CRA Audits for Small Business: What Triggers One and How to Prepare

Few words make a small business owner’s stomach drop faster than “CRA audit.” But here’s the reality: most audits aren’t accusations of wrongdoing—they’re verifications. The Canada Revenue Agency (CRA) reviews returns to confirm that income and expenses are reported accurately, and many audits end with little or no change.

Still, an audit can be stressful, time-consuming, and costly if you’re caught unprepared. The good news is that understanding what triggers a CRA audit—and keeping your records ready year-round—dramatically reduces both your risk and your stress if your number comes up.

In this guide, we’ll break down what actually flags a small business for review, how the CRA audit process works, and the practical steps you can take to prepare and protect your business.

What Is a CRA Audit, Really?

A CRA audit is an examination of your books, records, and supporting documents to confirm that you’ve met your obligations under Canadian tax law and received any credits or refunds you’re entitled to.

It helps to know that not every CRA contact is a full audit. The CRA conducts several different types of reviews, ranging from quick to comprehensive:

  • Pre-assessment and processing reviews: Routine checks, often automated, that ask you to support a specific claim or deduction—frequently right after you file.
  • Matching program reviews: The CRA compares the income on your return against third-party slips (such as T4s and T5s) to catch discrepancies.
  • Full audits: A deeper examination of your business records, which may take place at your premises, your accountant’s office, or a CRA office.

Most small businesses are far more likely to encounter a review than a full-scale audit—but it’s smart to be prepared for either.

What Triggers a CRA Audit for Small Businesses?

The CRA doesn’t publish a precise list of audit thresholds, and some selection is genuinely random. But over the years, certain patterns have consistently drawn attention. Here are the most common CRA audit triggers for small businesses.

1. Expenses That Are High Relative to Your Income

The CRA uses risk-assessment systems that compare your return to similar businesses in your industry and region. If your expenses or deductions are unusually high compared to your reported income—or compared to your peers—it can raise a flag.

2. Recurring Business Losses

Reporting losses year after year, especially if those losses offset other sources of income, can prompt the CRA to ask whether your business is a genuine commercial activity or more of a hobby.

3. Cash-Intensive Businesses

Industries that handle a lot of cash—restaurants, salons, construction, trades, and similar sectors—face closer scrutiny simply because cash transactions are harder to trace. The CRA has historically run targeted projects focused on the underground economy.

4. Large or Unusual Deductions

Generous claims for home office expenses, vehicle use, meals and entertainment, or sudden spikes in a particular expense category can attract attention—particularly when the amounts seem disproportionate to the size of the business.

5. Discrepancies and Mismatched Information

If the income reported on your return doesn’t match the slips the CRA already has on file, or if your GST/HST filings don’t line up with your income tax return, the inconsistency can trigger a closer look.

6. Year-Over-Year Swings

Dramatic changes in revenue, expenses, or profit margins from one year to the next—without an obvious explanation—can prompt the CRA to ask questions.

7. Consistently Round Numbers

Returns full of suspiciously tidy figures (every expense ending in “00”) can suggest estimates rather than actual records, which undermines credibility.

8. Tips and Leads

The CRA receives information from a variety of sources, including its informant program. A tip can put a business on the radar regardless of how clean its return looks.

9. Random Selection

Finally, some audits happen for no reason at all. The CRA selects a portion of returns randomly, which means even a flawless filer can be chosen.

How the CRA Audit Process Works

If you’re selected, here’s what you can generally expect:

  1. Notification. The CRA contacts you—usually by mail or phone—to inform you that your return is being audited and to outline what they need.
  2. Information request. The auditor asks for specific records: receipts, invoices, bank statements, ledgers, contracts, and similar documentation.
  3. Examination. The auditor reviews your records, may ask follow-up questions, and could request additional details.
  4. Proposal. If the auditor proposes changes, they’ll typically explain them and give you an opportunity to respond before finalizing.
  5. Outcome. The audit may conclude with no change, a refund, or a reassessment showing additional tax owing (potentially with interest and penalties).

If you disagree with the result, you have the right to file a formal objection. Generally, individuals and businesses can file a Notice of Objection within 90 days of the date on the notice of reassessment—an important deadline worth confirming for your specific situation.

How to Prepare for a CRA Audit

Preparation isn’t something you scramble for after the letter arrives—it’s a habit you build year-round. Here’s how to stay audit-ready.

Keep Thorough, Organized Records

This is your single best defense. Maintain complete records of income and expenses, with receipts and invoices that support every claim. The CRA generally requires you to keep your business records for six years from the end of the last tax year they relate to—so don’t toss anything early.

Separate Business and Personal Finances

Use dedicated business bank accounts and credit cards. Commingling personal and business spending makes it far harder to substantiate your claims and is a common source of audit headaches.

Reconcile Regularly

Don’t wait until tax season. Reconcile your books monthly or quarterly so errors are caught early and your filings line up across income tax, payroll, and GST/HST.

Document the “Why” Behind Big Claims

For larger or unusual deductions—like a home office, vehicle, or significant equipment purchase—keep notes, logs, and supporting documents that explain the business purpose. A vehicle logbook, for example, is invaluable if your mileage is ever questioned.

Respond Promptly and Professionally

If the CRA contacts you, meet their deadlines and stay courteous. Provide exactly what’s requested—no more, no less. Volunteering extra information you weren’t asked for can unintentionally widen the scope of the audit.

Know Your Rights

Under the Taxpayer Bill of Rights, you have the right to be treated professionally, to representation by a professional of your choice, and to a formal review if you disagree with a decision. You don’t have to face the CRA alone.

Work With a Professional

An experienced accountant can help you respond accurately, communicate with the auditor on your behalf, and ensure you don’t pay more than you owe. Professional representation often makes the difference between a smooth process and a costly one.

Frequently Asked Questions About CRA Audits

How far back can the CRA audit my small business? The CRA can generally reassess a return within three years of the original notice of assessment. However, that window can extend further in cases involving misrepresentation, fraud, or carelessness. Keeping six years of records ensures you’re covered.

Does a CRA audit mean I did something wrong? Not necessarily. Many audits are verifications or result from random selection. Plenty conclude with no changes at all.

How long does a CRA audit take? It varies widely depending on the complexity of your business and how organized your records are. Well-kept books are one of the most effective ways to shorten the process.

Should I handle a CRA audit myself? You can, but professional representation is strongly recommended—especially for a full audit. An accountant understands what the CRA is looking for and can protect your interests throughout.

What happens if I can’t pay an amount the CRA says I owe? The CRA offers payment arrangements. It’s best to address the balance proactively rather than ignore it, as interest continues to accrue and collection action can follow.

The Bottom Line

A CRA audit doesn’t have to be a crisis. Most small businesses that keep clean, organized records and respond calmly come through just fine. The key is preparation: understand the triggers, maintain thorough documentation, separate your finances, and know that you have the right to professional support.

If you’d rather not navigate a CRA audit alone—or you simply want the peace of mind of knowing your books are audit-ready—we’re here to help. Reach out to our team for bookkeeping, tax planning, and audit representation that keeps your business protected and your records in order.


This article is intended for general information only and does not constitute tax, legal, or accounting advice. Tax rules change and individual circumstances vary—please consult a qualified professional or refer to canada.ca for guidance specific to your situation.