A tax audit can be unsettling for any business. Once a revenue officer starts asking for books, invoices, contracts, bank records, and other documents, it can feel as though the entire business is suddenly open to examination.
But the BIR’s authority to examine a taxpayer is not unlimited.
The BIR’s current audit framework, under Revenue Memorandum Order No. 22-2026, requires audits and verifications of internal revenue tax liabilities to be conducted pursuant to the appropriate authority: an electronic Letter of Authority (eLA), Tax Verification Notice (TVN), or Mission Order (MO). The framework also generally limits a taxpayer to one eLA for a taxable year, with the audit covering the applicable internal revenue taxes for that year.
This is more than an administrative formality. The document issued by the BIR tells the taxpayer what kind of examination is being conducted and, more importantly, what the revenue officer is authorized to examine. An eLA authorizes an audit within the scope stated in the authority. A TVN is more specific: it is limited to the transaction or claim identified in the notice. If the verification uncovers issues that require a broader examination, the revenue officer must secure a separate eLA before proceeding with a full audit. That means a taxpayer receiving a TVN concerning a particular transaction does not necessarily have to treat it as an invitation for the BIR to examine every aspect of its tax affairs.
The same principle applies to the scope of an eLA. The current framework provides that audit activities are limited to the tax types and taxable periods expressly covered by the relevant audit authority. There are, however, exceptions. Certain cases may require separate audit or verification authorities because of their nature, including one-time transactions, tax-clearance applications, and cases involving fraud or irregularities. Where a verification reveals a need for a broader examination, the appropriate audit authority must still be obtained.
The BIR has also moved toward a risk-based audit system. The selection of taxpayers for audit is generally system-assisted and based on prescribed criteria and risk indicators. These include, among others, significant discrepancies in declared sales or income, intelligence information, certain tax refund claims, and taxpayers enjoying tax incentives.
But how does the BIR actually decide which businesses should be examined?
Under the current framework, the selection process is not supposed to depend simply on an individual revenue officer deciding which taxpayer to investigate. Priority audit cases are generally selected through the BIR’s system using data and prescribed risk indicators. The information considered may include filed tax returns, third-party information, data analytics, and other verifiable information available in the BIR’s systems. As far as practicable, the taxpayer’s identity is also concealed during the selection and assignment stage before the case is assigned to the revenue personnel who will conduct the audit.
The risk indicators can be quite specific. They may include a significant decrease in reported sales or VAT payments, substantial input VAT claims, substantial sales accompanied by reported net losses, significant increases in assets while the taxpayer reports losses, related-party or intercompany transactions, and taxpayers that have been operating for a number of years without having been examined. Other information, including discrepancies identified through third-party data, may likewise bring a taxpayer within the BIR’s audit-selection criteria.
There are also Mandatory Cases, where an audit or verification is required because of the nature of the transaction or circumstance. These can include certain tax clearance applications, refund or tax credit claims, certain one-time transactions, and other cases identified under the BIR’s rules. These cases are different from Priority Cases, which are selected through the system based on prescribed risk-based criteria.
In other words, a business can come under examination for different reasons. Some audits are triggered by a transaction or application that requires verification. Others result from information or patterns in the taxpayer’s filings and other data that place the taxpayer within a category identified for audit.
For businesses, this changes the way an audit should be approached.
The first reaction should not necessarily be to start producing every document the company has. The first step should be to examine the authority itself.
What document did the BIR issue? What taxpayer and taxable period does it cover? What taxes are included? What transaction or claim is being verified? And is the particular request within the authority granted by that document?
The next step is to understand why the taxpayer may have been selected for audit in the first place. The BIR’s risk-based system uses prescribed criteria and risk indicators, so a business should consider whether its reported sales, income, VAT position, losses, assets, related-party transactions, or other information may have triggered the audit-selection process.
These questions do not mean that a taxpayer can simply refuse to cooperate with a lawful audit. Taxpayers remain required to comply with valid examination and verification procedures. But cooperation with the BIR does not mean surrendering the limits imposed by the BIR’s own audit authority. This becomes particularly relevant when the scope of an examination appears to expand during the audit.
Suppose a taxpayer receives a TVN concerning a VAT refund claim. During the verification, the revenue officer discovers what appears to be an unrelated income-tax issue. The discovery may justify further action by the BIR, but it does not necessarily transform the original TVN into a general authority to audit the taxpayer’s income-tax liabilities. Under the current framework, a broader examination requires the appropriate audit authority.
There is also an important distinction between finding a potential tax issue and having authority to conduct a full examination of that issue. The BIR may encounter information suggesting that additional taxes could be due. That information can lead to further investigation or the issuance of another audit authority. But the existence of a possible deficiency does not, by itself, eliminate the procedural requirements governing how the BIR may examine it.
The reforms introduced in 2026 reflect an effort to make those boundaries clearer. The BIR itself described the new framework as intended to promote transparency, prevent misuse or abuse of audit authority, uphold due process, and strengthen accountability in the conduct of tax audits. For taxpayers, that means an audit should be treated as both a substantive and a procedural exercise. The substantive question is whether the taxpayer actually paid the correct amount of tax. The procedural question is whether the BIR is examining the taxpayer in the manner authorized by law and the applicable audit rules.
Both matter.
A taxpayer may have a legitimate tax position but lose it through poor documentation or failure to comply with procedural requirements. Conversely, the BIR may identify a potentially valid tax issue but still have to follow the rules governing its authority to examine and assess the taxpayer. A tax audit is therefore not simply a matter of answering whatever questions an examiner asks. The taxpayer should understand the authority under which those questions are being asked and the scope within which the examination is being conducted.
Final Word
The BIR has broad powers to examine taxpayers and determine the correct amount of tax due. But broad authority is not unlimited authority.
For businesses facing an audit, one of the first questions should therefore be simple: What exactly has the BIR authorized itself to examine, and what may have caused the business to be selected for audit?
Knowing the answer can help a taxpayer comply with a legitimate audit while also ensuring that the examination remains within the bounds of the authority issued.
Kristoffer Monico S. Ng is a Philippine lawyer whose practice focuses on labor and employment, corporate and commercial law, tax, energy law, and civil and criminal litigation. He advises businesses and individuals on legal risk, regulatory compliance, taxation, dispute resolution, and complex commercial matters, representing clients before courts, quasi-judicial agencies, and administrative bodies, while also providing strategic legal advice outside the courtroom. He also regularly writes on developments in Philippine jurisprudence and regulation, providing practical insights on legal issues affecting businesses and individuals.
If you require legal advice concerning tax audits, BIR assessments, tax compliance, tax disputes, or other tax-related legal matters, you may reach him through e-mail at nico@nlaw.ph to discuss your particular circumstances.
Suggested Article:
In a previous article, we discuss when the 120-day period for the BIR to act on a VAT refund claim begins, and what the Supreme Court’s ruling in Commissioner of Internal Revenue v. Team Sual Corporation means for taxpayers. Read our discussion on the taxpayer’s responsibility to submit complete supporting documents, the BIR’s obligation to identify deficiencies, and the importance of properly monitoring the periods for seeking judicial relief:


