Why CRA Audits Small Businesses
The Canada Revenue Agency audits small businesses to verify that income is reported accurately, expenses are legitimate and properly categorized, and all required filings (HST/GST, T4s, T2/T1) are complete and on time.
Most audits are not random. CRA uses risk-scoring algorithms that flag returns with unusual patterns — and many of those patterns come from poor bookkeeping rather than actual fraud.
The best way to avoid a CRA audit (or survive one when it happens) is clean, consistent, professionally maintained books.
Top CRA Audit Triggers for Canadian Small Businesses
1. Large or Unexplained Income Swings
CRA benchmarks your business against others in your industry. If your revenue drops 40% in one year without an obvious explanation (pandemic, market shift), or if it spikes dramatically, your return gets flagged.
What CRA sees: Revenue inconsistency → possible unreported income or fabricated expenses.
Fix: Keep a paper trail for any unusual year. A bookkeeper can add notes to your year-end files explaining major shifts.
2. High Expense Ratios
Every industry has an expected expense-to-revenue ratio. A restaurant typically runs 60–70% cost of goods sold. A consultant might be 20–30%. If your expense ratio is significantly outside the norm, CRA takes notice.
Common flagged expenses: - Meals and entertainment (>1–2% of revenue) - Vehicle expenses (especially 100% business use claims) - Home office deductions above reasonable percentages - Advertising expenses that don't align with business scale
3. Consistently Reporting Losses
A business that reports net losses for three or more consecutive years is a known CRA audit trigger. CRA questions whether the activity is a genuine business or a hobby being used to offset personal income.
Fix: If your business is legitimately growing and not yet profitable, document the business plan, client development, and market activity. Your bookkeeper should ensure all legitimate start-up costs are properly classified.
4. Cash-Intensive Business
Restaurants, bars, contractors, salons, and other cash-heavy businesses face higher audit frequency than businesses that operate entirely through traceable digital payments.
CRA uses deposit analysis — comparing cash deposits to reported revenue. Any significant discrepancy triggers a reassessment.
Fix: Deposit all cash revenue promptly and intact (never commingle personal and business cash). Record every transaction, even small cash sales.
5. Missing or Late HST/GST Filings
A missed HST/GST deadline is a direct red flag to CRA. Late filers attract immediate penalties (5% of balance owing, plus 1% per month). Habitual late filers get added to high-risk watchlists.
Fix: File on time, every time. If you're unsure of your filing frequency (monthly, quarterly, annually), confirm with CRA or have your bookkeeper track it.
6. Mismatched T4s and T5s
If the T4s your business issues don't match what your employees report on their personal returns, CRA notices the gap and investigates both sides. Similarly, shareholder dividends (T5s) must match corporate records exactly.
7. Large Charitable Donations
CRA cross-references charitable donation receipts against issuing charities. Inflated or fabricated donation claims — especially when disproportionate to income — trigger audits on both the donor and sometimes the charity.
8. Claiming 100% Vehicle Use
Claiming your vehicle is used 100% for business purposes is a significant audit trigger. CRA expects most business vehicles to have some personal use. If you claim 100%, you need a mileage logbook showing every business trip for the entire year.
Fix: Keep a mileage log. A realistic percentage (70–90% for a vehicle used mostly for business) is more defensible than 100%.
What Happens During a CRA Audit?
A CRA audit begins with a letter or phone call requesting documents. Common requests include:
- ●Bank statements for all business accounts (typically 3 years)
- ●Invoices and receipts for claimed expenses
- ●Payroll records and T4 summaries
- ●HST/GST working papers
- ●Vehicle logbooks
- ●Contracts with major clients or suppliers
Audits can be conducted by mail (desk audit), at your place of business (field audit), or at a CRA office. The timeline varies from a few weeks to over a year for complex cases.
How to Be Audit-Ready
The businesses that survive CRA audits without issues have one thing in common: organized, consistently maintained books.
Audit-readiness checklist: - [ ] Bank accounts reconciled monthly - [ ] All expenses categorized with receipts attached - [ ] HST/GST filed on time for every period - [ ] T4s and T5s issued accurately and on time - [ ] Mileage log maintained for all business vehicles - [ ] Home office calculation documented and defensible - [ ] 7 years of records retained (CRA's recommended minimum) - [ ] Year-end books prepared and reviewed before filing
How Professional Bookkeeping Reduces Audit Risk
Most CRA audit triggers come from messy books, not intentional fraud. When transactions are miscategorized, receipts are missing, or filings are late, it creates exactly the patterns CRA's risk algorithms flag.
A professional bookkeeper: - Categorizes every transaction consistently and correctly - Reconciles accounts monthly so errors are caught immediately (not years later) - Tracks HST/GST filing deadlines and prepares returns on time - Maintains organized records in a format that is CRA-ready - Identifies and corrects issues before they become audit triggers
At [Outsource Bookkeeping](/), we maintain CPA-ready books for Canadian small businesses, delivered by the 10th of every month. If CRA ever comes knocking, you'll have a complete, organized, defensible set of records ready to respond.
[Book a free consultation](/contact) to see how clean books protect your business.
Frequently Asked Questions
Need professional bookkeeping?
Outsource Bookkeeping delivers CPA-ready financial reports by the 10th of every month — flat rate, no surprises.