A tax audit in Hong Kong can arrive with little warning, and catching businesses off guard is part of what makes it so disruptive. The Inland Revenue Department (IRD) has broad authority to examine a company’s financial records, request supporting documentation, and conduct on-site visits where necessary.
Understanding what the IRD looks for, how the audit process unfolds, and what to do if you receive an audit letter gives you the best chance of handling one without serious consequences.
What Is a Tax Audit in Hong Kong?
In Hong Kong, a tax audit is a formal review conducted by the IRD's Field Audit and Investigation Unit to verify that a taxpayer's returns are accurate and complete. The unit primarily handles Profits Tax cases (covering companies, partnerships, and sole proprietors), Salaries Tax cases (employees, directors, and consultants), and related matters such as Property Tax where relevant.
The term "tax audit" covers several different types of review. A desk enquiry involves written questions and document requests sent by post or email. A field audit means IRD officers visit your business premises to examine records and understand how the business actually operates. A tax investigation is a deeper review, typically spanning multiple years, where the IRD suspects deliberate underreporting or possible evasion. Each carries a different level of intensity, but all three require prompt and careful attention.
The IRD is generally empowered to raise additional assessments within 6 years after the end of the relevant year of assessment. Where fraud or wilful evasion is involved, that window extends to 10 years. This means a business filing returns today could still face scrutiny for decisions made nearly a decade ago.
Importantly, a tax audit is not automatically a criminal matter. The IRD's primary goal is to verify that income is correctly reported and tax is properly paid. However, if the review uncovers deliberate underreporting or evasion, the consequences can escalate quickly, from back-dated assessments and heavy penalties to, in the most serious cases, prosecution.
What Triggers a Tax Audit in Hong Kong?
The IRD uses a risk-based computerised system called Assess First Audit Later (AFAL) to flag returns for closer scrutiny. Cases are also selected at random. Common risk factors include:
1. Persistent losses while the business stays active
A company that reports losses year after year but continues to operate raises obvious questions. The IRD looks carefully at businesses where the pattern of reported losses does not match their apparent level of activity.
This is particularly common in businesses that continue to grow headcount, expand premises, or invest in equipment while simultaneously reporting no taxable profit. The IRD views this pattern as a potential indicator that income is being understated or that expenses are being inflated beyond what is commercially justifiable.
2. Unusually large or unsupported deductions
Claims for management fees, consultancy charges, or royalties (especially when paid to related parties or offshore entities) are a consistent red flag. The IRD expects clear documentation and a genuine commercial rationale for these deductions.
Where large deductions lack supporting contracts, invoices, or proof of services rendered, assessors may disallow the claims entirely and raise additional assessments. The higher the deduction relative to turnover, the more scrutiny it is likely to attract, particularly when the counterparty is an entity under common control.
3. Sharp changes in turnover or gross profit margin
A sudden, unexplained drop in revenue or a significant shift in gross profit margin compared to prior years attracts attention. If the numbers do not align with your business circumstances or broader market trends, the IRD will want an explanation.
Year-on-year consistency matters. A business with stable revenue that suddenly reports a sharp drop in gross profit, without a corresponding change in market conditions or business model, is likely to receive follow-up questions. Having a clear, documented explanation for any major variance, whether due to a new supplier, a loss of a key client, or an industry-wide downturn, is essential. The IRD also routinely cross-references a company's Profits Tax return with its audited financial statements, so inconsistencies between the two are a common starting point for enquiries.
4. Gross profit margin below industry benchmarks
If your reported margin is consistently lower than comparable businesses in the same sector, the IRD may question whether all income is being declared accurately.
The IRD uses industry-wide data to identify outliers. If your gross profit margin sits significantly below the average for your sector over multiple years, it can trigger a desk review even in the absence of other red flags. Businesses in retail, food and beverage, and import/export are particularly susceptible to this type of benchmarking comparison.
5. Cash-heavy operations with weak record-keeping
Businesses with high cash turnover and limited internal controls are considered higher risk. Disorganised accounting, missing receipts, or discrepancies between bank statements and reported income are among the most common factors that prompt a closer review.
The IRD's concern with cash-heavy businesses is straightforward: cash transactions are difficult to verify independently. Restaurants, retail outlets, and service businesses that handle large volumes of cash are more likely to be selected for field audit, particularly where accounting records are inconsistent or incomplete across periods.
How an IRD Tax Audit Unfolds: From Letter to Investigation
An IRD audit rarely starts with a full investigation. It typically begins quietly, escalating only if the initial review raises concerns. Here is how the process works.
Stage 1: Desk review
Most audits start here. An IRD assessor examines your return and financial statements for internal consistency. You may receive a letter asking for clarification on specific items. This is not automatically the beginning of a full audit, but it should be taken seriously and answered promptly.
Stage 2: Field audit
If the desk review raises substantive concerns, the case is referred to the IRD’s Field Audit and Investigation Unit (FAIU). A field audit is more comprehensive, covering detailed examination of your books and records, and may include on-site visits and interviews with directors or key staff. At this stage, professional representation is strongly recommended.
Stage 3: Full investigation
Investigations are reserved for cases involving suspected fraud or deliberate tax evasion. The IRD has broader information-gathering powers at this level, timelines can stretch to several years, and the consequences are significantly more severe.
Penalties if the IRD Finds Issues
The financial consequences depend on the nature and severity of the discrepancy. According to the IRD’s penalty policy:
-
5% surcharge on unpaid tax after the due date
-
Up to 300% of tax underpaid as a penalty for deliberate underreporting or evasion
-
Additional assessments going back up to 6 years for innocent errors, or 10 years where fraud or wilful evasion is found
-
Prosecution in the most serious cases
How to Respond to an IRD Audit Letter
Receiving a letter from the IRD does not mean you are automatically in trouble. What matters is how you respond. If the letter is a tax demand note specifically, see our dedicated guide on handling a tax demand note in Hong Kong.
-
Do not ignore it. The IRD typically allows one month to reply. If you need more time, request an extension in writing, as short extensions are usually granted.
-
Gather your records. Hong Kong law requires businesses to retain accounting records, invoices, bank statements, contracts, and supporting documents for at least 7 years.
-
Be accurate and complete. Vague or partial responses tend to generate more follow-up questions and prolong the process.
-
Get professional help early. Engaging a qualified tax advisor from the outset gives you the best chance of managing the process efficiently and reducing any penalties.
If you are unsure how to handle a tax audit or investigation, our professional auditing team at SMEBro has experience supporting businesses through IRD reviews at every stage.
How to Reduce Your Risk of Being Audited
No business can fully eliminate audit risk, but these steps reduce your exposure. For a broader overview of what the IRD expects, see our guide on key tax compliance requirements for Hong Kong businesses.
-
Maintain accurate, consistent accounting records throughout the year
-
Ensure all deductions are properly documented and commercially justifiable
-
Review your gross profit margins against industry benchmarks annually
-
File your Profits Tax return accurately and before the Hong Kong tax filing deadline every year. Late filing is itself a trigger for additional scrutiny.
-
Work with a professional accountant or tax advisor to review submissions before filing
Maintaining audit-ready accounts year-round is one of the most effective risk management tools available to a business. If you are unsure whether your current setup meets IRD standards, our tax compliance services can help. You can also see how audit-readiness plays out in practice in our annual audit case for an export trading company and our first-time audit case for a tech startup.
Frequently Asked Questions
How long does a tax audit in Hong Kong take?
A desk review can be resolved within a few weeks. A field audit typically takes several months. A full IRD investigation can last two years or more depending on complexity.
Does the IRD notify you before conducting an audit?
For desk reviews and field audits, the IRD contacts you in writing first. On-site visits are generally scheduled in advance, though the initial selection is often made without prior notice.
What records do I need to keep for a tax audit?
Hong Kong law requires businesses to retain accounting records, source documents, bank statements, contracts, and supporting schedules for a minimum of 7 years. Complete, organised records are your best defence in any audit.
Can I get professional help during an IRD investigation?
Yes, and it is strongly advised. A qualified tax advisor or accountant can communicate with the IRD on your behalf, help you compile documentation, and work to manage or reduce any penalties that arise.
What is the difference between a tax audit and a tax investigation in Hong Kong?
A tax audit is a broad term covering desk enquiries and field audits, where the IRD checks that your returns are accurate. A tax investigation is more serious: it is reserved for cases where the IRD suspects deliberate underreporting or evasion, typically spans multiple years, and involves broader information-gathering powers. The key distinction is intent. Audits address compliance gaps; investigations are pursued where fraud is suspected.
How do I know if the IRD is auditing me?
The IRD will contact you in writing. You may receive a letter requesting documents or clarification (a desk enquiry), or a formal notice that your case has been selected for field audit. In some situations, IRD officers may contact you to arrange a site visit. If you receive any correspondence from the IRD requesting information about your tax affairs, treat it as the beginning of a review and seek professional advice promptly.
