What to Expect in Your First HMRC Audit

Hearing that HMRC wants to audit your small business can be a gut-wrenching moment. For many UK business owners, it’s an unfamiliar process riddled with anxiety and confusion. This article breaks down exactly what happens during an HMRC audit, why you might be selected, how to prepare, what to expect at every stage, and how to avoid the most common (and costly) mistakes. By the end, you’ll know your rights, your responsibilities, and practical steps to get through your first audit with confidence.

HMRC audits, officially called 'compliance checks', are a routine part of tax enforcement in the UK. Contrary to popular belief, audits aren’t just triggered by suspicion of fraud. HMRC uses a mix of random selection, data analysis, and targeted risk assessment to choose businesses for review. Understanding why you might be picked can help you prepare and respond appropriately.

One of the main triggers is discrepancies in your tax returns or accounts. For example, if your figures change dramatically year-on-year, or if your declared income is significantly lower than other businesses in your sector, HMRC may look closer. They also use sophisticated software to flag patterns that could indicate underreporting, undeclared income, or errors.

Sometimes audits are entirely random, especially for smaller businesses. HMRC does this to keep everyone on their toes and ensure the system is fair. In other cases, audits are prompted by third-party information – such as reports from disgruntled ex-employees or referrals from other government agencies. High-risk industries (like construction, hospitality, and cash-based trades) are audited more frequently.

• Unusual fluctuations in income, expenses, or profit margins
• Omissions or inconsistencies in submitted tax returns
• Frequent or late filing and payment issues
• Operating in sectors HMRC considers high-risk for errors or evasion
• Receiving large or frequent VAT reclaims
• Anonymous tips or complaints to HMRC

Not all HMRC audits are the same. The scope, depth, and style of the audit will depend on what triggered it and what HMRC wants to check. For most small businesses, the audit will fall into one of three categories: aspect enquiry, full enquiry, or random check. Knowing which type you’re facing will shape how you respond and prepare.

An aspect enquiry is the most common for first-timers. Here, HMRC focuses on a specific area of your tax return – perhaps your expenses, VAT reclaims, or payroll records. These are often resolved quickly if you can provide clear documentation. A full enquiry is more serious and involves a deep dive into your entire business finances, personal finances (if you’re a sole trader or partnership), and all related records. Random checks are less common but can cover any aspect of your business accounts and compliance.

HMRC can audit multiple taxes at once – corporation tax, VAT, PAYE, and even the Construction Industry Scheme (CIS) if relevant. They may also check compliance with the National Minimum Wage, IR35, and other statutory obligations. The breadth of the audit will be made clear in your opening letter.

• VAT records and returns
• Corporation Tax or self-assessment tax returns
• PAYE and payroll records
• Employee expenses and benefits
• Cash book, bank statements, sales and purchase invoices
• Sector-specific compliance (e.g., CIS, IR35, Minimum Wage)

The audit process begins with a formal letter from HMRC. This letter will specify the type of check, the period under review, and what information they want. It will also give you a response deadline – usually 30 days. Take this seriously. Ignoring or delaying your response can escalate matters quickly.

Next, HMRC may request documents, invite you to a meeting (in person or by phone), or ask to visit your business premises. If they visit, they’ll want to see your records, systems, and possibly interview you or your staff. You’re entitled to representation (an accountant or tax adviser) at any meeting. If you have an accountant, let them know immediately – they should be your first port of call. See our guide on How to Hire an Accountant: Questions to Ask for advice.

After reviewing your records and explanations, HMRC will either close the audit with no changes, or propose adjustments. If they believe there are errors, they’ll issue an assessment for additional tax, plus potential penalties and interest. You have the right to appeal if you disagree with their findings.

HMRC’s primary goal is to ensure your business has accurately reported its income and paid the correct amount of tax. They’ll look for evidence that your records are complete, accurate, and kept in line with UK law. For most small businesses, this means checking whether your paperwork matches your declared figures.

Expect HMRC to scrutinise your sales and purchase invoices, bank statements, receipts, VAT records, payroll files, and expense claims. They may also ask for explanations of unusual transactions, large cash movements, or changes in your business model. If your business is in a cash-heavy sector, expect extra scrutiny on undeclared takings.

If you use accounting software (like Xero, QuickBooks, or Sage), HMRC may request read-only access or exports. They’ll check for gaps in numbering, missing transactions, or edits after year-end. If you keep paper records, they’ll expect everything to be well-organised and legible. Poor record-keeping is a red flag and can itself lead to penalties.

• Ensure all invoices are sequentially numbered and retained
• Keep bank statements for at least 6 years (Company law requirement)
• Retain payroll and PAYE records for at least 3 years after the tax year they relate to
• Keep digital and paper records consistent and up to date
• Document any unusual transactions with supporting notes
• Back up digital records in case of system failure

The most common reason small businesses fall foul of HMRC isn’t deliberate fraud – it’s poor record-keeping and misunderstanding the rules. Honest mistakes can still lead to penalties if HMRC decides you’ve been ‘careless’. The key is to understand where errors often happen and put robust processes in place.

Mismatching figures between VAT returns and accounts is a classic error, often caused by failing to reconcile regularly. Claiming personal expenses as business costs is another pitfall. If you can’t prove an expense is ‘wholly and exclusively’ for business, HMRC will disallow it. Payroll mistakes are also common, such as incorrect calculation of PAYE, missing RTI submissions, or misclassifying contractors under IR35.

Penalties vary depending on whether HMRC deems the error as careless, deliberate, or concealed. Careless errors (without reasonable excuse) can attract penalties from 0% to 30% of the extra tax due. Deliberate or concealed errors can result in penalties of up to 100%. Interest is also charged on late payments. Keeping accurate records and seeking professional advice can save you thousands.

• Reconcile VAT, PAYE, and accounts monthly – not just at year-end
• Separate personal and business expenses (use a dedicated business bank account)
• Double-check all figures before submitting returns
• File all returns by the statutory deadlines (e.g., VAT – usually 1 month plus 7 days after quarter end)
• Respond to HMRC queries promptly and honestly
• Keep evidence of all professional advice you’ve followed

Facing HMRC can feel intimidating, but you do have rights. HMRC must follow strict rules set out in the Compliance Handbook and the HMRC Charter. You have the right to be treated professionally and fairly, to be told what information is being sought and why, and to have your personal and business data kept confidential.

You’re entitled to representation – your accountant or tax adviser can deal with HMRC on your behalf or attend meetings with you. You can request more time to gather information if you have a genuine reason, and you have the right to appeal any decision or proposed penalty. If you feel HMRC has acted unfairly, you can make a formal complaint or escalate to the Adjudicator’s Office.

HMRC does have significant powers. Inspectors can visit your premises (with reasonable notice), demand to see records, and ask for information from third parties (e.g., banks, customers, suppliers). In rare cases, they can obtain court orders or conduct unannounced visits, but this is usually reserved for suspected fraud. Knowing your rights and obligations can help you navigate the process confidently.

• Always ask for ID if an HMRC officer visits your premises
• Keep communications polite and factual – avoid confrontation
• Don’t admit fault or agree to penalties on the spot – review findings first
• If you feel overwhelmed, ask for extra time or seek professional support
• Document all meetings and phone calls in writing afterwards
• Know that you can complain if HMRC staff behave unreasonably

Preparation is your best defence against a stressful and costly HMRC audit. Even if you haven’t been selected yet, putting the right systems in place will save you time and anxiety in the long run. The more organised and transparent your records are, the easier it is to satisfy HMRC and close the audit quickly.

Start by reviewing your bookkeeping systems. Ensure all sales and purchase records are up to date, invoices are sequential and complete, and all bank transactions are reconciled at least monthly. Check that all expense claims are supported by receipts and clearly relate to business activity. If you use software, regularly back up your data and ensure all entries are correctly categorised. For more on keeping your records in order, see How to Keep Track of Business Receipts and Expenses.

It’s also wise to carry out your own 'mini-audit' once a year. Compare your VAT returns to your sales figures, review payroll submissions, and double-check that your tax returns match your accounts. If you spot errors, correct them promptly and document what you’ve done. HMRC looks favourably on businesses that proactively fix mistakes and keep clear records of their actions.

• Keep a checklist of statutory records you must retain (e.g., invoices, receipts, PAYE files)
• Create a calendar of all tax deadlines (VAT, PAYE, Corporation Tax, self-assessment)
• Schedule an annual review with your accountant or bookkeeper
• Train staff on the importance of accurate record-keeping and data entry
• Regularly back up digital records in multiple secure locations
• Store paper records in a safe, organised location for at least 6 years

Once HMRC finishes their review, they’ll either close the audit with no changes, or issue an assessment detailing any additional tax due, penalties, and interest. If you agree with their calculations, you’ll be expected to pay promptly. If you disagree, you can appeal – starting with an internal review process and, if necessary, escalating to a tax tribunal.

HMRC is usually open to negotiation on penalties, especially if you can demonstrate that any error was a genuine mistake and you cooperated fully. In some cases, penalties can be reduced to zero if you made an unprompted disclosure or took reasonable care. If you can’t pay immediately, you may be able to negotiate a Time to Pay arrangement.

Going through an audit can be a wake-up call for many small businesses. Use the experience to improve your systems, address any weaknesses, and train your staff. Many business owners find that, after their first audit, they run a tighter and more resilient operation. Don’t let the experience put you off – use it as a springboard for better compliance and peace of mind.

• Request a detailed breakdown of any additional tax or penalties
• Keep copies of all correspondence with HMRC for your records
• Ask your adviser to review any settlement offer before agreeing
• If appealing, submit your grounds and supporting evidence promptly
• Use HMRC’s Time to Pay service if you can’t afford to pay immediately
• Review your systems and fix any compliance gaps highlighted by the audit