Payroll Audits: Internal Reviews and IRS Examination Preparation

Payroll audits encompass two distinct but overlapping processes: voluntary internal reviews conducted by employers to verify payroll accuracy and compliance, and formal examinations initiated by the IRS or state tax agencies to assess whether an organization has properly withheld, reported, and remitted employment taxes. Both processes engage the same underlying records — payroll registers, tax filings, worker classification determinations, and benefit deductions — but carry different procedural rules, timelines, and consequences. This page maps the structure, mechanics, and regulatory framework governing both forms of payroll audit as they apply to US employers.


Definition and Scope

A payroll audit, in the broadest regulatory sense, is a structured examination of an employer's payroll records, tax withholding calculations, benefit deductions, and employment tax remittances against applicable federal and state requirements. The IRS defines employment tax examinations as reviews focused on whether employers have correctly classified workers, calculated FICA taxes, withheld income taxes, and filed required returns — including Form 941 (quarterly federal tax return), Form 940 (FUTA), and Form W-2.

Internal payroll audits share the same evidentiary scope but are self-initiated. They are used to surface errors before regulators do, support financial statement accuracy, and satisfy audit committee requirements under Sarbanes-Oxley for publicly traded companies. The scope of either audit type typically spans the trailing 3 years, matching the general statute of limitations under 26 U.S.C. § 6501, though the IRS may reach back 6 years when the understatement of income exceeds 25 percent of gross income, and indefinitely in cases of fraud.

The dollar stakes are material. The IRS assessed more than $13.7 billion in employment tax penalties in fiscal year 2022 (IRS Data Book 2022), underscoring why payroll compliance is treated as a front-line business risk rather than a back-office administrative function.


Core Mechanics or Structure

Internal Payroll Audit

An internal payroll audit proceeds through five functional phases:

  1. Scope definition — identifying the time period, pay groups, and compliance categories under review (e.g., overtime pay rules, garnishments and levies, or payroll deductions).
  2. Data extraction — pulling payroll register data, general ledger reconciliations, bank statements confirming direct deposit disbursements, and tax deposit records.
  3. Reconciliation — matching gross pay to net pay, verifying that payroll withholding amounts align with IRS tax tables, and confirming that FICA taxes were computed at the correct rates (6.2% Social Security up to the annual wage base, 1.45% Medicare with no cap, per IRS Publication 15).
  4. Worker classification review — verifying that independent contractor payments reflect correct 1099 treatment and that workers classified as employees received proper payroll taxes treatment under the common-law control test.
  5. Findings and remediation — documenting discrepancies, calculating potential liability exposure, and initiating payroll errors and corrections processes.

IRS Employment Tax Examination

IRS examinations are structured differently. Upon notification, the employer typically receives IRS Letter 2205-A or an equivalent correspondence audit notice. The examination agent requests specific records — often covering 4 quarters of payroll data — and may conduct in-person or correspondence-based review. The agent applies the Revenue Procedure 85-18 framework and the IRS Employment Tax Handbook for evaluating worker classification disputes.


Causal Relationships or Drivers

The primary triggers for IRS employment tax audits, as documented in IRS examination selection criteria, include:

Internal audits are most commonly driven by growth events (acquisitions, headcount surges), payroll software migrations, external financial audits, or preparation for an IRS examination already underway. Multi-state payroll environments create compounding drivers: each additional state introduces a separate state unemployment tax account, unique filing deadlines visible on the payroll deadlines and calendar, and distinct withholding requirements.


Classification Boundaries

Not all payroll-adjacent reviews qualify as payroll audits in the regulatory sense. The following boundaries define what is and is not within scope:

Within scope of a payroll audit:
- Employment tax withholding and remittance accuracy
- FICA taxes and federal unemployment tax computations
- Employee classification determinations (employee vs. independent contractor)
- Prevailing wage compliance for government contractors (prevailing wage and certified payroll reviews)
- Supplemental wages and flat-rate withholding correctness
- Equity compensation payroll tax treatment
- Tips and gratuities payroll allocation and reporting

Outside the core payroll audit scope (handled by separate reviews):
- Benefits plan compliance (ERISA audits of retirement plan payroll contributions are conducted under DOL jurisdiction)
- Flexible spending accounts payroll — FSA plan administration audits fall under IRS and DOL joint authority
- Health insurance payroll deductions — cafeteria plan compliance audits involve Section 125 plan documentation but are distinct from employment tax audits
- Financial statement audits — GAAP-basis payroll accrual accuracy is reviewed by external auditors, not the IRS examination division


Tradeoffs and Tensions

Disclosure vs. Exposure

Employers who voluntarily disclose classification errors before an IRS examination may access the Voluntary Classification Settlement Program (VCSP), which limits back-tax liability to 10% of the employment tax due for the most recent tax year and waives interest and penalties. However, entering the VCSP requires filing an application (Form 8952) and prospectively reclassifying workers — a commitment that may conflict with business model needs in sectors that rely on independent contractor payments as a structural feature.

Documentation Depth vs. Administrative Burden

Comprehensive payroll recordkeeping supports audit defense but imposes ongoing administrative costs. The IRS requires employers to retain payroll records for at least 4 years after the tax is due or paid (IRS Publication 15, Section 12). Organizations that outsource through payroll outsourcing vendors must confirm contractually that records remain accessible and exportable, since liability for tax errors remains with the employer, not the service provider.

Speed of Internal Audit vs. Thoroughness

Compressed internal audit timelines — common when an IRS notice has already arrived — increase the risk of incomplete findings. A payroll processing cycle that spans multiple pay frequency types (weekly, biweekly, semi-monthly) requires separate reconciliation passes. Prioritizing only the highest-dollar periods may leave systematic errors in lower-volume periods undetected.


Common Misconceptions

Misconception: Payroll audits only apply to large employers.
Correction: The IRS conducts employment tax examinations across all employer sizes. The Small Business/Self-Employed Division handles examinations for businesses with assets under $10 million, which represents the majority of US employers. Payroll for small business environments are subject to the same penalty structures as large enterprises.

Misconception: Filing Form 941 on time eliminates audit risk.
Correction: Timely filing reduces one trigger but does not address mismatches between Form 941 totals and W-2 aggregate wages reported via Form W-3. The IRS automated underreporter program cross-references these figures systematically.

Misconception: Worker reclassification is always retroactive.
Correction: The VCSP specifically provides a mechanism for prospective-only reclassification, limiting retroactive exposure. Without VCSP protection, however, an IRS examiner can assert retroactive liability.

Misconception: Internal audits conducted by payroll staff are equivalent to independent reviews.
Correction: An internal audit conducted by the same team that processes payroll lacks the independence required for meaningful error detection. Audit standards published by the Institute of Internal Auditors distinguish between self-assessments and independent internal audit function reviews.

Misconception: New hire reporting errors are not payroll audit issues.
Correction: New hire reporting failures are directly linked to payroll audit findings when examiners assess garnishment compliance, particularly for income withholding orders tied to garnishments and levies.


Checklist or Steps (Non-Advisory)

The following sequence reflects the standard preparation activities that appear in IRS examination guidance and internal audit practice frameworks:

Phase 1 — Record Inventory
- [ ] Pull Form 941 filings for all 4 quarters in the audit period
- [ ] Obtain Form 940 (FUTA) for each year under examination
- [ ] Compile Form W-2 and W-3 transmittals matching the same periods
- [ ] Gather federal tax deposit (EFTPS) confirmation records

Phase 2 — Reconciliation
- [ ] Reconcile quarterly Form 941 gross wages to annual W-3 total wages — discrepancies require explanation
- [ ] Verify FICA tax computation against published IRS wage base thresholds for each year
- [ ] Confirm that supplemental wages received correct withholding treatment (22% flat rate for amounts under $1 million per IRS Publication 15)
- [ ] Match payroll bank account disbursements to net payroll totals in the general ledger

Phase 3 — Worker Classification Documentation
- [ ] Identify all workers paid via 1099-NEC during the period
- [ ] Assemble contracts, invoices, and communications documenting behavioral and financial control factors
- [ ] Review any prior IRS rulings (SS-8 determinations) affecting worker status

Phase 4 — Fringe Benefit Review
- [ ] Confirm that employee benefits and payroll exclusions from income (e.g., Section 132 benefits) are properly documented
- [ ] Verify that retirement plan payroll contributions do not exceed IRS § 415 limits
- [ ] Confirm tip allocation procedures for applicable industries

Phase 5 — State Compliance Cross-Check
- [ ] Match state withholding deposits to state quarterly filings for each jurisdiction
- [ ] Verify state unemployment tax account rates and experience ratings are current
- [ ] Confirm compliance for any payroll for remote workers whose work location created nexus in additional states


Reference Table or Matrix

Audit Type Initiating Party Primary Records Requested Statute of Limitations Governing Authority
IRS Employment Tax Exam IRS (SBSE or LB&I Division) Form 941, W-2/W-3, deposit records, classification docs 3 years (standard); 6 years (25%+ understatement); unlimited (fraud) 26 U.S.C. § 6501
State Payroll/SUI Audit State workforce or tax agency Payroll registers, SUI filings, new hire reports Varies by state; typically 3–5 years State statutes
Internal Payroll Audit Employer (self-initiated) All payroll records, GL reconciliations Employer-defined; typically 3 years Internal policy / external audit standards
Workers' Comp Premium Audit Insurance carrier Payroll by class code, subcontractor payments Policy period; usually annual State insurance regulations
DOL Wage and Hour Investigation Department of Labor Time records, pay stubs, job classifications 2 years (standard); 3 years (willful FLSA violation) 29 U.S.C. § 255
VCSP Application Employer (voluntary) Form 8952, worker classification documentation Prospective only — no retroactive examination IRS VCSP Program

The full scope of payroll compliance obligations — including the interconnected filing requirements that auditors examine — is catalogued through the National Payroll Authority, which maps the US payroll service sector and its regulatory framework. Professionals preparing for examination or building internal audit programs should also consult the payroll professional certifications reference for credential standards applicable to audit practitioners, and the payroll glossary for precise definitions of terms used in IRS correspondence.


References

📜 3 regulatory citations referenced  ·  🔍 Monitored by ANA Regulatory Watch  ·  View update log

Explore This Site