IRS audits rarely arrive without warning. They’re almost never random. And they’re almost never the sudden, dramatic event that people imagine when they hear the word.
In most cases, there’s a sequence that leads to a formal audit — a progression from automated flags to correspondence to formal examination. Understanding that sequence, and understanding what the IRS is actually looking for when it scores returns for audit potential, gives you something more useful than anxiety: it gives you a checklist.
If your return has none of the indicators below, your audit risk is low. If it has several, understanding why can help you either correct the issue proactively or prepare documentation in advance.
How the IRS decides which returns to examine
Audit selection isn’t random for the vast majority of returns. The IRS uses the Discriminant Function System — commonly called DIF — to score every return based on how much it deviates from statistical norms for comparable taxpayers. Returns filed by self-employed individuals earning $75,000 in a specific industry are compared against the average deduction ratios, expense percentages, and income patterns for similar filers. The more a return deviates from those norms, the higher its DIF score, and the higher the probability it will be pulled for human review.
That human reviewer then makes a judgment about whether the statistical deviation is likely to produce additional tax if examined. If yes, a formal audit is initiated. If not, the return is closed without action despite the elevated score.
This is important context: a high DIF score doesn’t mean you did anything wrong. It means your return looked unusual relative to statistical averages. Many unusual returns are perfectly accurate — they just happen to contain deduction profiles or income patterns that stand out. Documentation is what separates an unusual-but-correct return from an audit adjustment.
The indicators that actually matter
Income mismatches with third-party forms are the most direct and immediate risk factor. The IRS receives copies of every W-2, 1099-INT, 1099-DIV, 1099-B, 1099-NEC, and 1099-K issued under your Social Security number. When the income shown on those forms doesn’t appear on your return — or appears at a different amount — the automated matching system flags it. This isn’t a DIF scoring issue; it’s a direct data mismatch that generates correspondence automatically. Unresolved mismatches that escalate through multiple notices are one of the most common pathways to formal examination.
Disproportionate deductions relative to income elevate DIF scores consistently. The IRS compares your deduction ratios against industry norms. A freelance consultant claiming $48,000 in business expenses against $52,000 in revenue is in a very different statistical position than one claiming $14,000. The first profile deviates significantly from what similar businesses typically show. That doesn’t make the deductions wrong, but it does increase the probability of review.
Repeated business losses across multiple years trigger a specific type of scrutiny related to profit motive. Tax law requires that an activity be conducted with a genuine intent to profit in order to qualify for business loss deductions. If a Schedule C shows losses for three, four, or five consecutive years — particularly when those losses conveniently offset W-2 income from a primary job — the IRS may evaluate whether the activity is a legitimate business or a hobby with deductible expenses. The concern isn’t the loss itself; it’s whether the pattern suggests the activity was ever genuinely expected to generate profit.
Cryptocurrency reporting gaps have become an increasingly prominent risk factor. The IRS receives transaction reports from exchanges, includes a direct digital asset question on Form 1040, and uses blockchain analytics to identify unreported activity. Answering “No” to the digital asset question while having exchange-reported transactions creates a straightforward inconsistency in the IRS’s data.
Cash-intensive businesses carry higher statistical scrutiny in IRS risk models because income in these industries is historically harder to verify through third-party reporting. If your reported income appears low relative to industry norms, or if bank deposit patterns examined during an audit differ significantly from reported revenue, indirect income reconstruction methods may be used.
| Risk factor | Audit risk impact | What actually matters |
|---|---|---|
| Income mismatch with 1099/W-2 | High | Reconcile all third-party forms before filing |
| Disproportionate deductions | Medium-High | Documentation supporting each deduction |
| Repeated business losses | Medium-High | Evidence of profit motive and business activity |
| Unreported crypto transactions | High | Complete transaction history and accurate reporting |
| High income (above $500K) | Medium | IRS allocates more resources to higher-dollar returns |
| Ignored prior IRS notices | High | Unresolved notices escalate toward formal examination |
| W-2 income, standard deductions | Low | Straightforward returns with matched data rarely flagged |
How most audits actually progress
The scenario most people imagine — an IRS agent appearing at the door without warning — almost never happens in routine cases. The actual progression is slower and more procedural.
It typically starts with a letter. A CP2000 proposes additional tax based on a mismatch. Or a letter requests documentation for a specific deduction. If that letter goes unanswered, a follow-up arrives. If that one goes unanswered, the issue escalates further. By the time a formal examination notice arrives, there have usually been multiple prior notices that went unaddressed.
This means the window for the easiest resolution is almost always in the early stages — when the IRS is asking questions rather than asserting conclusions. Responding to a CP2000 with documentation typically resolves the issue at that level. Not responding converts a proposed adjustment into an assessed balance and moves the case toward enforcement.
What doesn’t automatically increase audit risk
High income alone doesn’t trigger audits — it increases the dollar value of any potential adjustment, which means the IRS allocates more examination resources to high-income returns, but it’s complexity and inconsistency that drive selection, not profit. Claiming legitimate deductions doesn’t increase risk — claiming deductions that are disproportionate to your income or industry norms does. Being self-employed doesn’t guarantee an audit — it increases the number of discretionary inputs on your return, which increases statistical variance, which increases DIF scoring. The response is documentation and consistency, not avoiding legitimate deductions.
Frequently asked questions
Can I check my IRS account to see if I’m flagged for audit? Your IRS online account at irs.gov shows your tax records, transcripts, and any notices sent to you, but it doesn’t indicate whether your return has been selected for examination. Audit selection isn’t visible to taxpayers before the formal notice arrives.
Does claiming a home office deduction increase audit risk? A home office deduction that meets the exclusive-use requirement and is properly documented doesn’t significantly increase risk on its own. The risk comes from home office deductions that are unusually large relative to income or that don’t have documentation supporting the exclusive-use test.
What’s the best thing I can do right now to reduce audit risk? Review your most recently filed return against all the 1099 and W-2 forms issued under your SSN for that year. If anything doesn’t match, an amended return filed proactively is far less risky than waiting for the IRS to find it.