Businesses tend to think of tax audits as bad luck. In practice, selection is largely driven by patterns in the data, and many of those patterns are avoidable.
Knowing what draws attention has two benefits: you avoid triggering enquiries unnecessarily, and when one arrives you are in a position to answer it quickly.
| Trigger 1 | inconsistency between filings |
|---|---|
| Trigger 2 | results out of line with the sector |
| Trigger 3 | third-party information mismatches |
| Trigger 4 | late or missing filings |
What draws attention
Inconsistency between your own filings. Turnover declared for consumption tax that does not reconcile with turnover in the income tax return; payroll figures that do not match contribution filings; import values that do not match purchases.
Authorities cross-match this automatically, so mismatches surface reliably. Most are innocent — different periods, timing differences, a genuine error — but each generates a question.
The fix is a reconciliation habit: before filing anything, check it against what you have already filed elsewhere, and keep a note explaining any legitimate difference. That note is often all that is needed later.
Results out of line with your sector. Authorities hold data on typical margins and cost ratios by industry. A business persistently reporting margins far below its sector's norm attracts attention, because the common explanations are under-declared sales or overstated costs.
If you have a legitimate reason — start-up phase, an unusual contract, a one-off write-off — document it at the time. An explanation with contemporaneous support is easy; the same explanation constructed two years later is not.
Third-party information. Authorities receive data from banks, customs, employers, and increasingly from other countries under automatic exchange arrangements.
The important implication is structural: information the authority already has, it can check against what you filed. The old assumption that offshore accounts or cross-border income are invisible no longer holds.
Late or missing filings. The strongest signal a business can send that its records are disorganised. It also removes goodwill you might otherwise receive on a genuine mistake.
What good records actually mean
Records are usually described as a legal requirement. It is more useful to think of them as the evidence base for every position you have taken.
Practically, that means:
- Every entry traces to a document — an invoice, receipt, contract or bank record
- Documents are stored so they can be found by date and by transaction
- Bank accounts reconcile to the accounting records
- Unusual items carry a note explaining them, written at the time
- Related-party transactions have agreements behind them
- Records are retained for the statutory period, which is typically several years
Point four is the highest-value habit on this page. A one-line note explaining an unusual transaction, written when it happens, is worth more than hours of reconstruction later — and it costs a minute.
Digital records and backups
Most jurisdictions accept electronic records provided they are complete, legible and retrievable. Two practical requirements follow:
Retrievability. Records stored in a format you can no longer open are not records. Keep them in a durable format, and check periodically that you can still access old files.
Backup. Statutory retention periods run for years, over which hardware fails and services close. Keep at least two copies, one of them off-site — which, in a region exposed to storms, is a point about business survival as much as compliance.
If an enquiry arrives
- Read carefully what is being asked — enquiries are often narrow, and volunteering unrelated material only broadens them
- Note the deadline and request an extension early if you need one; requesting late is much worse than requesting early
- Respond in writing, in an organised form, with documents referenced clearly
- Answer what was asked, completely and once — partial answers extend the process
- Get professional help if the amounts are material or the technical issue is complex
- Keep the tone factual — this is a technical process, not an accusation
Point one deserves emphasis because well-meaning businesses get it wrong constantly: sending everything you have, unsorted, to demonstrate transparency usually makes matters worse. It creates more questions and signals that you cannot navigate your own records.
Point six is worth internalising too. Most enquiries end in one of three ordinary ways: no change, a small adjustment, or a technical disagreement resolved through the normal channels. Treating it as a crisis makes it harder to handle well.
The underlying asymmetry
All of this comes back to one point that applies across compliance generally:
Doing it properly costs a predictable amount of time each month. Doing it badly costs an unpredictable amount of money at an unpredictable moment.
For a small business, the second kind of cost is the dangerous one — not because it is larger on average, but because it arrives without warning and often at the worst point in the cash cycle.
Frequently asked questions
Are audits random?
Largely not. Selection is driven by patterns — inconsistencies between your own filings, results out of line with the sector, mismatches with third-party data, and late filings.
What is the highest-value record-keeping habit?
Writing a one-line note explaining any unusual transaction at the time it happens. It costs a minute and is worth more than hours of reconstruction years later.
Can cross-border income stay invisible?
No. Authorities receive data from banks, customs and increasingly from other countries under automatic exchange arrangements, and check it against what you filed.
What is the wrong way to respond to an enquiry?
Sending everything you have, unsorted, to demonstrate transparency. It generates more questions and signals that you cannot navigate your own records — answer what was asked, completely and once.
