Why Cannabis Businesses Face Higher Audit Rates Than Any Other Industry
The IRS does not publicly release audit rates by industry, but practitioners who specialize in cannabis taxation estimate that cannabis businesses face examination rates of 3% to 7% -- compared to the overall small business audit rate of approximately 0.5% to 1.5%. Several structural factors explain this disparity.
First, cannabis remains a Schedule I controlled substance under federal law, which means the IRS views every cannabis business as engaged in trafficking. Section 280E of the Internal Revenue Code denies deductions for ordinary business expenses to any entity trafficking in a controlled substance, creating an inherently adversarial relationship between cannabis operators and the IRS. The agency knows that 280E audits are high-yield examinations -- the average adjustment in a cannabis audit significantly exceeds the average adjustment in a standard small business audit because the stakes of COGS allocation are so much higher.
Second, the cash-intensive nature of the industry creates information asymmetries that auditors are trained to exploit. Many cannabis businesses still operate primarily in cash because federal banking restrictions limit access to traditional financial institutions. Cash businesses have historically been audit targets because the IRS cannot independently verify revenue through bank records the way it can for businesses that process all transactions through merchant accounts.
Third, the IRS has access to state seed-to-sale tracking data through information-sharing agreements and subpoena authority. Systems like METRC provide a detailed record of every plant grown, every gram harvested, and every transfer made. When the IRS can cross-reference production data against reported revenue, discrepancies become immediately apparent.
Understanding these dynamics is the first step in audit preparation. The second step is building systems and documentation that transform an audit from a threat into a demonstration of professional management.
What Are the Most Common IRS Audit Triggers for Cannabis Businesses?
Audit triggers are the specific financial patterns or filing characteristics that cause the IRS to select a return for examination. For cannabis businesses, several triggers are particularly relevant.
Disproportionate COGS deductions are the single most common trigger. The IRS maintains internal benchmarks for the ratio of COGS to revenue across industries. When a cannabis business reports COGS at 70% or more of revenue, it draws attention because the agency suspects that non-deductible operating expenses are being improperly classified as production costs. A well-documented cost study can justify a high COGS ratio, but without one, the business is inviting an examination.
Cash deposit anomalies attract IRS attention through Bank Secrecy Act reporting. Banks file Currency Transaction Reports (CTRs) for deposits of $10,000 or more, and the Financial Crimes Enforcement Network (FinCEN) flags patterns of deposits just below that threshold -- a practice called structuring -- as suspicious. When total cash deposits for the year significantly exceed reported revenue, or when deposit patterns suggest structuring, the IRS has grounds for both a civil tax examination and a potential criminal referral.
Large year-over-year swings in revenue or expenses without a clear business explanation raise flags. If a cultivation operation reports $2 million in revenue one year and $1.2 million the next without any change in licensed canopy or production capacity, the IRS may suspect that the $1.2 million year reflects underreported income rather than a genuine business decline.
Inconsistencies between state filings and federal filings create obvious audit targets. If a business reports $3 million in gross receipts to the state for excise tax purposes but reports $2.5 million in gross receipts on its federal Form 1120 or 1065, the $500,000 discrepancy will be identified and investigated.
Amended returns claiming additional COGS are examined at a higher rate than original filings. While amending a return to correct a legitimate error is appropriate, the IRS views amended cannabis returns with particular skepticism, especially when the amendment increases COGS and reduces taxable income.
What Documents Should You Prepare Before an Audit?
The time to organize audit documentation is before an audit notice arrives -- ideally, as part of the annual tax preparation and closing process. Attempting to reconstruct records after receiving an examination notice is more expensive, more stressful, and produces weaker documentation than maintaining organized records throughout the year.
Financial records that should be immediately accessible include three years of complete general ledger detail, bank statements for every account including accounts held under related entities, all deposit slips and cash logs that reconcile to daily sales reports, accounts payable records with vendor invoices organized by expense category, payroll records including time sheets, W-2s, and quarterly payroll tax filings, and fixed asset schedules showing every capitalized asset, its placed-in-service date, its depreciable life, and the depreciation method used.
The 280E cost study is the most important single document in a cannabis audit. This study should contain a clear description of the business's operations and the production process, a list of every cost category included in COGS, the methodology used to allocate shared costs between production and non-production activities (square footage allocations, time-based labor allocations, utility sub-metering or engineering estimates), the actual calculations showing how each allocation was derived, and supporting evidence for every assumption (floor plans, time logs, utility bills, lease agreements).
Seed-to-sale records exported from METRC or the applicable state tracking system should be reconciled to internal inventory records and sales data. The reconciliation should be performed monthly and archived so that an auditor can trace any product from planting through harvest, processing, and sale.
Entity structure documentation should include organizational charts, operating agreements, intercompany agreements for management fees or shared services, and documentation supporting the business purpose of the entity structure. The IRS frequently challenges cannabis entities that appear designed solely to separate 280E-subject income from deductible expenses without economic substance.
How Do You Build a Strong 280E Defense Strategy?
A strong 280E defense is not constructed during the audit -- it is built into the business's accounting practices from day one. The defense rests on three pillars: methodology, documentation, and consistency.
Methodology refers to the allocation approach used to determine which costs qualify as COGS. The IRS applies Section 471 inventory costing rules as they existed before the Tax Cuts and Jobs Act. For producers (which includes cultivators and manufacturers), this allows inclusion of direct materials, direct labor, and a reasonable allocation of indirect production costs. The methodology must be clearly articulated, grounded in the tax code and relevant case law, and applied consistently from year to year. Changing allocation methods without a valid business reason undermines credibility.
Documentation transforms the methodology from a theory into evidence. Every allocation must be supported by contemporaneous records -- not records created after the audit begins. Square footage allocations require floor plans, preferably prepared or certified by an architect or engineer. Labor allocations require time tracking records, job descriptions, and organizational charts. Utility allocations require sub-meter readings or, if sub-metering is not available, engineering estimates based on equipment specifications and operating hours.
Consistency is what makes the defense credible over time. An auditor who sees the same methodology applied the same way across three years of returns is far more likely to accept the allocations than one who sees the business changing methods each year to maximize the COGS deduction. If a change in methodology is warranted -- because the business expanded, changed its production process, or identified an error -- the change should be documented with a written explanation and applied prospectively.
At Northstar, we have defended cannabis clients through dozens of IRS examinations. The single greatest predictor of a favorable outcome is whether the client had a professional cost study prepared before the audit began. Clients with pre-existing cost studies typically resolve examinations with minimal or no adjustments to their COGS positions. Clients without cost studies face an uphill battle, often settling for COGS deductions that are 20% to 40% lower than what they could have justified with proper documentation.
How Do State Cannabis Audits Differ from Federal Audits?
State audits present different risks and require different preparation than IRS examinations. While the IRS focuses primarily on income tax, COGS allocation, and 280E compliance, state auditors have a broader mandate that includes excise tax, sales tax, regulatory compliance, and licensing.
Excise tax audits are among the most common state examinations for cannabis businesses. States like California impose excise taxes based on the gross receipts or average market price of cannabis products. Auditors verify that the excise tax was calculated on the correct base -- a common error is calculating excise on the wholesale price when the statute requires calculation on the retail price or average market price. They also verify that the tax was remitted on time, as late payment penalties in cannabis can be 10% to 25% of the amount owed.
Sales tax audits examine whether the correct rate was applied (some jurisdictions impose additional cannabis-specific sales tax rates on top of the standard rate), whether tax was collected on all taxable transactions, and whether the tax collected was fully remitted to the state. Point-of-sale system records are the primary source of audit evidence, and discrepancies between POS reports and sales tax returns are the most common finding.
Seed-to-sale and inventory audits are conducted by state cannabis regulatory agencies rather than tax authorities, but the findings often have tax implications. When a regulatory audit identifies inventory discrepancies -- product that should be in the facility but is not, or product in the facility that is not recorded in the tracking system -- the regulatory agency may share findings with the state tax authority. Those findings can support claims of unreported revenue or improper inventory valuations.
City and county audits add another layer of complexity. Many municipalities impose their own cannabis business taxes, often calculated as a percentage of gross receipts. These audits tend to be less sophisticated than state or federal examinations, but the penalties for non-compliance can be severe, including suspension of the local business license.
The key takeaway is that cannabis businesses must prepare for audit from multiple directions simultaneously. A strong compliance posture at the federal level does not protect against state or local exposure, and vice versa.
How Should Cannabis Businesses Conduct Internal Audits?
Internal audits are the most cost-effective audit defense available because they identify and correct issues before an external auditor finds them. A cannabis business should conduct internal audits on a quarterly basis at minimum, with additional spot checks during periods of rapid growth or operational change.
Financial internal audits should verify that every bank deposit ties to a daily sales report, that cash on hand reconciles to the POS system and the general ledger, that vendor invoices are properly coded between COGS and operating expense accounts, that payroll allocations between production and administrative functions match time tracking records, and that intercompany transactions are properly documented and priced at arm's length.
Inventory internal audits should select a random sample of products -- ideally 10 to 20 SKUs per quarter -- and trace them from the seed-to-sale system to the physical inventory to the accounting records. Variances should be classified by cause (shrinkage during processing, testing destruction, data entry errors, actual discrepancies) and corrected in all three systems.
Tax compliance internal audits should verify that all required returns were filed on time, that payment amounts match the filed return amounts, that the COGS allocation methodology has been consistently applied, and that any changes in operations (new grow rooms coming online, changes in staffing, new product lines) have been reflected in the allocation calculations.
The documentation from internal audits serves double duty. It demonstrates to external auditors that the business has a culture of compliance and systematic controls, and it provides a real-time mechanism for management to catch and correct errors before they become material.
What Happens During a Cannabis Business Audit and What Should You Expect?
Understanding the audit timeline and process reduces anxiety and improves outcomes. A typical IRS examination of a cannabis business follows a predictable pattern over 6 to 18 months from initial notice to resolution.
The process begins with an examination notice -- usually Letter 2202 or Letter 2205 -- which identifies the tax year under examination and the issues the IRS intends to review. For cannabis businesses, the notice almost always identifies Section 280E and COGS as examination items. The notice will request an initial set of documents, typically including the tax return, financial statements, general ledger, bank statements, and the business's accounting method documentation.
The next phase is the initial document production, where you provide the requested records to the examining agent. This is where having organized, pre-existing documentation pays enormous dividends. At Northstar, we prepare a standardized audit response package for clients that includes the cost study, financial statements, allocation workpapers, entity structure documentation, and a cover letter explaining the business's operations and accounting methodology. Providing a comprehensive, well-organized initial response sets a professional tone that carries through the remainder of the examination.
The examining agent will then conduct a detailed review of the documents, during which they may request additional information, ask clarifying questions, or request an in-person tour of the facility. Cooperate fully but strategically -- provide what is requested, but do not volunteer information beyond the scope of the request. Every response should be reviewed by your tax advisor or attorney before submission.
If the examining agent proposes adjustments, you will receive a Revenue Agent's Report detailing the proposed changes and the resulting tax liability. At this point, you can agree, partially agree, or disagree. If you disagree, you can request a conference with the agent's manager, file a protest with the IRS Appeals Division, or ultimately petition the U.S. Tax Court.
Professional representation during an audit is not optional for cannabis businesses. The 280E issues are too complex and the stakes too high for a business owner to navigate alone. A cannabis-specialized CPA or tax attorney who has experience with IRS cannabis examinations will know what the agent is looking for, understand the relevant case law (CHAMP v. Commissioner, Olive v. Commissioner, Patients Mutual v. Commissioner), and negotiate from a position of knowledge rather than fear.
How Northstar Prepares Cannabis Businesses for Audit
At Northstar Financial, audit preparation is integrated into our ongoing engagement with every cannabis client -- not treated as a crisis response after an examination notice arrives. Our annual process includes preparing a formal 280E cost study with full allocation workpapers, conducting quarterly internal audit procedures on financial records, inventory, and tax compliance, performing monthly METRC reconciliations, maintaining organized digital archives of all supporting documentation, and reviewing entity structure and intercompany transactions for audit defensibility.
When a client does receive an examination notice, our team manages the entire process -- from initial document production through final resolution -- so that the business owner can focus on running the operation. The combination of proactive preparation and experienced representation consistently produces better audit outcomes at lower total cost than reactive approaches.