IRS Audit Rates in the FY2025 Data Book: What CPA Firms Should Tell Clients About CP2000s and Audits
Clients hear "IRS audit rate" and picture a revenue officer at their door. The FY2025 IRS Data Book paints a different picture: most contact is by mail, and a CP2000 is not a full audit. This article walks US CPA firms through the published compliance numbers, how to triage notices and correspondence exams, and a practical notice-response workflow.
Figures below come from the IRS Data Book (FY2025) compliance presence statistics on IRS.gov. Check current IRS guidance before you act on any notice.
What the FY2025 Data Book actually says
Per the IRS Data Book FY2025 compliance stats, the audit rate for tax year 2021 returns was 0.32% — about 1 in 316. For returns showing $10 million or more of income, the rate was 6.6%. In FY2025 the IRS closed 497,621 audits with $26.8 billion in recommended additional tax, and closed 987,460 Automated Underreporter (AUR) cases with $5.9 billion recommended.
Two takeaways matter for clients. First, overall audit rates remain low for most returns, while high-income returns face a much higher rate. Second, AUR volume is nearly double closed audits, so letter-based matching is how most taxpayers first hear from the IRS. That is the context when a client asks, "Am I being audited?"
CP2000 vs a real audit
A CP2000 is an automated underreporter notice. It proposes changes when information returns (W-2s, 1099s and similar) do not match what the taxpayer reported. It is a matching letter, not a field examination. The digest lesson from the Data Book coverage is the same: most contact is by mail, and a CP2000 is not a full audit.
Correspondence exams are still exams in a limited sense — the IRS asks for documents by letter — but they are not an in-person field audit. Tell clients which process they are in. Calling every letter an "audit" creates panic and poor decisions, such as amending a correct return just to match a bad information return.
When a Form 1099 is wrong and the payer will not correct it, a practical approach (as The Owner's Handbook describes it) is to report what the client actually received, keep a reconciliation, and be ready to answer a CP2000 with bank deposits and invoices. That same mismatch logic is why information-return workflows matter year-round; see our note on the 1099-NEC threshold change for 2026 payments.
Assessment windows: why records still matter
The Assessment window is how long the IRS generally has to assess additional tax. Per the §6501 framework summarized with Mitchell v. Commissioner (T.C. Memo. 2026-102): under §6501(a) the period is generally three years from filing; under §6501(e) it is six years for a substantial omission of income of more than 25%; and under §6501(c) it can be unlimited for fraud or for no return. The Data Book lesson line pairs with that: a three-year assessment window in ordinary cases, six years for big omissions.
Translate that into retention advice. Keep return copies, workpapers, information returns and bank reconciliations at least through the ordinary three-year window, and longer where income was large, complex or potentially incomplete. When a client asks why you still need 2021 records in 2026, the statute — not habit — is the answer.
How firms should triage IRS notices
Not every envelope is an audit. Sort incoming IRS mail into clear buckets before anyone drafts a reply:
- Matching / AUR (often CP2000-series). Compare the proposed income to the return and to the client's records. Agree, partially agree, or disagree by the printed deadline with a reconciliation.
- Correspondence exam. Document requests by mail. Calendar the response date, assign a reviewer, and send only what was asked for, labelled and complete.
- Balance-due / collection ladder. As summarized alongside TIGTA audit 2026-308-029 on IRS collection chat (recapped in the Journal of Accountancy), the ladder runs from CP14 (first bill) through CP501/CP503 reminders, CP504 (Notice of Intent to Levy), then LT11/Letter 1058 (final notice with a 30-day Collection Due Process hearing right) before wage or bank levies. An online payment plan can stop escalation. Interest and failure-to-pay penalty keep running while the balance sits.
- Field audit. In-person or broader examination. Different staffing, different document plan, and usually Form 2848 representation from the start.
Mis-sorting a CP2000 as a field audit wastes client goodwill. Mis-sorting a final levy notice as "just another bill" can cost bank accounts. Train staff to read the notice type and the response date first.
A notice-response workflow for the firm
- Log it the day it arrives. Client, notice type, tax year, IRS deadline, and who owns the file.
- Send a short client note the same day. "We received notice X for year Y; please send Z by date D; do not ignore the deadline." Avoid promising an outcome.
- Pull the return and matching third-party forms. For CP2000s, start with the W-2/1099 schedule and the bank deposits for the disputed items.
- Decide agree / disagree / partial. If you disagree, attach a clear reconciliation and supporting documents. If you agree, confirm payment or payment-plan options and calendar them.
- Use Form 2848 when you represent the client. Power of attorney keeps the IRS talking to the firm and gives you status rights on the case.
- Respond by the printed deadline. Ask for more time in writing if you need it, but do not assume silence is safe.
- Preserve appeal and Tax Court rights. If the IRS issues a notice of deficiency, the client generally has a path to Appeals and, if needed, Tax Court. Calendar those dates; missing them can turn a disputable deficiency into an assessed tax.
- Close the loop in writing. File the IRS response, the client's packet, and the outcome letter in the permanent workpapers.
What to tell clients (and what not to)
Use the Data Book numbers to set expectations, not to scare or soothe without context. A client with ordinary wage income and matched information returns is statistically far from a field audit; a client reporting seven-figure income should expect more attention. Either way, a letter still needs a timely, documented reply.
Also remind clients that preparer mistakes do not erase taxpayer responsibility. Recent ghost preparer and preparer-responsibility lessons reinforce that the person who signs under penalty of perjury owns the return. Clean books and complete information returns reduce mismatch letters — which is why prep capacity before filing season matters as much as notice handling after it. Our October 15 extension deadline checklist covers the late-season filing side of that problem.
Where outsourced support fits
Notice seasons cluster around filing deadlines and AUR cycles. Firms that already run thin on prep and reconciliation often scramble when a stack of CP2000s arrives. Extra capacity for document gathering, bank reconciliations and workpaper packs does not replace the signing preparer's judgment, but it can keep responses on time. If your firm wants help with bookkeeping, cleanup and tax prep support for US CPA firms, email info@taxbrewglobal.com.
Frequently asked questions
Is a CP2000 an IRS audit?
No. Per the IRS Data Book coverage summarized in the article, a CP2000 is an automated matching notice (Automated Underreporter), not a full field audit. Most IRS contact is by mail.
What was the TY2021 IRS audit rate in the FY2025 Data Book?
Per the IRS Data Book FY2025 compliance stats, the audit rate for tax year 2021 returns was 0.32% (about 1 in 316), and 6.6% for returns with $10 million or more of income.
How long does the IRS generally have to assess additional tax?
Under the §6501 framework cited in the article: generally 3 years from filing (§6501(a)), 6 years for a substantial omission of income of more than 25% (§6501(e)), and unlimited for fraud or no return (§6501(c)).
Try us on real work
Your first 20 hours are free. See how we handle your US CPA firm or UK practice workload.
Email for a free call