Most small business audits start with a mismatch, not a hunch. The IRS matches the 1099s and W-2s it already has against what you reported, and scores your deductions against businesses of similar size and industry. Get those two things right, document everything else, and your audit risk drops to near the floor.
What the audit numbers actually say
Be careful with audit-rate statistics. Almost every figure circulating online is either invented or badly out of date.
Here is what the IRS actually publishes. In the 2025 IRS Data Book (Table 3-1), examination coverage for individual income tax returns is 0.3% for tax years 2019 through 2022. The IRS shades recent years in its own tables as a warning: coverage for those years is incomplete because examinations can still be opened within the three-year statute. There is no such thing as "the 2026 audit rate." It does not exist yet and will not for years.
The last time the IRS broke out Schedule C audit rates by size was fiscal year 2019, and it did so by gross receipts, not net profit. Those figures were 1.6% for $100,000–$200,000 in gross receipts and 1.4% for $200,000 or more. Note that the rate went down at the top bracket, not up. The IRS discontinued that series after FY2019 and overall coverage has fallen since.
The honest summary: small business audit coverage is under 1%, the numbers lag reality by years, and no one can tell you your personal odds. That is not a reason to relax. Coverage is low; the cost of a bad audit is not.
How returns actually get selected
DIF scoring. The IRS statistically scores returns by comparing income and deduction ratios against businesses of similar size and industry. Outliers score higher and get pulled for review.
Information return matching. This is the automated one. Forms 1099-K, 1099-NEC and W-2 are matched against what you filed. Mismatches generate notices without a human ever looking at your return.
Industry campaigns. Enforcement attention rotates through cash-heavy businesses, gig workers, real estate and online sellers.
One clarification worth making, because it gets repeated everywhere: the IRS does not receive routine deposit-level bank data and cannot automatically match your deposits to your return. Bank deposit analysis is a technique an examiner uses during an audit that is already open. It is not a pre-screening tool.
The IRS is expanding its use of AI, but the widely quoted "125 audit models" figure is a distortion. GAO counted 126 active AI use cases across all IRS operations as of mid-2025 — service, IT, operations — with only a handful used for exam case selection.
Red flag 1: income that does not match the information returns
The most common trigger and the most preventable. Reconcile every 1099 against your books before you file. If a form is wrong, ask the issuer for a corrected version.
Understand what Form 1099-K reports and who sends it, because the rules differ by processor:
| Payment type | Examples | Reporting threshold |
|---|---|---|
| Payment card processing | Card revenue through Square, Stripe, most merchant accounts | None. Reportable from the first dollar |
| Third party settlement organizations | PayPal, Venmo, online marketplaces | $20,000 and 200 transactions (restored by OBBBA) |
If you assume you are under a threshold and therefore invisible, you are probably wrong about your card revenue.
Also know that 1099-K reports gross transaction volume before refunds, chargebacks, processor fees and sales tax you collected. A 3–5% gap between your 1099-K total and your reported gross receipts is normal for a card-heavy business. The fix is not to overreport income. Report the gross figure and deduct the offsets on the correct lines.
Red flag 2: deductions far outside your industry's range
A contractor claiming 30% of revenue in supplies where peers claim single digits will score high. So will a consulting firm claiming a quarter of revenue in marketing. Outlier ratios are exactly what DIF is built to find.
This is not a reason to underclaim. It is a reason to be able to prove it. Keep receipts, contracts, invoices and a clear statement of business purpose.
Red flag 3: 100% business use of a vehicle
Claiming a vehicle is used exclusively for business, with no separate personal car, invites immediate scrutiny. Claim your real split and keep a contemporaneous mileage log: date, destination, business purpose, miles.
2026 requires split mileage tracking. The standard mileage rate changed mid-year — 72.5 cents per mile for January through June, and 76 cents per mile from July 1 forward. A single rate applied to the whole year will be wrong no matter which one you pick. Separate your 2026 mileage at June 30.
Red flag 4: the home office deduction
Two methods. The simplified method is $5 per square foot up to 300 square feet, capping the deduction at $1,500. The regular method uses actual expenses times your business-use percentage.
The space must be used regularly and exclusively for business, with two statutory exceptions under IRC 280A(c): storage of inventory or product samples, and licensed daycare facilities.
One long-term cost that rarely gets mentioned: the regular method generates depreciation on the business portion of your home, and that depreciation is recaptured when you sell. In an appreciating Florida market that recapture can be significant, and it is often the deciding reason to use the simplified method.
Red flag 5: repeated losses
The hobby loss rule (IRC 183) is widely misstated. It is not a three-consecutive-years test. The presumption of profit motive applies if the activity is profitable in three or more years within a period of five consecutive years ending with the current year — two of seven for horse activities.
Failing that test does not end the argument. You can still establish profit motive under the nine factors in Treas. Reg. 1.183-2(b): a written business plan, marketing activity, time invested, changes made to improve profitability.
If you are a genuine startup with early losses, look at Form 5213. It lets you elect to postpone the hobby-loss determination until after the fifth taxable year (seventh for horse activities). It is the most useful defensive tool available and almost nobody mentions it.
Red flag 6: worker misclassification
The IRS weighs behavioral control, financial control, and the type of relationship.
| Factor | Employee (W-2) | Contractor (1099) |
|---|---|---|
| Schedule control | You set the hours | Worker chooses when |
| Tools and equipment | You provide them | Worker supplies own |
| Training | You train in your methods | Already skilled |
| Exclusivity | Works only for you | Serves multiple clients |
| Payment | Regular salary or hourly | Per project or invoice |
| Employer payroll tax | 7.65% FICA on wages | None |
File Form SS-8 if you genuinely cannot tell.
Two Florida-specific points. First, the Florida Department of Revenue runs its own reemployment tax audits, and a state classification finding can arrive entirely independently of anything federal. Second, because Florida has no personal income tax, there is no state return giving you a second look at your numbers before they go to the IRS. Your federal return is the only one.
The 1099-NEC threshold changed and the transition trips people up:
- 2025 payments, reported January 2026: $600 or more.
- Payments made on or after January 1, 2026, reported January 2027: $2,000 or more (OBBBA amendment to IRC 6041/6041A).
The January 31 filing deadline is unchanged.
Red flag 7: cash
Cash-intensive businesses — restaurants, salons, retail, landscaping, construction, hospitality — carry higher inherent risk because cash is harder to trace. Deposit every dollar into the business account, issue receipts, keep a daily cash log.
One warning that belongs in bold type. Structuring cash deposits to stay under the $10,000 currency transaction reporting threshold is a standalone federal felony under 31 U.S.C. 5324. It is prosecutable whether or not the underlying income was properly reported and whether or not the cash was entirely legitimate. Do not do it, and do not let a bookkeeper do it for you.
Separately, your business — not just your bank — must file Form 8300 when it receives more than $10,000 in cash in a trade or business.
Red flag 8: meals and the $75 myth
Business meals are 50% deductible. The temporary 100% allowance from 2021–2022 has expired.
There is no rule that meals below some percentage of revenue escape substantiation. That claim appears in no code section, regulation or IRS publication. Under IRC 274(d), every business meal requires the amount, time, place, business purpose and business relationship, regardless of size.
The $75 figure is real but far narrower than commonly stated. Treas. Reg. 1.274-5(c)(2) waives documentary evidence only for certain travel, gift and listed property expenses under $75 — and lodging always requires a receipt at any amount. Even for a sub-$75 travel expense you must still keep a written record of the elements. And ordinary business expenses under IRC 162 remain substantiable under IRC 6001 at every dollar amount. If you throw away all receipts under $75, you will lose deductions on exam.
One 2026 change to flag: OBBBA eliminated the employer deduction for most de minimis on-premises food and beverage. If you have a stocked break room or cater staff meals, that is affected in the tax year currently in progress.
Red flag 9: round numbers
$5,000 supplies, $3,000 travel, $8,000 advertising. Rounded figures across multiple categories signal estimating rather than tracking. Record actual amounts. Connect bank and card feeds to your accounting software and categorize weekly.
If you are a non-resident founder
Two things matter more than DIF scoring.
International returns carry a different examination profile — Data Book Table 3-1 shows 0.7% coverage for TY2022 against 0.3% for individual returns overall.
More importantly, the foreign information reporting regime is penalty-driven and does not require an audit at all. Several of these information returns carry automatic non-filing penalties starting at $10,000 per form per year. A single-member U.S. LLC with a foreign owner has annual information-reporting obligations even with zero income. For most non-resident founders, that exposure dwarfs anything on the red flag list above.
What audits actually look like
Most examinations are correspondence audits handled by mail. In the last detailed IRS breakout (FY2019), correspondence exams outnumbered field exams roughly three to one.
But do not assume field audits are reserved for large businesses. In that same FY2019 data, Schedule C filers with $200,000 or more in gross receipts received 8,350 field examinations against only 1,855 correspondence exams. Field exams were the majority at a fifth of the "$1 million" threshold you will see quoted elsewhere.
Two more corrections to common advice. The letter specifies its own due date; there is no universal 30-day clock, though you can request a one-time automatic 30-day extension. And 30 days is a response deadline, not a resolution timeline. Correspondence audits routinely run many months. Expecting it to be over in a month is how people stop watching their mail.
What to do next
- Reconcile bank and card accounts monthly, and reconcile every 1099 and W-2 against your books before filing.
- Split your 2026 mileage log at June 30 and apply the two rates separately.
- Confirm which 1099-NEC threshold applies to each contractor payment by the date you paid it.
- Review worker classification against the behavioral, financial and relationship tests. File SS-8 if unsure.
- Keep every receipt. The $75 exception is narrower than you think.
- Deposit all cash. Never structure deposits. File Form 8300 when required.
- If you are a foreign owner of a U.S. entity, confirm your foreign information-reporting positions first.
- Have your return benchmarked against industry ratios before it is filed, not after a letter arrives.
One Florida housekeeping note: keep your records backed up off-site and off-paper. Hurricane season is an ordinary business risk here, and "the storm took my receipts" does not substantiate a deduction.
Accounting BOSS handles monthly bookkeeping, tax preparation and planning for businesses in Orlando, Jacksonville and Miami, and for non-resident founders operating U.S. entities. If you want a second set of eyes on your return before it goes in, get in touch.
This article is general information, not tax advice for your situation. Rules and dollar amounts change; confirm current figures before you file.
This is general information, not tax advice for your situation, and reading it does not make you a client. Rules and figures change — verify anything time-sensitive before you act on it. We'll talk it through with you free.
Common questions
Nobody can tell you precisely, and anyone quoting a 2026 figure is making it up. The most recent IRS Data Book (Table 3-1) shows examination coverage of 0.3% for individual income tax returns for tax years 2019 through 2022, and the IRS flags recent years as incomplete because exams can still be opened within the three-year statute. The defensible summary is that small business audit coverage is under 1%. The last Schedule C breakout by size, from FY2019, showed 1.6% for $100,000 to $200,000 in gross receipts and 1.4% above $200,000 — that series has since been discontinued.
Both. The rate changed mid-year: 72.5 cents per mile for miles driven January 1 through June 30, 2026, and 76 cents per mile from July 1 through December 31. You need to split your log at June 30 and apply each rate to the correct half. Applying one rate to the full year will produce a wrong number regardless of which rate you choose.
No, assuming that is the total for the year. For payments made on or after January 1, 2026, the reporting threshold rose to $2,000 under the OBBBA amendment to IRC 6041/6041A. The old $600 threshold still governs 2025 payments, which are reported in January 2026. The January 31 filing deadline is unchanged. If a contractor straddles both years, apply the threshold that matches the date of each payment.
Not necessarily. Form 1099-K reports gross transaction volume before refunds, chargebacks, processor fees and sales tax you collected, so a gap of a few percent is normal for a card-heavy business. The correct handling is to report the gross figure and deduct the offsets on the appropriate lines, not to inflate your reported income to make the numbers match. What does create a problem is an unexplained gap with nothing on the return accounting for it.
Not automatically. IRC 183 is not a consecutive-loss test. The presumption of a profit motive applies if the activity is profitable in three or more years within a period of five consecutive years ending with the current year (two of seven for horse activities). Even if you fail that test, you can still establish profit motive under the nine factors in Treas. Reg. 1.183-2(b). If you are a genuine startup with early losses, look at Form 5213, which lets you elect to postpone the determination until after the fifth taxable year.
No. The $75 rule is much narrower than it is usually described. Treas. Reg. 1.274-5(c)(2) waives documentary evidence only for certain travel, gift and listed property expenses, lodging always requires a receipt at any amount, and even for a sub-$75 travel expense you still have to keep a written record of the amount, time, place and business purpose. Ordinary business expenses remain substantiable under IRC 6001 at every dollar amount. Discarding all sub-$75 receipts is a reliable way to lose deductions on examination.