The IRS finds out about unreported income through a powerful combination of automated computer matching, third-party reporting, whistleblower tips, and advanced financial analysis techniques. Under 26 U.S.C. § 61, all income from whatever source derived is taxable — and the IRS has built an entire enforcement infrastructure to make sure you report it. The agency estimates that $270 billion in tax revenue is lost each year because of unreported income.
Here’s what you’ll learn in this article:
- 🔍 The exact automated systems the IRS uses to catch unreported income — and how they work behind the scenes
- 💰 How third-party forms like W-2s, 1099s, and 1099-Ks create a paper trail the IRS follows
- ⚖️ The specific penalties under IRC § 6662, § 6663, and § 7201 — and when the IRS escalates to criminal prosecution
- 🌐 How the IRS tracks foreign accounts, crypto trades, and gig economy income across borders and blockchains
- 🛡️ Concrete steps to fix unreported income before the IRS contacts you — including the Voluntary Disclosure Program
The IRS Automated Underreporter Program: A Computer That Never Forgets
The IRS’s Automated Underreporter (AUR) program is the agency’s first line of defense against unreported income. Every time an employer files a W-2, a bank files a 1099-INT, or a freelance client files a 1099-NEC, that data goes straight to the IRS. The AUR system then cross-references these third-party information returns against what you reported on your tax return.
When the numbers don’t match, the system flags your return and generates a CP2000 notice. This notice proposes changes to your tax bill based on the missing income, plus penalties and interest. In fiscal year 2019 alone, the AUR program generated roughly $6.7 billion in assessments.
The burden shifts to you the moment a CP2000 notice arrives. If you don’t respond within the deadline (usually 30 days), the IRS automatically makes the adjustments and treats the proposed changes as correct. You could even lose the right to resolve the issue at the administrative level.
Every Form Creates a Trail: W-2s, 1099s, and 1099-Ks
The IRS doesn’t rely on your honesty alone. It receives billions of information returns each year from employers, banks, brokerages, and payment platforms. These forms create a financial paper trail that the IRS can match against your return in seconds.
| Form | What It Reports |
|---|---|
| W-2 | Wages, salaries, and tips from employers |
| 1099-NEC | Freelance and independent contractor payments of $600+ |
| 1099-INT | Bank interest income of $10+ |
| 1099-DIV | Dividend income from investments |
| 1099-B | Proceeds from stock and securities sales |
| 1099-K | Payment app and e-commerce transactions of $5,000+ in 2026 |
| 1099-MISC | Rents, royalties, and other miscellaneous income |
| 1099-R | Distributions from retirement accounts |
| 1099-S | Real estate sale proceeds |
| 1099-G | Government payments like unemployment benefits |
If any of these forms show income you didn’t report, the AUR system catches it. Even a forgotten $200 interest payment from a savings account can trigger correspondence from the IRS.
The 1099-K Reporting Threshold Keeps Dropping
For 2026, third-party payment processors like PayPal, Venmo, and Cash App must report transactions totaling $5,000 or more to the IRS on Form 1099-K. This threshold has dropped significantly from the previous $20,000/200 transaction standard. Gig workers, freelancers, and anyone selling goods online should expect a 1099-K if they cross this line.
The IRS cross-references 1099-K forms against reported income. If you received $8,000 through Venmo for freelance work but only reported $3,000 on your Schedule C, that $5,000 gap will be flagged.
The Discriminant Function System: The IRS’s Secret Scoring Algorithm
Beyond simple document matching, the IRS uses a computer scoring system called the Discriminant Information Function (DIF) to select returns for audit. Every tax return filed in the United States receives a DIF score. This score measures how your return compares to statistical norms for taxpayers with similar income, occupation, and filing status.
Returns with high DIF scores — meaning they deviate significantly from what the IRS considers “normal” — are flagged for human review. Three layers of IRS personnel then examine the flagged return before deciding whether to open an audit. The IRS does not publicly disclose the exact formula behind the DIF score.
AI Is Changing the Game in 2026
The IRS now uses artificial intelligence to analyze patterns across your entire tax history, not just individual line items. The agency’s AI scoring systems look for unusual deviations from your prior filing patterns. If you reported $50,000 in income for five years and then suddenly dropped to $25,000 with no corresponding life change, AI flags it.
The Large Partnership Compliance Model uses AI to analyze complex partnerships like hedge funds and private equity firms. In 2021, this model selected 82 high-risk returns compared to single digits before. For mid-size corporations, the Line Anomaly Recommender has replaced outdated audit selection systems.
Indirect Methods: How the IRS Reconstructs Hidden Income
When the IRS suspects someone is hiding significant income — especially cash income that doesn’t appear on any 1099 — it turns to indirect methods of proof. These techniques reconstruct your financial life to estimate what you should have earned.
Bank Deposit Analysis
The IRS examines every deposit in your bank accounts and compares total deposits against your reported income. If you deposited $120,000 but only reported $80,000, the IRS assumes the $40,000 difference is unreported taxable income unless you can prove otherwise. Gifts, loans, and transfers between your own accounts must be documented.
T-Account (Source and Use of Funds) Analysis
This method compares your known sources of cash (reported income, loans, gifts) to your expenditures (mortgage payments, car loans, credit card bills, living expenses). If you spent significantly more than you can account for, the IRS treats the gap as unreported income. This is the exact method the IRS used to convict Al Capone of tax fraud.
Lifestyle and Net Worth Analysis
The IRS can investigate whether your reported income matches your lifestyle. Public records of property purchases, vehicle registrations, boat titles, and other big-ticket items are accessible to IRS agents. If you report $45,000 in income but bought a $600,000 home and drive a $90,000 car, the IRS will want answers.
| IRS Detection Method | What It Targets |
|---|---|
| Bank Deposit Analysis | Unexplained deposits exceeding reported income |
| T-Account Analysis | Spending that exceeds known income sources |
| Net Worth Method | Year-over-year increases in assets that income doesn’t explain |
| Lifestyle Analysis | High-value purchases inconsistent with reported earnings |
| Cash T Method | Cash inflows vs. cash outflows for cash-intensive businesses |
Cash Transactions and the Bank Secrecy Act
Cash is not invisible to the IRS. Under the Bank Secrecy Act, financial institutions must file a Currency Transaction Report (CTR) for any cash transaction exceeding $10,000. Businesses that receive more than $10,000 in cash must file Form 8300 with the IRS.
Structuring: The Crime of Breaking Up Deposits
Some people try to avoid the $10,000 reporting threshold by making multiple smaller deposits — for example, depositing $9,500 three times instead of $28,500 at once. This is called structuring, and it is a federal crime under 31 U.S.C. § 5324, even if the underlying money is legitimate. Banks are trained to spot structuring patterns and file Suspicious Activity Reports (SARs) with FinCEN, which shares data with the IRS.
Example: Marcus earns $15,000 per month in cash from his landscaping business. Instead of depositing the full amount, he makes three deposits of $4,900 each week. His bank notices the pattern, files a SAR, and the IRS opens an investigation — not just for unreported income, but for structuring.
| Marcus’s Action | IRS Consequence |
|---|---|
| Deposited cash in amounts just under $10,000 | Bank filed a Suspicious Activity Report |
| Pattern detected as structuring | Federal crime under 31 U.S.C. § 5324 |
| Deposits didn’t match reported income | Unreported income investigation opened |
| No records kept of cash receipts | IRS used bank deposit analysis to reconstruct income |
The IRS Whistleblower Program: When Someone Tips Off the IRS
The IRS doesn’t just rely on computers. Real people — disgruntled employees, ex-spouses, former business partners — report tax cheats through the IRS Whistleblower Program. This program has existed since 1867, but Congress supercharged it in 2006 with mandatory awards.
How Whistleblower Awards Work
Under IRC § 7623(b), whistleblowers who provide information leading to collected proceeds receive between 15% and 30% of the amount the IRS collects. To qualify for the mandatory award program, the tax, penalties, and interest in dispute must exceed $2 million. If the taxpayer is an individual, their annual gross income must exceed $200,000 for at least one year in question.
A Treasury Inspector General report found that IRS investigations started from whistleblower tips are consistently more successful in finding tax cheats than any other detection method. The program generates substantial funds with an exceptionally good cost-benefit ratio.
Example: Sarah, a bookkeeper at a construction company, notices her boss is paying workers off the books and not reporting $500,000 in annual revenue. She files a claim with the IRS Whistleblower Office using Form 211. After the IRS investigates and collects $800,000 in back taxes, penalties, and interest, Sarah receives a 20% award — $160,000.
| Sarah’s Step | Outcome |
|---|---|
| Filed Form 211 with specific financial evidence | IRS Whistleblower Office accepted the claim |
| IRS investigated and confirmed $500,000 in unreported income | Assessed $800,000 in taxes, penalties, and interest |
| Claim met $2 million threshold (with penalties/interest) | Sarah qualified for mandatory 15–30% award |
| IRS collected the full assessment | Sarah received $160,000 (20% of collected proceeds) |
Cryptocurrency and Digital Assets: The IRS Is Watching the Blockchain
The IRS treats cryptocurrency as property, meaning every sale, trade, or exchange is a taxable event. The agency has aggressively pursued crypto tax enforcement through John Doe summonses, blockchain analytics, and new reporting requirements.
John Doe Summonses to Crypto Exchanges
A John Doe summons lets the IRS demand records from a third party without knowing the specific taxpayers involved. The IRS has used this tool against major crypto exchanges.
In 2016, the IRS served a John Doe summons on Coinbase, seeking records of all U.S. users who transacted at least $20,000 between 2013 and 2015. After receiving that data, the IRS sent thousands of warning letters that resulted in over $92 million in assessments.
In 2021, federal courts authorized John Doe summonses to Kraken and Circle. The Kraken summons targeted anyone who conducted at least $20,000 in transactions from 2016 to 2020. The IRS later pursued similar summonses against Poloniex and SFOX.
Form 1099-DA and Broker Reporting
Starting in 2025, crypto brokers must report transactions to the IRS on the new Form 1099-DA. This means exchanges will send your transaction data directly to the IRS, just like a stock brokerage sends a 1099-B. The era of anonymous crypto trading is over.
Example: Diego bought 2 Bitcoin for $10,000 in 2020 and sold them for $60,000 in 2024. He didn’t report the $50,000 capital gain. His exchange, which received a John Doe summons, provided his records to the IRS. The AUR system flagged the unreported gain and sent Diego a CP2000 notice proposing $12,000 in additional tax plus a 20% accuracy penalty.
| Diego’s Action | IRS Consequence |
|---|---|
| Sold 2 BTC for $50,000 profit | Exchange reported transaction data via John Doe summons |
| Failed to report capital gain on Schedule D | AUR system flagged the mismatch |
| Ignored the CP2000 notice for 60 days | IRS assessed tax + 20% accuracy penalty automatically |
| Continued to ignore the balance | IRS issued a Notice of Deficiency (90-day letter) |
Foreign Accounts: FBAR, FATCA, and Global Information Sharing
U.S. citizens and residents must report worldwide income, regardless of where it’s earned. The IRS has two major tools to enforce this: FBAR and FATCA.
FBAR (FinCEN Form 114)
If your foreign financial accounts exceed $10,000 in aggregate at any time during the year, you must file an FBAR. The penalties for failing to file are among the harshest in tax law:
- Non-willful violation: Up to $16,536 per report (2026 amount)
- Willful violation: Up to $165,353 or 50% of the account balance per violation, plus potential criminal penalties of up to $250,000 and 5 years in prison
Following the 2023 Supreme Court decision in Bittner v. United States, non-willful penalties are assessed per report, not per account — a significant win for taxpayers with multiple foreign accounts.
FATCA (Foreign Account Tax Compliance Act)
FATCA requires foreign banks to report U.S. account holders directly to the IRS. Over 100 countries participate in automatic information exchange agreements with the United States. If you have foreign financial assets exceeding $50,000 ($200,000 for those living abroad), you must also file Form 8938 with your tax return.
Example: Priya, a U.S. citizen, has a bank account in India with $85,000. She never filed an FBAR or reported the interest income. Under FATCA, her Indian bank reports the account to the IRS. The IRS cross-references her return, finds no foreign income or FBAR filing, and opens an investigation. Priya faces a minimum $16,536 non-willful FBAR penalty per year of non-compliance, plus back taxes and accuracy penalties on the unreported interest.
The Statute of Limitations: How Far Back the IRS Can Go
The IRS doesn’t have unlimited time to audit you — unless you commit fraud or fail to file. The statute of limitations depends on the severity of the underreporting.
| Situation | IRS Audit Window |
|---|---|
| Accurate return filed on time | 3 years from filing date |
| Omitted more than 25% of gross income | 6 years from filing date |
| Filed a fraudulent return | No time limit |
| Never filed a return | No time limit — the clock never starts |
The 25% rule is critical. If your actual gross income was $100,000 but you only reported $70,000, you omitted 30% — exceeding the 25% threshold. The IRS now has six years instead of three to audit that return.
For fraudulent returns — where the IRS can prove you intentionally deceived the government — there is no statute of limitations at all. The IRS can come after you for a fraudulent return filed 20 years ago.
Penalties for Unreported Income: From 20% to Prison
The IRS applies a tiered penalty system based on the severity and intent behind the underreporting. Honest mistakes are treated differently from deliberate fraud.
Accuracy-Related Penalty (IRC § 6662)
A 20% penalty applies to the underpaid tax when the understatement results from negligence or a substantial understatement of income tax. A “substantial understatement” means the understated tax exceeds the greater of 10% of the correct tax or $5,000. Interest compounds daily on top of the penalty from the original due date.
Civil Fraud Penalty (IRC § 6663)
If the IRS proves intentional fraud by clear and convincing evidence, it imposes a 75% penalty on the portion of the underpayment attributable to fraud. Indicators of fraud include maintaining two sets of books, destroying records, using nominee accounts, and consistently understating income over multiple years.
Criminal Prosecution
In the most extreme cases, the IRS refers the matter to the Department of Justice for criminal prosecution. The conviction rate for tax crimes is exceptionally high. The key criminal statutes include:
- Tax Evasion (IRC § 7201): Up to 5 years in prison and $250,000 in fines
- Filing a False Return (IRC § 7206): Up to 3 years in prison and $250,000 in fines
- Willful Failure to File (IRC § 7203): Up to 1 year in prison and $100,000 in fines
- Willful FBAR Violation (31 U.S.C. § 5322): Up to 10 years in prison and $500,000 in fines
A taxpayer convicted of criminal tax evasion under § 7201 cannot re-litigate the fraud issue in a subsequent civil proceeding. The criminal conviction effectively locks in the 75% civil fraud penalty as well.
Three Real-World Scenarios: How the IRS Catches Unreported Income
Scenario 1: The Freelancer Who Forgot a 1099
Emma earned $85,000 from her full-time job (W-2) and $12,000 from freelance web design (1099-NEC). She reported the W-2 income but forgot about the 1099-NEC. The IRS’s AUR system matched the 1099-NEC against her return, found the $12,000 gap, and sent a CP2000 notice.
| Emma’s Situation | IRS Response |
|---|---|
| Forgot to report $12,000 in freelance income | AUR system flagged the mismatch |
| Underreported by ~12% (under the 25% threshold) | Standard 3-year statute of limitations applies |
| No fraudulent intent | 20% accuracy-related penalty under IRC § 6662 |
| Responded to CP2000 within 30 days | Resolved at the administrative level with back tax + penalty + interest |
Scenario 2: The Cash Business Owner Under Investigation
Roberto owns a restaurant that does significant cash business. He reports $300,000 in annual revenue, but the IRS notices his profit margin is far below the industry average. An agent conducts a bank deposit analysis and finds $450,000 in deposits — $150,000 more than reported.
| Roberto’s Situation | IRS Response |
|---|---|
| Reported $300,000 but deposited $450,000 | Bank deposit analysis revealed $150,000 gap |
| Omitted 33% of gross income (over 25%) | 6-year statute of limitations applies |
| Pattern of underreporting over 3 years | Civil fraud penalty of 75% assessed |
| Could not explain the deposit discrepancy | Case referred to Criminal Investigation Division |
Scenario 3: The Expat With Hidden Foreign Accounts
Linda, a U.S. citizen living in London, has £200,000 in a UK bank account. She never filed an FBAR or reported the interest income. Under FATCA, her UK bank reported the account to the IRS.
| Linda’s Situation | IRS Response |
|---|---|
| Failed to file FBAR for 4 years | $16,536 non-willful penalty per year = $66,144 minimum |
| Did not report foreign interest income | Back taxes + 20% accuracy penalty on unreported interest |
| FATCA reporting triggered the discovery | IRS cross-referenced Form 8938 non-filing |
| No fraudulent intent established | Eligible for Streamlined Filing Compliance Procedures |
Mistakes to Avoid When Reporting Income
These are the most common errors that lead to IRS problems — and the specific consequence of each.
- Ignoring a 1099 you received. The IRS already has a copy. Failing to report it triggers an automatic AUR mismatch and a CP2000 notice with a 20% penalty.
- Not reporting cash income. Cash payments are taxable even without a 1099. The IRS uses bank deposit analysis and lifestyle audits to find unreported cash.
- Structuring deposits under $10,000. This is a federal crime under 31 U.S.C. § 5324, even if the cash itself is legal. Banks file Suspicious Activity Reports.
- Forgetting foreign accounts. FBAR penalties start at $16,536 per report for non-willful violations and can reach 50% of the account balance for willful ones.
- Assuming crypto isn’t taxable. Every sale, trade, and exchange is a taxable event. The IRS has issued John Doe summonses to major exchanges and receives Form 1099-DA from brokers.
- Ignoring IRS notices. A CP2000 notice is not an audit — it’s a proposed adjustment. Ignoring it means the IRS automatically assesses the tax, penalties, and interest without your input.
- Throwing away records. You should keep tax records for at least 3 years — or 6 years if you might have underreported by more than 25%. Without records, you cannot dispute the IRS’s proposed changes.
Do’s and Don’ts for Reporting All Income
| Do | Don’t |
|---|---|
| Report all income, including cash, barter, and crypto | Assume income is non-taxable because you didn’t get a 1099 |
| Reconcile all W-2s and 1099s before filing | File your return without checking for missing forms |
| Keep records for at least 6 years | Destroy records after 3 years if you have foreign accounts or high deductions |
| Respond to CP2000 notices within 30 days | Ignore IRS correspondence — penalties and interest compound daily |
| File an FBAR if foreign accounts exceed $10,000 | Hide foreign accounts — FATCA ensures the IRS will find out |
| Use the Voluntary Disclosure Program if you have past errors | Wait for the IRS to contact you first — voluntary disclosure shows good faith |
| Consult a tax professional for complex situations | Try to handle a fraud allegation or criminal investigation alone |
Pros and Cons of the IRS Voluntary Disclosure Program
If you have unreported income from prior years, the IRS’s Voluntary Disclosure Program lets you come forward before the IRS contacts you. Here are the trade-offs:
| Pros | Cons |
|---|---|
| Greatly reduces the risk of criminal prosecution | You must still pay all back taxes, interest, and penalties |
| Shows good faith, which can lead to lower civil penalties | The process is complex and usually requires professional legal help |
| Resolves tax liability on your terms, not the IRS’s | You must disclose all non-compliance — partial disclosure can backfire |
| Ends the stress of worrying about IRS detection | Does not guarantee immunity from prosecution in extreme cases |
| Available for both domestic and offshore non-compliance | Late entry (after IRS contact) disqualifies you from the program |
Key Entities and How They Work Together
Understanding who’s involved in IRS enforcement helps you see the full picture:
- IRS Automated Underreporter (AUR) Program — The computer matching system that compares third-party information returns to your tax return
- IRS Criminal Investigation Division (CI) — Investigates potential criminal tax violations; seized $3.5 billion in cryptocurrency in fiscal year 2021
- IRS Whistleblower Office — Administers claims from people who report tax cheats and pays awards of 15–30% of collected proceeds
- FinCEN (Financial Crimes Enforcement Network) — Collects Currency Transaction Reports and Suspicious Activity Reports from banks under the Bank Secrecy Act
- Department of Justice Tax Division — Prosecutes criminal tax cases referred by IRS Criminal Investigation
- Foreign Financial Institutions — Required under FATCA to report U.S. account holders to the IRS
- Crypto Exchanges (Coinbase, Kraken, etc.) — Subject to John Doe summonses and required to file Form 1099-DA for user transactions
FAQs
Can the IRS find out about cash income?
Yes. The IRS uses bank deposit analysis, lifestyle audits, Form 8300 filings, and informant tips to detect unreported cash. Banks also file Currency Transaction Reports for cash over $10,000.
Does the IRS know about my cryptocurrency?
Yes. The IRS has issued John Doe summonses to exchanges like Coinbase and Kraken. Starting in 2025, brokers must file Form 1099-DA reporting your crypto transactions directly to the IRS.
Can I go to jail for unreported income?
Yes, but only for willful violations. Accidental errors lead to civil penalties (20% accuracy penalty). Intentional tax evasion under IRC § 7201 carries up to 5 years in prison and $250,000 in fines.
What is a CP2000 notice?
No, it is not an audit. A CP2000 is a proposed adjustment from the AUR program when third-party forms don’t match your return. You have 30 days to agree, partially agree, or dispute it.
How far back can the IRS audit for unreported income?
Yes, the IRS can go back further than 3 years. If you omitted more than 25% of gross income, the window extends to 6 years. For fraud or unfiled returns, there is no time limit.
Does filing an amended return trigger an audit?
No. Filing Form 1040-X to correct unreported income shows good faith. It does not automatically trigger an audit and is viewed more favorably than the IRS discovering the error itself.
Can a whistleblower report me to the IRS?
Yes. Anyone can submit information using Form 211. If the tax in dispute exceeds $2 million and the taxpayer earns over $200,000, the whistleblower can receive 15–30% of collected proceeds.
Does the IRS know about my foreign bank accounts?
Yes. Under FATCA, foreign banks report U.S. account holders to the IRS. Over 100 countries share financial data through automatic exchange agreements. Failing to file an FBAR carries penalties starting at $16,536 per report.
What is the penalty for unreported income?
Yes, there are penalties. Negligence or substantial understatement triggers a 20% penalty under IRC § 6662. Intentional fraud triggers a 75% penalty under IRC § 6663. Criminal prosecution can add prison time and additional fines.
Can I fix unreported income before the IRS finds out?
Yes. The IRS Voluntary Disclosure Program lets you come forward, pay back taxes and penalties, and greatly reduce the risk of criminal prosecution. Filing an amended return (Form 1040-X) is the standard method for correcting errors.
Related reading
- Should I Really Report Non-Taxable Income? – Avoid This Mistake + FAQs
- Are 1099s Really Taxable? Avoid this Mistake + FAQs
- What Actually is Tax Evasion? – Avoid This Mistake + FAQs
- How to File Self-Employment Taxes Without 1099? (w/Examples) + FAQs
- Where to Enter 1099-B in TaxSlayer? (w/Examples) + FAQs
- Will the IRS Catch a Missing W-2? (w/Examples) + FAQs