Table of Contents
- What Is a Desk Audit?
- What Is a Field Audit?
- Key Differences Between Desk and Field Audits
- CRA Audit Red Flags and What Triggers Selection
- How to Prepare for a CRA Audit
- CRA Audit Process Timeline
- What Happens After the Audit
- Frequently Asked Questions
Last Updated: September 19, 2026
What Is a Desk Audit?
A desk audit is a remote review of your financial records conducted entirely by the Canada Revenue Agency without anyone visiting your business premises. The CRA auditor examines documents, books, and records you submit by mail or email to verify tax compliance and accuracy of reported income, deductions, and credits.
Desk audits typically focus on specific items rather than a complete financial review. The CRA sends a formal notice of audit requesting particular documents, perhaps your GST/HST returns for three years, supporting invoices for claimed business expenses, or bank statements matching reported revenue. You respond by submitting the requested materials within a set timeframe, usually 30 days.
This type of CRA desk audit vs field audit explained review is less invasive than a field visit. There’s no auditor at your office examining your systems, interviewing staff, or inspecting physical inventory. The process is purely documentary. Many small business owners find desk audits less disruptive because work continues normally while you gather and send records.
Organize documents before responding to a desk audit notice. Group items by year and category, GST returns separate from income statements, invoices grouped by vendor or expense type. Clear organization reduces back-and-forth requests and speeds up the review.
What Is a Field Audit?
A field audit is an in-person inspection where a CRA auditor visits your business premises to examine records, systems, and operations firsthand. Unlike a desk audit, a field audit involves the auditor spending time at your location, sometimes multiple days across several visits, reviewing books and records on-site, observing your business processes, and potentially interviewing you or your staff about financial practices.
During a field audit, the CRA auditor has direct access to your complete accounting systems, bank accounts, inventory records, and business premises. They can verify that the financial information you reported matches what actually exists in your business. For example, they might review physical inventory counts against recorded amounts, inspect equipment purchases you claimed as capital assets, or trace cash transactions through your banking records.
Field audits are more comprehensive and intrusive than desk audits. They often cover multiple years of tax returns and examine a broader range of income, deductions, and credits. A field audit can last weeks or months depending on the complexity of your business and the scope of the CRA’s concerns.
A field audit notice means the CRA has identified risk factors serious enough to warrant in-person investigation. Do not ignore the notice or delay scheduling the visit. Failure to cooperate can result in penalties and reassessment of your tax liability without your input.
Key Differences Between Desk and Field Audits
Understanding how a CRA desk audit vs field audit explained comparison works helps you prepare appropriately and know what to expect. The differences are significant.
| Aspect | Desk Audit | Field Audit |
|---|---|---|
| Location | Remote; documents submitted by mail or email | On-site at your business premises |
| Duration | Usually 4-8 weeks | Often 2-6 months or longer |
| Scope | Specific items or tax years | Comprehensive review of multiple years |
| Access | Documents only | Full access to records, systems, and premises |
| Staff Interaction | Minimal or none | Potential interviews with you and staff |
| Disruption | Low; business operates normally | High; auditor present during business hours |
| Cost | Lower if handled internally | Higher; often requires professional representation |
| Risk Level | Lower; usually routine verification | Higher; signals CRA concern about compliance |
A desk audit typically addresses a specific concern, perhaps your HST reporting didn’t match your bank deposits for one quarter, or you claimed a large deduction the CRA wants to verify. The auditor requests the relevant documents and reviews them remotely.
A field audit signals deeper concern. The CRA may question your overall tax compliance, suspect unreported income, or investigate potential fraud. The auditor’s on-site presence allows them to assess your business operations directly and identify discrepancies that documents alone might not reveal.
CRA Audit Red Flags and What Triggers Selection
The CRA uses risk assessment tools to identify which taxpayers to audit. Understanding common audit triggers helps you recognize when your file might be selected and take preventive action.
Common audit triggers include:
- Inconsistent income reporting, Your reported business income doesn’t align with GST/HST returns, bank deposits, or prior years’ filings
- Large or unusual deductions, Claiming expenses that seem disproportionate to your revenue or industry norms
- Cash-intensive businesses, Restaurants, salons, retail shops, and trades with high cash transactions face higher audit risk
- Missing or incomplete records, Failing to file returns on time, submitting incomplete financial statements, or having gaps in documentation
- Significant year-to-year changes, A sudden drop in reported income or spike in expenses without explanation
- Related-party transactions, Payments to family members, loans to related businesses, or transfers between entities without clear business purpose
- Home office deductions, Claiming a portion of rent, utilities, or mortgage without proper documentation
- Vehicle and travel expenses, High claims relative to business size or industry benchmarks
- Professional practice concerns, For accountants, lawyers, doctors: claims that don’t match typical practice expenses
The CRA also conducts routine compliance audits on a percentage of returns each year, regardless of red flags. These are often desk audits focused on verifying specific items rather than investigating suspected problems.
Risk assessment is the primary factor in audit selection. Maintaining clear, organized records and filing accurate returns on time reduces your audit risk significantly. Inconsistency between different tax documents, your corporate return versus your GST return versus your bank statements, is a major red flag.
How to Prepare for a CRA Audit
Preparation is your strongest defense in either a desk audit or field audit scenario. The moment you receive a notice of audit, begin organizing your response.
Step 1: Gather all requested documents. The CRA notice specifies what they want to see. Collect invoices, receipts, bank statements, financial records, and any other supporting evidence they’ve listed. Don’t guess at what might be relevant, provide exactly what they’ve asked for, organized clearly by date or category.
Step 2: Review your tax returns for accuracy. Before submitting anything, compare your filed returns to your actual records. Look for discrepancies, missing entries, or items that don’t match your supporting documentation. If you find errors, you can file an amended return before the audit concludes, which often resolves issues quickly.
Step 3: Document your business practices. Prepare a brief summary of how you record transactions, manage inventory, track expenses, and handle cash. This context helps the auditor understand your systems and reduces questions about why certain records exist.
Step 4: Consider professional representation. For a field audit or if your records are incomplete, hiring a tax professional or accountant can save time and money. They handle correspondence with the CRA, organize documents, and represent you during auditor visits, reducing stress and protecting your interests.
Step 5: Respond within the deadline. The CRA sets a response deadline in the audit notice. Missing it can result in penalties and the CRA reassessing your tax liability without your input. If you need more time, request an extension in writing before the deadline expires.
Having your financial records clean and well-documented before an audit notice arrives is the best protection.
CRA Audit Process Timeline
Understanding the audit timeline helps you plan your response and know what to expect at each stage.
Weeks 1-2: Notice and Initial Response
You receive a formal notice of audit by mail. It specifies which tax years are under review, what documents the CRA wants to see, and the deadline for submission, typically 30 days. Read the notice carefully and note the deadline date. If it’s a field audit, the notice includes the auditor’s name and contact information.
Weeks 3-4: Document Submission
You gather and submit the requested documents. For a desk audit, you mail or email them. For a field audit, you may provide them at your first on-site meeting.
Weeks 5-12: Review and Clarification
Weeks 12-20: Audit Conclusion
Weeks 20+: Assessment or Appeal
Timeline varies significantly based on how quickly you respond and how complex your file is. Prompt, complete responses speed up the process. Delays in submitting documents extend the timeline and increase your stress.
What Happens After the Audit
Once the CRA completes their audit, the process moves into assessment and, potentially, appeal or negotiation.
If No Issues Are Found
If Adjustments Are Proposed
Managing the Financial Impact
Frequently Asked Questions
What is the main difference between a desk audit and a field audit?
A desk audit (or processing review) is a remote review where the CRA auditor requests documents by mail or email and reviews your books and records off-site. A field audit involves an in-person inspection at your business premises. Desk audits are typically less invasive and focus on specific tax years or issues, while field audits are more comprehensive and allow the CRA auditor to examine your business operations, financial systems, and supporting evidence directly.
What are common CRA audit red flags that trigger selection?
Common audit triggers include inconsistencies between reported income and bank deposits, unusually high deductions relative to industry standards, cash-based businesses with minimal records, repeated late filings or amendments, significant year-to-year fluctuations in income, and claims that don’t align with your business type. GST/HST non-compliance, unreported income sources, and inadequate documentation also raise risk assessment concerns. The CRA uses data matching and risk profiling to identify files for review.
How long does a CRA audit typically take?
A desk audit usually takes 3 to 6 months from the notice of audit to completion, depending on how quickly you respond to information requests. A field audit can take 6 months to 2 years or longer, especially for multi-year audits or complex businesses. The timeline depends on the scope of the audit, the number of years under review, how organized your financial statements and supporting evidence are, and how promptly you provide documentation to the CRA auditor.
What should I do if I receive a CRA audit notice?
Contact a tax professional or tax representative immediately. Gather all relevant books and records, financial statements, bank statements, and supporting documentation for the years in question. Do not ignore the notice or miss deadlines for responding to information requests. Organize your records chronologically and by category. If you lack documentation, be honest about gaps rather than guessing. A tax professional can help you respond to the CRA auditor’s correspondence, prepare for an on-site visit if needed, and protect your tax liability through proper audit defense.