There is a game being played in every audit, and almost nobody knows the rules before the first letter arrives.
The IRS is not just looking at whether your numbers add up. They are also quietly asking themselves a different question:
“Are we still allowed to look at this?”
Because buried inside the Internal Revenue Code is a set of deadlines that govern how long the IRS can legally reach back into your past and challenge what you filed. These deadlines are called statutes of limitations, and understanding them is the difference between sleeping soundly and wondering, three years after filing, whether an old return might come back to haunt you.
Most people file their return, pay what they owe or collect their refund, and never think about it again. That instinct is mostly right. But mostly is not the same as entirely. And in tax law, the space between mostly and entirely is exactly where expensive problems live.
Let me walk you through the full picture.
The Standard Window: Three Years and a Clean Slate
For the vast majority of tax returns, the IRS has three years from the later of two dates to initiate an audit. That date is either the date your return was due or the date it was actually filed, whichever comes later.
So if your 2022 individual income tax return was due on April 18, 2023, and you filed it on time, the IRS generally has until April 18, 2026 to open an audit on that return. Miss that window, and the IRS is largely out of luck. Under 26 U.S.C. Section 6501(a), that three-year window is the baseline, the default, the rule that protects most compliant taxpayers.
Now here is something that surprises a lot of people: this clock runs on “filed” returns, not on the taxes you paid. You might have made your quarterly estimates on time, balanced your books carefully, and done everything right. But if you have not filed the actual return, that clock has not started. It cannot start something it has not seen. Which brings me to an important point about late filers.
If you file your return late, the three-year window starts on the date you actually file it, not the original deadline. So if you were supposed to file on April 15, 2023, but finally got around to it on December 1, 2023, the IRS has until December 1, 2026 to audit you for that year.
You effectively extended the IRS’s reach on yourself without even knowing it. I have talked about the hidden cost of procrastination before in why your CPA can’t save you in January, but the consequences of filing late extend well beyond missing out on planning. They extend your exposure on the back end too.
The Six-Year Rule: When the IRS Gets More Time
Here is where things get more interesting, and more dangerous if you are not paying attention.
Under 26 U.S.C. Section 6501(e), the IRS has six years to audit your return if you omit more than 25% of your gross income from a return. That threshold sounds high, and in some cases it is. But consider how easily it can happen in practice. A business owner who sells a piece of equipment, receives a settlement, earns revenue through a new income stream, or receives a 1099 that gets misplaced or overlooked could easily cross that threshold without realizing it. The omission does not have to be intentional. The law does not care about intent when it comes to extending the statute.
The six-year rule also applies to certain foreign financial account reporting situations. If you have a financial interest in or signature authority over a foreign account, and you failed to report more than $5,000 in income from that account, the extended six-year window applies to that return as well. This is an area where the IRS has been increasingly aggressive in recent years, a trend I explored in detail in IRS audits are on the rise.
The practical message here is simple. If there is any year in your history where income reporting may have been incomplete, even by accident, do not assume three years of safety. You may still be inside a six-year window that you never knew was open.
The Unlimited Window: When the IRS Never Has to Stop
This is the one nobody wants to talk about. And honestly, nobody wants to be in this situation.
If you never file a return at all, the statute of limitations never starts. There is no clock. The IRS can come after an unfiled return ten years later, twenty years later, theoretically at any point. Under 26 U.S.C. Section 6501(c)(3), the limitations period simply does not apply to an unfiled return. And in practice, the IRS rarely lets it go forever because failure to file penalties and interest continue to compound during that entire period.
The same unlimited window applies in cases of fraudulent returns. Under 26 U.S.C. Section 6501(c)(1), there is no statute of limitations if a false or fraudulent return was filed with intent to evade tax. This is the provision that makes tax fraud uniquely dangerous compared to other financial mistakes. A bad business decision eventually becomes history. A fraudulent return stays on the table indefinitely.
And then there is willful tax evasion. Under 26 U.S.C. Section 7201, the criminal statute of limitations for tax evasion is six years from the date of the offense. But the civil audit window? No limit. The IRS can still come after you civilly, assess additional taxes and penalties, and pursue collection on a fraudulent return even when criminal prosecution is no longer possible.
I want to say something plainly here, because this is a place where I have seen otherwise good people get into very bad situations:
The IRS does not forgive fraud. It waits.
And eventually this has a tendency to catch up with you.. at one time or another. Often when you expect it the least.
What This Means for Your Record Keeping
Now that you understand the windows, the practical question becomes: how long do you actually need to keep your records?
The textbook answer is three years for most taxpayers. Keep your returns, your supporting documents, your receipts, bank statements, payroll records, and anything else that substantiates what you filed. After three years, the standard audit window has generally closed, and most of that paperwork has served its purpose.
But here is the reality I share with my clients: I almost always recommend keeping records for seven years. And for certain categories of documents, I recommend keeping them even longer.
Why seven?
Because if there is any question about whether the six-year window might apply, you want to be covered. Business owners with complex income streams, multiple revenue sources, S-Corp distributions, real estate transactions, or retirement account contributions are exactly the type of filers who should be conservative about record retention.
Seven years gives you a cushion. It also gives you something to work with if you ever need to amend a return, which I wrote about recently in the tax return you filed might not be the final word.
What Records Do I Need To Keep
Some records need to be kept indefinitely, regardless of statute. If you bought a piece of property or equipment that you still own, you need those purchase records to establish your cost basis when you eventually sell it. The gain you report on that future sale depends entirely on what you paid, and the IRS can absolutely challenge the basis if you do not have proof. This is true for real estate, business equipment, investment accounts, and any other capital asset.
Tax returns themselves? I keep those forever. They are relatively small files, they take up almost no digital space, and they serve as the foundation for almost every financial decision you might need to revisit. There is simply no good reason to throw them away.
If you are not sure whether your current record keeping is holding up, that is worth a conversation with someone who has thought through this systematically. The clients I work with who never worry about audits are not the ones who just filed clean returns. They are the ones who can prove it.
When the IRS Actually Audits Old Returns
Here is a practical note that tends to calm people down a little. The IRS rarely audits returns older than three years. The agency has limited resources and generally focuses its attention on returns within that standard window. Even when the six-year window technically applies, auditors tend to prioritize more recent returns where the data is fresher and the records are more accessible.
That said, “rarely” is not “never.” I have seen clients receive audit notices on returns that were four and five years old. It happens most often when the IRS discovers an issue on a recent return that suggests a pattern going back further, or when a third-party document discrepancy triggers a look-back. In those situations, having clean records from the earlier years is what stands between a manageable audit and a very expensive one.
The Schedule C filers in the audience should pay special attention here. As I wrote in the Schedule C audit trap, sole proprietors are statistically among the most audited categories of taxpayers. If the IRS pulls your recent return and finds something worth investigating, there is a real chance they look back further. Three years of clean records should be the minimum for anyone operating a business.
The Amended Return Wrinkle
One more thing that catches people off guard: filing an amended return can restart or extend the statute of limitations.
When you file a Form 1040-X to correct a prior year’s return, you essentially open that return back up for scrutiny. The IRS generally has three years from the date you file the amendment, or the remaining time on the original statute, whichever is longer, to audit that amended return. So if you are thinking about amending a return to claim a deduction you missed or correct an error, do it intentionally and with good documentation ready to go.
This is not a reason to avoid amending when you should. If you are owed money or you made a mistake, amending is almost always the right call. But go in with eyes open about what it means for your audit window.
Putting It Together: A Framework for Thinking About Exposure
Here is a simple way to think about where you stand with any given tax year.
For a return filed on time with no significant omissions and no fraud, you are looking at three years of exposure from the filing date. Keep your records for at least that long, ideally seven years. After that window closes, the IRS has very little runway to come after you.
For a return filed late, your exposure clock started later than you think. Calculate your actual window from the date the return was filed, not the deadline.
For any year where more than 25% of gross income may have been omitted, assume six years. Get your documentation organized and do not assume you are in the clear just because three years have passed.
For any year with an unfiled return, there is no clock. If you have unfiled returns sitting out there, now is the time to address them. The exposure does not shrink on its own, and how to assess tax compliance risks is a good starting point for understanding what voluntary correction might look like.
And for anything involving fraud or willful evasion? You need a tax attorney, not a blog article.
The Takeaway
The statute of limitations is one of the most misunderstood protections in the tax code. Most people either do not know it exists or assume it works in ways that it does not. They think three years means they are automatically safe after three years, without accounting for late filing, income omissions, or the specific nature of what they reported.
The truth is simpler and more empowering than the confusion around it: if you file complete, accurate returns on time, the window closes in three years and stays closed. You keep your records, you document your positions, you file each year like someone who plans to prove every number, and you move on with your life.
The IRS has a clock. Now you know how it works. The goal is to make sure it keeps ticking right past your return without stopping.
That kind of clarity is what changes how a business owner sleeps at night, and it is what this body of work is really about.
Welcome to the New Age of Accounting. Let’s begin.
P.S. If you found this article helpful, you’ll love my new book S-Corp Mastery: How Smart Business Owners Maximize Tax Savings & Build a Lasting Legacy. It’s now live and available in a sleek, easy-to-read PDF version. Grab your copy here
Chris is the Managing Partner at Weston Tax Associates, a best-selling author, and a renowned tax strategist. With over 20 years of expertise in tax and corporate finance, he simplifies complex tax concepts into actionable strategies that drive business growth. Originally from Sweden, he now lives in Florida with his wife and two sons.
