Updated Checked by the Tax-Services.ca editorial team How we check
We found no detailed list of what triggers a CRA audit on any CRA page. What the agency does say publicly is that returns are picked for review for four broad reasons: numbers that don’t match third-party slips, the type of deductions or credits claimed, your compliance history, and random selection. Anything more specific than that is guesswork, and we won’t pretend otherwise.
What does the CRA say about picking returns?
The agency’s own page on how returns are selected for review gives those four reasons and little else. It adds that picking works the same for paper and online returns, and that most reviews are done by computer screening rather than by a person reading your file. It also says it adjusts its focus every year based on what earlier reviews found.
So you’ll see lists online of “red flags” with confident percentages and dollar limits. We couldn’t find any of them on a CRA page. If a site names an exact income level or a magic deduction ratio, ask where it got the number.
| Reason the CRA gives | What it means for you |
|---|---|
| Information doesn’t match third-party sources, such as T4 slips | Report every slip you’re sent, exactly |
| Types of deductions or credits claimed | Keep proof for anything you claim |
| Compliance history | File on time and correct mistakes yourself |
| Random selection | Nothing to fix, only records to have |
Is a review the same as an audit?
Not quite. A review often starts with a letter asking for proof of something on your return. The CRA says it may ask for more than official receipts, such as cancelled cheques or bank statements. A business audit is bigger. The CRA says its risk systems flag returns it considers high risk for non-compliance, and an officer then looks at information from several sources to decide whether to audit.
Being picked at random isn’t an accusation. And if a tax preparer did your return, the CRA says selection doesn’t reflect on the preparer either.
What does an unreported slip cost?
Take the mismatch reason, the one the CRA names first. Suppose you earn $60,000 in Ontario and forget a slip for $2,400 of other income. The income tax calculator shows about $712 of extra tax, and that’s before any interest or penalty. We haven’t quoted penalty rates because we couldn’t confirm them on an official page.
The trap is that the CRA already has its copy of the slip. Your return is the only place the two can disagree. To check your own figures before filing, run them through the tax refund calculator and compare with your slips.
How do you prepare for a CRA audit letter?
Keep your records. The CRA says to keep income tax records, including receipts and documents that support your claims, for at least six years. For credits and deductions, the tax credits calculator is a useful reminder of what you actually claimed, so you know which papers to find first.
If you run a business, the CRA says an auditor will usually phone first. You’re allowed to end the call and wait for a confirmation letter before giving anything. Electronic records are preferred, and you can hand over documents at your premises, let the auditor borrow them (you get a detailed receipt), or send them in by mail or through an online service, but not by email.
Once you get the findings, you have 30 days to respond. If you disagree, you can talk to the auditor’s team leader and then file an objection. You have rights throughout, and the CRA points to the Taxpayer Bill of Rights.
Self-employed? The self-employed tax calculator shows the tax on your net income, so do it before you file, and your own numbers don’t surprise you when a letter arrives.
What mistakes make an audit worse?
Ignoring the letter. It has a deadline, and missing it can make a small question grow. Sending originals you can’t replace is another. Guessing at answers is a third, since a wrong answer is harder to fix than a late one.
Most people who get a letter did nothing wrong. They just can’t find the receipt, and a shoebox of paper isn’t a filing system.
Where do the numbers come from?
The selection reasons, record-keeping period and audit steps come from CRA pages on how returns are selected for review and on business audits. The tax example uses our 2026 federal and Ontario tables. We found nothing on how the CRA scores risk, so nobody can tell you your own odds.
Frequently asked questions
Does the CRA publish its audit triggers?
No detailed list that we could find. Its page names four broad reasons: mismatches with third-party slips, types of deductions or credits, compliance history and random selection.
How long should I keep my tax records?
The CRA says to keep income tax records and supporting documents for at least six years.
Is a review the same as an audit?
No. A review usually asks for proof of specific claims. An audit of a business is wider and looks at ledgers, invoices and bank statements.
How long do I have to respond to audit findings?
The CRA says you have 30 days to respond to a business audit's findings.
Can I send audit documents by email?
For a business audit, the CRA says you can deliver, mail or submit documents online, but not by email.
- Dealing with the CRA: letters, audits and payments
Dealing with the CRA: what to do when a letter arrives, how a review differs from an audit, how My Account helps, and what to do if you can't pay
Information only. This page is general information, not tax, legal or accounting advice. Tax-Services.ca is an independent publisher: we don't prepare or file tax returns or offer tax services, and we have no connection with the CRA, Revenu Québec, any government or any company named on this page. Check the figures that matter with an official source or a qualified professional.