Before you read further — which describes you?
Quick Answer
The IRS audits tax returns to close the federal tax gap, which the Treasury estimates at roughly $688 billion per year. The agency uses a proprietary Discriminant Function (DIF) score to flag returns that deviate from statistical norms, a parallel Unreported Income DIF (UIDIF) to flag likely underreporting, an Automated Underreporter (AUR) system that matches W-2s and 1099s against filed returns, and random selection under the National Research Program. The overall audit rate for individual returns is approximately 0.4%, but the rate climbs to 8.5% for returns reporting over $10 million in income.1
Received a notice and want to know why? A 15-minute consultation is free.
If you have been selected for an audit, the first question most taxpayers ask is the one the IRS will never directly answer: why me. The agency does not publish the formulas, and the examiner assigned to your case usually does not know either. What is public is the framework the IRS uses to pick returns, the data it consumes, and the pattern of behaviors that historically draw attention. This chapter walks through all of it in plain terms.
The IRS audits tax returns for one reason: to close the tax gap between what taxpayers owe and what they actually pay. Everything else — the scoring systems, the industry studies, the third-party matching programs — is infrastructure built around that single mission. Knowing how that infrastructure works makes it easier to understand why a return was flagged and what to do about it. Our firm has handled thousands of audits across every category below as IRS audit defense counsel. A 15-minute review of your specific notice is free.
The Four Categories of IRS Audit Triggers
Every audit falls into one of four categories based on how the return was selected. The category shapes the scope of the examination, the deadlines, and the examiner’s starting posture. Understanding which category your audit falls into is the first step in responding correctly.
| Selection Method | How It Works | Typical Scope | Duration | Likelihood of Change2 |
|---|---|---|---|---|
| DIF / UIDIF Score | Algorithm flags deviation from peer averages | 1 to 5 issues | 6 to 12 months | ~90% |
| Document Matching (AUR) | 1099 / W-2 mismatch against filed return | Specific line items | 3 to 6 months | ~95% |
| Related / Referred | Flowthrough from partner, spouse, or informant | Varies by source | 12 to 24 months | ~85% |
| NRP Random | Statistically random selection | Entire return | 12 to 18 months | ~50% (often no change) |
Quick Reference
If you already know the notice type and want to jump to the selection mechanism, go to DIF scoring, document matching, related / referred audits, or NRP random selection. If you are not sure where to start, a 15-minute consultation is free.
1. DIF and UIDIF: The Statistical Scoring System
A DIF-selected audit is an examination triggered because the return’s Discriminant Function score exceeded an internal IRS threshold. DIF is a proprietary scoring system that compares every return against a statistical model of peer returns — same income range, same filing status, same industry. Returns that deviate materially from peer norms receive high DIF scores and enter the selection queue.3
If this is you: Your return contained one or more figures that fell outside the statistical band for similar taxpayers. The algorithm did not determine that you did anything wrong — only that something is worth a closer look. The response strategy is narrow documentation of the flagged items. Over-disclosure will expand the scope.
The DIF formula itself is classified. What practitioners know comes from decades of examination patterns and a small number of IRS disclosures. The general categories of returns that score high include: Schedule C filers with expense ratios outside industry norms, returns with large charitable contributions relative to AGI, returns claiming home office deductions where the occupation does not typically require one, and returns with repeated round-number expense categories.
A companion system, the Unreported Income DIF (UIDIF), scores the probability that the return understates income. UIDIF draws on bank deposit data, lifestyle indicators, and information returns the IRS already holds. Where DIF asks “are the deductions suspect,” UIDIF asks “is the income complete.”
In our experience, DIF-selected audits are usually narrower than they look. The scoring system flags one or two items; the examiner’s job is to test those specific items. A response that stays within that scope usually closes the audit without escalation.
How to Respond to a DIF-Selected Audit
The goal is to answer the narrow question that was flagged, with clean documentation, and nothing more.
- Identify the flagged items. Read the notice carefully. The IDR or request letter will specify exactly which deductions, credits, or income categories the examiner is testing.
- Pull substantiation for only those items. Receipts, mileage logs, contemporaneous records. Do not include adjacent years or unrelated schedules.
- Reconcile to the return. The documents should tie, to the dollar, to what was reported. Unexplained variance is what causes DIF audits to widen.
- Prepare a brief cover letter. Name, SSN, tax year, notice number, list of enclosures. No narrative.
- Mail by certified mail, return receipt requested. Keep originals. Send copies only.
2. Automated Underreporter (AUR): The Document Matching Program
An AUR audit is a correspondence examination triggered when the IRS’s document-matching computer identifies a mismatch between a W-2 or 1099 filed by a third party and what the taxpayer reported on the return. AUR handles roughly 75% of all individual examinations and issues the CP2000 notice, which is the most common audit letter in the United States.4
If this is you: A CP2000 is usually not accusatory. A 1099 or W-2 arrived at the IRS that did not appear on your return, or appeared for a different amount. The notice proposes a tax adjustment and gives you 30 days to agree or disagree. If the underlying 1099 is correct, you may simply agree. If it is not, a short written explanation with supporting documents usually closes the matter.
Common AUR triggers include: an unreported 1099-NEC or 1099-MISC from a side business, a 1099-B from a brokerage where the cost basis on the return does not match the broker’s filing, a 1099-K from a payment processor where gross receipts exceeded the taxpayer’s reported income, a cancellation of debt (1099-C) not reported as income, and a mismatched W-2 wage figure.
The system also triggers on what did not arrive: a taxpayer who reported $200,000 of self-employment income with no corresponding 1099s in the IRS database will sometimes draw an AUR notice asking for substantiation of gross receipts.
An important point for context: an AUR notice is almost always generated before any human has reviewed the return. The computer found a mismatch, the system drafted the letter, and it went out. That is both reassuring and a warning. Reassuring because the scope is narrow. A warning because a careless response can cause a human to look at the return for the first time, and human review often expands what was a narrow computer flag.
AUR Response Procedure
- Locate the underlying document. The CP2000 will cite the 1099 or W-2 the IRS received. Find your copy.
- Determine whether the third-party filing is correct. Sometimes 1099s are wrong. When they are, the issuer must file a corrected 1099 with the IRS.
- If the IRS is right, agree. Sign the CP2000 response form, return it, and pay the adjustment. The audit closes.
- If the IRS is wrong, document the correction. Include the corrected 1099, a brief explanation, and supporting records.
- If penalties are proposed, engage counsel. Accuracy penalties under IRC §6662 start at 20% of the understatement.
3. Related Party and Referral Audits
A related-party or referral audit is an examination that started on someone else’s return and expanded to include the taxpayer. These audits are typically harder to scope because the examiner is testing a theory developed from another case. Scope is also unusually wide because the examiner begins with information the taxpayer does not have.5
If this is you: Your audit likely started somewhere else — a business partner’s examination, an ex-spouse’s fraud case, a whistleblower tip, or a foreign account disclosure program. The examiner has already spent time on the source case. Representation is warranted. Documentation that is adequate for a narrow DIF audit often is not enough for a related-party audit because the examiner will ask broader questions.
Several pathways lead to a related-party audit. A partnership or S-corporation audit under the centralized partnership audit regime (IRC §6221 et seq.) produces adjustments that flow through to every partner or shareholder. An ex-spouse’s fraud audit sometimes expands to the filing spouse under the joint and several liability rule of IRC §6013(d)(3) — and then shifts again when innocent spouse relief is claimed. A whistleblower submission under IRC §7623 triggers an audit when the evidence passes internal screening. Foreign account referrals from FBAR filings, Form 8938, or disclosures under the Streamlined Filing Compliance Procedures also produce related audits.
Informant tips matter more than most taxpayers assume. The whistleblower program paid out over $88 million in awards in fiscal 2023, with awards computed as 15% to 30% of the tax, penalties, and interest collected. A tip with specific dollar figures and documents attached is rarely ignored.
Related-Party Audit Strategy
- Find out what the examiner already has. A well-prepared representative opens the case by asking what documents, witnesses, or referrals produced the audit. Not every examiner answers, but the request itself matters.
- Do not answer beyond the document request. The examiner is fishing for connections to the source case. Volunteered information is how cases widen.
- If the source case involves fraud, engage criminal defense counsel. IRC §6663 civil fraud penalty referrals cross-pollinate with criminal referrals under IRC §7201. Privilege matters here.
- Evaluate innocent spouse relief early. If the audit traces to a joint return your spouse prepared, Form 8857 relief should be considered before the audit closes, not after.
Is your audit related to someone else’s case? Related-party audits carry cross-referral risk that standard audits do not. The examiner may be building evidence for a criminal case that has not yet surfaced. Book a confidential consultation before responding. The protections available now are not available after.
4. NRP: The Random Research Audit
An NRP audit is a random, line-by-line examination the IRS conducts to calibrate its selection algorithms. The National Research Program replaced the older Taxpayer Compliance Measurement Program in 2002 and audits roughly 13,000 individual returns in each active cycle. Selection is statistically random. A taxpayer chosen for an NRP audit is not suspected of any wrongdoing.6
If this is you: Random selection is real. The IRS does not think you did anything wrong. The audit is invasive because scope is unlimited, not because you are suspected. Engage representation early and prepare for a 12 to 18 month examination across the full return. Most NRP audits close with minor adjustments or no change at all.
NRP data produces the statistical baselines the IRS uses for DIF scoring on every subsequent return. The research mission shapes the examination style. NRP examiners are trained to document all items, even the ones no other audit would touch, because the results populate the agency’s compliance models.
The examination is more document-intensive than a typical audit. An NRP examiner routinely requests substantiation for items that a targeted examiner would accept on the face of the return. The right posture is documentation, not argument. There is no deficiency target the examiner is under pressure to hit. The goal is a clean record.
How to Identify the Trigger from the Letter Code
The letter or notice code in the upper right of page 1 identifies the selection mechanism. The table below maps common codes to the likely category of trigger, response deadline, and typical scope.
| Letter / Notice Code | Selection Trigger | Deadline | Scope |
|---|---|---|---|
| CP2000 | AUR document mismatch | 30 days | Specific 1099 / W-2 reconciliation |
| CP2501 | AUR pre-notice inquiry | 30 days | Substantiation request |
| Letter 566 | DIF / EITC substantiation | 30 days | Correspondence — specific items |
| Letter 915 / 3572 | DIF — office audit | Scheduled meeting | 3 to 5 specified issues |
| Letter 2205-A / 2205-B | DIF or referral — field audit | 10 business days | Full return and prior years |
| Letter 3164 | Third-party contact notice | 10 days | Pre-audit signal |
| Letter 3391 | Related-party (flowthrough) | Per notice | Scope depends on source case |
| Notice 1214 / Letter 3121 | NRP research audit | Per notice | Line-by-line |
| CP75 / CP75A | EITC / refundable credit hold | 30 days | Credit verification |
Found your letter or notice code? The next step is confirming your exact deadline and whether you need representation. A 15-minute call answers both. Book a free call →
How Far Back Can the IRS Go? The Statute of Limitations
Under IRC §6501, the IRS has a limited window to assess additional tax. The limits depend on what the examiner finds during the audit.
- 3 years (standard rule). The default period for any return filed by the due date (or extended due date). For a 2023 return filed April 15, 2024, the assessment statute closes April 15, 2027.
- 6 years (substantial omission). When more than 25% of gross income is omitted, or when more than $5,000 of foreign financial asset income is omitted, the window extends to 6 years.
- No statute (fraud or unfiled returns). When the IRS can prove fraud, or when a return was never filed, there is no limit. Any year is open, indefinitely.
- FBAR and foreign asset penalties. 6 years for non-willful, no limit for willful. These run parallel to the income tax statute.
Field examiners commonly invoke the 6-year rule when a bank deposit analysis reveals unreported income exceeding 25% of gross. When that happens, the audit expands backward from the year on the notice. At some point the examiner may ask the taxpayer to sign Form 872, a voluntary statute extension. Form 872 should never be signed without counsel reviewing whether the extension actually serves the taxpayer.
Actual Audit Selection Rates by Income and Return Type
The headline audit rate for individual returns is approximately 0.4% according to the most recent IRS Data Book. That figure conceals wide variation by income band and return type.
| Income Range or Return Type | Approximate Audit Rate |
|---|---|
| Under $200,000 | 0.2% |
| $200,000 to $500,000 | 0.3% |
| $500,000 to $1 million | 0.6% |
| $1 million to $10 million | 2.5% |
| Over $10 million | 8.5% |
| Schedule C filers, gross receipts over $500K | 3 to 5× the rate of W-2-only filers at the same income level |
| Large corporations (assets over $10M) | Approximately 60% of returns examined |
| Estate returns (Form 706) with value over $10M | ~30% |
These rates trend upward at the top. The Inflation Reduction Act directed new enforcement funding specifically at filers above $400,000 and at large pass-through entities. High-income returns, complex partnerships, and multi-entity individual filings should expect materially higher audit rates in the coming filing years.
The Audit Escalation Pathway
Audits do not always stay in the category in which they started. Understanding what triggers escalation is the difference between a managed examination and a cascading loss.
Correspondence to Office or Field
An AUR examiner refers a correspondence case to in-person examination when the taxpayer’s response reveals broader issues, when submitted documents show patterns of error beyond the original flag, when the examiner identifies what the Internal Revenue Manual calls “indicia of fraud” (duplicate books, altered documents, unexplained cash), or when new information returns surface during the response period. This is the single reason we consistently advise narrow responses.
Office to Field
Office audits escalate to field when the Tax Compliance Officer reaches the limits of their authority. Business returns with meaningful complexity, multi-entity structures, or any item requiring on-site inspection typically moves up. Once a case has been referred to field examination, it does not come back down.
Field to Criminal Investigation
A Revenue Agent is required by Internal Revenue Manual Part 25.1.2 to refer a case to IRS Criminal Investigation when firm indications of fraud are present. The standard includes consistent patterns of unreported income, false statements made during the audit, concealment of assets, and obstructive behavior. Once a case has been accepted by CI, the civil audit pauses. A criminal tax case cannot be settled with a payment.
Has your audit involved questions about cash, offshore accounts, or unreported income? Those questions are pre-criminal indicators. If you suspect your case may be referred to Criminal Investigation, stop answering questions and call a criminal tax defense attorney today. Book a confidential consultation now.
The practical implication: what a taxpayer says and produces during a correspondence or office audit directly controls whether the examination escalates. Cases that started as a $5,000 mismatch have grown into $150,000 field audits because the initial response opened additional issues. An IRS audit defense attorney manages that disclosure to keep the audit contained.
The First 48 Hours After Receiving an Audit Notice
The first two days after an audit notice arrives shape the outcome more than any single action that follows. The sequence below is what we consistently recommend to new clients.
- Do not call the IRS yet. The number on the notice connects to an examiner who opens a contact record the moment the call is answered. Statements in that call become part of the case file.
- Photograph the envelope. The postmark, not the delivery date, controls the deadline calculation.
- Identify the letter code. Use the lookup table above to confirm the selection category and deadline.
- Verify the notice is legitimate. Genuine IRS notices include an IRS address, a notice code in the upper right, and never threaten arrest or demand payment in gift cards or cryptocurrency.
- Do not pull documents yet. Gathering records before the scope is clear risks producing more than required.
- Do not amend the return. Filing Form 1040-X during an open audit is almost always wrong and can be treated as admission evidence.
- Engage a tax attorney for an intake call. A Form 2848 Power of Attorney places the attorney between the taxpayer and the examiner. Future IRS contact goes to the attorney.
The ROI Question
For audits with proposed deficiencies above $100,000, the representation fee is almost always less than the combined tax, penalty, and interest exposure. The decision is rarely about whether to engage counsel. It is about whether to engage counsel before or after the IRS finalizes the assessment.
When to Engage an IRS Audit Defense Attorney
Not every audit requires counsel. A CP2000 for a missing 1099 that can be documented in 20 minutes generally does not. The situations below are the ones where the cost of self-representation almost always exceeds the fee for counsel.
- Field audit notice (Letter 2205-A or 2205-B). The 10-business-day window and the initial interview make field audits too consequential to handle alone.
- Proposed deficiency above $10,000. The ROI calculation favors counsel almost every time.
- Business returns (Schedule C, S-corporation, partnership). Business audits expand quickly. Counsel narrows them.
- Fraud penalties on the table. IRC §6663 (civil fraud, 75%) or §6662 (accuracy, 20%–40%) language on Form 886-A is a signal to engage counsel immediately.
- Examiner questions about bank deposits exceeding reported income. The single most common lead for a civil-to-criminal referral.
- Case referred to Criminal Investigation. Representation should come from a criminal tax defense attorney, not a CPA.
- Audit expanding mid-examination. A correspondence audit that has grown into office or field is signaling danger.
Any of the above apply to your situation?
A 15-minute consultation is free. We will review the notice, confirm the selection category and deadline, and give you a candid assessment of whether representation is warranted. If it is not, we will tell you.
Frequently Asked Questions
What are the real odds of being audited?
Approximately 0.4% for individual returns overall, per the IRS Data Book. The rate rises sharply with income: 0.2% under $200K, 2.5% between $1M and $10M, and 8.5% above $10M. Schedule C filers, EITC claimants, and large partnerships face elevated rates within their income bands. Inflation Reduction Act funding is increasing enforcement against filers above $400,000.
How does the IRS pick who to audit?
Four primary methods. The DIF and UIDIF scoring algorithms flag returns that deviate statistically from peers. The Automated Underreporter program matches third-party 1099s and W-2s against filed returns. The National Research Program selects a small number of returns randomly for research audits. And related-party or referral audits expand from another examination, informant tip, or program referral.
Does filing electronically increase audit risk?
No. Electronic filing reduces math and transcription errors, which historically were a common audit trigger. The data IRS computers receive is the same regardless of filing method. The DIF scoring system treats e-filed and paper-filed returns identically.
Will amending my return trigger an audit?
Amendments on Form 1040-X are reviewed by a separate IRS unit and do not automatically trigger an audit of the original return. That said, material amendments — large refund claims, significant income changes, new deductions — draw closer review than routine corrections. Amendments filed during an active audit are a different matter and almost always wrong.
What letter does the IRS send to start an audit?
It depends on the trigger. CP2000 for AUR mismatches. Letter 566 for DIF-flagged correspondence issues. Letter 915 or 3572 for office audits. Letter 2205-A or 2205-B for field audits. CP75 or CP75A for EITC holds. The code in the upper right of page 1 identifies the audit category.
How do I know if my IRS letter is real?
Genuine IRS notices come from an IRS address, include a notice or letter number in the upper right, and reference your account by SSN or EIN. The IRS will never threaten immediate arrest, demand payment by gift card or cryptocurrency, or call before sending written notice. When in doubt, verify by calling the IRS directly at the number listed on irs.gov, not the number on the suspect notice.
Can the IRS audit me every year?
Technically yes, but IRC §7605(b) restricts repetitive examinations of the same return without managerial approval. Different tax years are independent; a clean prior audit does not protect a subsequent year. In practice, a taxpayer who is audited and comes through with no change rarely draws immediate re-selection.
How many times can the IRS audit the same tax year?
Generally once. IRC §7605(b) prohibits repetitive examinations without managerial sign-off. Exceptions exist: the IRS may reopen a closed audit upon evidence of fraud, material misrepresentation, or clear administrative error. NRP research audits are an independent program and may coexist with a targeted audit.
What are the biggest audit red flags?
Large charitable deductions relative to income, home office deductions (especially for W-2 employees), Schedule C losses year after year, round-number expense categories, unreported 1099 income, cryptocurrency transactions, foreign accounts and assets, EITC claims, cash-intensive business operations, and returns reporting over $10 million of income.
What happens if I ignore an audit notice?
The IRS assesses tax based on the information already in its possession, and the assessment is almost always higher than the outcome of a timely response. The taxpayer then receives a 90-Day Letter (Statutory Notice of Deficiency), providing 90 days to petition the U.S. Tax Court. A missed petition deadline makes the assessment final, and collections activity begins. Non-response never reduces exposure.
How long does an IRS audit take?
Correspondence audits: 3 to 6 months. Office audits: 6 to 12 months. Field audits: 12 to 24 months, longer for complex multi-entity cases. NRP audits: 12 to 18 months. Appeals adds another 6 to 12 months. A Tax Court petition, when necessary, adds 1 to 2 years.
What percentage of audits result in additional tax?
Roughly 90% of audits close with at least some adjustment in the IRS’s favor. The size of the adjustment varies substantially, and professionally represented audits consistently close at materially lower deficiencies than self-represented ones.
Can I reduce my audit risk?
Some things help: report all 1099s and W-2s exactly, keep documentation for charitable and business deductions, avoid round-number expense categories, verify home office eligibility under IRC §280A before claiming it, disclose foreign accounts on the FBAR and Form 8938, and work with a tax preparer who signs returns and takes professional responsibility. None of this guarantees non-selection, but it materially reduces DIF scoring.
Does the IRS audit lower-income returns?
Yes, primarily through the Earned Income Tax Credit verification program. EITC claimants face an audit rate several times the baseline because the credit is a frequent target for both error and fraud. The audits are nearly always correspondence-level (CP75 or CP75A) and focus on substantiation of the credit, not the whole return.
If you have read this far, you have a notice and you are trying to understand it before doing anything that makes it worse. That instinct is correct.
The next right move is a 15-minute call. We will identify the audit type, confirm your deadline, and tell you honestly whether you need representation. There is no cost and no obligation.
Get a Candid Assessment — FreeOr call us directly at (619) 378-3138
Next Steps in This Guide
The appropriate next chapter depends on your situation.
If you would prefer to have someone walk through your specific notice with you, a 15-minute consultation is free. We will tell you what you are facing and what the path forward looks like, whether that involves our firm or not.