IRS Audit Red Flags 2022: 25 Tax Return Audit Risk Factors

Most taxpayers worry about audits in the wrong way. The question is not whether a single deduction will trigger an audit — it almost never will. The question is whether the return as a whole tells a consistent story. Audit selection runs on statistical patterns, and individual line items only matter when they push the entire return outside the band for similar taxpayers. This chapter explains the patterns that matter, the items that matter within those patterns, and how to reduce risk without abandoning legitimate deductions.

Our firm has handled thousands of audits across every category the IRS runs. Many of those audits were avoidable — not because the underlying positions were wrong, but because the return was assembled in a way that made those positions look wrong to the scoring system. A 15-minute consultation can identify where your next return’s exposure lives. See also our chapter on why the IRS audits for the broader context on how returns are selected.

The Four Categories of Audit Risk Factors

Risk factors fall into four broad categories ranked by how reliably they trigger examination. Low-severity items raise minor flags but rarely generate an audit on their own. Critical items — the ones that combine document mismatches with large dollar exposure — almost guarantee scrutiny.

1. Statistical Outliers: The DIF Scoring System

A statistical outlier is a return with one or more values that fall outside the normal range for similar taxpayers. The IRS’s Discriminant Function (DIF) score measures that deviation and is the single strongest predictor of audit selection. Returns above the DIF threshold enter the manual review queue. The formula itself is classified, but the categories that reliably drive high scores are well understood.³

The common statistical outliers include charitable contributions exceeding 20% of AGI, Schedule C expense ratios more than two standard deviations from industry norms, vehicle mileage claims above 35,000 annual miles for a single business, and meals-and-entertainment expenses exceeding 10% of reported revenue.

Round numbers also raise flags. Expense categories that terminate in double or triple zeros — $10,000 in office supplies, $5,000 in professional fees — are visible markers of estimation rather than contemporaneous record-keeping. The IRS’s own manual directs examiners to treat round-number entries as an indicator that substantiation may not exist.

An important point for context: a high DIF score does not mean the examiner will find a problem. It means the return has been flagged for closer review. The outcome of that review depends entirely on the substantiation the taxpayer can produce for the flagged items.

How to Reduce Statistical Outlier Risk

1. Compare your return against industry benchmarks. The IRS publishes Audit Technique Guides for major industries. Review them before filing.
2. Vary expense figures naturally. Actual costs are rarely round. If your office supply category ends in $10,000, refine it to reflect the actual receipts.
3. Pair outlier deductions with narrative support. A Form 8275 Disclosure Statement describes a position openly. Disclosure does not eliminate the deduction; it puts the position on the record and removes the accuracy-related penalty under IRC §6662.
4. Reconstruct records before you need them. Bank statements, vendor invoices, calendar entries. Records created after a notice arrives are always weaker than contemporaneous records.

2. Deduction Patterns: The Historically Red-Flagged Items

A deduction pattern risk is a legitimate tax position that has been abused often enough that the IRS treats it with default skepticism. The deduction itself may be entirely valid. The issue is that prior abuse by others has conditioned the examiner corps to look closely at returns claiming it.

The deductions that consistently land on this list:

• Home office under IRC §280A. The deduction is lawful when the space is used regularly and exclusively for business. It is not lawful for a W-2 employee who uses the kitchen table for Zoom calls. The IRS knows the difference.
• Schedule C losses, particularly recurring. Businesses reporting losses for three or more consecutive years face hobby-loss scrutiny under IRC §183. The test is whether the activity is engaged in for profit, measured by nine factors in the regulations.
• Charitable contributions exceeding 20% of AGI. Non-cash contributions above $5,000 require Form 8283 and a qualified appraisal for items above certain thresholds.
• Vehicle expenses and mileage logs. IRS auditors routinely request the underlying log. Recreated logs rarely survive examination.
• Meals and entertainment. The Tax Cuts and Jobs Act restricted entertainment deductions entirely. Business meals remain 50% deductible with documentation of attendee, purpose, and amount.
• Travel. Business travel is deductible; personal travel is not. Mixed-purpose trips require careful allocation.
• Large refunds and carried-forward losses. NOL carryforwards are frequent examination points because errors compound across years.

Pattern Reduction Procedure

1. Evaluate whether each deduction is substantiated at the level it would need to be in an audit. If not, either reduce the deduction or build records.
2. For Schedule C filers, document the profit motive. Business plan, marketing, separate bank account, professional development. The §183 nine-factor test is not rigidly applied, but several factors in your favor is the goal.
3. Use Form 8275 for positions that deviate from default IRS treatment. Disclosure removes the accuracy-related penalty even if the position ultimately loses.
4. Maintain contemporaneous records for vehicle and home office deductions. A dated mileage log created in real time is examination-proof. A reconstructed log is not.

3. Document Mismatches: The AUR Program

A document mismatch is a discrepancy between a return and a corresponding W-2, 1099, K-1, or other information return filed with the IRS. The Automated Underreporter program runs these comparisons on every return and issues the CP2000 notice when it finds gaps above a dollar threshold. Mismatches are the most reliable audit trigger; roughly 95% result in some adjustment.⁴

Mismatches arrive most commonly from: 1099-NEC for side-gig work the taxpayer forgot, 1099-K for payment processor activity over $600, 1099-B brokerage reporting where cost basis differs from what the taxpayer used, W-2 wages where the employer and taxpayer copies differ, 1099-R for retirement distributions misclassified on the return, 1099-C cancellation of debt income not reported, and K-1 partnership or S-corporation flowthroughs where the partner did not receive the K-1 in time to file accurately.

The 1099-K in particular has generated a wave of matches. Payment processors — PayPal, Venmo, Stripe, Square — are required to issue 1099-Ks for gross payments above the annual threshold. Many recipients of those forms do not realize the gross figure reported includes refunds, reimbursements, and non-business transfers.

Mismatch Prevention Strategy

1. Request your IRS Wage and Income Transcript before filing. The transcript shows every information return the IRS has for that year. Any form on the transcript that does not appear on the return is a guaranteed AUR flag.
2. Reconcile 1099-K figures to your records. Gross processor volume rarely equals taxable revenue. Document the reconciliation.
3. Wait for all K-1s before filing partnership or S-corporation returns. File an extension if necessary.
4. Report canceled debt income on Form 982 when an exclusion applies. Insolvency, bankruptcy, and qualified principal residence indebtedness all have exclusions that must be claimed on the form.
5. If a 1099 is issued in error, request a corrected form from the issuer. The issuer must file the correction with the IRS.

4. Fraud Indicators: The Civil-to-Criminal Risk Zone

A fraud indicator is a pattern that moves an audit from civil examination toward potential criminal referral. The IRS’s Internal Revenue Manual Part 25.1 lists the specific indicators that require a Revenue Agent to consider referral to Criminal Investigation. Taxpayers whose returns show these patterns face risk materially beyond a routine audit.⁵

The patterns that reliably draw criminal-referral scrutiny:

• Cash-intensive business with substandard records. Restaurants, construction, auto repair, cash-only retail. Bank deposit analysis is the primary audit technique.
• Structured cash deposits. Multiple deposits just under $10,000 to avoid Currency Transaction Reports (CTRs). Structuring is itself a federal crime under 31 U.S.C. §5324.
• Undisclosed foreign accounts. The FBAR (FinCEN Form 114) and Form 8938 reporting obligations carry willful penalties of the greater of $100,000 or 50% of the account balance per year.
• Cryptocurrency activity not reported. The IRS now asks on Form 1040 page 1 whether the taxpayer had any digital asset transactions. A “no” when the answer is yes is a false-statement risk.
• Unexplained lifestyle exceeding reported income. Bank deposit analysis and lifestyle-audit techniques close the gap.
• Duplicate sets of books. Two sets of records — one for the IRS, one for management — is a textbook fraud indicator.
• False statements during the audit. Contradictions between interview answers and documents produced.

How Far Back Can the IRS Go When Red Flags Appear?

Under IRC §6501, the assessment period depends on what the examiner finds when a red flag is investigated.

• 3 years (standard rule). The IRS has 3 years from the later of the filing date or due date to assess. Most DIF-selected audits operate within this window.
• 6 years (substantial omission). When more than 25% of gross income was omitted — or more than $5,000 of foreign-account income — the period extends to 6 years. Cash-business audits commonly produce this extension via bank deposit analysis.
• No statute (fraud or unfiled). Fraud indicators that are proven reopen every year indefinitely. Unfiled returns never close.
• FBAR and foreign asset penalties. 6 years for non-willful FBAR violations under 31 U.S.C. §5321(b)(1); no statute for willful violations.

The practical implication is that high-severity red flags — cash and foreign — carry exposure that ordinary red flags do not. A Schedule C with round-number expenses produces a routine audit for a single year. A Schedule C with cash skimming can produce a multi-year criminal case.

Actual Audit Selection Rates by Risk Factor

The baseline individual audit rate is approximately 0.4%. Red flag items alter that rate substantially. The figures below draw on IRS Data Book publications and industry examination data.

The Inflation Reduction Act directed new enforcement funding at filers above $400,000 and at large partnerships. Returns in those brackets should expect audit rates to continue climbing.

The Red Flag Escalation Pathway

A red flag is rarely a one-time event. Examiners treat patterns. Each escalation tier reflects additional information that changes how the return is handled.

DIF Flag to Correspondence Audit

A high DIF score routes the return to the Correspondence Examination workflow. The taxpayer receives a Letter 566 or CP2000 asking for substantiation of specific items. This is the lowest tier and usually resolves with clean documentation.

Correspondence to Office or Field

Escalation occurs when the correspondence response reveals additional issues, when the taxpayer cannot substantiate the flagged items, or when the examiner identifies indicia of fraud during review. Once escalated, the case moves to a Tax Compliance Officer (office) or Revenue Agent (field) with broader authority.

Field to Criminal Investigation

A Revenue Agent who encounters firm indications of fraud under IRM Part 25.1.2 is required to consider referral to IRS Criminal Investigation. Once accepted for criminal review, the civil audit pauses. Criminal exposure cannot be settled with payment.

The escalation pathway is the reason narrow, documented responses matter. Volunteered context or unrelated records rarely help and frequently widen the audit.

The First 48 Hours After Identifying Red Flags

If you have identified red flags on a return that has already been filed, the action window is short. The sequence below reflects what we recommend to taxpayers who call our office after recognizing exposure.

1. Do not file an amendment immediately. Amending a return flagged for fraud indicators can be used against the taxpayer. Counsel first.
2. Pull the IRS Wage and Income Transcript. Confirm what the IRS already knows about the year in question.
3. Identify the severity tier. Routine DIF risk is handled differently from cash-and-foreign risk.
4. Assess voluntary disclosure eligibility. The Criminal Investigation Voluntary Disclosure Practice and the Streamlined Filing Compliance Procedures have strict pre-contact requirements.
5. Preserve supporting documentation. Bank statements, vendor records, mileage logs, appraisals. Contemporaneous records are dispositive.
6. Avoid substantive statements to third parties. Accountants, bookkeepers, friends — none enjoy attorney-client privilege. Privileged conversations happen only with counsel.
7. Engage a tax attorney for an intake call. A Form 2848 Power of Attorney directs all IRS contact to the attorney.

When to Engage a Tax Attorney for Risk Review

Not every return warrants a pre-filing review. Most taxpayers with straightforward W-2 income, standard deductions, and no unusual activity can file without one. The situations below are the ones where the cost of self-assessment almost always exceeds the fee for counsel.

• Schedule C filers with gross receipts above $500,000. Audit rates are 3 to 5× baseline, and the return complexity compounds.
• Taxpayers with any foreign accounts or assets. FBAR and Form 8938 obligations are strict-liability at the non-willful level.
• Taxpayers with cryptocurrency activity. Basis tracking and the digital asset question on Form 1040 are both error-prone.
• Cash-intensive business operators. Bank deposit analysis turns operational sloppiness into fraud exposure.
• Recent significant income changes (windfall, exit, inheritance). Planning opportunities close rapidly and many are filing-year dependent.
• Taxpayers who have received prior audit notices. Post-audit returns draw closer review.
• Estate and high-net-worth returns. Audit rates are materially higher and errors rarely reverse.

Frequently Asked Questions

Next Steps in This Guide

The appropriate next chapter depends on what triggered your interest in risk reduction.

• If you received an audit notice: The 4 Types of IRS Audits.
• To understand how returns are selected: Why the IRS Audits Tax Returns.
• To prepare a response: IRS Audit Strategy.
• To understand the audit process: What Happens During an IRS Audit.
• If cash or foreign accounts are involved: Criminal Tax Defense.
• To engage representation: IRS Audit Defense Attorney.

If you would prefer to have someone walk through your specific risk profile with you, a 15-minute consultation is free. We will tell you what is exposed and what the path forward looks like.