- A CRA "review" — often a letter asking you to mail in receipts for a specific claim — is a lighter-touch check than a full audit, which typically involves a CRA officer examining your…
- On an ordinary CRA reassessment, the taxpayer generally carries the burden of showing the assessment is wrong — not the other way around.
- When support for a claim isn't available, an auditor doesn't simply drop the issue.
Getting a CRA audit letter is stressful enough without also realizing that a chunk of receipts, invoices, or mileage logs from a given year are missing — lost in a move, a hard-drive failure, or simply never kept in the first place. Many business owners assume missing paperwork means the CRA will automatically assume the worst. That's not quite right, but the consequences of missing records in a CRA audit are still real, and how you respond in the weeks after the request matters more than the gap itself.
Worth remembering from the outset: being selected for an audit or review is not, on its own, an accusation of wrongdoing. The CRA opens audits and reviews for many reasons — industry risk-scoring, unusual deduction patterns, foreign-property reporting issues, third-party information, or random selection — and most end in routine adjustments, not penalties. What changes the outcome is what happens once an auditor asks for support you can't produce.
This guide walks through what the CRA can actually do when records are missing, where the legal exposure escalates, and what a business can realistically do to limit the damage.
Audit or Review — Know Which One You're In
A CRA "review" — often a letter asking you to mail in receipts for a specific claim — is a lighter-touch check than a full audit, which typically involves a CRA officer examining your books more broadly. Don't treat the two the same way, but don't dismiss either one: both can lead to a reassessment if you can't back up what you filed.
Who Has to Prove the Number Is Right
This is the part most business owners underestimate. On an ordinary CRA reassessment, the taxpayer generally carries the burden of showing the assessment is wrong — not the other way around. That means missing records don't just fail to help your case; they can leave you unable to meet a burden that's already yours to carry, so the CRA's own estimate of your income or expenses is what stands.
What the CRA Can Do Without Your Records
When support for a claim isn't available, an auditor doesn't simply drop the issue. Depending on what's missing, the CRA can:
- Deny the deduction or GST/HST input tax credit outright, adding the amount back to your taxable income or tax owing.
- Estimate your income using other information available to it — bank deposits, comparable businesses in your industry, or third-party records — when your own books don't support what was filed.
- Apply the same treatment on both the income tax and GST/HST sides, since a claim disallowed for one purpose often gets flagged for the other.
None of this requires proof of intent. It's simply what happens when a claim can't be substantiated and the burden of proof sits with you.
When It Gets More Serious: Penalties and Reopened Years
Sloppy or absent records become a bigger problem when they suggest more than an honest gap:
- Gross negligence penalties. If CRA concludes a false statement or omission was made knowingly or through gross negligence, it can impose a penalty equal to the greater of a fixed minimum amount and half of the understated tax or overstated credit involved (figures change — verify the current amount before relying on it). Unlike an ordinary reassessment, the CRA — not you — bears the burden of justifying this specific penalty.
- Reopening years that should be closed. Normal reassessment periods exist to give both sides certainty, but the CRA can reassess a year outside that window if it can show misrepresentation attributable to neglect, carelessness, wilful default, or fraud — or if you've signed a waiver. A pattern of missing records across several years is exactly the kind of thing that can support that argument.
Rebuilding the Record: A Practical Checklist
If a gap turns up before or during a review, focus on reconstruction rather than panic:
- [ ] Pull bank and credit card statements covering the missing period
- [ ] Request duplicate invoices or statements from suppliers, contractors, and vendors
- [ ] Recover data from cloud accounting software, point-of-sale systems, or payment processors
- [ ] Rebuild a vehicle or expense log from calendars, appointment records, or GPS/map history
- [ ] Note the date and method of each reconstruction — a well-documented rebuild carries more weight than numbers that simply reappear
- [ ] Get professional help before submitting anything if the reconstructed figures differ materially from what was originally filed
If You Find the Gap Before CRA Does
Discovering a filing problem yourself is a better position to be in than having CRA find it first. Correcting a past error voluntarily may qualify for reduced penalties and partial interest relief under the CRA's Voluntary Disclosures Program. As of mid-2026, coming forward before CRA has contacted you about that specific issue (an "unprompted" application) attracts the most relief, but an application made after some CRA contact — an educational letter, for example — can still qualify for reduced relief as a "prompted" application. The program never forgives the underlying tax owed, and once an audit or review touching that issue has already started, this option generally closes. Program conditions and relief levels change, so confirm the current rules before assuming you qualify.
Frequently asked questions
Does being audited mean the CRA thinks I did something wrong?
No. Audits and reviews are triggered by a range of factors, including random selection, and most are resolved with routine adjustments rather than penalties. Being selected says nothing about your credibility on its own.
Can the CRA assess me if I genuinely have no records left for a year?
Yes. Where records don't exist, the CRA can estimate your income or deny unsupported claims using whatever information it does have, and the burden falls on you to show that estimate is wrong. That's why reconstruction — even imperfect reconstruction — is worth doing.
How far back can the CRA go if it suspects my records were deliberately incomplete?
Ordinary reassessments are limited to a set number of years, but that limit doesn't apply where the CRA can show the shortfall came from neglect, carelessness, wilful default, or fraud. In that scenario, older years can be reopened.
Should I deal with the auditor myself or get help first?
For a simple, low-dollar review, many business owners handle it directly. Once penalties, multiple tax years, or a disagreement about the numbers are on the table, getting advice before you respond — rather than after — puts you in a much stronger position.
This is a tax question
Start a file online — flat, published fees, reviewed by a licensed Ontario lawyer before a dollar is owed.