The 2026 tax audit is not the audit of 2016. Risk-based case selection, digital data access, AI-driven anomaly detection — the tax office has upgraded its technology. Rely on old routines and you will be caught cold.
What has changed
1. Risk-based audit selection
The tax authorities no longer select cases at random — they select them on a risk basis. State-level risk management systems analyse key figures from electronically filed financial statements (E-Bilanz), advance VAT returns and payroll tax filings. Anomalies trigger an audit.
Typical trigger points:
- High cash takings with unusual fluctuations
- Widely varying gross profit mark-ups
- Transactions between related companies without documentation
- High other expenses without itemisation
- Accumulation of in-kind withdrawals
2. Digital audits, not paper
Auditors work with IDEA, ACL and, increasingly, their own AI tools. Data is requested in machine-readable form (DSFinV-K, GDPdU/GoBD data files). If you cannot deliver it, you risk estimate-based additional assessments.
3. Cross-checking with third-party sources
The tax office cross-references data from control notices, international information exchange (CRS), customs processing, ELSTER and social security. Your financial statements can no longer be viewed in isolation.
4. Shorter audit cycles
Instead of audits lagging 4–5 years behind, the trend is moving towards contemporaneous field audits (zPrüf): the current financial year is audited within 12 months. For clients, that means an obligation to keep documentation audit-proof on an ongoing basis.
What does an audit cost on average?
For mid-sized companies (revenue of €5–50 million), additional assessments from a tax audit statistically range from €15,000 to €80,000 plus interest on back taxes of 1.8% per year (0.15% per month, § 233a in conjunction with § 238 para. 1a AO (German Fiscal Code) — for interest periods from 2019 onwards). Where issues have been left to drag on, additional assessments of €200,000+ are not uncommon.
Most additional assessments do not result from "tricks" but from missing or sloppy documentation — on entertainment expenses, gifts, transfer pricing, equity loans, income shifted abroad. Document cleanly throughout the year and you have 80% of your audit risk under control.
Preparation: the 6 key levers
- GoBD-compliant bookkeeping: receipts digital, tamper-proof, complete. Your software must meet the requirements.
- Procedural Documentation: written documentation of how receipts are captured, checked and archived. Mandatory — and rarely maintained.
- Transfer pricing documentation: for related companies (even just a holding company + GmbH), document to an audit-proof standard.
- Cash management: TSE-compliant cash registers, daily Z-reports, gapless recording. A key audit focus in cash-heavy sectors.
- Entertainment and travel receipts: occasion, attendees, business purpose — document every time.
- Plausibility of profit mark-ups: if you fall below industry benchmark rates, prepare an explanation.
When the audit notice arrives
When an audit order lands: stay calm, bring in your advisor immediately, and do not hand over files unilaterally. The first 7 days set the tone for the entire audit. We advise clients to cooperate with the auditor from day one — but in a controlled way: what is being asked, what is provided, and what is commented on verbally.
More than 20 years advising entrepreneurs, investors and family businesses. Reserved tax services are provided by our partner tax firm, TABAK Steuerberatung.
Firm Profile →An audit check — before the order arrives.
Before the tax office calls, we review the typical audit risks in your engagement — and pinpoint exactly where documentation is needed. Preventive effort saves ten times its cost in back taxes.