Few pieces of mail raise a small-business owner's blood pressure like an envelope from the IRS. But here's what a CPA knows that most owners don't: the vast majority of "audits" are narrow, routine, and entirely survivable — if you respond correctly and don't panic.

An IRS audit is simply a review of your return to verify that income, deductions, and credits were reported accurately. It is not an accusation of fraud, and it does not mean you did something wrong. It means the IRS wants to see support for something on your return. How you handle the next 30 days matters more than the notice itself.

The three types of audit — and which one you got

  • Correspondence audit — by far the most common. The IRS mails you a letter (often a CP2000 or a specific line-item request) asking for documentation on one or two items. You respond by mail. Most never involve meeting anyone.
  • Office audit — you're asked to bring records to a local IRS office. Broader than a correspondence audit, but still focused on specific issues.
  • Field audit — the most comprehensive. An IRS agent visits your business or your representative's office and reviews your books in depth. These are rarer and almost always warrant professional representation.

The first thing to do when a notice arrives is to read it carefully and identify which type it is and exactly what is being questioned. The notice number (top-right corner) tells you a lot.

What actually triggers a small-business audit

Audits are driven mostly by a computer scoring system and by mismatches — not by bad luck. The common triggers:

  • Income that doesn't match third-party forms. The IRS receives copies of your 1099-NEC, 1099-K, and W-2 forms. If your return reports less than those totals, the computer flags it automatically.
  • Disproportionately large deductions relative to income — especially meals, travel, vehicle, and home-office.
  • Consistent losses, particularly in activities the IRS may reclassify as hobbies.
  • Large round numbers and estimates that suggest records weren't kept.
  • Cash-heavy businesses, which receive extra scrutiny.
  • Worker misclassification — treating employees as 1099 contractors.

Your rights — know them before you respond

The Taxpayer Bill of Rights guarantees you, among other things, the right to professional and courteous treatment, the right to representation (you never have to meet the IRS alone), the right to know why the IRS is asking, the right to appeal a disagreement, and the right to finality — the IRS generally has three years from the filing date to audit a return (longer only in cases of substantial underreporting or fraud).

How to respond — the CPA playbook

  • Don't ignore it. Every notice has a deadline (usually 30 days). Missing it forfeits your right to respond and the IRS will simply assess the tax.
  • Respond to exactly what's asked — no more. Volunteering extra information or documents can open new questions. Answer the specific items in the letter.
  • Organize your documentation. Receipts, bank statements, mileage logs, invoices, and contracts that support the questioned items. Clean books make this straightforward; messy books make it painful.
  • Keep copies of everything and send correspondence in a trackable way.
  • Be honest and factual. Never guess, and never alter records after the fact — that turns a civil matter into a potential criminal one.

The mistakes that turn a routine review into a costly one

  • Panicking and paying immediately when the IRS is actually wrong (correspondence notices are frequently incorrect).
  • Sending your entire shoebox of records instead of the specific support requested.
  • Talking too much in an office or field audit — agents are trained to follow threads.
  • Missing the deadline and losing appeal rights.
  • Going it alone on a field audit or a large proposed adjustment.

When to bring in a CPA

A simple correspondence audit over a single 1099 you can often handle yourself. But once the dollars are meaningful, multiple years are involved, or an agent wants to sit down with your books, representation pays for itself — a CPA can respond on your behalf, keep the scope narrow, and prevent one questioned deduction from becoming a line-by-line reconstruction of your year. The best protection, though, is built long before any notice arrives: accurate, reconciled books and documentation kept in real time.

Got an IRS notice?

Our Response Desk helps small businesses answer IRS and state notices calmly and correctly — from a CP2000 to a full field audit. Don't face it alone.

See how our Response Desk helps

This article is general information, not tax or legal advice. Every audit turns on its own facts — consult a qualified professional about your situation.