A Deep Dive into Risk Assessment, Red Flags, and Audit Defense
One of the most common questions Canadian small business owners ask is:
“What actually gets people audited by the CRA?”
Many believe audits are random or simply bad luck. In reality, CRA audits are rarely random.
The Canada Revenue Agency uses increasingly sophisticated data analytics, benchmarking tools,
and third-party reporting to identify taxpayers with a higher probability of non-compliance.
In this guide, we break down the most common CRA audit triggers for 2025–2026, explain how the
CRA’s Net Worth audit method works, and outline practical steps business owners can take to
reduce audit risk and respond effectively if contacted.
1. How the CRA Selects Businesses for Audit
The CRA does not have the resources to audit every business. Instead, it applies a risk-based audit selection model. Each return is effectively scored against multiple benchmarks and risk indicators.
The three most important factors are:
Industry Benchmarks
The CRA compares your reported income and expenses to others in your industry and region. For example, if restaurants in Hamilton typically report a 25% gross margin but your business consistently reports 10–15%, your file may be flagged for review.
Benchmarking is particularly common in:
- Restaurants and food services
- Construction and trades
- Personal services
- Professional consulting businesses
Historical Filing Patterns
Sudden or unexplained changes raise concern, including:
- Sharp drops in revenue without a clear explanation
- Significant increases in expenses year-over-year
- Repeated switching from profits to losses
The CRA expects logical consistency. If your numbers tell an inconsistent story, an auditor may want to understand why.
Third-Party and Lifestyle Data
CRA receives information from:
- Financial institutions
- Land registries
- Insurance companies
- Payment processors
If your reported income does not reasonably support your lifestyle—such as purchasing an expensive home or luxury vehicle while reporting modest earnings—your file may be flagged through CRA’s internal “lifestyle” or Net Worth risk models.
2. Top CRA Audit Triggers for 2025–2026
Beyond general benchmarking, several specific areas are under heightened scrutiny.
2.1 Reporting Consistent Business Losses
While losses are common for startups, multiple consecutive loss years often trigger review.
CRA may argue the activity lacks a reasonable expectation of profit and reclassify it as a hobby.
If this happens, CRA may:
- Deny all business expenses
- Reassess prior years
- Charge penalties and interest
This issue is common with side businesses, rental activities, and consulting arrangements.
2.2 The “Cash Economy” Watchlist
Certain industries are considered high risk due to cash transactions and informal labour arrangements. These businesses are disproportionately audited.
High-risk sectors include:
- Construction and skilled trades
- Hospitality and food services
- Small retail businesses
- Personal services
Professional services are also scrutinized for employee vs. independent contractor
misclassification, particularly where one contractor represents most of the business’s revenue.
2.3 Unreasonable or Aggressive Expense Claims
CRA often focuses on expense categories where personal use is common.
Common red flags include:
- Vehicle expenses exceeding 75% without a mileage log
- Home office deductions exceeding 10–15% of total living space
- Meals and entertainment claims that appear personal, excessive, or poorly documented
The CRA looks for patterns suggesting lifestyle expenses are being pushed through the business.
3. The “Blunt Instrument”: Understanding Net Worth Audits
When CRA believes a business’s books and records are unreliable, it may apply an Indirect Verification of Income (IVI) method—most commonly a Net Worth Audit.
How the Net Worth Method Works
(Closing Net Worth – Opening Net Worth) + Personal Expenditures = Imputed Income
If your net worth increased by $200,000 during the year but you reported only $50,000 in income,
CRA may assume the $150,000 difference is unreported taxable income.
At this point, the burden of proof shifts entirely to the taxpayer.
Acceptable Explanations for Net Worth Gaps
- Gifts or inheritances
- Loan proceeds
- Prior savings
- Insurance settlements
Without documentation, CRA will assess tax, penalties, and interest on the assumed income.
4. Why Personal Records Are Now Part of Business Audits
A common misconception is that CRA audits only focus on business accounts. In reality, CRA has
broad legal authority.
- Personal bank and credit card statements
- Spousal financial records
- Mortgage applications (to compare declared income)
- Travel and lifestyle documentation
This is especially common when CRA suspects income suppression or cash skimming.
5. Gross Negligence Penalties: The Hidden Cost
If CRA concludes that income was omitted knowingly or through gross negligence, penalties may
be applied under Subsection 163(2) of the Income Tax Act.
The Cost
- Penalty: 50% of the tax avoided
- Plus compounded interest
Example:
Unreported income generates $50,000 in tax →
Penalty of $25,000 →
Plus years of interest
6. How to Proactively Reduce Your Audit Risk
Best practices include:
- Separate business and personal banking
- Maintain a mileage log
- Document non-taxable funds (loans, gifts, family assistance)
- Avoid rounded numbers
Rounded expenses suggest estimates, not receipts—and invite deeper review.
7. What to Do If the CRA Contacts You
Key steps:
- Verify the auditor’s identity through CRA channels
- Do not overshare beyond what is requested
- Seek professional representation early
How A&R LLP Protects Your Business
At A&R LLP Chartered Professional Accountants, we don’t just prepare tax returns—we build
defensible tax positions.
- Pre-audit risk reviews
- CRA audit representation
- Net Worth audit defense and analysis
- Strategic documentation support
Concerned about an audit or received a CRA letter?
Contact A&R LLP for a confidential assessment.