IRS Audits

Small Business Audit Red Flags: What the IRS Actually Screens For in 2026

By Angeline Balsitis, EA · Reviewed by Melissa Ly, Chief Tax Officer · Published July 20, 2026 · Updated July 7, 2026 · Editorial Standards

You run the business, you sign the return, and every year the same quiet question follows you to the mailbox: is something on that return going to bring the IRS to your door? Here's the honest answer — audit selection is mostly math, not suspicion. Once you know exactly what the math scores, you can neutralize almost every small business audit red flag before a letter is ever printed.

This guide covers all eleven flags the IRS screens small business returns for, what each one looks like from the IRS side, and — because some readers are already holding an exam letter — what happens next and how to respond. If a letter does arrive, the image below shows you exactly what a real IRS exam notice looks like and where to look on it, so you can recognize the real thing the moment it lands.

Why the IRS flags small business returns (and who does the flagging)

Every small business return is scored by a computer — the Discriminant Function (DIF) model — before any human ever reads it. Your Schedule C, 1120-S, or 1065 is compared against statistical norms for businesses of your size and industry, and the returns that deviate most get pulled for a classifier to review. At the same time, a separate matching system compares your reported income against every 1099-NEC, 1099-K, W-2, and 1098 filed under your taxpayer ID.

That matters more in 2026, not less. The IRS workforce shrank roughly 27% in 2025, so fewer humans answer phones — but the scoring models, the document matching, and newer AI-assisted selection tools run automatically at full capacity. The practical effect: fewer judgment calls, more math. A return that scores clean rarely gets touched; a return with two or three stacked flags gets scored the same way every single year it repeats them.

Self-employed and small business returns have historically drawn more exam attention than comparable W-2-only returns for one simple reason: you self-report both sides of the equation, income and expenses. Nobody withholds for you, and nobody verifies your deductions but you — until an examiner does.

The 11 small business audit red flags the IRS screens for in 2026

Stacked flags — not any single one — are what turn a scored return into an opened exam. Here is the full list, with the reason each item is screened and the fix that actually lowers your score:

Income red flags: the matches you can't argue with

An income mismatch is the one flag the IRS never has to think about — the computer finds it. Every 1099-K from your card processor, every 1099-NEC from a client, lands in an IRS database keyed to your EIN or SSN. If your reported gross receipts come in below the sum of those forms, a notice or exam follows with near-mechanical certainty. Before filing, total every information return you received and make sure your gross receipts equal or exceed that figure — including income nobody issued a form for.

Cash is the second income flag, and it works differently: instead of matching documents, the examiner reconstructs. In a cash business audit, the IRS adds up your bank deposits, applies industry markup ratios, and treats every deposit you can't explain as taxable income. Restaurants, salons, trades, and vending operations live under this lens permanently.

One more income point matters here: understating gross income by more than 25% extends the assessment window from three years to six. The general rules on how far back the IRS can audit are covered in our hub guide — the takeaway for owners is that income flags don't just raise your odds, they lengthen your exposure.

Deduction red flags: losses, vehicles, home offices, and round numbers

The IRS presumes your business has a profit motive if it made money in at least 3 of the last 5 years. Miss that mark and Section 183 hobby-loss screening kicks in — and a reclassification doesn't just deny this year's loss, it can unwind losses for every open year at once. Losses aren't fatal; undocumented losses are. Separate bank accounts, real bookkeeping, and evidence you're trying to become profitable are what keep a money-losing business a business.

Vehicles are the most commonly disallowed deduction in small business exams, because claiming 100% business use of your only car is almost never true — and examiners know it. When the IRS wants a mileage log, "I didn't keep one" is the answer that costs the entire deduction. A mileage app running in your pocket eliminates this flag completely.

Home offices trigger fear out of proportion to their actual risk. The deduction is legitimate and you should take it — the problems are claiming a space that isn't used regularly and exclusively for business, or deducting a share of your home that doesn't survive a floor-plan check. The simplified method ($5 per square foot, capped at 300 square feet) removes nearly all of the exam friction.

Finally, watch your return's texture. A Schedule C full of round numbers reads like estimation, and expense ratios far above your industry's norms raise your DIF score line by line. If you're already facing questions about a self-employed return, our Schedule C audit guide covers the exam itself — and if your documentation is thin, being audited with no receipts is a solvable problem, not a lost cause.

People and payroll red flags: classification, salaries, and 941s

Worker classification is the flag with the biggest dollar consequences, because it converts one exam into a payroll-tax liability across every worker and every open quarter. If your 1099 contractors work set hours, use your tools, and take your direction, the IRS — and your state — can reclassify them, and the worker misclassification penalty stack includes back withholding, FICA, and failure-to-deposit penalties.

S corporation owners have their own version: taking large distributions while paying yourself little or no W-2 salary. The IRS screens returns for exactly that ratio, and the exposure — reclassified wages plus payroll tax plus penalties — is laid out in our guide to S corp reasonable salary back taxes. There's no magic number; the standard is what a similar business would pay someone to do what you actually do.

Payroll filings themselves are cross-checked, too. Quarterly 941 totals that don't reconcile to year-end W-2s, or quarters that simply never got filed, are flagged mechanically — and payroll problems escalate faster than income tax problems, because withheld taxes are treated as trust funds, not ordinary debt.

The 2026-specific red flags: ERC, the 1099-K myth, and AI selection

Employee Retention Credit claims are the single hottest small business exam category in 2026, with a five-year assessment window that keeps even early claims open. If a promoter prepared your claim and you can't reproduce the eligibility analysis, get it reviewed now — our ERC audit guide walks through what examiners ask for and how disallowance plays out.

Meanwhile, don't misread the 1099-K change. The reporting threshold reverted to $20,000 and 200 transactions, so many platforms will send fewer forms — but the platforms still keep every record, and an examiner can pull your full deposit history regardless of whether a form was issued. "No 1099 arrived" has never meant "not taxable," and treating it that way creates the exact income mismatch pattern the bank-deposit method is built to expose.

Last: selection itself is getting smarter. The IRS has been shifting exam selection toward AI-assisted models that weigh patterns across years — meaning a flag you repeat annually compounds, and a flag you clean up genuinely lowers next year's score. The system is unforgiving of drift but responsive to correction.

What happens if you ignore an audit letter

An ignored audit letter doesn't close your case — the IRS finishes the exam without you and assesses the full proposed amount. The sequence runs in a fixed order, and every stage you skip costs you a right you don't get back:

1. The exam opens — a Letter 566 (correspondence audit) or Letter 2205-A (appointment exam) arrives by mail, naming the tax years and the specific items under review, with a response date printed on it.
2. The response date passes — the examiner proceeds with only the information the IRS already holds. Every deduction you didn't substantiate is disallowed; every unexplained deposit becomes income.
3. The exam report arrives — Letter 525 or Letter 915 shows the proposed changes, the tax, and usually a 20% accuracy-related penalty. You typically have 30 days to protest to the IRS Independent Office of Appeals.
4. The 90-day letter — ignore the report and a CP3219A Notice of Deficiency follows, starting a hard 90-day clock to petition Tax Court. This is your last stop before the amount becomes legally owed.
5. Assessment and collection — the proposed amount posts to your account, a bill arrives, and the standard collection sequence begins: escalating notices, then lien filing and levy authority. For a retiree, that eventually includes the Federal Payment Levy Program's reach into Social Security.

Notice what that sequence really means: the exam is the cheap stage. Every document you produce before assessment removes dollars from the bill; every stage after assessment is about managing a debt that already exists.

See your own return in these red flags — or holding an exam letter already?

Send us the letter, or just describe what's on your return. An experienced tax professional will tell you exactly where you stand and what to do before your printed response date passes — free, confidential, no pressure.

Get My Free Case Review Call (888) 825-7779

Your options if the audit ends in a balance you can't pay

A small business audit balance of $50,000 or less can generally go onto a streamlined installment agreement of up to 72 months — set up online, no financial statement required. And before you get to payment options at all, remember the free one: you can contest the findings. An IRS audit appeal filed within the 30-day window costs nothing and resolves a large share of disputed exams for less than the proposed amount.

Which of those is realistic depends heavily on the size of the bill. Here's how the bands break in 2026:

What a small business audit bill looks like: the math on $48,300

Say you're 68, retired on Social Security, and running a small furniture-restoration business on Schedule C — a genuine business, but one that showed losses two years running while your online-marketplace sales went partly unreported. The exam disallows the losses, adds the unreported deposits, and the report proposes $35,000 in additional tax across two years. Add the 20% accuracy-related penalty ($35,000 × 0.20 = $7,000) and roughly $6,300 of accrued interest, and the bill is $48,300. (You can run your own numbers through our IRS Penalty & Interest Calculator to estimate how a proposed assessment grows.)

What are the realistic moves? First, the appeal: if the "unreported deposits" include a CD you cashed out and redeposited, documentation kills that adjustment entirely before assessment — this is why the 30-day window matters more than any payment plan. Second, if the number stands: $48,300 sits just under the $50,000 streamlined ceiling, so a direct-debit agreement over 72 months runs about $48,300 ÷ 72 ≈ $671 per month — with interest continuing to accrue, so the true payoff is somewhat higher and faster payment always costs less.

Third, the fixed-income reality. If $671 a month is impossible on Social Security plus modest shop income, Currently Not Collectible status can pause collection entirely, and an Offer in Compromise may fit if your assets and future income genuinely can't cover the debt — with low-income certification (AGI at or below 250% of the federal poverty level) waiving both the $205 fee and the 20% down payment. And know the stakes of doing nothing: an unpaid assessment eventually reaches benefits, because the IRS can garnish Social Security at up to 15% through the Federal Payment Levy Program.

How to respond to a small business audit, step by step

1. Confirm the letter is real. A genuine audit opens by postal mail — verify the notice through your IRS online account or by calling the IRS directly, never a number printed on a suspicious letter.
2. Calendar the response date. The date printed on your letter controls everything that follows — missing it lets the IRS finish the exam without you and assess the full proposed amount.
3. Read exactly what is being examined. Audit letters list specific years and specific items; answer what is asked and volunteer nothing beyond it.
4. Gather and reconstruct your records. Bank statements, invoices, mileage apps, calendars, and photos can rebuild documentation the IRS will accept — missing receipts are a solvable problem.
5. Respond in writing by the deadline. Send copies, never originals, with a cover letter matching each document to the item questioned, and keep proof of mailing.
6. Appeal before you sign anything you dispute. The exam report gives you typically 30 days to protest to the IRS Independent Office of Appeals — signing away that right is permanent.

The IRS's own overview of the exam process is at IRS audits for small businesses and the self-employed, and any payment you do make should go only through IRS.gov/payments.

When you can handle an audit yourself — and when help changes the outcome

You can handle a correspondence audit over a single, well-documented issue yourself. If the letter questions one deduction, you have the receipts, and the numbers are small, a clear written response with organized copies resolves most of these without anyone else involved. The same goes for a small resulting balance — anything under about $10,000 with clean prior compliance fits the guaranteed installment agreement, and setup takes minutes online.

Experienced help changes outcomes in specific situations: a field audit at your place of business, a cash-income reconstruction where the examiner's method — not your books — sets the number, multiple years or multiple entities under exam at once, payroll or classification issues where trust-fund liability can reach you personally, and any ERC claim you can't independently defend. Representation also matters when there's something under the surface — unreported income you know about, records that don't say what the return says. That scenario has its own name and its own rules, covered in our eggshell audit guide, and it's the one situation where you should say nothing to an examiner before getting advice.

One structural advantage of representation is simple: your representative talks to the examiner so you don't, and casual answers to casual-sounding questions are how small exams become big ones. If the taxpayer service side of the IRS is failing you — lost responses, ignored mail — the Taxpayer Advocate Service exists precisely for cases stuck in the machinery.

If your return shows more than one of the red flags above — or an exam letter is already on your desk — a free review with an experienced tax professional at (888) 825-7779 or through the 2-minute form will tell you whether this is a handle-it-yourself situation before you spend anything.

Terms on your audit letter, decoded

• DIF score — the computer-generated number that ranks your return's audit potential against statistical norms for similar businesses.
• IDR (Information Document Request) — the examiner's formal list of records to produce, usually on Form 4564, each with its own due date.
• Form 872 — a consent extending the time the IRS has to assess tax; whether to sign one is a strategic decision, not a formality.
• Accuracy-related penalty — the 20% penalty added to most audit assessments for negligence or substantial understatement.
• RAR / exam report — the Revenue Agent Report showing every proposed change; signing it accepts the changes and waives your appeal.
• No-change letter — the best possible ending: the exam closed with your return accepted as filed.

Small business audit red flag questions, answered

Your next 24 hours

1. If a letter has arrived: find the tax year and the response date printed near the top — that date controls everything. If no letter has arrived, pull your last three filed returns and every 1099 behind them, and check your own return against the red-flag table above.
2. Gather the proof: business bank statements, your mileage record, and receipts for your three largest deduction categories. These are the documents that decide almost every small business exam.
3. Get a free case review: use the 2-minute form or call (888) 825-7779. If an exam is open, the printed response date is a real deadline — and if it isn't, penalties and interest on any eventual assessment accrue monthly, so the cheapest moment to fix a flagged return is before anyone asks about it.

This guide is general information, not tax or legal advice for your specific situation. Eligibility for IRS programs depends on individual facts and circumstances; no outcome is guaranteed.

Related: see the broader list of IRS audit triggers for individual returns, or — if a state agency is asking classification questions — our guide to the California EDD audit. You can also browse all guides.