IRS Audit Red Flags for Small Businesses

By Yarik Yarosh, CPA ·September 5, 2026 ·7 min read

Written by Yarik Yarosh, CPA (US & Canada) September 5, 2026 · FL CPA license AC61704 · CPA Ontario

The IRS uses a computer scoring system called the Discriminant Information Function (DIF) to select returns for audit. The DIF score compares each return’s deductions and income to statistical norms for similar returns. A return that deviates significantly from the norm receives a higher DIF score and is more likely to be selected. Beyond the DIF score, certain characteristics are known to trigger closer scrutiny. Understanding these red flags doesn’t mean avoiding legitimate deductions; it means documenting them properly so the deduction survives if questioned.

✓Key takeaway

Common audit triggers for small businesses:

1. High deduction-to-income ratio. If expenses on Schedule C are 80%+ of gross income, the return stands out statistically. Some businesses legitimately have high expense ratios (construction, manufacturing), but service businesses with 80%+ expense ratios are uncommon and draw attention.

2. Repeated Schedule C losses. Reporting a loss 3 or more years out of 5 triggers the hobby loss analysis under IRC 183. The IRS may challenge whether the activity is a business (losses deductible) or a hobby (losses NOT deductible under the TCJA). Document the profit motive: business plan, efforts to improve profitability, reliance on the activity for livelihood.

3. Large vehicle deductions without documentation. The vehicle deduction is the most frequently audited item on Schedule C. The IRS knows that many taxpayers inflate business mileage. A mileage log (contemporaneous, showing date, destination, purpose, and miles for each trip) is the first document requested. Without it, the entire deduction can be denied. Use a digital app (MileIQ, Everlance) that creates a contemporaneous record automatically.

4. Home office deduction. The home office deduction is heavily audited because the exclusive-use test is frequently violated. The simplified method ($5/sq ft, max $1,500) draws less scrutiny than the actual method (which involves calculating percentages of housing costs). Either way, the space must be used exclusively and regularly for business.

5. Cash-intensive businesses. Businesses that receive a significant portion of revenue in cash (restaurants, bars, laundromats, vending, beauty salons) are audited at higher rates because the IRS knows cash income is easier to underreport. The IRS uses indirect methods (bank deposit analysis, markup analysis, net worth method) to reconstruct income.

6. Round numbers. A Schedule C showing expenses of exactly $5,000, $10,000, and $15,000 suggests estimation rather than actual tracking. Real expenses are rarely round numbers. This is a minor flag but contributes to the overall DIF score.

7. Large charitable deductions relative to income. Charitable deductions exceeding 5-10% of AGI draw scrutiny. At higher income levels, the IRS checks for proper substantiation (written acknowledgment for donations over $250, qualified appraisal for non-cash donations over $5,000).

8. Unreported income (1099 mismatch). The IRS matches 1099s to tax returns automatically. If a 1099-NEC is issued to you and the income doesn’t appear on your return, you will receive a CP2000 notice (proposed adjustment). This is not technically an audit, but it results in additional tax, interest, and potentially penalties.

9. Filing a Schedule C with high gross receipts ($1 million+). Higher-revenue Schedule C filers are audited at higher rates simply because the revenue justifies the IRS’s audit cost. The audit rate for Schedule C filers with $1 million+ in gross receipts is approximately 4-5%, compared to 1-2% for lower-revenue filers.

10. Claiming 100% business use of a vehicle. Very few vehicles are used 100% for business. The IRS is skeptical of this claim, especially for vehicles that could be used for personal purposes. If you claim 100% business use, be prepared to show that you have a separate personal vehicle and that the business vehicle is never used for personal trips.

How do you protect yourself from an audit?

Hypothetical example

Round numbers. For current guidance, see IRS audit process overview. A sole proprietor with $150,000 in gross revenue and $90,000 in deductions (60% expense ratio). The owner claims a $14,000 vehicle deduction and a $1,500 home office deduction. Two potential outcomes:

Scenario A: poor documentation.

Vehicle deduction: $14,000 claimed, no mileage log. Owner says “I drive about 20,000 miles for business.”
Home office: $1,500 claimed (simplified). The “office” is a desk in the living room (fails exclusive-use test).
Meals: $3,000 claimed, credit card statements only (no business purpose notes).

IRS audit result:

Vehicle deduction denied entirely (no contemporaneous log): $14,000 disallowed
Home office denied (no exclusive use): $1,500 disallowed
Meals partially denied (no documentation of business purpose): $1,500 disallowed
Total disallowed: $17,000
Additional tax: $17,000 x 39.3% = $6,681
Accuracy-related penalty (20%): $1,336
Interest: approximately $500
Total cost of audit: $8,517

Scenario B: proper documentation.

Vehicle deduction: $14,000 claimed, MileIQ app running continuously, 20,000 business miles logged with dates, destinations, and purposes.
Home office: $1,500 claimed, dedicated spare bedroom with photos showing exclusive business use.
Meals: $3,000 claimed, each receipt annotated with attendees and business purpose, stored in Dext.

IRS audit result:

Vehicle deduction: sustained ($14,000 allowed)
Home office: sustained ($1,500 allowed)
Meals: sustained ($3,000 allowed)
Total cost of audit: $0 additional tax (plus the time and stress of responding, which is real but not a tax cost)

The difference between these two outcomes is documentation, not the deductions themselves. Every deduction claimed is legitimate in both scenarios. The audit outcome depends entirely on whether the owner can prove the deductions with records created at the time (contemporaneous) rather than recreated after the fact.

Illustrative numbers only, not a real client and not advice for your facts.

How far back can the IRS audit my business returns?

The general statute of limitations for an IRS audit is 3 years from the date you filed the return (or the due date, whichever is later). This extends to 6 years if you omit more than 25% of your gross income from the return. There is no statute of limitations for fraud or for returns that were never filed. The IRS can also extend the assessment period if you agree to it (Form 872), which sometimes happens during an ongoing audit. Keeping organized records for at least 7 years covers both the standard and extended windows.

What are the most common IRS audit triggers for small businesses?

Schedule C filers with high gross receipts and significant deductions relative to income are audited at higher rates. Specific triggers include: claiming 100% business use of a vehicle, large home office deductions relative to income, cash-intensive businesses with round-number reporting, significant charitable deductions relative to income, and repeated business losses (hobby loss rule after 3-5 years). Inconsistencies between information returns (1099s, W-2s) and your reported income generate automatic notices. High deduction-to-income ratios compared to industry averages from the IRS’s DIF (Discriminant Information Function) scoring are a primary selection criterion. An audit does not mean you did anything wrong; it means your return was statistically unusual.

Related guides:

How long does the IRS have to audit your tax return?

The standard statute of limitations for an IRS audit is three years from the date you filed your return or the due date, whichever is later, under IRC 6501(a). This extends to six years if you omit more than 25% of gross income from your return, which the IRS interprets broadly to include overstatements of basis in some circumstances after the Supreme Court’s Home Concrete decision. There is no statute of limitations for fraudulent returns or for returns that were never filed, meaning the IRS can audit these at any time. Signing a Form 872 (Consent to Extend the Time to Assess Tax) extends the deadline, and the IRS often requests this near the end of the three-year window to continue an open examination without rushing to closure.

Want this checked against your own situation?

Start with a Diagnostic: a CPA licensed in the US and Canada reads your file and tells you in writing what's wrong and how to fix it, three to four business days after you finish the questions. The report is $250. If you hire us for any work after that, you get the $250 back as a discount on that work. Or send us your return or your letter and get a fixed price, free.

Start a Diagnostic →See prices

Get a fixed price, free

Get the next cross-border guide by email

One or two plain-English guides a week on US-Canada tax. No spam, unsubscribe anytime.

Cite this page

Yarik Yarosh, CPA. "IRS Audit Red Flags for Small Businesses." Blue Cloud CPA, September 5, 2026. https://bluecloudcpa.com/guides/small-business-irs-audit-red-flags

This guide is general information, not tax advice for your specific situation. Which points apply, and how, depends on your facts.