What to Do When a Tax Audit Comes? 5 High-Risk Warning Signs for E-commerce Companies Under Audit and a Checklist for Self-Help
Published: August 14, 2026

A business owner running a Douyin e-commerce account received a notice from the tax authorities last month: due to a significant discrepancy between the platform’s transaction volume and his reported income, he was required to provide an explanation of his business operations over the past three years and undergo a tax audit. He was stunned—over the past three years, he had deposited most of the proceeds from his sales into his personal WeChat and Alipay accounts, reporting only a ”nominal” amount of income on his tax returns, assuming the tax authorities couldn’t ”see” the platform data. As it turned out, the platform data, payment records, and logistics records had long been cross-referenced via a big data system, revealing anomalies. A single notice exposed three years of getting away with it.

This is not an isolated case. Since the full rollout of the Golden Tax Phase IV system, the logic behind tax oversight has evolved from ”random spot checks” to ”data-driven precision targeting.” For e-commerce companies, every order, every payment received, and every shipment is now within the scope of regulatory oversight. In this article, we’ll clearly outline the five high-risk indicators that most commonly trigger tax audits for e-commerce businesses, along with a checklist of steps to take once you receive an audit notice.

If, after reviewing the self-assessment checklist below, you find that you’ve already ”fallen victim” to this issue, please take it seriously. Qicaiying Group specializes in providing domestic and international company registration services in Shenzhen, Guangzhou, Shanghai, Beijing, Hangzhou, Hong Kong, the United States, Japan, South Korea, Southeast Asia, Singapore, the British Virgin Islands (BVI), the Cayman Islands, and other locations, as well as annual company audits, bookkeeping and tax filing, tax compliance, business registration changes, bank account openings, ODI filings, FDI filings, and other corporate services; Hong Kong residency applications, renewals, and permanent residency services; Singapore EP application services; and cross-border e-commerce mentoring and managed operations—all as part of our one-stop service. If you have any needs or are interested, please feel free to contact me at any time (Consultation Hotline: 18676749275, add WeChat: Qicaiyingjituan).

扫码添加客服,获取企财盈服务清单

Five High-Risk Warning Signs: Check Yourself Against Them

Sign #1: A significant discrepancy between payments received from private accounts and reported income. This is currently the most common—and most critical—issue in e-commerce audits. When platform payments are deposited into personal WeChat, Alipay, or private bank accounts, the company’s recorded revenue is negligible. Meanwhile, risk models are automatically generated through a three-way data comparison involving tax authorities, payment providers, and the platform, based on platform order data and payment transaction records. Once cumulative receipts in personal accounts reach a certain threshold, risk control alerts are almost certain to be triggered.

Sign #2: A long-standing mismatch between purchases and sales. Purchases without invoices, severely insufficient input tax credits, yet large amounts of output tax; or obvious discrepancies in the quantities, categories, or amounts of purchases and sales—these are all ”red flags” that will catch the auditor’s attention. For cross-border e-commerce sellers, overseas procurement and overseas warehouse fees without compliant supporting documentation are also high-risk items.

Sign No. 3: Frequent registration and deregistration of ”shell companies.” A group of stores operated under a single legal entity—after being in business for a year or two, they are deregistered and reopened in an attempt to ”slip away undetected.” Big data is extremely effective at identifying connections between the same legal entity, the same IP address, and the same payment account; deregistration does not make past issues disappear—instead, it may cause the business to be flagged for suspicious activity.

Sign No. 4: An abnormally low tax burden rate. For companies in the same industry and of similar size, the tax burden rate typically falls within a certain range. If your reported tax burden rate is consistently and significantly lower than the industry average, the system will flag you as an ”abnormal taxpayer” and prioritize you for an audit. Underreporting income and inflating expenses will ultimately be reflected in the tax burden rate—this ”health indicator.”

Sign #5: Unreported revenue from platform activities. Platform subsidies, commission rebates, promotional subsidies, and advertising rebates—these ”non-core revenues” are often overlooked. However, they are clearly listed on the platform’s statements, and once an audit reveals they have not been reported, they become irrefutable evidence of ”tax evasion.”

Checklist for Taking Action After Receiving an Audit Notice

If you do receive a risk control alert or audit notice, don’t panic and don’t rush to ”pull strings.” Instead, follow the checklist below step by step:

First, assess the situation calmly and clearly define the scope of the problem. First, determine whether the audit is a targeted audit or a comprehensive audit, and identify which fiscal years, tax types, and business operations are involved. List every requirement specified in the notice and prepare the necessary materials accordingly, item by item.

Second, immediately review the chain of evidence. This is the core of the entire compliance process. Platform order details, payment transaction records, purchase contracts, logistics documents, warehouse fee vouchers, employee payrolls, and rent invoices—any materials that can verify the authenticity of business operations must be organized and archived. Auditors focus on ”business authenticity”; the more complete the chain of evidence, the more room there is for explanation.

Third, do not delete or alter data without authorization. This is the biggest mistake many business owners make in the heat of the moment. Deleting data from the platform’s backend, forging contracts, or destroying accounting records—once these actions are confirmed, the offense escalates from ”paying back taxes” to ”tax evasion” and may even result in criminal liability. Any actions taken must be carried out under professional guidance.

Fourth, communicate honestly and strive to secure reasonable leeway. An audit is an administrative proceeding, not a criminal one, and in the vast majority of cases, there is room for communication and negotiation. Maintaining a consistent message, adopting a cooperative attitude, and providing complete documentation can often lead to a more favorable outcome.

Fifth, establish a long-term mechanism once the matter has been resolved. The conclusion of an audit does not mean the issue is resolved once and for all. Only by sorting out historical accounts, standardizing reporting practices, and completing the documentation system can we avoid the cycle of ”an audit this year, followed by another next year.”

The 4 Most Common Questions Bosses Ask About Responding to Audits

Question 1: Does an audit always result in a fine? Not necessarily. The outcome of a tax audit can take various forms, including back taxes, late payment penalties, fines, and referral to judicial authorities. The key factor in determining the outcome is ”whether there was subjective intent.” Proactive cooperation, a complete chain of evidence, and truthful reporting typically lead to relatively lenient treatment; in contrast, concealing income, destroying supporting documents, and filing false returns are entirely different matters. Therefore, the timing of your response is crucial: the earlier you intervene and the more complete your documentation is, the greater the room for negotiation.

Question 2: Can a tax professional or accounting firm handle this for me? They can help, but it depends on their level of expertise. Many bookkeeping agencies are only skilled at ”day-to-day bookkeeping” and lack experience with ”adversarial procedures” such as audit responses—there are specific methodologies for organizing materials, ensuring consistency in messaging, and handling communication with the right balance. We recommend seeking out a professional team with experience in audit responses, rather than hiring someone on short notice.

Question 3: Will everything be fine once I pay the back taxes? Paying the back taxes is just the first step. Once the audit is complete, the tax authorities will often issue recommendations for corrective action or require you to file amended returns. Only after completing these steps is the case truly ”closed.” Otherwise, even if you’ve paid the back taxes, the underlying issues remain, and the next risk control alert will still flag you.

Question 4: What are the differences between cross-border e-commerce businesses and traditional companies when they are subject to inspections? The difference lies in the form of the evidence. Traditional businesses audit their accounts by examining vouchers and ledgers; e-commerce businesses, on the other hand, examine platform order data, payment records, and logistics tracking information—digital evidence that cannot be fabricated retroactively. Therefore, the key to handling e-commerce audits is to ”organize the digital chain of evidence effectively,” rather than attempting to ”create a set of accounts”—taking the wrong approach will result in twice the effort for half the result.

Leave it to the professionals.

To be honest, dealing with a tax audit is a ”highly technical game.” From building a chain of evidence to establishing a consistent narrative, from drafting statements and defenses to negotiating a tax payment plan—every step involves a multitude of technical details. Trying to handle it on your own is likely to turn what could have been a straightforward resolution into a situation that’s nearly impossible to resolve.

Qicaiying’s tax audit response services are specifically designed to address these scenarios: from risk control alerts and assessments, to communication and coordination during audits, to strengthening the chain of evidence and drafting statements and defenses, and finally to follow-up compliance rectifications—the entire process is handled by a team well-versed in e-commerce tax regulations. The scope of services covers tax audits for traditional enterprises, e-commerce tax audits, tax-related investigations for platform operations, and rectification of historical accounting and tax issues. When combined with Qicaiying’s e-commerce compliance accounting services, these solutions can resolve issues such as ”disorganized transaction flows, missing invoices, and inconsistent accounting standards” at their root—only by addressing both emergency measures and long-term corrective actions simultaneously can a business truly overcome these challenges. Qicaiying Group specializes in providing domestic and international company registration services in Shenzhen, Guangzhou, Shanghai, Beijing, Hangzhou, Hong Kong, the United States, Japan, South Korea, Southeast Asia, Singapore, the British Virgin Islands (BVI), the Cayman Islands, and more, as well as annual company audits, bookkeeping and tax filing, tax compliance, information changes, bank account openings, ODI and FDI filings, as well as Hong Kong residency applications, renewals, and permanent residency services; Singapore Employment Pass (EP) applications; and cross-border e-commerce mentoring and managed operations—all as part of our one-stop service. If you have any needs or are interested, please feel free to contact me at any time (Consultation Hotline: 18676749275, add WeChat: Qicaiyingjituan).

扫码添加客服,获取企财盈服务清单

put at the end

The biggest fear in a tax audit isn’t ”being audited,” but rather ”discovering during the audit that problems are already beyond remedy.” Rather than waiting for risk control alerts to go off, it’s better to conduct a self-inspection now: Are payments received through personal accounts in compliance? Do purchase and sales invoices match? Is the tax burden rate within normal ranges? Is the chain of documentation complete?

Self-inspection is free—the only cost is an afternoon of your time. But once a notice of audit arrives at your doorstep, the cost could include back taxes, fines, or even the dissolution of the entity itself.

Share this article with your friends in the e-commerce industry—when it comes to compliance, the sooner you start, the less it costs. If you’ve already received a warning or notification, don’t hesitate—seek professional support immediately: Qicaiying Group specializes in providing company registration services for domestic and international locations, including Shenzhen, Guangzhou, Shanghai, Beijing, Hangzhou, Hong Kong, the U.S., Japan, South Korea, Southeast Asia, Singapore, the BVI, and the Cayman Islands, as well as annual company audits, bookkeeping, tax filing, tax compliance, registration changes, bank account openings, ODI filings, FDI filings, and other corporate services; Hong Kong residency applications, renewals, and permanent residency services; Singapore EP application services; as well as one-stop cross-border e-commerce coaching and agency services. If you have any needs or are interested, please feel free to contact me at any time (Consultation Hotline: 18676749275, add WeChat: Qicaiyingjituan).

扫码添加客服,获取企财盈服务清单

Running a business is no easy task. May every hard-earned profit stand up to scrutiny in the light of day.

Tags:
  • tax risk
  • Audit Risks
  • Chain of Evidence