CRA Audit in Canada: What to Expect and How to Handle It (2026)

A letter arrives from the Canada Revenue Agency. The word "audit" is somewhere in the first paragraph. Your stomach drops.

Take a breath. Most CRA audits are resolved without major consequences — and many result in no changes at all to your taxes. What determines the outcome is not whether you are being audited, but how prepared and how cooperative you are when the process begins.

This guide walks you through every stage of a CRA audit in 2026 — from what the first contact looks like to what happens at the end — with the specific rights and protections you have at each step, and the expanded enforcement powers the CRA now holds that every Canadian should understand.

Quick Answer: A CRA audit is a formal examination of your tax return and supporting records by an auditor from the Canada Revenue Agency. It begins with a contact letter or phone call, involves a request for documents, and ends with either no changes or a Notice of Reassessment. You have legal rights throughout — including the right to a representative, the right to professional language service, and the right to object to any reassessment you disagree with. Respond promptly, provide only what is requested, and get professional help for anything beyond a simple document request.

CRA Audit vs. CRA Review: Make Sure You Know Which One You Have

Before going further — confirm whether the letter you received is actually an audit notice or a routine review request. These are very different situations with different implications.

The CRA explicitly states that a processing review is not an audit. If your letter says "review" and asks for receipts for a specific claim, you likely have a routine review. If your letter assigns you a specific auditor, references your books and records or multiple years, or arrives from the Audit Division — that is an audit.

The 2026 CRA Audit Environment: What Changed

Understanding the current enforcement landscape matters before you respond to anything.

In fiscal year 2023-24, the CRA conducted nearly 69,000 compliance actions — up from approximately 63,000 the year before. Budget 2026 allocated $77 million over four years specifically to strengthen tax enforcement. The CRA's 2026-2026 Departmental Plan confirms a strategic shift toward machine learning and AI to flag high-risk returns faster than ever before.

Beyond increased volume, three specific legal changes from Budget 2024 are now in effect in 2026 that every audited taxpayer should know:

1. Notice of Non-Compliance (New in 2026)

If you fail to provide requested information or documents during an audit, the CRA can now issue a Notice of Non-Compliance — a formal order. The penalty is $50 per day, up to a maximum of $25,000. While a Notice of Non-Compliance is outstanding, the normal reassessment period for affected years is also extended. This penalty did not exist before Budget 2024.

2. Compliance Order Penalties (New in 2026)

If a Federal Court issues a compliance order requiring you to cooperate with the CRA and you fail to comply, an additional penalty of up to 10% of aggregate tax payable for each affected year can be assessed — but only when the tax owing for at least one affected year exceeds $50,000.

3. Compulsory Interviews

The CRA retains the power to compel taxpayers to attend interviews and provide written statements under oath or affirmation. In 2026, this power complements the new penalty regime — the combination of compulsory interviews and non-cooperation penalties makes ignoring a CRA audit significantly more costly than before.

What this means for you: Respond to every CRA request promptly and completely. Non-cooperation is no longer just a delay tactic — it now has direct financial consequences under a penalty structure that was not in place before.

Stage 1 — The Initial Contact

A CRA audit begins when an auditor contacts you. This typically happens in one of two ways:

• By letter: An audit notification letter from the CRA's Audit Division, providing the auditor's name, contact information, the tax years under review, and what the audit will cover
• By phone, followed by a confirmation letter: The auditor calls first to introduce themselves and explain the audit scope, then follows up with a written letter confirming the details

Verifying the Auditor Is from the CRA

You are not required to engage immediately with a phone call until you have confirmed the caller is genuinely from the CRA. If you receive an unexpected call claiming to be from the CRA about an audit:

1. End the call politely
2. Call the CRA directly at 1-800-959-8281 to verify whether an auditor from that office is assigned to your file
3. If confirmed, call the auditor back at the number on the CRA website — not a number provided in the call

CRA agents will never demand immediate payment by gift card, cryptocurrency, or wire transfer. Any call making these demands is a scam.

What the Initial Letter Covers

• The tax year(s) being reviewed
• The type of audit (correspondence/desk audit or field audit)
• The general scope (which income items or deductions are being examined)
• The documents the CRA wants to review
• A timeline and contact information for the assigned auditor

Read the letter carefully. The scope stated in the initial letter defines what the audit covers at the outset — though auditors can expand scope if they discover issues during the review.

Stage 2 — Types of CRA Audits

Not all audits are the same. Understanding which type you are dealing with affects how you respond and how disruptive the process will be.

Correspondence Audit (Desk Audit)

The most common type for individuals. Conducted entirely by mail or the CRA's secure online submission system. The auditor requests specific documents and you send them in. No in-person meetings required. Resolves in weeks to months depending on the complexity of the issues.

Field Audit

The auditor visits your home or business in person to review records directly. More thorough and more disruptive than a correspondence audit. Typically used for self-employed individuals, small businesses, and complex financial situations. The auditor works at your location, may borrow documents (they must provide a receipt), and may request electronic records for remote review.

Net Worth Audit

The CRA compares your total assets, liabilities, and spending against your declared income over multiple years. Used when the CRA suspects significant unreported income — triggered by lifestyle incongruence, cash-intensive businesses, or tips from informants. The burden is on you to explain any difference between what you declared and what you apparently spent or accumulated. These are the most challenging audits to defend against without professional representation.

GST/HST Audit

A separate audit focused on your GST/HST filings — input tax credits claimed, sales reported, registration status. Often runs alongside an income tax audit for self-employed individuals and small businesses. Collection action can begin immediately on disputed GST/HST amounts (unlike income tax, where collection is paused during an objection).

Stage 3 — The Document Request

Once the audit type and scope are established, the auditor will provide a formal list of documents required. For a correspondence audit, this comes by letter. For a field audit, the auditor discusses it in person or sends a preliminary list before the first meeting.

What the CRA Typically Requests

Documents requested depend on what the audit is examining. Common requests include:

• Bank statements for all accounts (personal and business) for the years under review
• Invoices and receipts for all claimed business expenses
• Sales records and income documentation (invoices, contracts, payment records)
• Vehicle logbooks for claimed vehicle expenses
• Home office measurements and floor plans if home office expenses were claimed
• RRSP contribution receipts
• Capital gains documentation (purchase and sale records for investments or properties)
• GST/HST records if applicable
• Payroll records if employees were involved
• Corporate financial statements and T2 returns for incorporated businesses

How to Submit Documents in 2026

The CRA accepts documents through several channels — but email is specifically prohibited for audit document submissions (it is not considered secure). Your options are:

• CRA My Account "Submit Documents" feature: Upload digital copies directly to your file — fastest and creates a clear submission record
• Mail to the assigned auditor's office: Use tracked mail and keep copies of everything sent
• In person at a CRA office: For field audits, the auditor may review documents at your business location
• Fax: Still accepted for correspondence audits; keep the transmission confirmation

The Golden Rule: Provide What Is Asked, Nothing More

This is the most important practical advice in this entire guide. Answer every question the CRA asks — completely and honestly. But do not volunteer information beyond what is specifically requested. Every additional piece of information you provide that was not asked for is an opportunity for the audit to expand into new areas.

If you have professional representation (a CPA or tax lawyer), they manage this boundary on your behalf — which is one of the key reasons professional help is valuable during an audit.

Stage 4 — The Proposal Letter

After reviewing your documents and completing their analysis, the auditor issues a proposal letter (sometimes called a "draft assessment letter") outlining any proposed changes to your return before making them official.

The proposal letter:

• Lists every adjustment the CRA proposes to make and the reasons
• Shows the additional tax, penalties, and interest that would result
• Gives you an opportunity to respond before the reassessment is finalized
• Typically allows 30 days to respond with additional information or arguments

This is a critical opportunity. If the auditor has made errors, misunderstood your documentation, or misapplied the law, the proposal letter stage is the most efficient time to correct it — before a formal Notice of Reassessment is issued. Responding with clear, organized documentation and a specific written rebuttal can result in the auditor revising the proposals before finalizing.

If you disagree with the proposals but cannot resolve them at this stage, document your objections in writing now. This creates a record for the formal objection process that follows.

Stage 5 — The Notice of Reassessment

If the audit results in changes to your taxes, the CRA issues a Notice of Reassessment — an updated version of your original Notice of Assessment reflecting the auditor's findings.

The Notice of Reassessment shows:

• The adjusted income, deductions, or credits
• The revised tax owing
• Any penalties applied (gross negligence penalty: 50% of the tax owing from the unreported amount; late-filing penalty if applicable)
• Interest on the assessed amount, calculated from the original balance-due date

If the audit finds no changes, the CRA issues a letter confirming no changes instead of a reassessment. This is the best outcome — your return is validated.

Audit Penalties in 2026

Stage 6 — After the Reassessment: Your Options

Receiving a Notice of Reassessment is not the end. You have clear legal options if you disagree.

Option A — Pay and Move On

If the audit found legitimate errors you agree with, paying promptly stops further interest from accruing. The balance is due within 30 days of the reassessment date. If you cannot pay in full, set up a payment arrangement immediately.

Option B — File a Notice of Objection

If you believe the CRA made errors — misapplied the law, misunderstood your documentation, or denied legitimate claims — file a formal Notice of Objection within 90 days of the reassessment date. An independent CRA appeals officer, completely separate from the auditor, reviews your case.

During an income tax objection, collection on the disputed amount is generally paused — you do not need to pay what you are disputing while the objection is under review. Interest continues to accrue on the disputed amount throughout, however.

Option C — Apply for Taxpayer Relief

If the audit resulted in penalties or interest arising from extraordinary circumstances — serious illness, financial hardship, CRA errors or delays — apply for taxpayer relief using Form RC4288. This process can cancel or waive those charges, though it does not reduce the underlying tax.

Option D — Voluntary Disclosures Program (if applicable)

If the audit revealed unreported income or errors from years outside the current audit scope and you want to proactively address them before the CRA audits those years too, consider the Voluntary Disclosures Program. As of October 2026, unprompted VDP applicants receive 75% interest relief and full penalty relief. Prompted applicants (where the CRA has already initiated contact) receive 25% interest relief and partial penalty relief — still significantly better than a full audit finding.

Your Rights During a CRA Audit

The Taxpayer Bill of Rights guarantees 16 specific rights in your dealings with the CRA. The most important during an audit:

• Right to a representative: You can have a CPA, tax lawyer, or authorized person represent you at any point during the audit. You do not have to deal with the auditor directly.
• Right to professional language service: The CRA must serve you in English or French, whichever you prefer.
• Right to courteous and professional treatment: You can file a service complaint if the auditor behaves unprofessionally.
• Right to accurate and complete information: The CRA must explain what they are examining and why.
• Right to object: You can formally dispute any reassessment.
• Right to request a second review: If you disagree with the auditor's conclusions and cannot resolve them with the auditor directly, you can escalate to the auditor's team leader before the proposal becomes a formal reassessment.

Solicitor-Client Privilege

Communications between you and your tax lawyer are protected by solicitor-client privilege — the CRA cannot compel disclosure of these communications. This is one of the key reasons high-stakes audits benefit from legal representation rather than just a CPA.

How Long Does a CRA Audit Take in 2026?

These timelines assume reasonable cooperation. Non-cooperation or disputes at each stage extend the timeline significantly — and now also trigger the daily penalty under the Notice of Non-Compliance rules.

Frequently Asked Questions

What happens during a CRA audit in Canada?

A CRA audit is a formal examination of your tax return and financial records. It begins with a contact letter or phone call from an assigned auditor. The auditor requests specific documents, reviews them, and either confirms no changes or issues a proposal letter outlining adjustments. If changes are made, you receive a Notice of Reassessment. You have the right to respond to proposals, file an objection if you disagree with the final result, and be represented by a CPA or tax lawyer throughout.

How does the CRA notify you of an audit?

The CRA contacts you by letter, by phone followed by a confirmation letter, or both. The letter identifies the assigned auditor, the tax years under review, the type of audit, and what documents are needed. If you receive an unexpected phone call claiming to be from the CRA about an audit, end the call and call the CRA directly at 1-800-959-8281 to verify before providing any information.

How long does a CRA audit take in 2026?

Simple correspondence audits covering one or two items typically resolve in 3–6 months. Standard individual or self-employed audits take 6–12 months. Complex business audits and net worth audits can take 12–36 months or longer. Cooperation and complete documentation from the start significantly shortens timelines. Non-cooperation now also triggers financial penalties that did not exist before 2026.

Do I have to pay my taxes while being audited?

The undisputed portion of your taxes — amounts you agree you owe — should be paid by normal deadlines. During the audit itself, there is no automatic pause on collection. However, once a reassessment is issued and you file a Notice of Objection, collection on the disputed amount is generally paused during the objection review. Interest continues to accrue on disputed amounts throughout.

Can I be audited for more than one year at a time?

Yes. The CRA typically reviews the most recent 3 years, but can go back 6 years if misrepresentation or careless disregard is suspected — and further in cases of deliberate fraud. If the audit is triggered by a specific issue (unreported income, for example), the CRA will audit as many years as needed to fully assess the situation.

What is the gross negligence penalty in a CRA audit?

If the CRA determines that a false statement or omission on your return was made knowingly or with gross negligence, they assess a penalty of 50% of the tax that would have been avoided. This is separate from the tax itself and from interest charges. It is one of the most significant financial consequences of a CRA audit and is one of the reasons that maintaining accurate records is essential.

What is the new Notice of Non-Compliance penalty in 2026?

Introduced under Budget 2024 powers, a Notice of Non-Compliance is issued when a taxpayer fails to provide requested information or documents during an audit. The penalty is $50 per day, up to a maximum of $25,000. While a Notice of Non-Compliance is outstanding, the normal reassessment period for the affected years is also extended. This penalty is new in 2026 and significantly increases the cost of non-cooperation during an audit.

Should I hire a professional for a CRA audit?

For a simple correspondence audit requesting a few receipts for a specific deduction, most Canadians can handle it themselves. For anything involving a field audit, a net worth audit, business records, multiple years, large proposed reassessments, or legal questions about how the tax law applies — professional representation is strongly recommended. A CPA can handle many audits effectively. A tax lawyer adds solicitor-client privilege and is essential for high-stakes disputes or anything that may end up at Tax Court.

Can the CRA audit me after I have already been audited?

Yes. Being audited once does not protect you from future audits. However, the CRA generally cannot reassess a year it has already audited unless new information becomes available, fraud or misrepresentation is suspected, or you voluntarily amend that year. Keeping clean records for every year — audited or not — is your ongoing protection.

What is the Voluntary Disclosures Program and should I use it during an audit?

The VDP is a program that lets you proactively correct past errors before the CRA contacts you. As of October 2026, unprompted VDP applicants receive 75% interest relief and full penalty relief on the disclosed issues. Once the CRA has already contacted you about an audit, you are in "prompted" territory and receive reduced benefits (25% interest relief). If an audit reveals issues in years not currently under review, discussing a VDP application for those years with a professional before the audit expands is worth considering.

← Back to: What Happens After You File Your Taxes in Canada

Disclaimer: This article is for general educational purposes only and does not constitute professional tax or legal advice. CRA audit procedures, penalties, and enforcement powers change regularly. If you receive a CRA audit notice, consult a qualified Canadian tax professional or tax lawyer before responding.

If you want to know other articles similar to CRA Audit in Canada: What to Expect and How to Handle It (2026)y ou can visit the category After Filing.