A SARS audit letter has a way of ruining an otherwise good week. Nomsa, who runs a small logistics business out of Johannesburg, still remembers opening her eFiling profile to find a "verification" notice sitting where she'd hoped to see a refund. Nothing she'd done was intentionally wrong — but a handful of small inconsistencies in her VAT and PAYE submissions had quietly flagged her for review. Six weeks and a stack of supporting documents later, the matter was resolved. It didn't have to take that long.

SARS doesn't select businesses for audit at random. Its systems flag specific patterns, and knowing what they are is the easiest way to keep your business off the list — or ready if you land on it anyway.

What Triggers a SARS Audit?

SARS uses a risk-engine model that cross-references your submissions against industry norms, historical filings, and third-party data (banks, other SARS taxpayers, customs records). When something doesn't add up, a "verification" or full audit is triggered automatically — no human decides to single you out first.

Here are the most common red flags for South African small businesses.

1. Inconsistent VAT Returns

If your VAT201 submissions fluctuate sharply month to month, or your output VAT doesn't align with your declared turnover, SARS's system takes notice. Common culprits include:

• Claiming input VAT without valid tax invoices

• Large once-off input VAT claims (equipment purchases, renovations)

• VAT refunds requested repeatedly in short succession

Keep every tax invoice on file and reconcile your VAT201 against your accounting records before submission, not after.

2. Mismatches Between Income Tax and VAT Declarations

SARS compares your annual income tax return (ITR14 for companies) against your cumulative VAT201 filings for the same period. If your declared turnover for income tax purposes doesn't roughly match your VAT-declared sales, expect a query. This is one of the most common — and most avoidable — audit triggers, usually caused by timing differences or simple bookkeeping errors rather than anything deliberate.

3. High Cash Transaction Volumes

Businesses like restaurants, salons, and spaza shops that deal heavily in cash face closer scrutiny, because cash is harder to trace and easier to under-declare. If your industry has a known cash component, keep detailed daily till reconciliations and bank all cash promptly — a clean paper trail is your best protection.

4. Round Numbers and Estimated Figures

Expense claims that look suspiciously tidy — R10,000 for "travel," R5,000 for "entertainment," repeated every month — read as estimates rather than actuals. SARS's system is built to spot patterns like this. Always work from real receipts and invoices, not rounded approximations.

5. PAYE, UIF, and SDL Inconsistencies

If you employ staff, your EMP201 monthly submissions need to align with your EMP501 reconciliation (due in May and November each year) and the payroll figures in your annual financial statements. Under-declaring PAYE while claiming full salary expenses in your income tax return is a classic mismatch that draws attention fast.

6. Missed or Late Provisional Tax Payments

Consistently late or skipped provisional tax payments (due at the end of February and August) signal poor compliance and can push your risk profile up, even if the amounts involved are small. Setting calendar reminders — or better, working with a professional who tracks these for you — removes this risk entirely.

7. Industry Benchmarking Anomalies

SARS benchmarks businesses against others in the same sector. If your profit margins, expense ratios, or salary-to-revenue ratio sit well outside the norm for your industry — much lower profit than similar businesses, for instance — it can prompt a closer look, even without an obvious error.

How to Reduce Your Audit Risk

You can't eliminate audit risk entirely, but you can significantly lower it:

1. Reconcile VAT and income tax figures every filing period, not just at year-end

2. Keep digital copies of every tax invoice and receipt for at least five years (SARS's required retention period)

3. File and pay on time — even a day late affects your compliance status

4. Review your numbers for internal consistency before submitting, not after SARS queries them

This is exactly where outsourcing your bookkeeping and tax compliance to a professional firm pays for itself — a second set of eyes catches the inconsistencies that trigger audits long before SARS does, and if a verification notice does land in your inbox, you have the documentation ready to respond within days, not weeks.

Staying Audit-Ready Is a Year-Round Habit

SARS audit triggers aren't mysterious once you know what the system is looking for: consistency, documentation, and figures that match across every return you file. Most triggers come down to timing gaps and paperwork gaps, not wrongdoing — but proving that takes organised records.

For South African small business owners already stretched across sales, staff, and operations, staying audit-ready shouldn't be another thing to manage alone.

Ready to get your finances in order?
At Saber Accounting, we help South African small businesses stay compliant, cut unnecessary costs, and make smarter financial decisions. Whether you need help with VAT reconciliation, PAYE compliance, or provisional tax planning, our expert team is here.

Book a free consultation today