How to prepare for a CRA payroll audit

Published Saturday 12 September 2026

Table of contents

• What is a CRA payroll audit?
• What triggers a CRA payroll audit?
• How the CRA payroll audit process works
• How to prepare for a CRA payroll audit
• Documents you'll need for a CRA payroll audit
• Common CRA payroll audit mistakes to avoid
• Penalties for payroll non-compliance
• How to stay audit-ready year-round
• Stay on top of CRA payroll compliance with Xero
• FAQs on CRA payroll audits

Key takeaways

• A CRA payroll audit reviews your source deductions for Canada Pension Plan (CPP), Employment Insurance (EI), and income tax to confirm you've calculated, withheld, and remitted the correct amounts.
• Common triggers include late remittances, discrepancies in T4 filings, worker misclassification, and random selection by the CRA's risk assessment system.
• Preparation starts with reviewing your audit notice, organizing your payroll records, reconciling deductions against remittances, and verifying every worker's classification.
• Staying audit-ready year-round is easier when you keep records organized, reconcile payroll monthly, and stay current on annual rate changes.

What is a CRA payroll audit?

A CRA payroll audit is a formal review by the Canada Revenue Agency (CRA) to verify that your business has correctly calculated, withheld, and remitted payroll source deductions. It's separate from an income tax audit and focuses specifically on your responsibilities as an employer.

During a payroll audit, the CRA examines your CPP contributions, EI premiums, and income tax deductions at source. The auditor checks whether you've remitted the right amounts on time, filed accurate T4 slips and Records of Employment (ROEs), and classified your workers correctly as employees or independent contractors. In short, the CRA wants to confirm you've met every obligation under the Income Tax Act and the Canada Pension Plan and Employment Insurance Acts.

If you run payroll for even one employee, you're subject to these rules. Understanding what a CRA payroll audit covers is the first step toward being prepared if your business is selected.

What triggers a CRA payroll audit?

Several factors can prompt the CRA to audit your payroll. Some are within your control; others are purely random. Here are the most common triggers.

Late or missing remittances

When you don't remit source deductions on time, the CRA takes notice. Employers are required to remit CPP, EI, and income tax deductions by specific deadlines based on their remitter type. Consistently late or missing payments are one of the fastest ways to attract scrutiny.

Discrepancies in filings

If the amounts on your T4 summaries don't match what you've actually remitted throughout the year, the CRA's systems flag the discrepancy. Even small mismatches between reported and remitted figures can trigger a closer look at your payroll records.

Worker misclassification

Classifying an employee as an independent contractor reduces your payroll obligations, and the CRA actively watches for this. If a worker files a complaint or if the CRA notices that you're issuing T4A slips to individuals who appear to function as employees, an audit may follow.

Random selection

The CRA uses risk-based models and random selection to choose files for review. Even if your records are spotless, your business could still be selected. This is a routine part of the CRA's compliance monitoring, and it's nothing to worry about if your books are in order.

Tips or complaints

The CRA may also open an audit based on information from third parties. A current or former employee, another government agency, or an anonymous tipster can all prompt a review of your payroll practices.

How the CRA payroll audit process works

Knowing what to expect during a CRA payroll audit helps you respond calmly and stay organized throughout the process.

The CRA typically contacts you by letter or phone to notify you of an upcoming audit. They'll never initiate contact by email or text message, so treat any such communication as a potential scam. The notice outlines the tax years under review, the types of records the auditor will examine, and a proposed date for the audit.

Audits can take place at your business premises, at a CRA office, or remotely. The location often depends on the complexity of your payroll and the volume of records involved. During the review, the auditor examines your payroll journals, source deduction calculations, remittance records, T4 slips, ROEs, and worker contracts. They may also interview you or your bookkeeper about your payroll processes.

The timeline varies. A straightforward audit with well-organized records might wrap up in a few weeks. More complex situations involving multiple years, large payrolls, or classification disputes can stretch over several months. The CRA's guide RC4188 explains what employers can expect during the process.

Once the audit concludes, the CRA issues a report outlining their findings. If they identify underpaid deductions, you'll receive a notice of assessment with the amount owing, plus any applicable penalties and interest.

How to prepare for a CRA payroll audit

When you receive an audit notice, a structured approach keeps you on track. Follow these steps to prepare.

1. Review the audit notice carefully

Read the notice thoroughly and note which tax years and payroll areas the CRA plans to review. Mark any deadlines for providing documents or scheduling the audit. If anything in the notice is unclear, call the CRA contact listed on the letter to ask for clarification before the audit date.

2. Organize your payroll records

Gather all payroll documentation for the periods under review. This includes T4 slips, ROEs, payroll journals, bank statements showing remittance payments, employee contracts, and TD1 forms. Having everything in one place saves time and shows the auditor that your records are well maintained. If you need a refresher on what good record-keeping looks like, this guide to bookkeeping basics covers the fundamentals.

3. Reconcile your deductions and remittances

Cross-check your CPP, EI, and income tax deductions against the remittances you've filed with the CRA. For 2026, the CPP employee contribution rate is 5.95% on pensionable earnings between $3,500 and $74,600, with an additional CPP2 rate of 4% on earnings between $74,600 and $85,000. The EI employee premium rate is 1.63% on insurable earnings up to $68,900. Confirm that your calculations match these thresholds and that every dollar deducted was remitted on time.

4. Verify worker classifications

Review each worker's status to confirm they're correctly classified as an employee or an independent contractor. The CRA looks at factors such as the level of control you have over the worker, who owns the tools, and whether the worker can profit or faces a risk of loss. Misclassification is one of the most common audit findings, so double-check any borderline cases before the auditor arrives.

5. Review T4s and ROEs

Pull your T4 slips and ROEs for each period under review. Confirm that employment income, deductions, and insurable hours are reported accurately. Make sure every T4 matches the corresponding payroll register entries. Any corrections should be filed before the audit if possible.

6. Consider professional help

If your payroll is complex or you're unsure about any aspect of your records, bring in an accountant or payroll professional. They can review your documentation, identify potential issues, and represent you during the audit. The cost of professional advice is often far less than the penalties for underpaid deductions.

Documents you'll need for a CRA payroll audit

Having the right documents ready before the auditor arrives speeds up the process and demonstrates good record-keeping. You'll typically need to provide the following.

• T4 slips, T4A slips, T5 slips, and their associated summaries for each year under review
• Records of Employment (ROEs) for all employees who stopped working during the review period
• Payroll journals and registers showing gross pay, deductions, and net pay for each pay period
• Bank statements that confirm remittance payments were made on time
• Employment contracts, offer letters, and TD1 Personal Tax Credits Return forms for each employee
• Records of taxable benefits and allowances provided to employees, such as personal use of a company vehicle or parking provided at no cost
• Invoices, contracts, and payment records for any independent contractors you've engaged

The CRA requires employers to keep payroll records for at least six years from the end of the tax year they relate to. If you're missing any documents, start tracking them down as soon as you receive the audit notice.

Common CRA payroll audit mistakes to avoid

Most payroll audit issues come down to a handful of recurring errors. Being aware of them helps you catch problems before the CRA does.

• Incorrect CPP or EI calculations, such as applying the wrong contribution rate or missing the annual maximum pensionable earnings threshold
• Late or missing source deduction remittances, which trigger both penalties and interest charges
• Failing to issue T4 slips by the last day of February following the calendar year, which can result in daily penalties that increase based on the number of late slips
• Misclassifying employees as independent contractors to avoid deduction and remittance obligations
• Poor record-keeping, including missing pay stubs, incomplete payroll registers, or unsupported benefit calculations
• Forgetting to account for taxable benefits such as personal use of a company vehicle or parking provided at no cost

Penalties for payroll non-compliance

The CRA applies financial penalties when employers fail to meet their payroll obligations, and the costs add up quickly.

Late remittance penalties follow a graduated scale based on how many days past the due date you remit. If you're one to three days late, the penalty is 3% of the amount due. Four to five days late brings a 5% penalty, six to seven days late incurs 7%, and anything more than seven days late results in a 10% penalty. If it's a second or subsequent late remittance in the same calendar year, the penalty doubles to 20% of the overdue amount.

Failure-to-deduct penalties apply when you don't withhold the required CPP, EI, or income tax from an employee's pay. You become liable for the employee's share of the unremitted amount, on top of the employer portion you already owe.

Interest charges compound daily on any outstanding balance at the CRA's prescribed rate, which is adjusted quarterly.

In cases of gross negligence, the CRA can impose an additional penalty equal to 50% of the understated deductions or the overclaimed credits.

Directors of a corporation can also be held personally liable for unremitted source deductions under the Income Tax Act. If the company can't pay, the CRA can pursue individual directors for the full amount, plus penalties and interest.

How to stay audit-ready year-round

You don't need to wait for an audit notice to get your payroll in order. Building good habits now makes compliance easier over time.

• Keep all payroll records organized and accessible, stored securely for at least six years.
• Use cloud-based payroll or accounting software to automate deduction calculations, generate pay stubs, and track remittance deadlines.
• Reconcile your payroll at least monthly rather than waiting until year-end, so you catch errors early.
• Stay current on annual rate changes for CPP, EI, and federal and provincial income tax. For 2026, the CPP basic exemption is $3,500, the Year's Maximum Pensionable Earnings (YMPE) is $74,600, and the Year's Additional Maximum Pensionable Earnings (YAMPE) is $85,000.
• File T4 slips and remittances on time every period; set calendar reminders for your remittance due dates.
• Review worker classifications at least once a year, especially when roles change or you bring on new contractors.

Stay on top of CRA payroll compliance with Xero

Staying audit-ready is simpler when your payroll records are organized, accessible, and accurate all year long. Xero's cloud accounting software helps bring your finances together in one place, so you can track expenses, reconcile accounts, and pull up reports when you need them. Hubdoc, included with every Xero plan, helps capture bills and receipts, so you can build a paperless document trail with less manual filing.

With over 4.6 million subscribers trusting Xero to manage their books, it's built for small businesses that want to spend less time on admin and more time running their business. Get one month free and see how organized records make CRA payroll compliance less stressful.

FAQs on CRA payroll audits

Here are answers to some of the most common questions Canadian small business owners have about CRA payroll audits.

How long does a CRA payroll audit take?

The timeline depends on your payroll's complexity and how organized your records are. A simple review can wrap up in a few weeks, while more involved audits may take several months.

Can you appeal a CRA payroll audit result?

Yes. If you disagree with the CRA's findings, you can file a formal objection within 90 days of receiving the notice of assessment. The CRA's Appeals Division reviews objections independently from the audit team.

How far back can the CRA audit your payroll?

The CRA can generally reassess your payroll for the current year plus the three previous calendar years. There's no time limit if the CRA suspects fraud or misrepresentation.

Does the CRA audit payroll randomly?

Yes, random selection is part of the CRA's compliance program. Your business can be chosen for a payroll audit even if there are no red flags in your filings.