CASH-HEAVY BUSINESS TAX RISK · 06
Tax Risk Advisory for Cash-Heavy and High-Volume Businesses
CRA audits cash-intensive businesses through bank deposit analysis, industry benchmarks, and net worth methods — not the books alone. I advise owners on the documentation, reconciliation, and governance that stand up to that scrutiny.
The short answer
CRA audits cash-intensive businesses differently. Rather than relying on the books alone, auditors apply indirect verification — bank deposit analysis, industry benchmark comparisons, markup tests, and net worth methods — to test whether reported revenue matches observable cash flow. Restaurants, construction, trucking, automotive, convenience retail, and similar sectors face this scrutiny by default. I advise owners of cash-heavy and high-volume businesses in Mississauga and across the GTA: reconciling deposits against reported sales, closing documentation gaps before CRA finds them, quantifying HST/GST and payroll exposure, and coordinating voluntary disclosure where past filings need correction. The work is professional and factual — organizing and evidencing what is real, never concealing it.
“A cash-heavy business does not choose whether CRA tests its deposits — it only chooses whether the reconciliation exists before the auditor builds their own.”
When does cash flow become tax risk?
There is nothing improper about running a business that takes cash. The risk is evidentiary: when a meaningful share of revenue moves in cash, the burden of proving what was earned shifts, in practice, onto the quality of the records. CRA runs a standing underground economy compliance program aimed at exactly these sectors, and its auditors are trained not to take the books at face value.
For cash-intensive businesses, indirect verification is the default, not the exception. Auditors analyze bank deposits — business and, where warranted, personal — compare margins against industry benchmarks, work backward from purchase volumes to expected sales, and in serious cases build a net worth assessment that estimates income from lifestyle and asset growth. Once a net worth assessment is issued, the practical burden of disproving CRA's numbers sits with the taxpayer.
This is why ordinary record-keeping problems are dangerous in cash sectors. A missing daily reconciliation, an undocumented owner contribution, or a delivery-platform settlement that never got bridged to the POS can read, on paper, as unreported income — even when nothing was hidden. The work of this mandate is to close that gap between what is real and what is provable, before CRA measures it.
Which industries face higher documentation and CRA audit risk?
CRA does not audit every industry the same way. Sectors with significant cash or high transaction volume are selected more often, tested with indirect methods by default, and increasingly matched against third-party data the business never sees. Ten patterns recur at this desk:
- Restaurants, bars, and hospitality — CRA's crackdown on the restaurant sector has produced more than 6,000 tax audits and identified $344 million in unreported income; point-of-sale data and electronic sales suppression are standing areas of focus.
- Construction and renovation — T5018 slips feed CRA's Contract Payment Reporting System, so subcontractor payments are matched against reported revenue automatically; unmatched amounts surface without an auditor ever visiting a site.
- Trucking and logistics — the T4A moratorium was lifted for the 2025 tax year, and Budget 2025 committed $77 million to Driver Inc. and personal services business enforcement; carriers paying incorporated drivers without slips now carry a live, funded enforcement risk.
- Automotive — dealerships, repair shops, and leasing operations handle high-value, part-cash transactions; CRA tests vehicle and parts margins against industry benchmarks and traces deposits back to specific deals.
- Convenience stores and gas stations — high-volume, low-margin sales invite markup testing: CRA works backward from purchase volumes to expected sales, and unexplained shortfalls read as unreported revenue.
- Jewelry and luxury retail — large individual cash transactions draw both CRA attention and anti-money-laundering reporting obligations; inventory and sales records need to reconcile piece by piece.
- Retail and wholesale — POS records, inventory movement, and supplier purchase data give CRA three independent ways to model expected sales; discrepancies between them drive tax audit selection.
- Staffing agencies — CRA maintains a standing focus on subcontractor chains and invoicing schemes in labour supply; agencies inherit scrutiny of source deductions, GST/HST, and the legitimacy of every subcontractor below them.
- Beauty, wellness, and clinics — appointment systems create a third-party record of service volume that CRA can compare against reported revenue; unrecorded tips and practitioner-status questions add payroll exposure.
- Event venues and entertainment — door cash, minimum-spend arrangements, and third-party booking platforms leave multiple revenue trails; CRA reconciles them against each other and against bank deposits.
What does CRA audit readiness look like for a cash business?
Readiness for a CRA audit is a state, not a scramble. A cash-intensive business that can produce a clean reconciliation from POS to bank statement, on request, changes the character of a tax audit before it begins: the auditor is verifying a documented system rather than reconstructing an undocumented one.
In practical terms, readiness means a small number of disciplines, kept current:
- Daily sales close-outs reconciled to POS totals, with variances noted the day they occur
- Deposits made intact — expenses paid from the account, never from the till
- A written cash-handling policy that matches what staff actually do
- POS electronic records retained in full, with no suppression or alteration tools anywhere in the environment
- Owner contributions, loans, and transfers documented at the time they happen, not reconstructed later
- Clear separation between business and personal accounts
- Periodic self-testing against industry benchmarks — finding the variance before CRA does
How should bank deposits reconcile to reported sales?
Bank deposit analysis is CRA's workhorse method for cash sectors: total the deposits across every account, subtract identifiable non-revenue items, and compare the remainder to reported sales. If deposits exceed reported revenue and the difference is not documented, the difference becomes the assessment.
The reconciliation review in this mandate builds that bridge deliberately, line by line: POS gross sales, less refunds and discounts; third-party delivery and booking platform settlements, net of their fees; cash floats, tips, and till variances; then the deposits themselves. Non-revenue deposits — inter-account transfers, loan advances, owner contributions, tax refunds — are identified and evidenced with contemporaneous documents, because an unexplained deposit is treated as income until proven otherwise.
Where a genuine gap emerges, the response is factual: establish its size, establish its cause, and deal with it through the correct channel — an adjustment, a disclosure, or a documented explanation. What this practice will not do is paper over a gap. Quantifying a problem precisely is what makes it manageable.
Where does HST/GST exposure build in a high-volume business?
HST/GST is where high transaction volume multiplies small errors into large assessments. The single most consequential data check CRA runs is the mismatch between revenue reported on the T2 corporate return and revenue reported on GST/HST returns — the top data-driven trigger for an HST/GST audit. In a cash-heavy business, timing differences, platform fees, and unreconciled tills produce exactly these mismatches.
On the input side, the most common reason input tax credits are denied is missing or invalid supplier GST/HST registration numbers. CRA applies three documentation tiers — under $30, $30 to $150, and $150 and over — each with escalating information requirements, and a high-volume business fails those tiers thousands of small times if purchasing discipline is loose.
The HST/GST exposure review reconciles filed GST/HST returns to the general ledger and the T2, samples input tax credit documentation against the tier requirements, verifies supplier registration numbers, and quantifies the exposure soberly — so that any correction is made on the business's initiative and timeline rather than an auditor's.
What payroll and subcontractor risks do cash-heavy businesses carry?
Payroll risk in cash sectors is rarely about the payroll register. It is about what happens at the edges: cash wages that never reach a T4, tips that are pooled but not recorded, workers treated as contractors who function as employees, and subcontractor payments made without T4A or T5018 slips. Each of these leaves a mismatch a CRA reviewer can find in third-party data.
Trucking illustrates how quickly this hardens. The Driver Inc. model — incorporated drivers treated as independent businesses — is now a named enforcement priority: the T4A reporting moratorium was lifted for the 2025 tax year, and Budget 2025 committed $77 million specifically to Driver Inc. and personal services business enforcement. Carriers and, by extension, staffing agencies and construction firms with similar structures face slip-matching CRA reviews that did not exist two years ago.
Unremitted source deductions carry a further, personal dimension: directors can be held personally liable for them. The payroll and subcontractor review maps who is paid, how, and under what characterization; tests slip obligations against what was filed; and puts the documentation and remittance discipline in place before a payroll examination tests it.
What records will a CRA auditor actually test?
In a cash-sector tax audit, three record sets decide the outcome: the POS system, the bank statements, and the source documents behind them. Auditors request complete electronic POS records — not summaries — and compare transaction counts, voids, refunds, and no-sales against industry patterns. Electronic sales suppression software is a defined offence with specific monetary penalties and potential criminal exposure; its mere presence in an environment changes the tone of everything that follows.
Bank analysis extends to every account the auditor can justify reaching, and in indirect verification that can include personal accounts of the owner. Source documents — supplier invoices, z-tapes, deposit slips, platform settlement reports, lease and loan agreements — are what convert an explanation into evidence.
The document review in this mandate walks the same path an auditor would, in the same order, and grades what it finds: which records exist, which reconcile, which need reconstruction from third-party data, and which gaps simply have to be acknowledged and addressed. The output is a file that can be produced with confidence — and a precise list of what to fix.
What if past filings do not hold up?
Sometimes the review finds that prior filings are wrong — revenue missed, HST/GST under-remitted, slips never issued. The worst response is to leave it and hope; the second worst is to correct it carelessly, without understanding what the correction reveals. The right response is sequenced: quantify the full exposure first, then choose the channel.
The Voluntary Disclosures Program was overhauled effective October 1, 2025. An unprompted application — made before CRA has initiated contact — falls in the general tier: full penalty relief and 75% interest relief. A prompted application, made after CRA has signalled interest, falls in the partial tier at 25% interest relief. Disclosures generally cover a six-year lookback, ten years for foreign matters. The gap between those tiers is the price of waiting: the same facts, disclosed after a CRA letter arrives, receive materially less relief.
I coordinate the cleanup end to end: quantifying the adjustment, preparing the disclosure file, engaging tax counsel where legal privilege or interpretation matters, and managing the filing sequence. The position of this practice is fixed and worth stating plainly: past problems get corrected through lawful channels. They do not get buried.
What does ongoing tax governance look like after the cleanup?
A one-time cleanup decays. Staff turn over, a new location opens, a delivery platform changes its settlement format, and within two years the reconciliation discipline has quietly eroded. For cash-intensive businesses that want the documentation position to hold, this mandate continues as standing tax governance.
The standing arrangement is deliberately simple: a periodic deposit-and-sales reconciliation review, HST/GST filings checked against the ledger and T2 before they are filed, payroll and subcontractor characterization revisited as the workforce changes, a documentation calendar that keeps slip deadlines and retention obligations visible, and a senior advisor who already knows the file when a CRA letter, a financing, or a sale process arrives.
Governance is also the quiet commercial argument. Lenders, buyers, and their diligence teams apply the same tests CRA does — a cash-heavy business that can evidence its revenue cleanly is worth more, borrows more easily, and sells with fewer holdbacks than one that cannot.
When this mandate applies
Situations this mandate typically covers
- A CRA tax audit letter or questionnaire has arrived for a cash-intensive business
- Bank deposits and reported sales do not reconcile, and the size of the gap is unknown
- CRA has requested POS reports, bank statements, or source documents
- A net worth assessment or indirect verification approach has been raised
- HST/GST filings do not line up with T2 revenue
- Drivers or subcontractors have been paid without T4A or T5018 slips
- Past filings need correction and voluntary disclosure is being considered
- A financing, purchase, or sale requires the records to withstand diligence
By the numbers
The figures that set the stakes
- in unreported income identified across more than 6,000 CRA tax audits of the restaurant sector under the underground economy program
- $344M
- of GST/HST input tax credit documentation CRA applies — under $30, $30 to $150, and $150 and over — with escalating information requirements at each tier
- 3 tiers
- from the mailing date of a Notice of Reassessment to file a notice of objection — the clock that governs every decision after a CRA audit
- 90 days
in unreported income identified across more than 6,000 CRA tax audits of the restaurant sector under the underground economy program
Source ↗of GST/HST input tax credit documentation CRA applies — under $30, $30 to $150, and $150 and over — with escalating information requirements at each tier
Source ↗from the mailing date of a Notice of Reassessment to file a notice of objection — the clock that governs every decision after a CRA audit
Source ↗The engagement
How a private mandate runs
- 01
Confidential Consultation
A private conversation about the business, the cash flows, and anything already in motion — a CRA letter, a deadline, a known gap. No documents are required at this stage.
- 02
Reconciliation Diagnostic
A structured review walking the same path a CRA auditor would: POS to deposits, deposits to filings, filings to slips. The output is a clear picture of where the exposure sits and how large it plausibly is.
- 03
Remediation Mandate
A defined engagement to close what the diagnostic found — documentation rebuilt from third-party records, HST/GST and payroll corrections quantified, and voluntary disclosure coordinated with tax counsel where past filings require it.
- 04
CRA Audit Response
Where a CRA audit is already underway: managing what is said and produced, sequencing responses to requests, and coordinating legal counsel where the matter calls for it.
- 05
Ongoing Tax Governance
A standing advisory arrangement — periodic reconciliation reviews, pre-filing HST/GST checks, and a documentation calendar — so the business stays ready rather than getting ready.
Illustration
How a matter like this is handled
- Situation
- A multi-location restaurant group received a CRA tax audit letter requesting complete POS records and bank statements. The owner knew deposits and reported sales would not match: delivery-platform settlements arrived net of fees, cash tips moved through a pooling arrangement, and the owner had covered shortfalls from personal funds without documenting the contributions.
- Approach
- Before anything was produced, the full bridge was built: POS gross sales to platform settlements, settlements to deposits, deposits to the GST/HST returns and the T2 — for every location and every period under review. Owner contributions were evidenced from personal bank records. A genuine reporting gap in one location's early months was quantified precisely and addressed proactively rather than left for the auditor to estimate. Responses to CRA were sequenced and complete.
- Resolution
- The tax audit proceeded on documented numbers instead of an indirect estimate. The adjustment was confined to the quantified gap the group had itself identified, and a standing reconciliation discipline was put in place across all locations so the next review would start from order rather than reconstruction.
This matter pattern is an illustration only. It is a composite of recurring fact situations, not a description of any single client, and it is not a prediction of outcome. Results always depend on the specific facts, documents, and law that apply.
Frequent questions
Questions this raises
What triggers a CRA audit of a cash business?
- Most selections are data-driven: margins that sit outside industry benchmarks, mismatches between T2 and GST/HST reported revenue, third-party slips (T5018, T4A, platform data) that do not match the return, lifestyle indicators out of line with reported income, and informant leads. Operating in a cash-intensive sector raises the baseline probability on its own — CRA's underground economy program targets these industries as a matter of policy, not suspicion of any particular business.
How does CRA bank deposit analysis work?
- The auditor totals deposits across the business accounts — and, in indirect verification, potentially the owner's personal accounts — removes identifiable non-revenue items, and compares the remainder to reported sales. Deposits that exceed reported revenue and cannot be explained with documents are treated as unreported income. The defence is contemporaneous evidence: transfers, loans, and owner contributions documented when they happened.
What is a net worth assessment, and why does it matter?
- When CRA considers the books unreliable, it can estimate income indirectly — measuring the growth in net assets plus estimated living costs over a period. Once a net worth assessment is issued, the practical burden of disproving CRA's figures shifts to the taxpayer. Challenging one is document-intensive work, which is why the stronger position is a reconciliation that prevents the method from being justified in the first place.
Is running a cash business itself a problem with CRA?
- No. Accepting cash is entirely lawful. What changes is the evidentiary standard: a cash-intensive business cannot rely on a bank feed to prove its revenue, so CRA applies indirect tests and expects the business to carry better documentation than a card-only operation. The exposure comes from documentation gaps, not from the cash itself.
What records should a restaurant keep for a CRA audit?
- Complete electronic POS records including voids and refunds, daily close-out and cash-count sheets, deposit slips matching the daily closes, delivery-platform settlement statements, supplier invoices, payroll and tip records, and working papers bridging POS totals to the GST/HST returns and the T2. CRA's restaurant-sector work — more than 6,000 tax audits identifying $344 million in unreported income — leans heavily on POS data and purchase-volume testing.
What is the Driver Inc. issue in trucking?
- Driver Inc. refers to carriers engaging incorporated drivers who function, in substance, as employees. CRA lifted the T4A reporting moratorium for the 2025 tax year, and Budget 2025 committed $77 million to Driver Inc. and personal services business enforcement. Carriers now face slip-matching reviews, and the drivers' corporations risk personal services business treatment — denied deductions and higher rates. Fleets using this model should have the structure reviewed before a CRA letter forces the question.
What happens if my POS data and bank deposits do not match?
- First, establish why. Most variances have innocent causes — platform settlement timing, fees netted before deposit, floats, till errors — and can be documented. The review builds that bridge line by line. If a genuine unreported amount emerges, it gets quantified and corrected through the proper channel, on your initiative, where relief is greatest. An unexplained variance left for an auditor to find is the most expensive version of the same problem.
Can I correct past returns before CRA contacts me?
- Yes, and timing drives the outcome. Under the Voluntary Disclosures Program rules effective October 1, 2025, an unprompted application falls in the general tier — full penalty relief and 75% interest relief — while an application made after CRA has signalled interest falls in the partial tier at 25% interest relief. Disclosures generally cover six years, ten for foreign matters. Quantifying the exposure precisely before filing anything is the essential first step.
How far back can CRA audit a cash business?
- Within the normal reassessment period as of right — but that limit falls away where CRA can establish misrepresentation attributable to neglect, carelessness, or wilful default, which is precisely the argument indirect verification is used to support. In practice, a cash-sector file with weak records should assume older years can be reopened, and a cleanup should quantify them.
Will bringing in an advisor make CRA think I have something to hide?
- No. Organized, professionally prepared responses are normal and expected in any significant CRA matter. Auditors work from documents; a file that arrives reconciled and evidenced shortens the process. What raises concern is the opposite — delay, incomplete production, and explanations without records.
This page reflects Canadian tax law and CRA administrative practice as of July 10, 2026. It is general information, not tax, accounting, or legal advice.
Further reading
Related insights
Put the Documentation in Order Before CRA Tests It.
Whether a CRA letter has already arrived or the goal is to never be surprised by one, the first step is the same: a private, factual look at how the cash flows and how well the records prove it. Consultations are private, selective, and personally handled. If a tax audit is already moving, reach out sooner rather than later — options narrow as deadlines pass.
Private consultations available by request. WhatsApp: +1-647-510-8878. Personally answered — typically within business hours.