If you are asking what triggers CRA audits, you are usually in one of two situations: you have just received a CRA review or audit letter, or you want to reduce the chance of one happening. What triggers CRA audits is more often a mismatch, a missing support file, or a pattern that the agency finds difficult to verify quickly. This guide takes a practical, document-first approach for Canadian corporations and their owners.

Table of contents

What Triggers CRA Audits: The Short Answer

CRA audits are triggered when what you filed does not match what the CRA can verify from your books, slips, GST/HST filings, payroll remittances, or third-party information. The agency uses a combination of automated risk-scoring, industry benchmarking, and random selection to identify files for review. Even corporations that have filed correctly can be selected, but the strongest protection is always a file that is easy to verify.

The most common corporate audit trigger areas are income and expenses that do not reconcile, GST/HST returns that do not align with bookkeeping, and payroll or owner pay issues. Understanding each of these areas and how to address them proactively is the core of this guide.

Key Terms in Plain English

Audit: CRA examines your books and records to confirm amounts and compliance with tax law.

Input tax credits (ITCs): GST/HST credits claimed on business purchases. Only available with proper documentary support including a compliant invoice and proof of payment.

Source deductions: Payroll amounts withheld from employee pay and remitted to the CRA. These are treated as strict compliance items and late remittances attract penalties quickly.

Shareholder benefits: Personal expenses or use of corporate assets by a shareholder, which can be treated as taxable income if not properly tracked and reported.

Reassessment: The CRA formal process of revising a tax return after audit, which may result in additional taxes, interest, and penalties owing.

Common Audit Selection Patterns

CRA does not publish its exact selection criteria, but real-world patterns consistently come down to three broad categories.

Mismatch Pattern

Your T2 corporate return, GST/HST filings, payroll records, and banking activity do not tell the same story. When CRA cross-references these data sources and finds inconsistencies, the file becomes harder to validate and more likely to attract a review.

Documentation Pattern

You have claimed items that are valid only with strong supporting documentation, but the support is missing, incomplete, or inconsistent. CRA is not questioning whether the expense occurred. It is questioning whether you can prove it. Travel, vehicle, meals and entertainment, home office, and contractor payments are among the most commonly scrutinised categories.

Compliance Pattern

Late filings, missed remittances, inconsistent reporting periods, or repeated adjustments to previously filed returns can flag a file for closer attention. A history of compliance issues signals to CRA that the file may warrant a deeper look.

What Triggers CRA Audits: Income and Expense Mismatches

This is the most common corporate audit scenario. CRA cannot tie what you reported to what happened in your records, and the mismatch creates questions that require a response.

Income Does Not Match What Your Records Suggest

Typical triggers include bank deposits that exceed reported sales without a clear timing explanation, revenue that swings sharply year over year without documented support, and margins that appear out of range for your industry. CRA has access to industry benchmarking data and uses it to compare your results against similar businesses.

To protect yourself, build a sales reconciliation that ties invoices, payment processor reports, deposits, and reported revenue together. Label non-sales deposits clearly so they do not look like unreported income. Keep a concise variance note that explains any significant year-over-year changes with numbers and dates.

Expenses Claimed Without Adequate Support

Large travel, vehicle, meals and entertainment, or home office claims without logs and consistent documentation are among the most commonly audited expense categories. If expense categories jump materially from one year to the next with no clear business explanation, or if personal items appear to have run through the corporation, these patterns attract attention.

A common misconception is that if the expense genuinely occurred, CRA will accept it. In practice, the agency needs to be able to verify the expense from your records. That requires invoices, receipts, proof of payment, and a documented business purpose. Practically, this means a clean general ledger, a receipt package by category, and a schedule of your top 20 expenses with full support for each one.

What Triggers CRA Audits: GST/HST Filings and Input Tax Credits

GST/HST audits typically come down to two questions: does GST/HST collected match your sales records, and are your input tax credits supported by compliant invoices and proof of payment? Accounting software errors frequently create problems here. Incorrect tax codes, duplicated entries, or miscategorised transactions can cause GST/HST reporting to diverge from actual business activity without anyone noticing.

Common GST/HST Audit Triggers

ITCs claimed without compliant invoices are a primary trigger. Compliant invoices must include the supplier GST/HST registration number, a description of the goods or services, the date, and the tax amount. GST/HST collected that does not align with sales reports, large ITCs or refunds relative to sales, late filing, frequent adjustments, and inconsistent reporting periods all increase audit risk in this area.

Practical Steps for GST/HST Compliance

Run a GST/HST detail report for each period and tie each significant ITC to an invoice and proof of payment. Label documents for fast retrieval. Review your accounting software tax codes periodically, especially if your business has changed products, provinces, pricing, or billing methods. A disorganised response to a GST/HST inquiry often prompts more questions than a clean, indexed submission.

What Triggers CRA Audits: Owner Pay, Payroll, and Shareholder Benefits

Payroll and owner pay issues can trigger fast-moving reviews because source deduction remittances are strict compliance items. Problems typically show up as late remittances, unclear owner withdrawals, or inconsistent treatment of workers as employees versus contractors.

Common Payroll Audit Triggers

Late or inconsistent remittance amounts, payroll filings that do not match payroll records, and T4 slips that do not reconcile to payroll expenses are all significant triggers. Worker classification is an area of increasing CRA focus. Misclassifying employees as contractors to avoid source deduction obligations is a pattern CRA actively looks for.

Owner withdrawals coded as expenses, shareholder loans not tracked cleanly, personal expenses run through the corporation, and taxable benefits not consistently reported are also common triggers. These issues can expand the scope of an audit from a payroll question into a broader shareholder benefit review.

Practical Steps for Payroll Compliance

Pull payroll registers, remittance confirmations, T4 summaries, and account statements for the period. Reconcile payroll expense to source deductions withheld, remitted, and payable. For contractor relationships, ensure contracts, invoices, and working terms are documented and support the classification used.

Common Audit Scenarios by Business Type

Incorporated Consultant with High Travel and Home Office Claims

Consultants with significant travel, vehicle, or home office deductions are frequently reviewed because these categories require strong documentation and are often overclaimed. Mileage logs, home office square footage calculations, receipts, and a clear personal-versus-business distinction are the foundation of a solid response. Rebuilding your bookkeeping system is rarely necessary; focused documentation for the period under review is usually sufficient.

Corporation with GST/HST Refunds or Large ITCs

Corporations claiming GST/HST refunds or large ITCs are subject to review before refunds are released. The key is ITC support. Each significant purchase should be tied to a compliant invoice and proof of payment. Reviewing your accounting software tax codes before responding to any CRA inquiry is worth the time.

Technology or Crypto Company Using Many Contractors

Tech and crypto companies paying many contractors face scrutiny on worker classification. If contractors work exclusively for the corporation, follow its direction, and use its equipment, CRA may argue they should be employees. Clear contractor agreements, independent invoices, and documented working terms are essential. A careful review of the facts for each relationship is the right starting point, not immediate reclassification.

Cash-Heavy Business with Deposit Gaps

Businesses handling significant cash are at higher risk of a deposit-based audit. If sales reports and bank deposits do not reconcile cleanly, CRA will draw inferences about unreported income. A clear, documented explanation for any deposit gaps is essential.

Corporation with Repeated Losses or Large Deduction Claims

Corporations reporting losses in multiple consecutive years, or claiming unusually large deductions, may attract attention because CRA benchmarks results against industry norms. Identifying exactly what CRA is questioning and building support for that specific item is the right approach before responding.

A Practical 30-Day Action Plan After Receiving a CRA Letter

Week 1: Build the Audit File

List every item in the CRA letter. Pull bank statements, credit card statements, invoices, receipts, and payroll reports for the period. Create one organised folder that matches the CRA request list. Use the checklist below to identify missing support early, while you still have time to locate it.

Week 2: Reconcile the Numbers

Build reconciliation schedules that tie your filed returns to your records. Reconcile sales to deposits and invoices, top expense categories to receipts, and if GST/HST is included, tie collected tax and claimed ITCs to your return reports. The goal is to be able to explain every significant number before CRA asks.

Week 3: Build the Support Package

Organise documents by the CRA request items. Label PDFs clearly. Add short factual notes only where necessary and avoid lengthy narratives that introduce new information or expand the scope. Flag anything that depends on specific facts and confirm those facts before including them.

Week 4: Respond and Protect Scope

Submit a tight response with a short cover note and a document index. Answer the questions asked and nothing more. Keep a complete copy of everything you sent. If the audit is escalating or CRA is asking beyond the original request, professional CRA representation can keep communication focused.

The 12-Question Pre-Audit Checklist

Answer yes or no for the period most recently filed or currently under review.

  • Do your reported sales reconcile to deposits and invoices for the period?
  • Do you have receipts and proof of payment for your top 20 expenses?
  • Do you have clear labels for all non-sales deposits (loans, transfers, owner contributions)?
  • Did any major expense categories change significantly from the prior year?
  • If yes, do you have a documented business reason for those changes?
  • If GST/HST applies, does GST/HST collected reconcile to your sales reports?
  • If GST/HST applies, do your ITCs have compliant invoices and proof of payment?
  • If GST/HST applies, can you retrieve ITC support quickly by transaction?
  • Do payroll expenses reconcile to source deductions withheld and remitted?
  • Have remittances been made on time for the period under review?
  • Do you have contracts and invoices for all contractors paid in the period?
  • Are owner withdrawals, shareholder loans, and personal charges clearly tracked?

How TMP Corp Helps

If your corporation is under CRA review or you want to reduce the risk of one, TMP Corp provides practical, document-first support through our CRA representation service. We keep responses focused on what CRA asked for and prevent unnecessary scope expansion.

We map what CRA is most likely testing based on your letter and filing pattern, identify the shortest document path to support your position, build reconciliations that tie income, GST/HST, payroll, and banking records together, flag risk areas that commonly expand audit scope, and establish a clear response sequence and timeline.

Book a free 15-minute consultation with TMP Corp to get clarity on your next steps before you respond to CRA.

What triggers CRA audits most often for corporations?

CRA audits are most often triggered by mismatches between filed returns and verifiable records. The most common triggers are income and bank deposits that do not reconcile, expense claims without adequate documentation, GST/HST returns that do not align with bookkeeping, and payroll or owner pay issues. Filing consistently and maintaining clean, indexed records significantly reduces audit risk.

How does CRA select corporations for audit?

CRA uses a combination of automated risk-scoring, industry benchmarking, random selection, and third-party information to identify files for review. Files that show mismatches across T2, GST/HST, payroll, and banking records, or that include expense ratios outside industry norms, are more likely to be selected. A history of late filings or remittances also increases selection risk.

Can a CRA audit be triggered by accounting software errors?

Yes. Incorrect GST/HST tax codes, duplicated income entries, or expenses posted to wrong categories can create mismatches between your filed returns and your actual records. CRA reacts to the mismatch the error creates, not the software itself. Regular reconciliation of your bookkeeping to your filed returns helps catch these errors before CRA does.

How far back can CRA audit a corporation?

Generally, CRA can reassess a corporate tax return within three years of the date the original notice of assessment was issued. However, exceptions apply in cases of misrepresentation, fraud, or the waiver of the normal reassessment period. If your corporation is under review, it is worth confirming which years are in scope with a tax professional before responding.

Does receiving a GST/HST refund increase audit risk?

It can. Refunds and large ITCs relative to sales can draw questions, particularly if invoices are incomplete, business use is unclear, or reconciliations are weak. CRA often reviews refund claims before releasing payment, especially for larger amounts or new registrants. Having compliant invoices and proof of payment ready for each ITC significantly reduces the risk of delays or adjustments.

What should I do first if I receive a CRA audit letter?

Your first priority is to prevent scope creep. Do not send a long explanation or volunteer information beyond what CRA has requested. Create a folder for the period under review, pull the documents listed in the letter, and build reconciliations that tie your filed numbers to your records. If the audit involves complex issues or significant amounts, engaging professional CRA representation before you respond is strongly recommended.