. The peace of mind is priceless.

The IRS small business audit page has detailed guidance on what records to keep and for how long based on your specific situation.

What Records You Need to Have Ready

Audit preparation is really just good recordkeeping done in advance. Using checklists to run your business more efficiently extends to your financial records — a simple monthly checklist keeps you audit-ready year-round.

Here is what you should be able to produce at any time:

• Bank statements — all business accounts, every month
• Receipts for all expenses — especially anything over $75
• Payroll records — wages paid, taxes withheld, W-2s and 1099s issued
• Sales records — invoices, point-of-sale reports, contracts with clients
• Mileage logs — if you deduct vehicle use, you need a contemporaneous log, not something reconstructed later
• Home office documentation — square footage calculations and proof the space is used exclusively for business
• Asset purchase records — anything you depreciated needs documentation of when it was bought and what it cost
• Prior year tax returns — at minimum the last five years

Organizing Your Records Before a Notice Arrives

The worst time to organize your financial records is after you get an audit notice. By then you are working against a deadline while under stress. The smart approach is to treat your records like they could be audited at any moment.

Here is a practical system that works:

Go digital

Scan every receipt the day you get it. Apps like Expensify, Dext, or even a basic Google Drive folder by month work fine. Paper receipts fade and get lost. Digital files do not.

Separate business and personal

This one is non-negotiable. The moment business and personal expenses mix, you create a mess that is nearly impossible to untangle under audit pressure. Use a dedicated business bank account and a business credit card. Every transaction should belong to one world or the other.

Reconcile monthly

Go through your bank statements every month and match each transaction to a category and a receipt. If you do this consistently, you will never spend a panicked weekend reconstructing a year’s worth of expenses.

Use accounting software

QuickBooks, FreshBooks, Wave, or Xero all create an organized paper trail automatically. Your transactions are categorized, your reports are ready, and your accountant can pull what they need without digging through shoeboxes.

What to Do When the Notice Arrives

The IRS always contacts you by mail first. If someone calls claiming to be from the IRS and demands immediate payment, hang up. That is a scam.

When a legitimate notice arrives, here is what to do:

1. Read it carefully. The notice tells you exactly what year, what items, and what they want. Many notices are narrow and only concern one issue.
2. Do not ignore it. Ignoring an audit notice makes things dramatically worse. The IRS will assess taxes automatically if you do not respond.
3. Note the deadline. You typically have 30 to 90 days to respond. Mark it on your calendar immediately.
4. Call your accountant or CPA. Even for a simple correspondence audit, a quick call to your tax professional can prevent costly mistakes.
5. Gather only what was requested. Do not volunteer extra documents beyond what was asked. More information is not always better in an audit.

Should You Handle It Yourself or Hire Help?

For a simple correspondence audit where you have the documentation, many business owners handle it on their own. You respond by mail, include your supporting documents, and that is usually the end of it.

For anything more complex — an office or field audit, a notice about multiple tax years, or a situation involving missing records — bring in a professional. A CPA, enrolled agent, or tax attorney can represent you before the IRS, negotiate on your behalf, and keep you from accidentally making things worse. Just as you would have a professional review a complex contract, tax disputes above a certain complexity level deserve professional representation.

The cost of professional help is almost always less than the cost of a poorly handled audit.

Common Audit Mistakes to Avoid

• Providing more than requested. Answer what was asked. Do not offer up additional returns, documents, or explanations unless the auditor asks.
• Reconstructing records after the fact. If you create mileage logs or expense summaries during the audit rather than producing contemporaneous records, auditors will see through it.
• Getting emotional. Audits are business transactions. Stay calm, be professional, and stick to the facts.
• Missing deadlines. Request extensions in writing if you need more time. Do not just let deadlines pass.
• Assuming you owe what they say. IRS assessments are not always correct. You have the right to dispute findings and appeal.

The Bigger Picture: Audit-Readiness as a Business Habit

The best audit defense is not something you build in a panic. It is a byproduct of running a tight, well-documented business year-round. When your records are clean, your accounts are separate, and your receipts are organized, an audit becomes an inconvenience rather than a catastrophe.

Think of audit-readiness the same way you think about other risk management. Protecting your business from legal and financial risk starts long before any threat materializes. Clean books are your first line of defense.

The SBA’s financial management guide has additional resources on record-keeping best practices for small business owners.

Ready to Build a More Resilient Business?

Audit-readiness is just one piece of running a business that can withstand anything. At Hustler’s Library, we give small business owners the practical tools, guides, and resources to build businesses that last.

Join Hustler’s Library free today and get access to our full library of plain-English business guides built for people who are actually in the game.

Free for Every Founder

Ready to Know Where You Stand?

The Business Journey dashboard maps your exact position across all 13 stages. Track your progress, unlock resources for each step, and build with a framework used by thousands of founders at Hustler's Library.

Start Your Journey — It's Free →

No credit card required  ·  Takes 3 minutes  ·  Personalized to your stage