The IRS is no longer the paper-driven, understaffed agency it was five years ago. Funding from the Inflation Reduction Act has rebuilt enforcement capacity, and a new generation of machine-learning models is already pulling returns for review. Audit rates at the top of the income distribution are climbing fast, and the selection logic has shifted from random sampling to pattern detection across third-party data.
Most audits still start with a simple mismatch between what you reported and what someone else reported about you. But in 2026, "simple mismatch" covers a much wider surface, including 1099-K activity, crypto broker reporting, foreign account disclosures, and partnership K-1 flow-throughs. If you understand how the system flags returns, you can file confidently and keep documentation ready for the items most likely to draw questions.
Why 2026 Audits Look Different
The IRS received roughly $60 billion in multi-year enforcement funding starting in 2022, and hiring caught up by late 2025. Three structural changes matter for anyone filing in 2026:
- AI-driven selection models. The IRS Research, Applied Analytics, and Statistics division now scores every return against behavioral and financial patterns before a human examiner ever sees it. Scores above a threshold route to correspondence or field audits automatically.
- Third-party data integration. Broker 1099-B, 1099-K from payment apps, 1099-DA for digital assets, K-1 issuance by partnerships, and foreign account reports under FATCA all feed into one matching engine. A discrepancy of any size can trigger a CP2000 notice.
- Stated enforcement priorities. IRS leadership has publicly committed to raising audit coverage on taxpayers earning over $10 million, partnerships with assets above $10 million, and complex pass-through structures. Coverage on filers under $400,000 has been held flat by policy.
Who Gets Audited Most
Key Numbers- $10M+ income: Around 16.5% audit rate, up from 8.7% in 2019
- $1M–$10M income: 8–9% audit rate
- $400K–$1M income: 1–2% audit rate
- Under $400K income: 0.4% or less
- Large partnerships: Coverage rising toward 10% by 2026 targets
Trigger 1: Underreported Income
This is the single biggest driver of audit selection, and it is almost always caught by automated matching rather than examiner judgment. Every 1099, W-2, K-1, 1099-B, 1099-K, 1099-NEC, 1099-INT, 1099-DIV, and 1099-R you receive is also filed with the IRS. The matching process runs after tax season and issues a CP2000 notice for any gap.
How to avoid it:
- Pull a Wage and Income Transcript from your IRS online account before filing. It shows every third-party form reported under your SSN. Reconcile it line by line.
- If a 1099 is wrong (common with platform work and brokerage cost basis), request a corrected form before filing, not after.
- If you receive a 1099-K for personal transactions, report it but back it out on Schedule 1 line 8z with an offsetting adjustment. The IRS is still processing millions of false-positive 1099-Ks from payment apps.
Trigger 2: Deductions Out of Line with Income
The IRS builds statistical norms for every occupation and income band. A return that deviates significantly from the norm for similar filers gets flagged. Itemizing taxpayers are the most common target, especially when the ratio of deductions to AGI crosses historical benchmarks.
The ratios that tend to draw attention:
- Charitable contributions above 15% of AGI without substantiation
- Unreimbursed employee business expenses (limited, but still filed on some state returns)
- Medical expenses claimed despite low itemization elsewhere
- Home office deduction on Schedule C paired with minimal business activity
High deductions are not automatically wrong. They are automatically reviewable. Keep contemporaneous records, and for any non-cash charitable gift over $500, file Form 8283. Anything over $5,000 needs a qualified appraisal attached.
Trigger 3: Schedule C Losses Year After Year
The IRS presumes a business is a hobby if it fails to turn a profit in three of the last five consecutive years (or two of seven for horse operations). Once classified as a hobby, losses are disallowed entirely under current law, and the income is still fully taxable. The hobby-loss rule is one of the most commonly litigated audit outcomes.
Hobby vs. Business Factors
IRC §183The IRS weighs nine factors under Treasury Regulation 1.183-2(b):
- Manner in which you carry on the activity (business records, separate bank account)
- Expertise of the taxpayer or their advisors
- Time and effort expended
- Expectation that assets will appreciate
- Success in similar activities
- History of income or losses
- Amount of occasional profits
- Financial status (does the taxpayer have other substantial income?)
- Elements of personal pleasure or recreation
How to protect a genuine loss year:
- Maintain a written business plan and revise it annually
- Keep a separate business bank account and credit card
- Document marketing, lead generation, and pricing changes
- Have an exit strategy for activities that combine income with personal enjoyment (photography, horse breeding, consulting from a vacation property)
Trigger 4: Worker Misclassification
Classifying workers as 1099 contractors when they function as W-2 employees remains one of the highest-dollar audit adjustments in the small business category. The IRS uses the common-law control test, supplemented by Section 530 safe harbor analysis where applicable. Misclassification triggers assessments for back payroll taxes, penalties, and interest, often dwarfing the original savings from avoiding payroll taxes.
Red flags the IRS looks for:
- A former W-2 employee reclassified to 1099 with the same duties
- Full-time exclusive contractor relationships
- Contractors using company equipment, email, and office space
- Contractors with no other clients, no business registration, and no marketing presence
If you have any 1099 contractors whose status could be challenged, consider filing Form SS-8 proactively or participating in the Voluntary Classification Settlement Program (VCSP) for a reduced penalty.
Trigger 5: Cash-Heavy Businesses
Restaurants, bars, laundromats, car washes, vending, beauty salons, and small contractors have elevated audit rates because cash receipts are harder to trace and easier to underreport. The IRS publishes audit technique guides (ATGs) for many of these industries, and examiners use bank deposit analysis, percentage markup analysis, and lifestyle indirect methods to estimate true income.
Documentation that protects you:
- Daily Z-tape or POS export saved and reconciled
- Separate owner-draw line, never cash out of the register
- Consistent deposit patterns (irregular deposits trigger bank secrecy flags)
- Cost-of-goods-sold percentages in line with industry norms
If your reported gross margin is substantially higher or lower than the industry ATG, expect questions.
Trigger 6: Crypto and Digital Asset Reporting Gaps
Form 1099-DA is now in its second full year. Brokers, centralized exchanges, and some wallet providers file it with the IRS for every customer. The digital asset question on Form 1040 is not optional, and checking "No" while 1099-DA data exists under your SSN is an automatic mismatch.
Common gaps the IRS flags:
- Transfers between wallets reported as sales by the broker, not reconciled on Form 8949
- Staking and airdrop income not reported as ordinary income in the year received
- DeFi activity (liquidity pool entries, wrapped tokens, bridge transactions) treated as non-taxable when the IRS views them as realization events
- NFT sales without cost basis tracking
The IRS John Doe summons served on major exchanges since 2019 gives the agency historical data back nearly a decade. Voluntary amendment is almost always cheaper than the penalty stack on a discovered omission. If you have unreported crypto from prior years, fix it before selection.
Trigger 7: Foreign Accounts and FBAR Failures
If you had signature authority over or a financial interest in foreign accounts aggregating over $10,000 at any point during the year, you must file FinCEN Form 114 (FBAR). A separate Form 8938 is required with your tax return if asset thresholds are met. Both are automated matching points.
Penalties are severe: non-willful FBAR failures carry a $10,000 per year cap (recently reaffirmed per-form, not per-account, by the Supreme Court in Bittner), but willful violations reach the greater of $100,000 or 50% of the account balance.
Most common sources of unfiled FBAR liability:
- Inherited foreign accounts (often discovered years later)
- Immigrant taxpayers who never closed home-country accounts
- Executives on overseas assignment with expat compensation packages
- US citizens with foreign spouses holding joint accounts
Trigger 8: Large Charitable Deductions
Charitable contributions draw extra scrutiny because they are one of the easiest items to overstate and one of the hardest to verify at scale. The substantiation rules are strict and strictly enforced.
Conservation easements, donations of closely-held stock, and donations of cryptocurrency are on the IRS Dirty Dozen list and receive heightened examination. Syndicated conservation easement deductions remain a top enforcement priority.
Trigger 9: Math Errors and 1099/W-2 Mismatches
The IRS has automated math-error authority under IRC §6213(b), which lets it adjust a return and send a bill without a formal audit. These are not technically audits, but they have similar practical impact: you get a notice, you owe more, and a mistake can escalate into a full examination.
Most common causes:
- Transposed digits on wages or withholding
- Missing schedule totals that don't flow to Form 1040
- Duplicate reporting of estimated tax payments
- Missed Additional Medicare Tax or Net Investment Income Tax on high earners
- Credits claimed that exceed phase-out thresholds
E-filing with reputable software catches most arithmetic errors. The remaining risk is usually user error in categorization or a missing schedule.
Trigger 10: Round Numbers Everywhere
Examiners notice patterns. A return where almost every expense is a round number (exactly $2,000 for supplies, exactly $5,000 for meals, exactly $10,000 for travel) suggests the taxpayer estimated rather than tracked. Specific numbers with cents attached look more credible because they usually are.
This is not a make-or-break trigger on its own, but it compounds with other flags. Combined with a high deduction-to-income ratio or a Schedule C loss, round numbers tell the AI scoring model you did not keep real records.
What to Do If You Get an Audit Notice
Step 1: Read the Notice Carefully
The notice type tells you the scope. CP2000 is an automated matching notice, not a full audit, and usually resolves with a written response. Letter 525 or Letter 566 opens a correspondence audit. Letter 2205 is a field audit appointment. Each has a response deadline, typically 30 days.
Step 2: Do Not Ignore It
Missing the response deadline converts the proposed change into an assessment. You then have to file a petition with the Tax Court within 90 days of the Statutory Notice of Deficiency to preserve your right to challenge it without paying first.
Step 3: Gather Records Before Responding
Pull bank statements, receipts, mileage logs, depreciation schedules, and any contemporaneous documentation for the years and issues flagged. Reconstruct records only where originals are lost, and never fabricate.
Step 4: Consider Professional Representation
For anything beyond a simple CP2000 with a clear receipt, engage a CPA, enrolled agent, or tax attorney with audit experience. Representation costs far less than a poorly handled audit, and the representative can negotiate directly with the examiner while you continue operating your business.
Step 5: Know Your Appeal Rights
Every audit finding can be appealed to the IRS Independent Office of Appeals before payment. Appeals settles the majority of cases without litigation and has discretion the examiner does not.
Records to Keep and for How Long
- Three years: Routine returns with no unusual items. This is the standard statute of limitations for assessment.
- Six years: If you omitted more than 25% of gross income. The IRS has six years to assess.
- Seven years: Worthless securities or bad debt deductions.
- Indefinitely: Returns with unreported income, fraudulent returns, or no return filed. No statute of limitations applies.
- As long as you own the asset plus three years: Basis documentation for real estate, investments, and depreciable business property.
Digital records are acceptable if they are complete and legible. A single organized cloud folder per tax year, backed up, is better than a shoebox of paper receipts.
Bottom Line
The 2026 audit environment rewards clean, well-documented returns and penalizes gaps the matching engine can catch automatically. Reconcile your income transcripts before filing, substantiate deductions that fall outside statistical norms, and be honest about the close calls. The taxpayers who end up in multi-year audit exams are rarely the ones who made a single mistake. They are the ones who assumed nobody was looking.