CRA Audit: What to Expect & How to Respond
The complete guide to CRA audits for Canadian businesses and individuals. What triggers an audit, how CRA selects files, what auditors examine, how to respond to a proposal letter, penalties, your rights and the step-by-step timeline — written by a licensed Ontario CPA who handles CRA audits weekly.
What Is a CRA Audit?
A CRA audit is a formal review by the Canada Revenue Agency of your tax return, books, records, receipts and supporting documentation to verify that the amounts reported are accurate, that deductions and credits are properly claimed, and that all income has been reported. CRA audits are conducted under the authority of Section 231.1 of the Income Tax Act, which gives auditors the legal power to inspect, audit or examine books, records, documents and property of any taxpayer.
A CRA audit is not the same as a review or a simple request for information. A review is a desk check — CRA asks for specific receipts or documents to support one line on your return. An audit is a comprehensive examination of your entire tax situation, often covering multiple years, multiple accounts (income tax, HST, payroll) and multiple related entities (your corporation, your personal return, your spouse's return, your holdco).
The most important thing to understand about a CRA audit is that the outcome depends almost entirely on the quality of your records and the quality of your response. Businesses with monthly bank reconciliations, organised receipts, proper HST classification and CPA-prepared financial statements resolve audits quickly with minimal or no adjustment. Businesses with poor records, missing receipts, unreconciled bank accounts and self-prepared returns face the largest reassessments, penalties and interest charges.
How CRA Selects Files for Audit — 10 Common Triggers
| # | Audit Trigger | What CRA Looks For |
|---|---|---|
| 1 | Bank deposits exceed reported revenue | CRA's automated systems compare total bank deposits (from T4, T5, third-party slips) to reported income. A material gap flags the file for review. |
| 2 | Consistent losses over multiple years | A business reporting losses year after year triggers CRA to question whether the activity is a genuine business or a personal hobby deducting expenses against other income. |
| 3 | Cash-intensive industries | Restaurants, construction, convenience stores, hair salons, auto repair and cleaning services are audited at higher rates because of the cash revenue reporting risk. |
| 4 | HST refund claims without matching revenue | A corporation claiming large HST ITCs with low or zero revenue is a high-priority audit target. CRA verifies that ITCs relate to genuine business purchases. |
| 5 | SR&ED claims | SR&ED claims are reviewed at a higher rate than any other line item. CRA assigns dedicated technical reviewers to assess eligibility, time tracking and salary allocation. |
| 6 | Large or unusual deductions relative to revenue | Vehicle expenses of $30,000 on a $60,000-revenue consulting business, or meals and entertainment of $15,000 on a solo home-based business, trigger review. |
| 7 | Related-party transactions | Management fees between a professional corporation and a holdco, shareholder loans, inter-corporate dividends and family employment are all reviewed for arm's-length compliance. |
| 8 | T1135 non-filing or late filing | CRA cross-references foreign property disclosures with international information-sharing agreements. A corporation with international transactions but no T1135 is flagged. |
| 9 | Random selection | CRA randomly selects a percentage of returns for audit regardless of risk indicators. There is nothing you can do to prevent a random audit — only have good records. |
| 10 | Tips and leads | CRA accepts anonymous tips about unreported income. A disgruntled employee, competitor or former spouse can trigger an audit with a single phone call to the CRA leads program. |
Being Selected Does Not Mean You Did Something Wrong: CRA's official position is that an audit selection does not imply guilt or suspicion. Many audits are random or triggered by automated system comparisons. The correct response is cooperation, not panic. Cooperate fully, provide what is requested, and have your CPA communicate directly with the auditor.
What to Expect During a CRA Audit — The Process
Initial Contact
CRA contacts you by mail or phone to notify you of the audit. The letter identifies the auditor, the tax years under review, the type of audit and an initial document request list.
Authorise Your CPA
File Form T1013 (Authorising or Cancelling a Representative) immediately so your CPA can communicate directly with the auditor on your behalf. CRA will then contact your CPA instead of you.
Document Request
The auditor requests specific records: bank statements, receipts, invoices, contracts, payroll records, HST returns, financial statements and any supporting documentation for deductions claimed.
CPA Prepares Response
Your CPA reviews the request, organises the documents, identifies any issues proactively and prepares the response package. Documents are submitted through CRA's secure portal or by mail.
Auditor Review
The auditor examines the records. This phase can take weeks to months depending on complexity. The auditor may request additional documents, ask questions or schedule a site visit.
Proposal Letter
If CRA proposes adjustments, you receive a proposal letter detailing each adjustment, the reason and the additional tax. You have 30 days to agree or disagree.
CPA Responds to Proposal
Your CPA reviews the proposal, identifies errors in CRA's analysis, prepares a written response with supporting evidence and negotiates with the auditor and team leader.
Resolution or Objection
The audit concludes with a completion letter (no adjustments), a revised reassessment (partial or full adjustments) or a formal Notice of Objection if you disagree with the final reassessment.
What CRA Auditors Examine During an Audit
| Record Category | What CRA Reviews | What They Are Looking For |
|---|---|---|
| Bank statements — business and personal | Every deposit and withdrawal in every business account. Personal accounts of directors and shareholders also requested. | Unreported income (unexplained deposits), personal expenses paid from business accounts, shareholder loan transactions not properly documented. |
| Revenue reconciliation | Total deposits compared to reported revenue. POS system reports compared to bank deposits for restaurants and retail. | Cash revenue not deposited. Revenue understated. Tips not reported. Interac e-Transfers not recorded. |
| Expense receipts and invoices | Receipts for every deduction claimed — especially large or unusual expenses. HST registration number on receipts over $30. | Personal expenses claimed as business. Missing receipts (deduction denied). Receipts without vendor HST number (ITC denied). |
| HST/GST returns | ITCs claimed compared to supporting invoices. HST collected compared to revenue reported. | Over-claimed ITCs. Under-reported HST collected. Incorrect zero-rated vs. taxable classification. |
| Payroll records | T4 summaries, pay stubs, ROEs, contractor agreements. Employee vs. contractor classification. | Workers classified as contractors who are legally employees. Retroactive CPP, EI and source deduction liability. |
| Shareholder loan account | Every debit and credit in the shareholder loan account. Personal expenses paid by the corporation. Personal funds deposited to the corporation. | Section 15(1) benefit — personal expenses paid by the corporation without proper documentation. Section 15(2) — shareholder loans outstanding more than one year without repayment. |
| Vehicle expenses and mileage log | Vehicle expense receipts, insurance, lease/loan documents and a mileage log documenting business vs. personal use. | No mileage log — CRA denies 100% of vehicle deductions. Business-use percentage overstated. Personal driving claimed as business. |
| Capital asset purchases | Invoices for all capital assets. CCA schedule reviewing classes and rates. | Assets classified in wrong CCA class (overclaiming depreciation). Assets with no supporting invoice. |
CRA Can Examine Personal Records: Under Section 231.1, CRA auditors have the legal authority to examine the personal bank accounts, credit card statements, mortgage documents and records of the business owner, their spouse, family members and any related entity. This is not optional — failure to provide personal records when legally requested can result in a compliance order from the Federal Court.
How to Respond to a CRA Audit — Do's and Don'ts
| Do | Don't |
|---|---|
| Authorise your CPA immediately (Form T1013) | Do not communicate with the auditor yourself — everything you say can be used against you |
| Provide exactly what is requested — nothing more, nothing less | Do not volunteer information or documents that were not requested |
| Respond within the deadlines — typically 30 days for initial requests, 30 days for proposal letters | Do not ignore CRA letters or miss deadlines — CRA will assess based on the information they have |
| Keep copies of everything you send to CRA | Do not send originals — send copies only. Originals can be lost. |
| Let your CPA review the proposal letter before you respond | Do not agree to adjustments without understanding the full financial impact |
| Request a meeting with the team leader if the auditor's position is unreasonable | Do not become confrontational or adversarial with the auditor — escalation is always professional, never personal |
| File a Notice of Objection within 90 days if you disagree with the final reassessment | Do not assume you cannot dispute a reassessment — you always have the right to object |
The 30-Day Proposal Window Is Critical: When CRA sends a proposal letter, you have 30 days to respond with reasons for disagreement and supporting documentation. If you do not respond within 30 days, CRA will proceed with the reassessment based on the proposal — and your only remaining option is a formal Notice of Objection (which can take 6–18 months to resolve). Always respond to the proposal letter within the 30-day window. This is the single most important deadline in a CRA audit.
CRA Audit Penalties and Interest
| Penalty Type | Rate or Amount | When It Applies |
|---|---|---|
| Late-filing penalty (T2) | 5% of balance owing + 1% per month (max 12 months) | T2 filed after the deadline with a balance owing |
| Repeated late-filing penalty | 10% of balance owing + 2% per month (max 20 months) | Late-filed T2 when the previous year was also filed late |
| Gross negligence penalty — Section 163(2) | 50% of the understated tax or overstated credit | CRA determines you knowingly or under circumstances amounting to gross negligence made a false statement or omission on your return |
| Failure to file information returns (T5018, T4, T5) | $25/day per statement (min $100, max $2,500) | Information returns not filed by the deadline |
| T1135 non-filing penalty | $25/day (max $2,500/year; $25,000 for repeated non-compliance) | T1135 Foreign Income Verification Statement not filed when foreign property exceeds $100,000 |
| Transfer pricing penalty — Section 247 | 10% of the transfer pricing adjustment amount | Intercompany transactions with non-resident related parties not priced at arm's length without contemporaneous documentation |
| Prescribed interest rate on balance owing | 8% compounded daily (current rate) | Interest accrues from the original filing deadline — not from the reassessment date. Two years of compound interest accumulates before you even receive the reassessment. |
| Section 238 — failure to comply (books and records) | $1,000–$25,000 fine and/or up to 12 months imprisonment | Failure to file a return, keep adequate records, or provide information when required by CRA |
Interest Runs From the Original Filing Date: CRA interest does not start when the reassessment is issued. It starts from the original filing deadline of the return under audit. If CRA audits your tax year that was filed two years ago and reassesses you today, you owe two full years of compound interest at 8% on the additional tax — before you even receive the Notice of Reassessment. This is why proactive CPA-prepared returns with proper documentation prevent far more cost than the CPA fee itself.
Your Rights During a CRA Audit
| Right | What It Means in Practice |
|---|---|
| Right to be represented | You can authorise a CPA, accountant or lawyer to communicate with CRA on your behalf via Form T1013. CRA will then contact your representative instead of you. |
| Right to be informed | CRA must tell you why your file was selected, the scope of the audit and your rights at the start of the process. |
| Right to privacy and confidentiality | Information gathered during the audit can only be used for purposes of the Income Tax Act. CRA cannot share your information with third parties except as permitted by law. |
| Right to a formal review (objection) | If you disagree with the reassessment, you can file a Notice of Objection within 90 days. The objection is reviewed by a CRA Appeals officer who was not involved in the original audit. |
| Right to appeal to the Tax Court | If the objection is denied, you can appeal to the Tax Court of Canada. The Tax Court is independent of CRA. |
| Right to complain about service | If the auditor is unprofessional, unresponsive or unreasonable, you can file a complaint under the Taxpayer Bill of Rights (RC17). |
CRA Audit Timeline — How Long Does It Take?
| Phase | Typical Duration | What Determines the Length |
|---|---|---|
| Initial contact to first document request | 1–4 weeks | CRA scheduling. You receive a letter or phone call identifying the audit scope and requesting initial documents. |
| Document submission and initial review | 4–12 weeks | Quality of your records. Well-organised books with a CPA response package resolve faster. Missing or disorganised records cause multiple rounds of follow-up requests. |
| Additional requests and clarification | 4–16 weeks | Complexity of issues. HST classification reviews, SR&ED technical assessments and transfer pricing audits take longer than standard income audits. |
| Proposal letter issued | 2–8 weeks after review complete | Auditor workload. You have 30 days to respond once you receive the proposal. |
| Response review and resolution | 4–12 weeks | Whether your response fully addresses the auditor's concerns. If issues remain, the auditor may request a meeting or escalate to the team leader. |
| Reassessment or completion letter | 2–6 weeks after resolution | CRA processing. The reassessment is issued through CRA's system once the auditor closes the file. |
| Total — simple audit | 3–6 months | Straightforward income or expense audit with good records and CPA representation. |
| Total — complex audit | 6–18 months | HST classification, SR&ED technical review, transfer pricing, multi-year or multi-entity audit. |
CRA Audit Preparation Checklist
- Authorise your CPA on Form T1013 before responding to CRA
- Gather all bank statements (business and personal) for the years under audit
- Organise all receipts and invoices by month and category
- Prepare a revenue reconciliation — total deposits vs. reported revenue with explanation of every non-revenue deposit
- Assemble HST returns with supporting ITC invoices showing vendor HST registration numbers
- Prepare payroll records — T4 summaries, pay stubs, ROEs, contractor agreements
- Document all shareholder loan transactions — personal expenses paid by the corporation, personal deposits to the corporation
- Provide vehicle mileage log with date, destination, business purpose and kilometres for every trip
- Assemble capital asset invoices with CCA class documentation
- Prepare management fee agreements (if holdco or inter-corporate fees exist)
- Compile T1135 documentation if the corporation has foreign property exceeding $100,000
- Review all prior-year returns for consistency — CRA will compare across years
Frequently Asked Questions — CRA Audit
CRA Audit? Let a CPA Handle It. FREE for All Tax Clients.
Gondaliya CPA provides CRA audit representation FREE for all corporate and personal tax filing clients. Standalone audit representation from $400.