What Triggers an IRS Audit? 30+ Red Flags, Data Mismatches, and How to Lower Your Risk

Last updated 09/16/2025 by

Edited by

Summary:

Quick answer: The IRS most often initiates audits due to data mismatches (e.g., W-2/1099 reporting), unusually high deductions relative to income, cash-intensive activity, unreported crypto/foreign assets, or patterns that fall outside peer norms. Many audits are handled by mail and can be resolved by providing documentation. If a balance is ultimately assessed, you’ll receive balance-due notices (e.g., CP14), followed by collection notices if unpaid (CP501, CP503, CP504).

Concerned about an IRS audit? Start by understanding why returns get flagged. The IRS uses information-matching, statistical scoring, and issue campaigns to identify returns with higher audit potential. Good recordkeeping and timely, accurate responses to IRS letters can significantly reduce stress and costs.

Read this first

If you’re totally new to the topic, begin with our primer: What Is an IRS Audit?

Top reasons the IRS audits tax returns

Information mismatches: Reported income on your return doesn’t match third-party forms (W-2, 1099-NEC/INT/DIV/B, 1099-K, 1098, brokerage statements).
Unusual deductions vs. income: Charitable gifts, business expenses, home office, or Schedule A items far above peer averages for your income bracket.
Cash-intensive activity: Restaurants, salons, convenience stores, contracting, and tip-heavy industries tend to draw closer scrutiny.
Self-employment patterns: Large losses (especially repeated), high travel/meals, vehicle expenses without mileage logs.
Crypto and stock trading: Unreported gains, missing 1099-B data, or large wash-sale claims.
Foreign assets: Missing FBAR/FATCA filings, unreported foreign interest/dividends (FBAR & FATCA rules).
Credits with documentation requirements: EITC/ACTC/AOTC claims without adequate support can trigger correspondence audits.
Identity and filing anomalies: Identity theft or dependent SSN conflicts can lead to IRS identity verification notices like CP01 or CP01H.

Types of IRS audits & how they’re triggered

Correspondence audit (by mail): Small, targeted issues (e.g., proof for deductions or income). Often triggered by data mismatches or document requests.
Office audit: In-person meeting at an IRS office covering specific schedules or issues (e.g., Schedule C expenses).
Field audit: On-site review (home or business). Typically for complex cases or when multiple years/schedules are involved.

Common IRS notices you may see around audits

Not every notice means you’re under audit. Some correct math or credit issues (CP12, CP11), some demand payment (CP14), and others escalate collection if a balance remains (CP501, CP503, CP504, CP504B). Identity-related letters like CP01 can accompany audit confusion if a return was compromised.

Audit red flags by taxpayer profile

W-2 earners: Large Schedule A deductions vs. income; high charitable gifts without appraisals; unreported 1099-INT/DIV/B.
Freelancers/contractors (Schedule C): Underreported 1099-NEC/K, cash sales, missing mileage logs, unusually high meals/travel/home office.
Investors/traders: Basis reporting gaps, crypto exchange transfers not reconciled, wash sales and futures/options reporting complexity.
Small businesses (Schedule C/E/F or S-Corp/Partnership): Inadequate payroll/1099 procedures, inventory issues, mixed personal/business expenses.
Claiming refundable credits: EITC/ACTC/AOTC documentation not retained or inconsistent dependents.
Foreign accounts: Missing FBAR, FATCA Form 8938, or foreign income reporting.

How to respond if the IRS flags something

Read the notice carefully. Identify exactly what the IRS is asking for and the deadline (most deadlines are 30–60 days from the notice date).
Gather records that directly support the item questioned (receipts, statements, mileage logs, invoices, canceled checks, engagement letters).
Reply in writing (and online where available). Keep copies and use trackable mail.
If a balance is assessed, watch for CP14 (balance due) and follow-up collection notices like CP501, CP503, and CP504.
If you can’t pay in full, explore an Installment Agreement or, when appropriate, an Offer in Compromise.

Audit types, typical notice flow & timelines

Audit Type	Typical IRS Communication	What It Usually Means	Common Next Steps	Typical Timeline
Correspondence (mail)	Issue-specific letter; later CP11/CP12 for math/credit changes or CP14 for balance due	IRS requests proof or corrects return	Send documents, agree/disagree in writing; consider appeal if needed	30–60 days to reply; resolution in weeks to a few months
Office audit	Appointment letter; potential balance due leads to CP14 then CP501/CP503/CP504	Bring records to IRS office; focused schedules	Prepare organized binders; representation recommended	1–6 months depending on scope
Field audit	Revenue agent contact; if assessed and unpaid, escalates to collection (up to levy-intent notices)	On-site review of books, procedures, multiple years possible	CPA/EA/attorney representation; consider Appeals if disagreements persist	Several months to a year+
Post-audit collection	CP14 → CP501 → CP503 → CP504 / CP504B; monthly CP521 during payment plans	Balance owed; escalating collection if unpaid	Set up Installment Agreement, appeal, or evaluate Offer in Compromise	Varies; act within each notice deadline

How to lower your audit risk

Match all third-party forms before filing (W-2, 1099-K/NEC/INT/DIV/B, 1098, brokerage 1099-B).
Keep contemporaneous logs (mileage, travel, meals); retain receipts and invoices for 3–6 years.
Report crypto trades and foreign accounts properly; file FBAR/FATCA when required.
Be consistent year to year; large swings should be well-documented.
Use a reputable preparer; review return line-by-line before signing.

Real-life scenarios

Income mismatch: A contractor omitted a 1099-NEC. After mailing invoices, bank statements, and an amended return, the case ended with a modest balance and no accuracy penalty.
Home office review: A self-employed designer substantiated exclusive/regular business use with photos, floor plan, and utility allocations; deductions were upheld.
Foreign account gap: Taxpayer filed late FBARs and amended returns; penalties reduced after demonstrating non-willful oversight and corrective action.

Core Takeaways

Audits are commonly triggered by data mismatches, unusual deductions, and cash/crypto/foreign activity.
Most audits are handled by mail—clear documentation resolves many issues.
Deadlines matter: respond within 30–60 days to protect appeal rights.
If a balance is assessed, expect CP14 → CP501/CP503/CP504 and set up a repayment plan promptly.

Trusted Tax Relief Companies

Prefer expert help responding to notices or defending an audit?

Read our Optima Tax Relief review

Read our StopIRSDebt.com review

“Looking for expert help beyond audits? Explore our full list of tax preparation companies to find the right fit for filing your return, maximizing deductions, and staying IRS-compliant.”

Next Steps

Compare your return to your W-2/1099s and brokerage statements before filing.
If you received a balance-due notice, start with CP14 and follow subsequent notices (CP501, CP503, CP504).
Need more time to pay? Consider an Installment Agreement or, if the debt is unpayable, an Offer in Compromise.

Related Guides

What Is an IRS Audit? — Overview of the audit process and your rights.
How to Talk to the IRS — Scripts, timing, and negotiation tips.
IRS Penalty Abatement Programs — Relief if penalties are proposed.
IRS Forgiveness Programs — Options when you can’t pay.
IRS Tax Levy vs IRS Tax Lien — Enforcement differences.

Frequently Asked Questions

Does receiving a CP11 or CP12 mean I’m being audited?

No. CP11 and CP12 generally reflect math/credit corrections. You should still review and respond by the deadline.

What if I can’t gather documents by the deadline?

Call the number on your notice to request additional time. Keep proof of your request and continue compiling records.

I received a CP14 balance-due after a correspondence audit. What now?

Pay in full if possible or apply for an Installment Agreement. If you disagree with the changes, follow the appeal instructions on the notice.

Can identity verification notices be related to audits?

They’re separate issues but can overlap in timing. Respond to identity verification (e.g., CP01, CP01H) promptly to avoid return processing delays that complicate audit responses.

Share this post:

Table of Contents