How to Prepare for HM Revenue & Customs Audits in 2026: A Step-by-Step Guide for UK Businesses

HMRC audit preparation in the UK in 2026 is an ongoing discipline, and for accounting firms, it is one of the most critical services you can offer your clients.

HMRC delivered £24.2 billion in compliance yield in just the first three quarters of 2025–26, with a full-year target of £50.4 billion. The government has also committed to recruiting 5,500 additional compliance caseworkers over the next five years.

HMRC is reshaping how it finds, investigates, and penalises non-compliance, using data intelligence that most UK businesses are simply not prepared for.

If your clients are not audit-ready, your practice is exposed. If your business carries the weight of managing multiple client accounts manually, the risk increases further.

This guide walks you through what HMRC audit preparation looks like in the UK and how strategic outsourcing enables better planning.

HMRC’s New Approach to Tax Audit in the UK in 2026

Before you prepare, you need a clear understanding of what HMRC is actually assessing.

Do you think that HMRC is just checking numbers? In 2026, compliance enquiries have evolved into end-to-end assessments of a business’s operational controls, governance, workforce practices, and supply chain integrity. By the time HMRC contacts a business for a tax audit, it may have already built a detailed risk profile, along with cross-references of PAYE submissions, VAT returns, Companies House filings, and director loan accounts.

Three Things That Drive This Shift

• Expanded Making Tax Digital (MTD) Requirements

Real-time digital reporting reduces HMRC’s reliance on year-end filings and allows anomalies to be detected far sooner.

• Automated Risk Profiling

HMRC’s data analytics systems flag discrepancies across VAT, payroll, dividends, and corporation tax simultaneously.

• Cross-Department Intelligence Sharing

HMRC now works alongside Companies House, the Insolvency Service, and from April 2026, the new Fair Work Agency (FWA), which consolidates enforcement of National Minimum Wage, holiday pay, and labour protection obligations.

In 2026, a tax audit in the UK is a multilayered examination. Your preparation needs to match that depth.

What Triggers an HMRC Investigation in 2026?

Understanding what puts a business on their radar is the first practical step in any HMRC audit preparation strategy across the UK.

The Most Common Triggers Include:

• Mismatches between VAT returns and bank statements
• Repeated late or amended PAYE and VAT submissions
• Declared losses over multiple consecutive years while continuing to trade
• Large or irregular dividend payments inconsistent with reported profits
• The director of loan accounts left the account overdrawn
• Sudden and unexplained changes in turnover
• Expense ratios that diverge significantly from industry benchmarks
• Crypto asset holdings, now mandatory to disclose from 2026
• COVID loan irregularities flagged through digital auditing

Random selection is also a part of HMRC’s compliance strategy.[AM1]  HMRC runs compliance checks across all taxpayer groups, so even a well-run business can receive an enquiry letter with no fault implied. That said, it is data mismatches and filing anomalies that drive most cases; precisely the areas where well-managed, clean accounting makes a measurable difference.

The HMRC Investigation Process: 5 Stages You Need to Know

Understanding the HMRC investigation process helps you manage it efficiently.

How Long Does It Take?

If you have better records and identify issues early on, the process becomes faster and cost-effective.

The HMRC Audit Checklist: Your Step-By-Step Preparation Guide

This is the practical core of this guide. You can use this HMRC audit checklist as your working framework.

The 6-Step Visual Grid

Step 1: Get Your Financial Records Audit-Ready

HMRC requires businesses to retain records for a minimum of six years after the relevant tax year. In cases of suspected fraud or deliberate non-compliance, they can look back up to 20 years.

You Need Immediate Access to:[AM2] 

• All sales invoices and purchase receipts
• Bank statements and reconciliations for every account
• VAT returns, working papers, and supporting evidence
• PAYE records, payroll summaries, and employee files
• Corporation tax computations and CT600 filings
• Director of loan account records
• Asset registers and depreciation schedules
• Board minutes, resolutions, and supplier contracts

If any of these are missing, outdated, or inconsistent, this should be addressed proactively[AM3] .

Step 2: Review Your VAT Position

VAT is one of HMRC's primary entry points to trigger an audit. Confirm that:

• Input and output VAT reconcile with your bank statements
• You hold valid VAT invoices for every claim made
• Partial exemption calculations are correctly applied where relevant
• VAT return submissions align precisely with your accounts

If your firm manages VAT returns for multiple clients, the volume of this work alone warrants a dedicated compliance layer; something outsourced accounting support can absorb without stretching your in-house team.

Step 3: Check PAYE and Payroll Compliance

With the Fair Work Agency operational from April 2026, payroll compliance is under joint scrutiny from HMRC and the FWA. Confirm that:

• National Minimum Wage and National Living Wage rates are correctly applied
• Statutory Sick Pay under the new April 2026 rules is accurately processed
• Real-Time Information (RTI) submissions are current and accurate
• Employee benefits, expenses, and PSA agreements are properly documented
• IR35 determinations for contractors are evidenced and defensible

Step 4: Reconcile Your Director Loan Account

Overdrawn director loan accounts are a known HMRC trigger. If a director owes the company money, ensure:

• The balance is clearly documented and tracked throughout the year
• Section 455 tax has been calculated and paid where applicable
• The account has not been artificially cleared and re-opened (bed and breakfasting)

Step 5: Ensure MTD Compliance Across All Submissions

Making Tax Digital continues its phased rollout. From April 2026, MTD for Income Tax (MTD ITSA) applies to sole traders and landlords with income over £50,000. Ensure:

• Compatible digital software is in use for all affected clients
• Digital links are maintained throughout, with no manual rekeying
• Quarterly updates are submitted correctly and on time

Step 6: Conduct an Internal Pre-Audit Review

Before you get the HMRC letter, conduct an internal review of your records. Look for:

• Expense claims that lack a clear business purpose
• Figures that diverge sharply from prior years without explanation
• Mismatches between what was filed with HMRC and what appears in your accounts
• Any tax positions taken on uncertain law without proper documentation

If your review turns something up, it is almost always better to correct it voluntarily, through an amendment or disclosure, than to wait for HMRC to find it.

What Happens If You Are Not Audit-Ready?

Lack of preparation can result in significant financial consequences. [AM4] 

HMRC applies penalties based on the behaviour that led to the underpayment:

• Prompted disclosure, reasonable care: penalty can be reduced to zero
• Careless errors: up to 30% of unpaid tax
• Deliberate errors: up to 70%
• Deliberate and concealed: up to 100%

For accounting firms, the reputational damage from a poorly managed client audit can be just as costly as the financial penalty. Clients who experience an investigation that reveals gaps in their records often reassess their relationship with their accountant.

Responding to an HMRC Enquiry Letter: The First 72 Hours

If the letter lands on your or your client's desk, here is what to do immediately.

Do not panic. An HMRC enquiry is not an accusation. It can be random or triggered by a specific mismatch. The tone of your response matters from the outset.

Read it carefully. Identify the scope. Is this a routine compliance check, an aspect enquiry into one specific item, or a full enquiry? The type determines the breadth of information you will need to gather.

Engage professional representation immediately. If you are an accounting firm receiving this on behalf of a client, that is your cue. The cost of professional representation is almost always less than the cost of mishandling the response.

Respond within the deadline. Typically, 30 days from the letter date. Late or non-responses attract additional scrutiny.

Only provide what is asked. Do not volunteer information beyond the scope of the request. This is one of the most common mistakes firms make.

The Outsourcing Advantage: How Accounting Firms Stay Audit-Ready Year-Round

Most accounting firms across the UK are managing significant client loads, often without the in-house resource to maintain audit-grade compliance standards across every account, every quarter.

Outsourced accounting support changes the equation tremendously.

When you work with a specialist outsourcing partner, you are building a continuous compliance layer beneath every client's relationship, one that keeps records clean, filings accurate, and audit trails intact without the overhead of expanding your headcount.

Why Accounting Firms Outsource for Audit Readiness

What this looks like in practice:

• Real-time bookkeeping maintenance
• VAT returns reconciled and cross-checked before each submission
• Payroll processed with current-year compliance rules applied from day one
• Management accounts prepared with the level of detail HMRC expects
• Corporation tax computations are reviewed and filed accurately every time

If your firm is managing client volumes that make that discipline difficult to sustain, it is worth speaking with a specialist outsourcing partner about what a continuous compliance model looks like in practice.

FAQs: HMRC Audit Preparation in the UK

How far back can HMRC investigate?

HMRC typically looks back four years for innocent errors, six years for careless errors, and up to 20 years in cases of fraud or deliberate evasion.

Does HMRC notify you before an audit?

Yes. HMRC sends a formal opening letter specifying the nature and scope of the enquiry. They do not arrive unannounced for a standard compliance check.

What is the difference between a compliance check and a full investigation?

A compliance check is limited in scope; HMRC wants to verify a specific aspect of a return. A full investigation covers the entire tax affairs of the business across multiple tax heads.

Can my accounting firm handle the HMRC enquiry on my behalf?

Yes. Your accountant or a tax investigation specialist can act as your authorised representative, communicating with HMRC directly on your behalf. This is highly recommended.

What records do I need to keep for a tax audit in the UK?

Keep all financial records, bank statements, invoices, payroll records, and supporting documents for a minimum of six years from the end of the relevant tax year.

What triggers an HMRC investigation?