How Far Back Can CRA Audit Business

When business owners ask how far back can CRA audit business, the answer depends on compliance and circumstances. Normally, the Canada Revenue Agency (CRA) reviews the last two to three years of returns.

However, in cases of fraud, neglect, or serious misrepresentation, the CRA has the authority to audit up to ten years or more.

Knowing these rules is critical to maintaining compliance and protecting your business.

How Far Back Can CRA Audit Business: Standard CRA Audit Period

The CRA typically audits the most recent two to three tax years.
These audits focus on verifying reported income, claimed deductions, and GST/HST filings.
Businesses must cooperate fully by providing requested records, receipts, and supporting documents.

Extended Audit Period

The CRA can extend the review period in specific situations:

Fraud or misrepresentation: If false statements or intentional omissions are found, the CRA can audit back 10 years or more.
Offshore audits: Reviews of unreported foreign assets or income often cover up to 10 years.
Tax shelters and special arrangements: Certain complex cases allow CRA to reopen older years.

In these situations, there is effectively no time limit if the CRA suspects wilful evasion.

Record-Keeping Requirements

Businesses must keep financial and supporting documents for at least six years after the relevant tax year. This includes:

Invoices and receipts
Bank and credit statements
Contracts and payroll records
GST/HST filings and remittance records

If records are lost or destroyed early, the CRA may prosecute or impose penalties. Electronic or paper copies are acceptable, but retention is mandatory.

CRA Audit Process Overview

Selection – Returns flagged by risk-assessment systems are chosen.
Contact – The auditor usually calls, followed by a confirmation letter.
Document review – The CRA examines business and personal records, sometimes using indirect verification methods.
Audit findings – A written summary outlines results, and you have 30 days to respond.
Reassessment – If changes are made, you will receive a Notice of Reassessment.

Cooperation and timely responses help avoid delays and minimize exposure.

Impact of Previous Audits

If past audits uncovered errors, the CRA may apply stricter reviews to future filings.

Addressing discrepancies and maintaining accurate books reduces the risk of repeated audits.

FAQ: How Far Back Can CRA Audit Business

1. How many years can CRA audit a business?
Normally two to three years, but up to ten years if fraud or misrepresentation is suspected.

2. How long do I need to keep business records in Canada?
You must keep records for six years after the end of the tax year they relate to.

3. Can CRA audit beyond 10 years?
Yes. If there is proven tax evasion, the CRA can review older years with no strict limit.

4. What triggers a CRA business audit?
High-risk returns, inconsistent income reporting, and industries prone to underreporting are common triggers.

5. Can CRA audit personal records during a business audit?
Yes. The CRA can review personal bank accounts, credit card statements, and even family member records if they are relevant.

6. What happens if records are lost?
You must inform the auditor immediately. The CRA may use alternative methods, but penalties may apply if proper storage rules were not followed.

7. Does a CRA audit always lead to reassessment?
No. If records support reported amounts, the audit may close with no changes.