Understanding how far back the Internal Revenue Service can audit you is critical for managing tax risk, staying compliant, and avoiding costly penalties. Audit timelines vary based on filing accuracy, income reporting, and potential fraud.
Key Takeaways:
The short answer: In most cases, the IRS has three years from the date you filed your return to audit you. But that window can stretch to six years, or even become unlimited, depending on what happened on your return.
Understanding where you stand on that timeline is one of the most important things any taxpayer can know. Below, we break down the tax law and rules, the exceptions, the triggers that draw IRS attention, and what to do if the agency comes knocking.
The general rule is found in Section 6501(a) of the Internal Revenue Code. The IRS has three years from the later of two dates to assess additional tax against you:
If you filed on April 1 for a return due April 15, the IRS clock starts on April 15, not April 1. Filing early does not shorten the audit window.
Most audits are completed well within these three years. Once it closes, the IRS generally loses its ability to assess additional tax for that year.
If you omit more than 25% of your gross income from a tax return, the IRS gets twice as long to find it. Under Section 6501(e)(1) of the Internal Revenue Code, the audit period extends to six years.
Here is how that works in practice:
This rule applies to omissions of income, not overstatements of deductions. It is also worth noting that the IRS does not need to prove intent for this extension to apply. The math alone is enough.
No. When a taxpayer files a fraudulent return or willfully attempts to evade tax, there is no statute of limitations. If the IRS determines a return was fraudulent, the usual time limits disappear—the IRS can assess additional tax at any time.
The IRS can pursue a fraud case if the evidence shows:
A taxpayer does not need to be convicted of a crime for the fraud exception to apply. Civil fraud carries its own penalty of 75% of the unpaid tax, on top of the tax itself.
“When there is no return filed, or when fraud is in play, the IRS has no obligation to stop looking. Our job is to make sure our clients understand what they are facing before they take any action.”
— Kenneth L. Sheppard, Jr., Esq.
If you did not file a return for a given year, the three-year clock never starts. The statute of limitations only begins to run once a return is actually filed.
That means the IRS can assess tax on an unfiled year at any time, even decades later. And failing to file has consequences beyond the audit risk:
If you have unfiled returns, the most important step you can take is to get into compliance before the IRS reaches out to you. Voluntary compliance is treated far more favorably than compliance forced by IRS contact.
If you are selected for an audit, the IRS will contact you exclusively by mail. Be aware that phone calls claiming to be from the IRS are almost always scams. The official audit process begins with a written notice.
There are three types of audits:
After the initial contact, the IRS will identify the specific items being reviewed and request supporting documentation. Common documents requested include:
Keeping your records organized by tax year makes this process significantly more manageable. The IRS will typically set a response deadline, and missing it can result in the IRS making its own assessment based on available information.
An audit can conclude in one of three ways:
Penalties that may be assessed following an audit include:
The way you respond to an audit notice can significantly affect the outcome. Here is what experienced tax attorneys consistently recommend:
“People often make the mistake of responding to an audit on their own, thinking it will be straightforward. The IRS is experienced at these examinations. Having someone in your corner who speaks the same language makes a real difference.”
— Kenneth L. Sheppard, Jr., Esq.
The IRS uses automated systems to score returns for audit risk, but certain patterns reliably draw closer scrutiny. Knowing these triggers does not mean avoiding legitimate deductions. It means ensuring your documentation is ready when questions arise.
Yes, significantly. The IRS historically dedicates more audit resources to higher-income returns, where the potential tax recovery is greatest. Audit rates increase at higher income thresholds, and returns reporting $1 million or more in income have faced audit rates well above the general population.
High-income filers are also more likely to have complex returns with multiple income sources, business interests, investments, and deductions, each of which represents a potential area of review.
Yes. The IRS compares deductions on your return against statistical norms for your income level. Deductions that look disproportionately large relative to what similar filers report can trigger a closer look.
Common deduction-related triggers include:
The solution is not to forgo legitimate deductions. It is to keep thorough documentation, including receipts, appraisals, and contemporaneous records, that support every deduction you claim.
It can be, if the deduction is claimed improperly. The IRS requires that a home office be used regularly and exclusively for business, and that it serve as your principal place of business or a place where you meet clients.
Casual or occasional work-from-home use does not qualify. Neither does a room that doubles as a guest bedroom. The IRS looks at:
Employees working from home, including remote workers, generally cannot claim a home office deduction under current tax law unless they are self-employed.
The Earned Income Tax Credit (EITC) is one of the most audited areas in the entire tax code, largely because it has historically carried high error and improper payment rates. The IRS is required by law to take additional steps to verify EITC eligibility before issuing those refunds.
Common reasons EITC claims are questioned include:
Taxpayers with foreign financial accounts and assets face a more complex set of rules.
The Foreign Bank Account Report (FBAR), filed separately with FinCEN under the Bank Secrecy Act, is required for foreign financial accounts that exceed $10,000 at any point during the year. The civil penalty statute for FBAR violations is six years.
Under the Foreign Account Tax Compliance Act (FATCA), U.S. taxpayers are also required to report foreign financial assets above certain thresholds on Form 8938, filed with their tax return. If you fail to include Form 8938, the audit statute of limitations on your entire tax return does not begin to run until the form is filed.
That is not a minor technicality. It means the IRS could potentially audit an otherwise ordinary tax return years after it was filed, simply because a required foreign asset disclosure was missing.
Key reporting obligations for taxpayers with foreign connections include:
The audit statute and the collection statute are two separate clocks. Once the IRS formally assesses a tax liability against you, it has 10 years under Section 6502 of the Internal Revenue Code to collect that debt.
Collection actions the IRS can take within that 10-year window include:
Certain events can extend or pause the collection period, including bankruptcy filings, installment agreement requests, and offers in compromise. If you have an existing tax liability, understanding where you are in the collection window matters as much as understanding the audit window.
They are. Cash-intensive businesses, such as restaurants, contractors, and retail operations, are harder for the IRS to verify through third-party information. Schedule C (sole proprietorship) returns also receive above-average scrutiny because they combine business income and personal tax reporting in a single form.
The IRS pays particular attention to Schedule C returns that report:
Your recordkeeping timeline should mirror the IRS audit window, with some buffer. Here are the general guidelines:
Records worth retaining include tax returns themselves, W-2s and 1099s, receipts for deductions, brokerage statements, real estate records, and any correspondence with the IRS.
Yes. Taxpayers have significant rights after an unfavorable audit result. The appeals process is one of the most underused tools available.
After receiving a proposed assessment, you can:
Document every communication with the IRS throughout this process. Dates, names, and the substance of conversations all matter if the case escalates.
Not every audit requires legal representation. A straightforward correspondence audit over a single document may be entirely manageable on your own.
But there are situations where professional help is not optional. Consider contacting a tax attorney if:
At Sheppard Law Offices, we represent taxpayers throughout the audit process and beyond, including appeals, penalty abatements, and tax debt resolution. If you have received an IRS notice or have reason to believe an audit is coming, the earlier you seek counsel, the more options you have.
Columbus Main Office:
Hours of Operation:
Columbus Main Office:
Newark Office:
Mt. Vernon Office:
© 2026 Sheppard Law Offices. All Right Reserved
Website Design by Social Firm
