When a Civil Audit Turns Criminal | Kathryn Meyer Law PC

The clearest signs are a shift in the examiner's questions from documents to intent, requests aimed at unreported income or hidden assets, a request for your original returns, and an active audit that suddenly goes quiet. None of these proves anything on its own, but each lines up with steps the Internal Revenue Manual tells civil examiners to take when they see indicators of fraud.

The stakes are different from an ordinary audit. A civil fraud finding brings a 75 percent penalty and removes the time limit on assessment, and some cases are referred to IRS Criminal Investigation. This page explains what examiners are trained to look for and what happens inside the IRS when they find it. It is part of Kathryn Meyer's guidance on IRS audits and examinations.

What are examiners trained to look for?

Internal Revenue Manual 25.1.2, Recognizing and Developing Fraud, is the IRS handbook that helps civil compliance employees spot fraud. It separates first indicators, or "badges," of fraud from affirmative acts, also called firm indications, which are actions taken to deceive. The manual groups the badges by category:

Category	Examples the IRM lists
Income	Omitting entire sources of income; bank deposits or net worth growth that cannot be explained; concealing bank, brokerage or digital asset accounts; unusual handling of large amounts of cash
Expenses and deductions	Fictitious or overstated deductions; personal spending claimed as business expense
Books and records	Multiple sets of books or no records; altered, back-dated or false documents; amounts on the return that do not agree with the books
Conduct	False statements about a material fact in the examination; hindering the audit through repeated cancellations or refusing records; destroying records soon after an audit starts; a pattern of underreporting over several years

Two items on the conduct list deserve attention because they can happen without bad intent: a false statement made under pressure, and stalling an examiner. Both are treated as indicators. That is one reason careful, accurate answers given through a representative are usually better than improvised ones.

What happens inside the IRS when an examiner sees fraud indicators?

The IRM sets out a defined process:

The examiner documents the indicators and discusses them with the group manager.
If the manager agrees, the examiner contacts a Fraud Enforcement Advisor, an IRS employee who advises examiners on fraud cases.
If all three agree that fraud may be present, the examiner prepares Form 11661, which places the case in "fraud development" status, and they write a plan to establish affirmative acts of fraud, with follow-up at least every 60 days.
The examiner requests the original tax returns if the IRS does not already have them.
If affirmative acts are established, the examiner must suspend examination activity and notify the manager and the advisor, who recommends a referral to Criminal Investigation if the criminal criteria are met.
If the criteria are not met, or Criminal Investigation sends the case back, the civil fraud penalty may be considered.

The manual also tells examiners never to ask Criminal Investigation for advice on a specific case they are examining. The firm's post Don't "Neuberger" Your IOLTA Account describes how a routine civil audit of a lawyer's records ended in an indictment, and why the IRS may simply suspend the audit without explaining why.

What might you notice from your side?

The questions change. They move from substantiating a deduction to how you live, where deposits came from, how you handle cash, and what accounts you hold, which mirrors the income indicators above.
A request for original returns. The IRM directs this step once a case is in fraud development.
Silence. An examiner who was actively scheduling meetings stops calling, cancels appointments or goes quiet for an extended period. That can have ordinary explanations, but it is also what a suspension looks like from outside.
Interest in other years or other people. Questions about earlier years, related businesses or the people who prepared your returns.

Why do the stakes change?

Several legal protections that apply in a civil audit do not carry over to a criminal matter:

The interview safeguards in section 7521, including the right to suspend an interview to consult a representative, do not apply to criminal investigations. See your rights during an IRS audit for how they work in a civil case.
The confidentiality privilege for tax advice from non-attorney practitioners under section 7525 applies only in noncriminal matters.
The advance notice of third-party contacts required by section 7602(c) does not apply to a pending criminal investigation, and section 7602(b) confirms the IRS's summons powers may be used to inquire into tax offenses.

On the civil side, the fraud penalty is 75 percent of the underpayment attributable to fraud, and a fraudulent return can be assessed at any time. In the Tax Court, the IRS carries the burden of proving fraud, and under Tax Court Rule 142(b) it must do so by clear and convincing evidence. See what penalties the IRS can add after an audit. The time limits, and why fraud removes them, are explained in how far back the IRS can audit.

What should you do if you see these signs?

Talk to an attorney before answering more questions or sending more documents, and keep every record exactly as it is. Destroying or altering records after an audit begins is itself on the IRM's list of fraud indicators. Do not try to fix the problem informally with the examiner. Whether to correct past returns, how to respond to pending requests, and whether a different kind of lawyer should be involved are decisions that depend on facts only you and your counsel can weigh, and the outcome cannot be predicted from the outside.

Large cash payments are one area where reporting failures draw attention; the rules for firms are in whether your law firm has to report cash payments over $10,000.

What changes the answer

Indicators versus affirmative acts. The IRM says no single indicator proves fraud; the case turns on affirmative acts, meaning actions taken to deceive (IRM 25.1.2).
Whether the criminal criteria are met. A Fraud Enforcement Advisor recommends a referral to Criminal Investigation only when they are; otherwise the case returns to the civil track, where the fraud penalty may be considered.
Which spouse acted. On a joint return, the civil fraud penalty does not apply to a spouse unless some part of the underpayment is due to that spouse's own fraud (section 6663(c)).
Whether a return was filed at all. A fraudulent failure to file raises the late-filing addition from 5 to 15 percent a month, with a maximum of 75 percent instead of 25 (section 6651(f)).
Timing of any disclosure. The IRS Criminal Investigation voluntary disclosure practice treats a disclosure as timely only if it arrives before the IRS has started a civil examination or criminal investigation, among other conditions.
The burden of proof. In the Tax Court the IRS must prove fraud by clear and convincing evidence (section 7454 and Rule 142(b)); the other burden rules are in who has to prove what in a Tax Court case.

For example: an audit that changes direction

For example, imagine an office audit of a consultant that starts with a request for receipts supporting travel deductions. After two meetings the examiner's questions turn to the consultant's cash receipts, a brokerage account not mentioned on the return, and how a home renovation was paid for. A week later the examiner cancels the next appointment without rescheduling, and a letter asks for the original signed returns.

Each of those events matches a step or indicator in IRM 25.1.2: questions aimed at unexplained income and accounts, a request for original returns, and a pause that can mean examination activity was suspended. None of them proves a referral was made, and there may be ordinary explanations. But together they are the point at which the consultant should stop answering questions directly and get legal advice before anything else is said or sent. This is a hypothetical, not a real case.

Common mistakes when an audit changes tone

Explaining more to "clear things up". Statements made now can become evidence, and a false statement about a material fact is itself an indicator.
Tidying up the records. Altering, back-dating or discarding documents after an audit starts is on the IRM's list.
Filing amended returns on your own mid-audit. A correction made without advice may not be treated as a disclosure and can raise new questions.
Relying on a non-attorney privilege. Section 7525 protects tax advice from CPAs and enrolled agents only in noncriminal matters.
Stalling. Repeated cancellations and refused requests are themselves listed as conduct indicators.

What to do this week

Stop direct conversations with the examiner and arrange to speak with an attorney first.
Preserve every record in its current form, including electronic files and messages.
Write down, privately and for your attorney, the dates of each contact, what was asked and what was provided.
Collect the audit letters, information requests and any third-party contact notices you have received.
Do not file amended returns or send new documents until you have advice on the effect.

Frequently asked questions

Does a fraud indicator mean you will be charged with a crime?

No. The IRM describes an indicator as a sign or symptom and says no single indicator is determinative. Many cases in fraud development never reach Criminal Investigation, and the outcome of any case depends on its facts.

Will the examiner tell you the case has been referred?

The IRM directs the examiner to suspend examination activity once affirmative acts are established; it does not describe telling the taxpayer why. From the outside, a referral can look like silence.

Can you still make a voluntary disclosure during an audit?

The IRS voluntary disclosure practice requires timeliness, which generally means before a civil examination or criminal investigation has started. Our page on amended returns and voluntary disclosure explains the conditions and the process.

Is the civil fraud penalty charged on the whole underpayment?

Once the IRS proves part of an underpayment is due to fraud, the entire underpayment is treated as fraud except any part the taxpayer proves was not (section 6663(b)).

Can the IRS contact third parties without notice in a criminal case?

Yes. The advance notice rule in section 7602(c) does not apply to a pending criminal investigation. How the notice works in civil audits is explained in whether the IRS can contact your bank, clients or employer.

Does this apply to collection cases too?

Yes. IRM 25.1.2 covers collection employees as well as examiners, and lists indicators such as transfers of assets to hinder payment. Collection options and rights are covered under IRS collections and enforcement.

Talking with a tax attorney

Kathryn Meyer spent more than two decades inside the IRS Office of Chief Counsel and understands how examiners build and evaluate a case. If an audit has changed tone, a confidential conversation early is a sensible next step. Contact the firm or call (571) 560-8674.

Sources

Back Home