Most audits start with a mismatch, not suspicion: your return says one thing, and a W-2, 1099, or bank record says another. Add unusually large deductions, a Schedule C with thin documentation, six-figure income, or unreported crypto activity, and your odds climb further. The single best move you can make right now is to pull every third-party form you received this year and check it line by line against what you’re about to file.
TL;DR:
- Income mismatches between third-party forms and your return are the leading trigger, especially if unreported or missing 1099s and W-2s are involved.
- Large or unusual deductions relative to your income, especially on Schedule C or for charitable and home office claims, attract closer IRS scrutiny.
- Maintaining organized, reconciled records throughout the year significantly reduces audit risk, particularly for small businesses and Schedule C filers.
- Cash-heavy businesses and digital asset transactions are increasingly targeted, requiring thorough documentation and timely reconciliation.
- Early and accurate response to audit notices, coupled with professional representation if needed, helps resolve issues quickly and minimizes penalties.
Table of Contents
- What Are the Most Common IRS Audit Triggers?
- Why Income Mismatches Are the Number One Red Flag
- Which Deductions and Credits Draw the Most Scrutiny?
- Why Schedule C Filers Face Higher Audit Risk
- Do Large Cash Deposits Raise a Red Flag With the IRS?
- How Do Crypto and Foreign Accounts Trigger Audits?
- What Simple Filing Mistakes Still Trigger IRS Scrutiny?
- How Does the IRS Decide Which Returns to Audit?
- What Happens After You Get Selected for Audit?
- How Can Small Business Owners Reduce Audit Risk?
- What Should You Do the Moment You Get an Audit Letter?
- Why Clean Books Are the Real Audit Defense
- Get Ahead of Audit Risk With Monthly Bookkeeping and IRS Representation
- Sources
- FAQ
What Are the Most Common IRS Audit Triggers?
Before the IRS ever looks at your return by hand, its computers have already flagged it or let it pass. The IRM’s case selection procedures score every return for audit potential, and certain patterns push that score up reliably, year after year. Here’s the checklist worth running against your own return before you hit submit.
- Income that doesn’t match third-party forms. A W-2, 1099-NEC, or 1099-K the IRS received but you didn’t report is the fastest way to draw a correspondence audit.
- Round numbers and obvious math errors. Software catches most of these, but paper filers and rushed e-filers still slip up.
- Deductions that are large relative to income. A $40,000 charitable deduction on $90,000 of income looks different than the same deduction on $600,000.
- Schedule C losses, especially recurring ones. Several years of business losses next to a full-time job or other income reads as a hobby, not a business.
- The Earned Income Tax Credit. EITC claims get extra scrutiny because the credit is refundable and eligibility rules are complicated.
- Home office deductions that seem outsized for the space or income involved.
- High total income. More income generally means more complexity, and more complexity means more chances for something to look off.
- Unreported digital asset transactions or foreign accounts.
- 100% business use of a vehicle, which is technically possible but rarely accurate.
- Cash-heavy businesses where reported income looks low against the deposits flowing through the business bank account.
Simple mismatches and math errors usually route to a correspondence audit, the mail-only kind that asks you to clarify one item. Larger, messier issues, like unsubstantiated Schedule C deductions or six-figure discrepancies, are more likely to escalate to an office or field audit, where an agent reviews your records in person.
Why Income Mismatches Are the Number One Red Flag
The IRS’s matching program is unglamorous but relentless. Every W-2, 1099-NEC, 1099-MISC, 1099-K, 1099-INT, and 1099-DIV your payers file gets compared against your return by computer, months after you file. When something you reported doesn’t show up on the IRS side, or something the IRS has on file never shows up on your return, the system flags it automatically. According to Investopedia’s guide to audit response, a mismatch between what third parties reported and what you filed is the single most common reason a return gets a second look.
This catches people in ways they don’t expect. Freelancers who worked for five clients but only remember to report the three who sent 1099s. Retirees who forgot a small 1099-INT from a savings account they rarely check. Gig workers whose 1099-K from a payment app includes personal reimbursements mixed in with actual income, creating a number that looks too high on paper.
Before you file, do this reconciliation:
- List every payer who might issue you a 1099, W-2, or 1099-K, including apps like Venmo or PayPal if you used them for business.
- Match each form’s total against what’s on your draft return, not what you remember earning.
- Check for 1099s that never arrived. Payers sometimes fail to send them, but the IRS still gets its copy.
- Confirm your name, Social Security number, and filing status are identical across every form.
If you catch a discrepancy after filing, an amended return (Form 1040X) is usually the right fix, and filing one proactively when you spot your own error tends to look far better than waiting for the IRS to find it first. Selection algorithms don’t punish honest corrections; they flag silence.
Pro Tip: Keep a running folder, digital or physical, where every 1099 and W-2 lands the moment it arrives in January. Chasing down a missing form in March under deadline pressure is how good filers make careless mistakes.
Which Deductions and Credits Draw the Most Scrutiny?
Big deductions aren’t inherently risky. Undocumented big deductions are. The IRS built its Discriminant Function scoring system specifically to compare each return against statistical norms for similar income levels, and a deduction that’s disproportionate to your income is exactly what that system is designed to catch.
Charitable contributions are a frequent flag when they jump sharply from prior years or run high relative to reported income. The fix is simple: keep the receipt or acknowledgment letter for every gift over $250, and for non-cash donations over $500, file Form 8283 with a reasonable valuation.
Home office deductions get scrutinized because the IRS knows most people who claim them don’t actually meet the exclusive-use test. If your “office” doubles as a guest room, that deduction is vulnerable. If it’s a dedicated space used only for work, document it with a photo and a floor plan calculation, and keep it on file.

The EITC deserves its own mention. Refundable credits attract more review because the government pays out money rather than just reducing what’s owed, and oversight reviews have repeatedly flagged EITC error rates as a persistent compliance concern.
Vehicle deductions and large casualty or business losses round out the list.
- Keep a contemporaneous mileage log, not a reconstructed one built the week you file.
- Save donation receipts and appraisals the year you make the gift, not the year you get a letter.
- Photograph and measure any home office space you claim.
- If a deduction looks unusually large for your income bracket, write a short note to yourself explaining why, and keep the backup that supports it.
None of this means shrinking a legitimate deduction out of fear. It means making sure every number you claim has a paper trail sitting behind it, ready if anyone asks.
Why Schedule C Filers Face Higher Audit Risk
Self-employment income draws more attention than W-2 wages for a structural reason: nobody else is reporting your expenses to the IRS, which means the system leans harder on the return itself to catch problems. If you file a Schedule C, you’re already in a higher-scrutiny category before the IRS looks at a single number.
The recurring issues are predictable. Business expenses that look like personal spending, meals, travel, or a home internet bill claimed at 100% business use. Multiple consecutive years of losses, which can trigger a hobby-loss inquiry under the IRS’s nine-factor test for whether an activity is really run for profit. And expense categories that don’t match the stated business type, like a dog-grooming business claiming heavy travel costs with no clear business reason.
The fix isn’t complicated, just consistent:
- Run all business income and expenses through a dedicated business bank account and card, never blended with personal spending.
- Categorize expenses the same way every month so a reviewer can follow the logic without asking you to explain it.
- Keep a short written explanation for any expense that isn’t obviously business related, tying it back to what the business does.
- Reconcile your books monthly instead of reconstructing a year of transactions in April.
If you have people helping in the business, get the worker classification right early. Treating someone who works set hours, uses your equipment, and takes direction only from you as an independent contractor when the relationship looks more like employment is one of the more expensive Schedule C mistakes to unwind later, since it can trigger payroll tax assessments on top of an income tax review.
Do Large Cash Deposits Raise a Red Flag With the IRS?
Cash-heavy businesses, think laundromats, salons, and pet grooming shops, sit under more scrutiny by default, because the IRS knows cash income is easier to underreport than income that flows through a card processor. That doesn’t mean cash businesses get targeted unfairly. It means the burden of proof sits more heavily on you to show the numbers are accurate.
The typical trigger isn’t one big red flag; it’s a pattern of gaps. Reported income that’s consistently lower than what a comparable business in your area brings in. Bank deposits that don’t reconcile with reported sales. A 1099-K from a card processor showing revenue that’s higher than what appears on the tax return, because personal transfers got mixed in with business deposits.
- Deposit business cash regularly and note the source on the deposit slip or in your books.
- Reconcile your 1099-K totals against your bookkeeping every month, not once a year at tax time.
- Keep register tapes, invoices, or point-of-sale reports that back up your reported daily totals.
- Never route personal money through the business account “just this once.”
Pro Tip: If your business handles a lot of cash, a same-day deposit habit does more for your audit defense than any receipt ever will. Gaps between when cash comes in and when it hits the bank are exactly what a reviewer looks for.
How Do Crypto and Foreign Accounts Trigger Audits?
Digital assets and foreign holdings are two of the fastest-growing audit triggers, mostly because reporting requirements have tightened while a lot of taxpayers still treat them as invisible to the IRS. Every tax return now asks a direct yes-or-no question about digital asset activity, and exchanges increasingly issue their own information returns, meaning the same matching system that catches a missing W-2 is starting to catch unreported crypto sales too.
Selling, trading, or spending cryptocurrency creates a taxable event, and gains need to be reported the same way a stock sale would be. Answering “no” to the digital asset question on your return while an exchange has already reported your activity is a mismatch the system will find eventually.
Foreign accounts carry their own separate reporting layer. If you have a foreign bank or financial account with an aggregate value over $10,000 at any point in the year, you generally need to file an FBAR (FinCEN Form 114). Form 8938 has its own, higher thresholds depending on filing status and residency, and it’s filed with your return, not separately. Failing to file either can carry steep penalties even when no tax was actually owed.

If you’ve missed reporting in a prior year, filing an amended return or looking into the IRS’s voluntary disclosure options is almost always a better path than waiting to be found. Selection systems reward the correction; they don’t forgive the silence.
What Simple Filing Mistakes Still Trigger IRS Scrutiny?
- Check your math twice, even with software. E-filing catches arithmetic errors, but data-entry mistakes, like transposing a Social Security number, still slip through.
- Confirm your filing status matches your actual situation. Claiming head of household without meeting the requirements is a common, avoidable flag.
- Verify every Social Security number on the return, including dependents, against the actual card.
- Make sure your name matches Social Security Administration records exactly, especially after a marriage or divorce.
- Don’t round every number to the nearest hundred or thousand. A return full of suspiciously clean figures reads as estimated rather than calculated.
Even a small mismatch, like a dependent’s Social Security number that doesn’t match IRS records, can trip an automated flag and generate a notice. It’s rarely a full audit on its own, but it adds friction and delay you can avoid with a five-minute review before you file.
How Does the IRS Decide Which Returns to Audit?
Selection isn’t random guesswork, and it isn’t a human agent reading returns for a bad feeling. The IRS’s own explanation of the audit process describes several parallel selection methods running at once: computer scoring through the Discriminant Function (DIF) and Unreported Income DIF systems, information matching against third-party forms, related examinations when your return connects to another taxpayer already under audit, and local compliance projects targeting specific issues or industries in a given year.
DIF scoring works by comparing each return against IRS research on what a “normal” return looks like for a given income level and filing type. Returns with the highest scores get manually reviewed by an experienced classifier before an audit is actually opened. Score cutoffs shift from year to year based on IRS resources and priorities, which is part of why the same deduction might raise no concern one year and get flagged the next.
Federal oversight has pushed the IRS to document and monitor its selection processes more carefully, including new machine-learning techniques folded into case selection, precisely because a data-driven system still needs human accountability behind it.
That oversight isn’t hypothetical. GAO’s review of IRS audit selection recommended clearer documentation of how returns are chosen, and more recent oversight reporting on AI in case selection flagged the need for stronger governance as machine-learning tools take on a bigger role. None of this means the system is arbitrary. It means the rules behind it keep evolving, and last year’s safe return isn’t a guarantee for this year’s.
- DIF and UIDIF scoring flag statistical outliers automatically.
- Information matching catches mismatches between your return and third-party forms.
- Related examinations pull in returns connected to a business partner, employer, or transaction already under review.
- Local projects target specific industries or issues based on current IRS priorities.
What Happens After You Get Selected for Audit?
- Correspondence audits handle the majority of cases and arrive entirely by mail, usually asking you to document one or two specific items, like a charitable deduction or a dependent claim.
- Office audits require an in-person meeting at an IRS office, typically for more complex individual issues that a letter can’t resolve.
- Field audits send a revenue agent to your home or business, reserved for the most complex returns, usually involving a business with multiple issues.
The statute of limitations generally limits the IRS to opening an audit within a few years from your filing date, with longer periods possible if there is significant underreporting or fraud. Publication 3498 walks through these timelines in detail, along with your right to refuse a consent extension in most circumstances.
Audits close one of three ways: no change, meaning your return stands as filed; agreed, meaning you accept the proposed adjustment and pay any additional tax; or disagreed, which opens the door to an appeal within the IRS’s independent Appeals office, and from there, Tax Court if the disagreement isn’t resolved. Being selected doesn’t mean you owe money. Some returns close with no change at all, and a small number are chosen at random purely for research purposes that help the IRS calibrate its own selection models.
How Can Small Business Owners Reduce Audit Risk?
Prevention comes down to habits, not luck. The IRS can’t flag what your records already explain clearly.
Keep supporting documents for at least three years from your filing date, and stretch that to six years if you have any unreported income concern, or longer for records tied to property or asset basis. Bank statements, receipts, mileage logs, and 1099s all belong in that file, ideally scanned and stored somewhere searchable rather than in a shoebox.
- Report every income source, even the small ones that feel too minor to matter.
- Choose deductions you can document, not just deductions you’re technically entitled to claim.
- Reconcile your books monthly instead of once a year under deadline pressure.
- Separate business and personal accounts completely, with no exceptions.
- Review your return against last year’s before filing to catch anything that looks unusually different.
Reconciling monthly, rather than scrambling every April, is where most audit-proofing actually happens. A business tax preparation checklist run each quarter catches mismatches while they’re still easy to fix, not after the return is already filed.
Pro Tip: If your books are more than a few months behind, get them current before you file rather than after. A return built on clean, reconciled books is dramatically easier to defend than one reconstructed from memory.
Working with a CPA or a monthly bookkeeping service earns its cost here. Consistent categorization in a platform like Xero, tied to monthly reconciliations, means every deduction on your return already has a clean trail behind it before an agent ever asks a question.
What Should You Do the Moment You Get an Audit Letter?
- Read the entire letter before reacting. Confirm the tax year in question, the specific items being questioned, and the response deadline, which is usually 30 days.
- Verify the letter is legitimate. The IRS always makes initial contact by mail, never by phone, text, or email, so an unexpected call claiming to be the IRS is almost certainly a scam.
- Gather the specific documents requested, not your entire filing history, organized by the exact issue the letter names.
- Respond before the deadline, and send anything by mail using a method that gives you delivery confirmation.
- Decide whether you need representation. For anything beyond a simple correspondence audit, signing IRS Form 2848 lets a CPA, enrolled agent, or tax attorney communicate with the IRS directly on your behalf.
Representation matters most when the audit touches Schedule C income, involves multiple tax years, or the proposed adjustment is large enough to change your financial picture. A qualified preparer knows how to organize a response that answers exactly what was asked, without volunteering information that opens a broader inquiry, and can negotiate directly with the examiner on your behalf. If the letter mentions a target letter or criminal referral, get legal counsel immediately rather than trying to handle it alone.
Why Clean Books Are the Real Audit Defense
Every trigger in this article traces back to the same root cause: a gap between what your return says and what your records can prove. That’s not a coincidence. It’s how the entire selection system is built, from DIF scoring to information matching to the classifier who reviews a flagged return by hand.
Most small business owners we work with don’t get audited because they cheated. They get flagged because their books were reconstructed at tax time instead of maintained all year, which leaves gaps that look worse than they actually are. Monthly reconciliation closes those gaps before they exist. When every transaction is categorized the month it happens, a home office deduction or a Schedule C loss already has its explanation sitting right there in the ledger.
A secure client portal matters more than people expect here too. When a document request comes in, being able to pull three years of organized records in an afternoon, rather than digging through drawers, changes the entire tone of a response. Start with a tax appointment checklist before you ever get a letter, not after.
— Tolliver Team
Get Ahead of Audit Risk With Monthly Bookkeeping and IRS Representation
If your records are scattered across spreadsheets, shoeboxes, and three different bank accounts, no amount of tax software will catch the mismatches that draw IRS attention. Some bookkeeping and tax preparation firms keep bookkeeping and tax preparation under one roof for small and medium-sized businesses, helping ensure the numbers on your return match the records behind them.

A bookkeeping cleanup fixes miscoded expenses and reconciles accounts before they ever reach a return, which is exactly where most Schedule C red flags start. Ongoing monthly bookkeeping through Xero, set up and migrated at no cost, keeps that clean going forward instead of resetting to messy every January. And if you’ve already received a letter, IRS representation means Tolliver Bookkeeping and Tax communicates with the examiner directly, organizes your documentation, and negotiates the resolution instead of you facing it alone. Book a consultation to find out which of these fits where you are right now.
This article is general information, not a substitute for advice from a qualified financial advisor. Consult a qualified financial professional about your own circumstances before acting on anything here.
Sources
- IRM 4.1.27 Document Matching, Analysis & Case Selection
- GAO report on IRS audit selection (GAO-16-103)
- Facing an IRS audit? Here’s your immediate action plan — Investopedia
FAQ
What Is Most Likely to Trigger an IRS Audit?
Mismatches between your return and third-party forms like W-2s, 1099s, and 1099-Ks are the most common trigger, followed by unusually large deductions relative to income and recurring Schedule C losses.
How Likely Is It to Get Audited by the IRS?
Audit rates vary significantly by income level and return type, with high earners, cash-heavy businesses, and Schedule C filers facing meaningfully higher scrutiny than a typical W-2 employee with standard deductions.
How Can I Keep the IRS From Delaying or Adjusting My Refund?
Report every income source that matches third-party forms exactly, double-check Social Security numbers and filing status, and file electronically, since e-filing catches many of the math and data-entry errors that cause processing delays.
How Can I Tell if the IRS Is Auditing Me?
The IRS always initiates contact by mail, never by phone or email, so a formal letter naming a specific tax year and requesting documentation is the real signal, not an unexpected phone call.