How far back can the CRA audit your business records? The answer might surprise you. While most reassessments fall within a three-year period, the Canada Revenue Agency (CRA) can extend this period to four years in certain situations. In cases involving fraud or misrepresentation, there is no time limit at all. Understanding these timelines is essential for every business owner and self-employed professional. This guide explains CRA audit periods in detail, identifies common audit triggers, and demonstrates why consistent bookkeeping practices are one of your strongest defenses against audit complications and penalties.

How Far Back Can the CRA Audit Your Records?

Standard 3-Year Limitation Period

The reassessment period begins on a specific date, not on the date you file your return. For individuals and Canadian-controlled private corporations (CCPCs), the CRA has three years from the date printed on your Notice of Assessment to reassess that tax return.

Note that this is the assessment date, not your filing date. If you filed your 2022 tax return in April 2023 and received your Notice of Assessment dated May 10, 2023, the CRA has until May 10, 2026, to reassess that return. This distinction matters when calculating your reassessment exposure period.

The reassessment period does not restart if the CRA issues a second assessment during those three years; the timeline continues to run from the original assessment date.

Extended 4-Year Review Period

Unlike CCPCs and individuals, other corporations face a longer reassessment period. Non-CCPCs, including corporations controlled by non-residents or public corporations, have a four-year reassessment period from the date of their original Notice of Assessment.

Corporations may also face an extended reassessment period of up to 3 additional years in specific situations. This extension applies when carrying back losses or credits from future years, dealing with non-arm's-length transactions involving non-residents, or handling foreign tax matters. These extensions can push the total reassessment period to six or seven years, depending on the corporation's type.

Unlimited Audit Period for Fraud or Misrepresentation

Here, the standard timelines no longer apply. If the CRA determines that a misrepresentation occurred due to neglect, carelessness, wilful default, or fraud, there is no time limit on how far back they can reassess.

The threshold for establishing misrepresentation can be relatively low. Courts have interpreted this provision broadly, and the CRA must demonstrate that the error resulted from carelessness or neglect. In some cases, even unintentional errors may qualify if they reflect a lack of reasonable care. The CRA bears the burden of proving both the misrepresentation and its cause.

Common scenarios that can lead to unlimited reassessment periods include unreported business income, undisclosed foreign income, misclassified real estate transactions, and improper expense claims. If you have not filed a return for any year, the CRA may reassess that year indefinitely.

What Records Must You Keep and For How Long?

You must keep tax records for at least six years from the end of the tax year to which they relate. For a 2018 tax return filed in April 2019, you need to maintain those records until December 31, 2024.

This six-year requirement applies whether you filed online or on paper, and even when forms indicate you do not need to attach supporting documents. The CRA may request these documents later to verify your claims.

Your records should include more than just official receipts. Keep canceled cheques, bank statements, invoices, and any other supporting documentation for deductions or credits you claimed. For capital property such as real estate or investments, retain all related documents for six years after you dispose of the asset.

However, if you are under audit, have filed an objection, or are appealing a CRA decision, you must keep all records until the matter is fully resolved, even if it takes more than six years.

Common Reasons the CRA Selects Returns for Audit

Random Selection Process

The CRA selects returns for audit based on risk assessment models that evaluate multiple factors, including the likelihood of errors and signs of non-compliance. Not every audit is triggered by suspicious activity. Some taxpayers are selected at random to ensure broad coverage and maintain the integrity of the tax system. Even individuals and businesses with strong compliance histories may be audited by chance.

This random selection process means no one is entirely exempt from review, regardless of how carefully returns are prepared.

Unusual Changes in Income or Expenses

The CRA uses data analytics to compare tax filings and identify typical patterns for taxpayers with similar income levels and financial profiles. When reported expenses differ significantly from prior years, a return may be flagged for review. For example, if travel expenses increase from CAD 4,180.08 to CAD 16,720.32, this may prompt additional questions or a potential audit.

Reported income is also compared against industry benchmarks and regional averages. If you report CAD 69,668.01 annually while residing in an area where the average reported income is CAD 181,136.83, this discrepancy may trigger additional scrutiny. In some cases, the CRA may assess whether reported income aligns with an individual’s lifestyle and spending patterns.

Missing or Unreported Income

The CRA uses matching programs to cross-check information from T4 and T5 slips, investment statements, property transactions, and financial institutions. Discrepancies between reported income and third-party data are a common trigger for review.

Penalties may apply when income is not fully reported, and repeated omissions can lead to more severe consequences. Financial institutions in Canada report various types of financial data to the CRA, including information on accounts, investments, and certain transactions. Through international information-sharing agreements, such as the Common Reporting Standard (CRS), the CRA may also receive financial data from other jurisdictions.

Excessive Deductions Compared to Industry Standards

Claiming expenses that appear disproportionate to revenue can increase audit risk. Expense amounts should be reasonable in relation to income and consistent with industry norms. For example, claiming CAD 13,933.60 in vehicle expenses against CAD 69,668.01 in revenue may attract attention.

The CRA compares tax returns against industry data and statistical benchmarks. If your deductions fall outside typical ranges for your profession or income level, your return may be selected for further review. Businesses that operate primarily in cash, such as restaurants or personal services, may face increased scrutiny.

Frequent Amendments or Late Filings

Your compliance history plays a role in audit selection. Late filings, failure to file, and repeated inconsistencies can increase audit risk. While correcting genuine errors through amendments is acceptable, frequent or unusual changes – especially those that reduce tax payable – may draw attention.

Prior audits that resulted in adjustments may also increase the likelihood of future reviews, as the CRA may consider such files a higher risk.

Why Regular Bookkeeping Protects You from CRA Audits

Regular bookkeeping helps address audit triggers before they become problems. Complete and organized financial records protect audits and support every claim you make on your tax return.

Accurate Income and Expense Tracking

Recording all transactions as they occur helps prevent underreporting of income. Without proper tracking, it may be difficult to demonstrate the nature and source of certain receipts. The CRA cross-checks bank deposits, T4 and T5 slips, and third-party data to identify discrepancies, so your records should capture all sources of income.

Equally important, detailed expense tracking helps ensure you claim all eligible deductions and tax credits. If transactions are not recorded consistently, expenses or input tax credits (ITCs) may be missed during tax preparation. Accounting software can automate expense categorization, support accurate reporting, and generate audit-ready financial records. These systems track income, expenses, and tax obligations in real time, supporting compliance with GST/HST requirements.

Organized Documentation Ready for Review

Audit-ready records ensure your financial data remains accurate, transparent, and defensible when the CRA requests information. Organized documentation demonstrates your commitment to compliance and proper record-keeping.

Your filing system should allow for quick and easy retrieval during a review. This approach simplifies year-end tax preparation and improves collaboration with your accountant. Digital receipt storage helps keep documents accessible and reduces the risk of lost records that could impact your deductions. Cloud storage solutions also help ensure records are retained and accessible for at least six years, as required by the CRA.

Early Detection of Errors Before Filing

Monthly reconciliation helps identify issues early, before they develop into patterns that could be interpreted as misrepresentation. When bank statements are reconciled regularly, discrepancies across financial records can be identified and resolved promptly.

Internal reviews serve as a pre-audit check. By consistently reviewing records, small issues can be addressed before they become larger concerns. This proactive approach helps reduce the likelihood of errors that could trigger reassessments or penalties.

Consistent Financial Records Year Over Year

Standardized processes help ensure financial data remains consistent and verifiable over time. When reports are prepared using consistent methods, they create a clear and reliable financial history. Auditors and reviewers often focus on changes in accounting treatment, so consistent reporting reduces the need for additional explanations.

As a result, reviews tend to be more efficient, and fewer concerns are raised about internal processes. Year-over-year consistency demonstrates to the CRA that your business maintains reliable systems, which may reduce the likelihood of being selected for a detailed review.

Essential Bookkeeping Practices to Stay Audit-Ready

Implementing specific bookkeeping practices creates a strong defense against audit complications. These core habits help keep your records CRA-compliant and audit-ready.

Keep All Receipts and Supporting Documents

Digital storage is one of the most reliable ways to retain receipts and invoices. Apps like Dext scan receipts using optical character recognition to extract transaction data and securely store documents for at least six years. This helps prevent issues with faded or lost paper receipts, which may not be accepted as valid proof.

Your supporting documentation should clearly show what was purchased, the amount paid, and the transaction date. Credit card statements, bank statements, and itemized invoices can all serve as acceptable supporting documents.

Track Cash Transactions and Tips

Cash payments require extra diligence because there is no automatic statement to verify transactions. Use carbon copy receipt books to provide customers with one copy while keeping another for your records, noting the date, amount, and purpose of the transaction.

Maintain a dedicated cash log that records each transaction, including the date, description, and reference details. Where applicable, track a running balance and compare it with the actual cash on hand regularly. Investigate discrepancies promptly.

Maintain Detailed Vehicle and Home Office Logs

The CRA requires specific details for vehicle expense deductions. Record the date, destination, purpose, and kilometers driven for each business trip. Also, track odometer readings at the beginning and end of your fiscal period.

After maintaining a full-year logbook to establish a base year, you may use a three-month sample logbook in subsequent years, provided that business use remains within 10% of the base year.

Use Accounting Software for Automated Record-Keeping

Accounting platforms such as QuickBooks Online and Xero help automate transaction categorization, invoicing, expense tracking, and tax calculations. These systems can connect to Canadian financial institutions, reducing the need for manual data entry and reconciliation.

Automation improves efficiency while supporting accuracy. It also enables the generation of structured financial reports that support compliance and audit readiness.

Separate Business and Personal Expenses

Mixing personal and business transactions complicates tax reporting and increases audit risk. Maintaining separate business bank accounts provides a clearer financial picture and simplifies CRA compliance.

Keeping transactions separate from the start helps avoid untangling combined records later, especially during tax season.

Reconcile Bank Statements Monthly

Monthly reconciliation ensures that your records match bank statements and helps detect errors, unauthorized transactions, and potential fraud early.

This process identifies discrepancies caused by timing differences, data entry issues, or banking errors before they become larger problems. Regular reconciliation also supports accurate cash flow tracking and simplifies tax preparation.

What To Do If the CRA Requests an Audit?

Receiving an audit notice does not necessarily mean you have done something wrong. An audit is a verification process in which the CRA cross-checks claims on your return against your supporting records.

Understand What the CRA Is Asking For

Read the audit letter carefully and identify specific questions or document requests. The letter outlines which tax years are under review, which items are being examined, and the deadline for providing documentation or explanations. The CRA may request tax returns and Notices of Assessment, complete books and records, supporting documentation for income or expenses, and explanations for certain transactions.

Understanding the scope helps you anticipate areas of concern and prepares you for discussions. If anything is unclear, contact the CRA for clarification before responding.

Gather Requested Documents Within the Timeline

The CRA often provides a limited timeframe (commonly around 30 days) to respond to initial document requests. List each requested item and determine what is readily available and what may take additional time to obtain.

If more time is needed, you can request an extension for valid reasons, such as illness or difficulty accessing archived records. Extensions may be granted where justified, and the reason should be clearly documented.

Work With Your Accountant or Bookkeeper

Professional support can help improve outcomes during an audit. A tax professional familiar with CRA processes can assist with communication, attend meetings if required, and help ensure your financial information is presented accurately. Statements made during audit discussions may be reviewed later, so it is important to respond carefully.

Respond Promptly and Professionally

Provide the information requested without offering unnecessary additional details. The CRA will review your submission and typically respond within a reasonable timeframe with the next steps.

Once the audit is complete, the CRA will issue a letter outlining its findings. If you disagree with the outcome, you generally have 90 days to file an objection.

Conclusion

Regular bookkeeping is one of your strongest protections against complications from CRA audits. As outlined throughout this guide, maintaining organized records, tracking transactions accurately, and performing regular reconciliations help prevent the types of issues that can trigger audits.

These practices also give you confidence in your ability to respond if the CRA requests information. Your records should present a clear and consistent financial picture that supports every claim on your return.

By investing time in proper record-keeping now, you can reduce the risk of penalties, minimize stress, and avoid costly corrections in the future.