The CRA has modernised its approach. Today's audits are data-driven, targeted, and increasingly handled by desk review rather than field visits. Here is what triggers them, how to respond correctly, and how to stay prepared year-round.
For many small business owners, receiving a letter from the Canada Revenue Agency (CRA) triggers an immediate sense of dread. The word "audit" conjures images of inspectors poring over boxes of faded receipts for weeks on end.
However, the CRA has significantly modernized its approach to compliance over the past few years. Today, the process is increasingly data-driven, digital-first, and highly targeted. Understanding how these modern audits work is the first step to removing the anxiety and ensuring your business is prepared.
The Shift to Desk Audits and "Review Letters"
The traditional field audit—where a CRA auditor visits your premises—is becoming less common for routine small business files. Instead, the CRA increasingly relies on "desk audits" or targeted review letters. These are often triggered by automated risk-assessment algorithms that flag anomalies in your tax filings.
For example, if your reported vehicle expenses are disproportionately high compared to industry averages for your NAICS (North American Industry Classification System) code, the system may automatically generate a letter requesting a mileage log and supporting receipts for that specific line item.
Common Triggers for Small Business Audits
While the CRA does conduct random audits, the vast majority are initiated because something in your return stood out. Common triggers include:
- Consistent Losses: Reporting business losses for multiple consecutive years, especially in sole proprietorships.
- Industry Discrepancies: Profit margins or expense ratios that deviate significantly from industry norms.
- Shareholder Loans: Large, fluctuating, or long-standing balances in shareholder loan accounts.
- GST/HST Discrepancies: Mismatches between the revenue reported on your corporate tax return (T2) and the revenue reported on your GST/HST returns.
- Real Estate Transactions: Frequent buying and selling of property, which the CRA scrutinizes to distinguish between capital gains and business income.
How to Respond (and How Not To)
If you receive a letter from the CRA, the most important rule is: Do not ignore it. The CRA typically provides a strict 30-day window to respond. Ignoring the request will almost certainly result in the CRA denying the expense in question and issuing a Notice of Reassessment, complete with interest and potential penalties.
The Golden Rule: Answer Only What is Asked
When providing documentation, clarity and precision are your best friends. If the CRA asks for invoices supporting your office supply expenses, provide exactly those invoices, neatly organized, perhaps with a summary cover sheet. Do not send your entire general ledger or a shoebox of unrelated receipts. Providing unrequested information can inadvertently open new avenues of inquiry.
The Importance of Proactive Record-Keeping
The best defense against a CRA audit is a good offense—meaning immaculate, digitized record-keeping. The days of handing a CPA a bag of receipts in April are over. Modern accounting requires a clean, digital paper trail.
- Digitize Everything: Use cloud accounting tools (like QuickBooks or Xero) and receipt-capture apps (like Dext or Hubdoc). Digital records don't fade, and they are easily searchable when the CRA comes knocking.
- Maintain the Mileage Log: This is the most frequently challenged expense. A contemporaneous log (recorded at the time of the trip, not estimated at year-end) is non-negotiable. Apps like MileIQ can automate this.
- Separate Personal and Business: Never co-mingle funds. Use dedicated business bank accounts and credit cards for every business transaction.
When to Call Your CPA
A simple request for a few receipts can often be handled directly by the business owner. However, if the CRA is questioning your business structure, challenging your GST/HST filings, or initiating a full audit, you should engage your CPA immediately. A CPA understands the specific tax legislation, knows how to communicate effectively with auditors, and can ensure your rights are protected throughout the process.
Ultimately, an audit is simply a verification process. With clean books, logical explanations for your expenses, and professional guidance, it is a manageable administrative task, not a crisis.
This report does not constitute a formal tax opinion, and no professional-client engagement is created solely by the receipt of this document. The application of tax law is highly fact-specific, and the Canada Revenue Agency’s interpretation of the Income Tax Act may differ from the positions described herein. Tax legislation, CRA administrative policies, and judicial interpretations are subject to change without notice, and such changes may affect the conclusions reached in this report.
STS has exercised professional judgment in the preparation of this report; however, neither the firm nor any of its partners, employees, or agents shall be liable for any errors, omissions, or inaccuracies in the information provided, or for any loss, damage, or consequence arising from reliance upon this report.
This report may not be reproduced, distributed, or relied upon by any party other than the intended recipient without the prior written consent of STS.