IRS Audit Red Flags: What Actually Raises Your Audit Odds
THE SHORT VERSION
- The IRS publishes no list of red flags. It selects returns by computer screening against statistical norms and through related examinations of other taxpayers.
- Examination coverage is very uneven. For tax year 2021 the IRS examined 0.2 percent of returns reporting $200,000 to $500,000 of total positive income and 6.6 percent of returns reporting $10 million or more.
- Most letters people call an audit are not one. Automated Underreporter cases, math error notices and substitute return cases are three separate programs with their own notice codes.
- The IRS states that it notifies taxpayers of an audit by mail and does not initiate one by telephone, so a first contact by phone or email does not match how examinations begin.
- The published record says an amended return does not affect selection of the original return, and a refund is not necessarily a trigger for an audit.
SOURCES USED
| IRS: IRS audits | Selection methods, notification by mail, the three and six year scope, extensions, and how audits conclude |
| IRS Data Book: Compliance presence | Fiscal year 2025 audit, Automated Underreporter and substitute return volumes, and coverage highlights |
| IRS Data Book Table 3-1, examination coverage | Examination coverage by size of total positive income, the source of the tax year 2021 rate table |
| IRS Data Book Table 3-9, math errors | Math error notice counts and error types for tax year 2024 returns, used for the program comparison |
| IRS Topic 652, notice of underreported income | How the Automated Underreporter match works and why a CP2000 is a proposal rather than a bill |
| IRS: Understanding your CP75 notice | The refundable credit documentation request and the answer on filing while under examination |
| IRS: Audits records request | The published list of records an examiner may request during an examination |
| IRS: What kind of records should I keep | The elements a supporting document has to show, and the four year employment tax record rule |
| IRS: Audit Techniques Guides | The public examiner playbooks by industry and issue that the IRS points taxpayers toward |
| IRS: Deducting business expenses | The ordinary and necessary standard applied to trade or business expenses |
| IRS: Simplified option for home office deduction | Regular and exclusive use, principal place of business, and the merely appropriate and helpful limit |
| IRS: Earning side income, is it a hobby or a business | The nine factors the IRS lists for separating a business from a hobby |
| IRS: Statutes of limitations for assessing, collecting and refunding tax | The general three year assessment period and what expiry of the statutory period means |
| IRS Publication 3498-A, the examination process | The examination process for audits by mail, from first letter through appeal routes |
| IRS Publication 556, examination of returns and appeal rights | Examination procedures, appeal rights within the IRS and before the courts, and refund claims |
| IRS: Taxpayer Bill of Rights | The rights the IRS lists as applying during an examination, including representation and appeal |
The phrase red flag is not IRS language. Search for it and the results are lists assembled by tax software companies, magazines and accounting firms, each one confident about which line items summon an examiner. The IRS itself describes something more mechanical: a screening system that compares a return against statistical norms, and a set of programs that match filed returns against data third parties already sent in.
That distinction matters, because the two things produce completely different mail. A statistical outlier can lead to an examination, which arrives as a letter asking for documents. A mismatch against a Form 1099 leads to a CP2000, which the IRS describes as a proposal rather than a bill or an audit. A calculation problem caught during processing leads to a math error notice. All three get called an audit in conversation, and only one of them is.
This article stays with what the IRS publishes: the stated selection methods, the examination coverage rates in the current Data Book, the notice codes attached to each program, and the sentences on the agency audit page that contradict two of the most repeated claims about triggers. Every figure below comes from an IRS page or Data Book table checked on the date this was published.
What are IRS audit red flags, really?
IRS audit red flags are not an official list. The IRS selects returns through computer screening against statistical norms built from its National Research Program, and through related examinations of partners or investors. What people call a red flag is really a return item that sits far outside those norms.
On its IRS audits page the agency names the selection methods directly. The first is random selection and computer screening, where returns are chosen based solely on a statistical formula that compares a return against norms for similar returns. Those norms are developed from audits of a statistically valid random sample of returns carried out under the National Research Program. The second is related examinations, where a return is selected because it involves issues or transactions with other taxpayers, such as business partners or investors, whose returns were already selected.
Neither method is a list of forbidden deductions. The screening formula is comparative, which is why the popular framing of a red flag is closer to right than it sounds: an amount far outside the range reported by returns with a similar profile is more visible than the same amount inside that range. The difference is that the comparison set is not published, no scoring threshold is public, and no single line item is described anywhere by the IRS as an automatic trigger.
The same page adds a sentence that most listicles skip. Selection for an audit does not always suggest there is a problem. A return can be pulled as part of the random sample that builds the norms in the first place, which is the entire point of the National Research Program.
The IRS publishes its selection methods, its coverage rates and its audit procedures. It does not publish the formula, the weights or any threshold. Any article that gives a specific number as the point where an audit becomes likely is describing an estimate, not a published rule.
How likely is an IRS audit at each income level?
Audit coverage varies sharply by income. For tax year 2021, the most recent year outside the normal assessment window, the IRS examined 0.3 percent of all individual returns, 0.2 percent of returns reporting $200,000 to $500,000 of total positive income, and 6.6 percent of returns reporting $10 million or more.
The IRS reports examination coverage in Table 3-1 of the Data Book, summarized on its compliance presence page. Coverage is stated by size of total positive income, which the table defines as the sum of all positive amounts of income reported on the return, so losses do not reduce it. The figures below come from the tax year 2021 column, because more recent years remain inside the three year assessment window and their percentages will keep rising as open examinations close.
| Total positive income reported | Share of returns examined |
|---|---|
| No total positive income | 1.8 percent |
| $1 under $25,000 | 0.5 percent |
| $25,000 under $50,000 | 0.2 percent |
| $50,000 under $75,000 | 0.2 percent |
| $75,000 under $100,000 | 0.2 percent |
| $100,000 under $200,000 | 0.2 percent |
| $200,000 under $500,000 | 0.2 percent |
| $500,000 under $1,000,000 | 0.6 percent |
| $1,000,000 under $5,000,000 | 0.9 percent |
| $5,000,000 under $10,000,000 | 3.9 percent |
| $10,000,000 or more | 6.6 percent |
| Returns claiming the earned income tax credit | 0.7 percent |
| All individual returns | 0.3 percent |
Two features of that table get lost in the usual coverage. The first is that the curve is not smooth. Coverage sits flat at roughly 0.2 percent across a very wide middle band, from $25,000 all the way to $500,000 of total positive income, and only starts climbing above half a million. The second is that the curve has a left end as well as a right end. Returns reporting no total positive income were examined at 1.8 percent, and returns claiming the earned income tax credit at 0.7 percent, both well above the 0.2 percent rate for a return in the low six figures.
That second point reframes the whole subject. A great deal of writing about audit odds treats income as the sole driver and assumes the risk rises monotonically with it. In the published rates, a return claiming a refundable credit was examined more than three times as often as a return reporting $200,000 to $500,000 of income. Refundable credit examinations are largely conducted by mail through documentation requests, which is a different experience from a field examination, but they count as examinations in the same table.
The absolute volumes give the rates their context. The IRS reports that it closed 497,621 tax return audits in fiscal year 2025, producing $26.8 billion in recommended additional tax. Set against roughly 161 million individual returns filed for a typical recent year, an audit remains an uncommon event across every band in the table, including the highest.
Is a CP2000 notice an IRS audit?
No. A CP2000 comes from the Automated Underreporter function, which matches third party information returns against what a taxpayer filed. The IRS describes it as a proposal to adjust income, payments, credits or deductions, not a bill and not an examination. Math error notices are a third, separate track.
Topic 652 describes the mechanics. An automated system compares information reported by employers, banks, businesses and other payers on Forms W-2, 1098 and 1099 against the income, credits and deductions on the filed return. Where a potential discrepancy appears, a tax examiner reviews it and a CP2000 notice is issued. The IRS states that the CP2000 is not a bill, and that it is a proposal to adjust income, payments, credits or deductions. A CP2501 covers the same ground earlier in the sequence.
Separating the programs is not a technicality, because the volumes are not comparable. The IRS closed 987,460 cases under the Automated Underreporter Program in fiscal year 2025, producing $5.9 billion in additional assessments, and 592,773 cases under the Automated Substitute for Return Program, producing nearly $2.9 billion. Data Book Table 3-9 records 951,789 math error notices issued on tax year 2024 returns. Every one of those figures is larger than the 497,621 audits closed in the same year.
| Program | What it compares | Volume | Typical notice |
|---|---|---|---|
| Examination (audit) | Return items against records the taxpayer supplies | 497,621 audits closed | Letter 566, Letter 525, CP75 |
| Automated Underreporter | Return against third party W-2 and 1099 data | 987,460 cases closed | CP2000, CP2501 |
| Math error processing | Return against arithmetic and statutory limits | 951,789 notices issued | CP11, CP12 |
| Automated Substitute for Return | Third party data against a return never filed | 592,773 cases closed | CP59, CP3219N |
The practical consequence is that the notice code on the letter identifies which program produced it, and the programs do not share deadlines or response routes. A math error correction on a CP12 carries a different response window from a CP2000, and both differ from a documentation request in an examination. Topic 652 states that where the IRS does not hear back by the response date on a CP2000, it sends a Statutory Notice of Deficiency, which is the CP3219A.
The Tax Panic app reads a photo of an IRS notice and returns a plain English explanation of the code, the urgency level, and the printed deadline. It is free to start on Google Play at play.google.com/store/apps/details?id=com.taxpanic.app. It explains the letter in general terms and does not decide what any reader owes or should do.
Which return items draw the most IRS scrutiny?
The items that draw scrutiny are the ones a third party already reported to the IRS, or the ones that depend on a factual test rather than arithmetic. Wage and contractor income, credit eligibility, business losses, and home office use all fall into one of those two categories.
The compliance presence page explains the first category in one sentence: the IRS gathers independent information about income received and taxes withheld from information returns such as Forms W-2 and 1099 filed by employers and other third parties, and uses that information to verify self reported income. Anything already sitting in that pile can be compared automatically, at scale, without anyone opening an examination.
The second category behaves differently. No third party reports whether a spare room was used regularly and exclusively for business, or whether an activity was carried on for profit. Those are factual questions, and a factual question can only be resolved by looking at records, which is what an examination does.
| Return item | What the IRS already holds | What the records have to establish |
|---|---|---|
| Wages and contractor income | Forms W-2 and 1099 filed by payers | That reported income matches the payer statements |
| Brokerage proceeds | Forms 1099-B filed by brokers | Cost basis behind the reported gain or loss |
| Business expenses | Nothing, the deduction is self reported | Payee, amount, date paid and the business purpose |
| Home office | Nothing, the standard is factual | Regular and exclusive use of the space for business |
| An activity reporting losses year after year | Nothing, the profit motive test applies | Businesslike operation and intent to make a profit |
| Refundable credits | Dependent and residency data across filed returns | The documents itemized on a CP75 notice |
On business expenses the IRS standard is stated on its deducting business expenses page: an expense has to be both ordinary and necessary for the trade or business. On the home office the simplified option page sets out the regular and exclusive use requirement and the principal place of business requirement, and notes that use which is merely appropriate and helpful does not meet the standard.
For an activity that reports losses repeatedly, the IRS has published a nine factor framework for separating a business from a hobby. Its guidance on side income and the hobby question lists them: whether the activity is carried out in a businesslike manner with complete and accurate books, whether time and effort show an intent to make it profitable, whether the taxpayer depends on the income for a livelihood, whether losses are beyond the taxpayer control or normal for a startup phase, whether methods of operation change to improve profitability, whether the taxpayer and advisors have the knowledge to run it successfully, whether similar activities were profitable in the past, whether the activity makes a profit in some years and how much, and whether future profit can be expected from appreciation of the assets used.
Examiners also work from published playbooks. The IRS notes that examiners may use its Audit Techniques Guides depending on the issues involved, and states plainly that these guides will give a taxpayer an idea of what to expect. They are organized by industry and by issue and are open to anyone.
Does the IRS start an audit by phone or email?
The IRS states plainly that it notifies taxpayers of an audit by mail and does not initiate one by telephone. A first contact that arrives as a phone call, a text message, an email or a social media message is therefore inconsistent with how a real examination begins.
The wording on the IRS audits page is short and unambiguous. Should an account be selected for audit, the IRS notifies the taxpayer by mail, and it does not initiate an audit by telephone. Contact information and instructions arrive in that letter. The same page notes that if the audit letter carries the telephone number 866-897-0177 or 866-897-0161, the status of the audit can be checked in an individual online account under the Records and Status tab, including the date the audit started, when letters were issued and when the next response is due.
That single fact resolves a large share of the anxiety around this topic, because it means the first question about any alarming contact is not what triggered it but whether it arrived in the mail at all. It also does not mean every mailed letter is an audit, which is where the notice code matters. A Letter 566 or a CP75 opens an examination by mail. A CP05 says a return is under review before a refund is released. The envelopes look similar and the programs are not.
Where an examination is opened, the IRS conducts it either by mail or through an in person interview, and the interview may be at an IRS office, which the agency calls an office audit, or at the taxpayer home, place of business or representative office, which it calls a field audit. Where the audit is conducted by mail, the letter requests additional information about specific items such as income, expenses and itemized deductions. The IRS also states that where there are too many books or records to mail, a face to face audit can be requested instead.
How far back can the IRS audit a return?
Generally the IRS includes returns filed within the last three years in an audit. If it identifies a substantial error it may add years, and it states that it usually does not go back more than six. Most examinations cover returns filed within the last two years.
The IRS audits page sets out the general shape. Returns filed within the last three years are the usual scope. A substantial error can add additional years, with the agency stating that it usually does not go back more than the last six. It also notes that it tries to audit returns as soon as possible after filing, so most audits cover returns filed within the last two years.
Underneath that sits the assessment statute itself, described on the IRS page covering statutes of limitations for assessing, collecting and refunding tax. A statute of limitation is the period established by law during which the IRS can review, analyze and resolve a tax issue, and once it expires the agency can no longer assess or collect additional tax or allow a refund claim. The general assessment period runs three years after a return is due or was filed, whichever is later.
Where an examination is still open as that date approaches, the IRS may ask for a written agreement to extend the assessment period. The agency describes the trade in both directions: extending gives a taxpayer more time to provide documentation, to request an appeal, or to claim a refund or credit, and it gives the IRS time to complete the audit. It also states that a taxpayer does not have to agree to extend, and that where there is no agreement the auditor will be forced to make a determination based on the information already provided. Publication 1035 covers the mechanics.
One timing rule sits outside all of this. Where an examination produces a Notice of Deficiency delivered by certified mail, the IRS states that it cannot grant additional time to submit supporting documentation, and it cannot extend the ninety day period for filing a petition in the United States Tax Court. That window is statutory, which is the same distinction drawn in the guide to what happens if an IRS letter goes unanswered.
What records does the IRS ask for in an audit?
The IRS sends a written request naming the specific documents it wants to see, and it publishes a general list of the records an examiner may ask for. The law requires taxpayers to keep the records used to prepare a return for at least three years from the filing date.
There is no guesswork about the format. The IRS states that it provides a written request for the specific documents it wants, and it maintains a public list of records an examiner may request. It also accepts some electronic records in place of or in addition to other types, with the auditor deciding what can be accepted in a given case.
The recordkeeping standard behind that request is set out on the IRS page on what kind of records to keep. Supporting documents for expenses have to identify the payee, the amount paid, proof of payment and the date incurred, and include a description of the item purchased or service received showing that the amount was a business expense. The page notes that a combination of documents may be needed to substantiate every element of a single expense, which is why a credit card statement on its own is rarely the whole answer. Employment tax records are held to a longer standard, with all records of employment kept for at least four years.
Deadlines inside a mail examination have a published relief valve. Where an audit is conducted by mail, a written request for more time can be faxed to the number on the letter, or mailed to the address on it, and the IRS states that it can ordinarily grant a one time automatic thirty day extension. Where an audit is being conducted in person, the extension request goes to the auditor assigned to the case, and to that auditor manager if necessary.
The consequence of silence is also published rather than speculative. The IRS states that where it does not hear back by the date shown on the letter or notice, it will complete the audit and send an audit report with its proposed changes to the return. The examination does not pause because nobody replied.
How does an IRS audit end?
An audit closes in one of three ways. No change means every item under review was substantiated. Agreed means the IRS proposed changes and the taxpayer accepts them. Disagreed means the changes are understood but contested, which opens a manager conference, mediation, or an appeal within the remaining statute.
Those three outcomes are the IRS own vocabulary, taken from the section of its audits page on how an audit is concluded. A no change audit is one where all of the items being reviewed were substantiated. An agreed audit is one where the IRS proposed changes and the taxpayer understands and agrees with them, and is then asked to sign the examination report or a similar form depending on the type of audit conducted.
A disagreed audit is one where the changes are understood but not accepted. The IRS lists three routes from there: a conference with an IRS manager, mediation through alternative dispute resolution, and an appeal filed where enough time remains on the statute of limitations. That last condition is the reason the statute extension question earlier in the examination is not merely procedural. Two publications describe the process end to end, Publication 3498-A on the examination process and Publication 556 on examination of returns, appeal rights and claims for refund.
Rights during the process are published as well. Publication 1 and the Taxpayer Bill of Rights cover professional and courteous treatment, privacy and confidentiality, an explanation of why information is being requested and how it will be used, representation by oneself or an authorized representative, and appeal of disagreements both within the IRS and before the courts.
Where an audit produces an assessment, the outcome joins the ordinary collection sequence, starting with a CP14 balance due notice. Penalty relief is a separate question decided on its own record, which is the subject of the guide to reasonable cause penalty abatement.
Which audit trigger myths does the IRS contradict directly?
Two beliefs come up constantly and both are addressed directly on the IRS audits page. Filing an amended return does not affect the selection process for the original return, and a refund is not necessarily a trigger for an audit. Selection also does not always suggest a problem exists.
Most claims about audit triggers are unfalsifiable, because the selection formula is not public. A small number are different, because the IRS has written the opposite in plain language on a page it maintains. Those are worth separating out.
| Common claim | What the IRS states |
|---|---|
| Amending a return invites an audit of the original | Filing an amended return does not affect the selection process of the original return, though the amended return goes through screening of its own |
| A large refund triggers an audit | A refund is not necessarily a trigger for an audit |
| Selection means the IRS found something wrong | Selection for an audit does not always suggest there is a problem |
| The IRS calls or emails first | The IRS notifies by mail and does not initiate an audit by telephone |
| Every audit means a face to face meeting | Audits are conducted either by mail or through an in person interview |
| An audit always means more tax | One of the three published outcomes is no change, where all items reviewed were substantiated |
The amended return point deserves the caveat the IRS attaches to it. The original return selection process is unaffected, and the amended return itself does go through a screening process and may be selected. Those two statements sit in the same paragraph and are usually quoted apart from each other.
The refund point is narrower than it looks as well. The word is necessarily, not never. Refundable credit claims are examined at rates above the middle income bands, as the coverage table above shows, so a refund driven by a credit with eligibility rules behaves differently from a refund driven by overwithholding. The published rate for returns claiming the earned income tax credit was 0.7 percent for tax year 2021.
Frequently asked
Does claiming a home office deduction guarantee an audit?▾
The IRS publishes no line item that guarantees an audit, and the home office deduction is not named as a trigger anywhere in its guidance. What is published is the standard the deduction has to meet: regular and exclusive use of the space for business, and either a principal place of business or substantial and regular business use of the home. Use that is merely appropriate and helpful does not qualify.
How long does an IRS audit take?▾
The IRS does not publish an average. It states that the length varies with the type of audit, the complexity of the issues, how quickly requested information becomes available, scheduling availability on both sides, and whether the findings are agreed or disagreed. A mail examination on a single documentation question and a field examination of a business are not comparable.
Can a tax return be filed while an audit is open?▾
Yes. On its CP75 page the IRS answers this directly and states that required returns should continue to be filed before the due date to avoid additional penalties and interest. An open examination of one year does not suspend the filing obligation for another year.
Are cash businesses audited more often than others?▾
The IRS does not publish coverage rates by industry or by payment method. What it does publish is the Audit Techniques Guides, several of which address cash intensive industries and describe the indirect methods an examiner may use where records are incomplete. Those guides are public and describe the approach rather than the selection odds.
Does the IRS audit rate change from year to year?▾
Yes, and the published figures move for two separate reasons. Coverage rates for recent tax years rise over time as open examinations close within the assessment window, which is why the Data Book shades those years. Separately, the IRS notes that the past decade brought more returns filed alongside fewer examination resources.
What does no change mean at the end of an audit?▾
No change is one of the three published ways an audit concludes. The IRS defines it as an audit in which all of the items being reviewed were substantiated, resulting in no changes to the return. It is a normal outcome rather than an unusual one, and it is the reason an examination letter is not itself a determination of additional tax.
Sources
- IRS: IRS audits
- IRS Data Book: Compliance presence
- IRS Data Book Table 3-1, examination coverage
- IRS Data Book Table 3-9, math errors
- IRS Topic 652, notice of underreported income
- IRS: Understanding your CP75 notice
- IRS: Audits records request
- IRS: What kind of records should I keep
- IRS: Audit Techniques Guides
- IRS: Deducting business expenses
- IRS: Simplified option for home office deduction
- IRS: Earning side income, is it a hobby or a business
- IRS: Statutes of limitations for assessing, collecting and refunding tax
- IRS Publication 3498-A, the examination process
- IRS Publication 556, examination of returns and appeal rights
- IRS: Taxpayer Bill of Rights
Related notice guides
Got a letter in front of you?
Snap a photo and Tax Panic explains what that type of notice commonly means, in plain English. First scan is free, and no account is needed.
📷 Scan your notice