A complete, no-nonsense guide to handling HMRC tax audits for UK small business owners—what to expect, how to prepare, and how to protect your business before, during, and after an audit.

Facing a tax audit is one of the most nerve-wracking experiences for any small business owner. HMRC investigations can be disruptive, time-consuming, and—if handled poorly—expensive. But audits are a reality of doing business in the UK, and with the right preparation, you can minimise stress, avoid costly mistakes, and keep your business running smoothly. This guide breaks down everything you need to know about preparing for and surviving a tax audit, including what triggers them, how to get your records in order, what HMRC looks for, and how to handle every stage of the process with confidence.
A tax audit—formally known as a compliance check—is HMRC’s way of ensuring your business tax affairs are accurate and complete. Audits can target companies, sole traders, partnerships, or even specific individuals within a business. HMRC isn’t out to punish honest mistakes, but they do expect UK businesses to comply with all relevant tax laws, from Corporation Tax and VAT to PAYE and Self Assessment.
Audits can be triggered for several reasons. Sometimes, it’s a random spot check. More often, it’s because something in your tax return, accounts, or VAT submissions doesn’t add up, or your figures fall outside HMRC’s expected norms for your sector. Late filings, inconsistent profits, large one-off expenses, or repeated losses can all raise red flags. Increasingly, HMRC uses sophisticated data analytics to spot anomalies and compare your business against industry benchmarks.
HMRC audits can be either desk-based (they ask for records to be sent in) or on-site (they visit your business premises). The process can range from a quick check of a single figure to a deep dive into your books and bank accounts over several years. Knowing what an audit involves, and why HMRC may come knocking, is the first step to making sure you’re ready.
The Finance Act 2008 gives HMRC broad powers to inspect records, visit premises, and request information from third parties such as banks and suppliers.
Understanding what puts your business at risk helps you prepare and—ideally—avoid unnecessary scrutiny. HMRC rarely audits at random. Instead, they use a combination of risk profiling, data matching, whistleblowing, and industry comparisons to select targets. Small businesses are often selected because their tax affairs deviate from the 'norm' for their sector or size.
Late or inaccurate filings are a major red flag. Repeated late submissions of VAT returns, missing Self Assessment deadlines, or unexplained gaps in documentation send strong signals. Discrepancies between your tax returns and those of your suppliers or customers can also trigger an audit, especially with HMRC’s growing use of real-time data from Making Tax Digital and other sources.
Large, unusual, or poorly explained expenses and deductions are another common trigger. Claiming high levels of business mileage, home office costs, or entertainment expenses—especially if they’re out of step with industry averages—can prompt questions. Similarly, reporting continuous losses, drastic changes in turnover, or inconsistent payroll data may pique HMRC’s interest.
According to HMRC’s 2022-23 figures, less than 3% of small businesses are subject to a full audit each year. However, targeted compliance checks are rising, particularly for VAT and PAYE.
The single most important thing you can do to survive a tax audit is to keep accurate, up-to-date records. HMRC legally requires UK businesses to retain financial records for at least six years. For some sectors or where an investigation is ongoing, it can be longer. Digital records are now the norm, especially for VAT-registered businesses under Making Tax Digital.
Your records must support every figure you submit on your tax returns. This means not just invoices and receipts, but also bank statements, mileage logs, payroll records, and evidence of any claims for tax reliefs. If you’re VAT-registered, you must keep detailed VAT invoices, VAT account summaries, and proof of zero-rated or exempt supplies. Poor record-keeping is a common cause of penalties, even if your actual tax position is correct.
HMRC expects your records to be complete, consistent, and cross-referenced. For example, your bank statements should match up with your sales and expense records. Cash transactions must be logged and supported. If you use accounting software, ensure it’s up to date and backed up regularly. Manual systems are still legal, but they must be clear, legible, and logically organised.
| Type of Record | Retention Period | Key Details Required |
|---|---|---|
| Sales invoices & receipts | 6 years | Date, amount, VAT, customer details |
| Purchase invoices & receipts | 6 years | Supplier, date, amount, VAT |
| Bank statements | 6 years | Reconciled with accounts |
| Payroll records | 3 years (PAYE); 6 years (RTI) | Employee details, pay, NI, deductions |
| VAT returns & supporting docs | 6 years | VAT number, returns, VAT account |
| Mileage logs | 6 years | Date, purpose, distance, vehicle reg |
Use HMRC-recognised software to keep digital records, and set up automated backups. If you ever need to retrieve old records, you’ll be glad you did.
When you receive notice of a tax audit, don’t panic—but don’t delay either. You’ll usually have at least 14 days to respond. The more organised you are, the less painful the process will be. Here’s how to get ready, step by step.
Taking these steps ensures you’re not scrambling at the last minute. It also signals to HMRC that you’re organised and cooperative—which can make a big difference to the outcome.
An HMRC audit can be as simple as a request for clarification, or as involved as a team of inspectors combing through your records in person. Most small business audits are desk-based and resolved by correspondence. However, HMRC may escalate to an on-site visit if they have serious concerns or if your records are particularly complex.
During the audit, HMRC will verify that your tax returns accurately reflect your business activities. This means checking that your reported income, expenses, and claimed reliefs are supported by your records. They may compare your figures to industry benchmarks or previous years’ submissions. If something doesn’t add up, they’ll ask for explanations or more evidence.
If you’re invited to a meeting or HMRC visits your premises, you’re entitled to have professional representation present. The auditor will usually ask about your accounting practices, business structure, and anything that stands out in your records. They may speak to relevant staff, inspect physical stock, or request to see assets. The process can take anywhere from a few weeks to several months, depending on complexity.
If you’re unsure about a figure or transaction, say so and offer to check. Providing inaccurate or misleading answers can make things much worse.
Once the audit is complete, HMRC will either accept your returns as correct or propose adjustments. If everything is in order, you’ll receive confirmation—sometimes with advice on improving record-keeping. If HMRC finds errors, they’ll issue a 'closure notice' detailing what’s wrong, any extra tax due, and whether they’re imposing penalties or interest.
Penalties are based on the type of error, whether it was deliberate or careless, and how you behaved during the audit. Genuine errors with full cooperation usually attract lower penalties. Deliberate or concealed wrongdoing, or obstructing the investigation, can lead to much harsher consequences—including criminal prosecution in extreme cases.
You have the right to dispute HMRC’s findings. This can involve an internal review, alternative dispute resolution (ADR), or a formal appeal to the tax tribunal. Professional advice is strongly recommended if you disagree with a significant assessment or penalty.
| Error Type | Penalty Range | Mitigation Possible? |
|---|---|---|
| Genuine mistake | 0% - 30% of extra tax | Yes, with full cooperation |
| Careless error | 0% - 30% | Yes, if disclosed promptly |
| Deliberate error | 20% - 70% | Partial, if disclosed |
| Deliberate and concealed | 30% - 100% | No, full penalty likely |
If you accept HMRC’s findings, paying any tax and penalties promptly can further reduce the penalty rate and close the case faster.
Surviving a tax audit is one thing—making sure you don’t face another anytime soon is even better. The best defence is proactive, robust compliance. This means not only accurate record-keeping, but also understanding what HMRC expects and staying up to date with tax law changes. Regular internal reviews (with or without your accountant) can catch errors before HMRC does.
Make sure you’re using compliant, up-to-date accounting software—especially if you’re VAT-registered and required to follow Making Tax Digital. Regularly reconcile your accounts with bank statements, and keep personal and business finances separate. Avoid cash transactions where possible, and always document them thoroughly if they are unavoidable.
Train your staff on the importance of compliance, especially when it comes to expenses, payroll, and handling customer payments. Consider taking out tax investigation insurance—many accountants offer this as part of their service, and it can cover professional fees if you’re subject to an audit. Finally, be honest and prompt in correcting any errors or omissions. Voluntary disclosure almost always leads to a better outcome than waiting for HMRC to discover the issue.
GOV.UK offers detailed guides on record-keeping, Making Tax Digital, and your rights during an HMRC investigation. The Federation of Small Businesses (FSB) also provides support for members facing audits.
Most small businesses who fall foul of HMRC during an audit do so not because of fraud, but because of avoidable mistakes. The most frequent issues are poor record-keeping, misunderstanding eligible expenses, and ignoring filing deadlines. These mistakes are easily preventable with the right systems and professional support.
Another common pitfall is failing to keep personal and business finances separate. Mixing accounts makes it much harder to prove the business purpose of transactions, and increases the risk of genuine expenses being disallowed. Overclaiming expenses—especially mileage, subsistence, or home office costs—without proper evidence is another regular cause of disputes.
Some business owners make the mistake of ignoring or delaying HMRC correspondence, hoping it will go away. This only increases penalties and suspicion. Always respond promptly, even if you need more time to gather information. If you’re unsure about a tax rule, ask your accountant or check with HMRC rather than guessing.
Once you receive notice of an audit, destroying or altering records is illegal and could lead to prosecution. Always preserve all documents, even if they reveal mistakes.
According to the FSB, the average penalty for small businesses found in error during an HMRC compliance check is £3,200—plus back taxes and interest.
It’s important to remember that even during a tax audit, you have clear legal rights. HMRC must conduct investigations fairly and transparently. They must tell you what is being checked, why, and what information they require. You have the right to professional representation at any stage, and HMRC must give reasonable notice before visiting your premises.
If you disagree with HMRC’s findings, you can request a review by a different HMRC officer, use alternative dispute resolution (ADR), or appeal to the independent tax tribunal. You are entitled to see all evidence HMRC relies on, and to make your case before any penalties or assessments are finalised. If you feel you’ve been treated unfairly, you can complain to HMRC’s Adjudicator or escalate to the Parliamentary Ombudsman.
Several organisations offer practical support. The Federation of Small Businesses provides legal advice and helplines to members. The Institute of Chartered Accountants in England and Wales (ICAEW) and the Association of Chartered Certified Accountants (ACCA) have resources and searchable directories for finding qualified advisers. If you’re struggling financially, Citizens Advice and Business Debtline offer free, confidential support.
The HMRC Charter sets out the standards you can expect during investigations, including respect, professionalism, and confidentiality. Read it on GOV.UK for your rights in detail.

Ready for the next step? Open a business bank account to keep your finances organised.

Get 7,500 free points (worth £75) on your first transaction. No annual fee. Instant decision.
Affiliate disclosure: we may earn a commission via our links. This does not affect our editorial independence.


Affiliate links. We may earn a commission. Editorial independence maintained.