IRS Recordkeeping: What Receipts to Keep & For How Long

The IRS requires you to keep any record that substantiates income, a deduction, or a credit on your tax return, including receipts, canceled checks, bank statements, and mileage logs. Keep these records for at least three years from your filing date, six years if you underreported income by more than 25%, four years for employment tax records, and indefinitely if you never filed or filed a fraudulent return. Digital copies are fully acceptable under Revenue Procedure 97-22.

Most small business owners discover the rules the wrong way: a CP2000 notice arrives, an auditor asks for substantiation, and a perfectly legitimate $4,200 in deductions evaporates because a folder of credit-card statements is not the same thing as a folder of receipts. The Internal Revenue Service does not lose deductions because expenses were not real. It disallows them because the paper trail does not match what the regulations require. After eight years building tools that small operators use to reconstruct, format, and store transaction records, the same five mistakes show up in nearly every audit-loss story I read.

Tax and IRS recordkeeping is the legal practice of preserving documentary evidence — receipts, invoices, canceled checks, mileage logs, and bank or credit card statements — that proves the amount, date, place, and business purpose of every income item and deduction on your tax return. The framework lives in Internal Revenue Code Section 6001 and Treasury Regulation Section 1.274-5, which together set the substantiation rules. The $75 threshold (Treas. Reg. 1.274-5(c)(2)(iii)) waives the physical receipt requirement for certain travel, meal, and gift expenses below that amount, but it never waives the underlying documentation. According to IRS Publication 583, all requirements that apply to hard-copy records apply equally to electronic records.

The Core Rule: What “Adequate Records” Actually Means

Under IRC Section 6001, every taxpayer claiming a deduction must keep records sufficient to establish the gross income, deductions, and credits reported. The IRS spells out what counts as documentary evidence in Publication 463: receipts, paid bills, canceled checks, and other documents that show four data points — amount, date, place, and business purpose.

A bank or credit-card statement alone is not sufficient for expenses where the IRS requires “documentary evidence.” You need to have both the receipt (proof of what you purchased) and the canceled check or credit card statement (proof of payment) to substantiate the expenditure. This is the trap most owners fall into. Statements prove payment. Receipts prove purchase. Auditors want both.

The four required fields on every retained receipt:

• Date of transaction — establishes the correct tax year
• Vendor name and location — identifies the payee
• Amount paid — the deductible dollar figure
• Description of what was purchased — links the expense to a business purpose

A receipt showing only “$127.50” with a merchant name and nothing else may not survive review. Restaurant tickets usually itemize automatically. Service receipts often need a handwritten note explaining what the charge covered.

The $75 Receipt Rule — and Its Three Big Exceptions

The $75 threshold is the most widely cited and most widely misunderstood rule in small-business tax recordkeeping. Here is the precise language: under Treasury Regulation 1.274-5(c)(2)(iii), you do not need a paper receipt for travel, meal, or business-gift expenses under $75. You still need a written record of the date, amount, place, and business purpose.

The rule is an exception for one piece of evidence (the receipt) to reduce paperwork, not permission to skip documentation altogether. The receipt waiver was set in 1995 under IRS Notice 95-50 and has never been adjusted for inflation. In 2026 dollars, $75 in 1995 is roughly $155 today, which is why the threshold catches so many small purchases.

Three categories sit outside the $75 waiver entirely:

Lodging. Hotels, motels, Airbnb, and short-term rentals require an itemized receipt regardless of cost. A $40 motel during a site visit still needs the folio. The $75 rule only waives the receipt requirement, not the documentation requirement — and for lodging it does not even waive the receipt.

Self-employed taxpayers on Schedule C. This is the single largest misconception in the rule. The $75 accountable-plan threshold technically applies to employer reimbursement plans under Treas. Reg. 1.62-2. A sole proprietor deducting expenses on Schedule C has no employer, no accountable plan, and a much stronger practical incentive to keep every receipt. Auditors who pull a Schedule C return apply the full Section 274(d) substantiation standard.

Business gifts. The $25-per-recipient deduction cap under IRC Section 274(b) means the practical receipt threshold for gifts is $25, not $75. Gift receipts also need the recipient’s name and business relationship.

How Long to Keep Records: The Retention Decision Matrix

The IRS does not publish a single retention number because the answer depends on the underlying risk. The decision tree below maps every common situation to its actual statute of limitations, based directly on Section 6501 of the Internal Revenue Code.

The Audit-Risk Retention Matrix

Keep records for 6 years if you do not report income that you should report, and it is more than 25% of the gross income shown on your return. Keep records indefinitely if you do not file a return. Keep records indefinitely if you file a fraudulent return. The 25%-of-gross test runs against gross income shown on the return, not net — a distinction that catches taxpayers off guard when an auditor reopens a return three years past what they thought was the deadline.

For most small businesses, the practical answer is seven years. According to the GRM Document Management 2026 retention guide, a small business should keep tax returns and supporting financial records for at least 7 years from the date of filing — this covers the IRS’s 3-year standard audit window and the 6-year window for cases of substantial underreporting. Property and depreciation records run longer because basis matters in the year of sale, not the year of purchase.

State agencies frequently impose longer windows. California’s Franchise Tax Board uses a four-year statute. Multistate operators should keep records for the longest applicable window plus one buffer year.

Digital Records: What Counts and What Does Not

Revenue Procedure 97-22 is the foundational guidance on electronic recordkeeping, and it has not been narrowed since. If you do get audited after going paperless, don’t worry. The IRS is legally required to accept digital forms of proof for your write-offs, including bank and credit card statements. The procedure sets four technical requirements an electronic system must meet.

Digital records the IRS accepts as equivalent to originals when they meet Rev. Proc. 97-22 standards: scanned PDF copies of paper receipts, email confirmations from vendors, downloaded invoices from cloud accounting systems, photographed receipts stored with metadata intact, electronic bank and credit-card statements, and ledger entries from accounting software. The system must reproduce the record accurately, remain readable for the full retention period, allow indexed retrieval, and prevent unauthorized alteration. A folder of JPEGs on a single hard drive technically qualifies; a folder of JPEGs on a single hard drive with no backup is one disk failure away from disallowance.

Here’s why that matters: in 2026, AI-generated receipts have created a verification crisis on the auditor side. According to a 2025 Medius survey reported by Accounting Today, in a poll of 1,000 practitioners across the US and UK, 32 percent said they would not be able to recognise a fake receipt generated by an AI image tool, and 30 percent reported a rise in fake receipts since the start of the prior year. Auditors compensate by scrutinizing digital submissions more aggressively. Keep originals when possible, store source emails with their headers, and preserve EXIF data on photographed receipts.

The practical digital recordkeeping setup that survives an audit:

1. Capture at the point of purchase — phone photo or app scan within 24 hours
2. Store in dated, named folders (2026-Q1/Travel/2026-02-14_Hilton_Phoenix.pdf)
3. Back up to a second location automatically — cloud sync counts
4. Keep the source email separately, not just the attached file
5. Run quarterly integrity checks to confirm files still open

What Records Every Small Business Owner Must Keep

The IRS organizes business records into five categories, mapped to the lines they support on your return. Each category has its own evidentiary standard and its own audit risk profile.

Gross receipts. Cash register tapes, deposit slips, invoices, 1099-K and 1099-NEC forms, credit card processor statements, and Forms W-2 you issued. Supporting documents include sales slips, paid bills, invoices, receipts, deposit slips, and canceled checks. These documents contain the information you need to record in your books. Reconcile monthly against bank deposits. Unexplained deposits are the single most common audit trigger for small businesses.

Purchases (inventory and cost of goods sold). Invoices showing supplier, item, quantity, and price; canceled checks or ACH confirmations; credit card receipts; and shipping documentation. COGS errors flow straight to taxable income, so the documentation has to support both the purchase and the connection to inventory.

Expenses. Receipts, paid bills, account statements, canceled checks, and credit card slips. Each expense needs the four-field standard above plus a business-purpose annotation if the purpose is not obvious from the receipt itself. A receipt from an office-supply store needs no annotation. A receipt from a restaurant needs the names of attendees and what was discussed.

Travel, transportation, entertainment, and gifts. Higher substantiation bar under IRC Section 274(d). For meals: who attended, business relationship, business topics discussed, location, and amount. For vehicles using the standard mileage rate ($0.70 per business mile in 2025, per IRS Notice 2025-XX): contemporaneous mileage log with date, destination, business purpose, and odometer readings. For gifts: recipient, relationship, occasion, and cost under $25 deductible cap.

Assets and property. Purchase invoices, real-estate closing statements, canceled checks, improvement records, and depreciation schedules. These records must be kept for as long as you own the property plus three years after disposal — frequently 15-20 years for real estate.

Employment tax records. Four years minimum per IRC Section 6501. Payroll records, Forms W-4, W-2, and 941; pension contributions; expense reimbursements; and Form 1099-NEC for contractors over $600.

What Happens When You Lose a Receipt: The Cohan Rule

The Cohan rule comes from a 1930 Second Circuit case involving Broadway producer George M. Cohan. The IRS denied his entertainment deductions for lack of records. The court ruled that when a taxpayer clearly incurred deductible expenses but cannot produce exact substantiation, the court may estimate the amount — though it should “bear heavily” against the taxpayer whose own inexactitude created the problem.

The rule still operates, with one massive carve-out: Section 274(d), enacted in 1962, explicitly excludes travel, meals, entertainment, gifts, and listed property (including vehicles and computers) from Cohan reconstruction. For those categories, missing receipts mean denied deductions. Period.

For categories where Cohan still applies — office supplies, utilities, rent, professional services — reconstruction follows a defensible process:

1. Pull bank and credit-card statements showing the payment
2. Request a duplicate from the vendor (most retailers retain 90-180 days of digital records)
3. Reconstruct a contemporaneous log entry with date, vendor, amount, and purpose
4. Document the reconstruction attempt itself, including any vendor email refusing to reissue
5. If the receipt is unrecoverable, generate a properly labeled reconstruction document — a receipt maker tool can produce a clean, dated record of the reconstructed transaction for your own files, clearly marked as a reconstruction and supported by the bank statement that proves payment

Reconstruction is not fabrication. The line is hard: a reconstructed record that accurately reflects an actual transaction, supported by independent payment evidence, is legitimate substantiation. A document created to support a transaction that never occurred is tax fraud under IRC Section 7206, with criminal exposure. While an improperly claimed expense reported on your tax return can be disallowed if the IRS believes it is a mistake, creating and trying to pass off falsified receipts is tax fraud, and could cost you a lot more than the face value of that receipt.

Common Recordkeeping Mistakes That Cost Deductions

Five patterns account for most disallowed deductions in small-business audits, based on Tax Court decisions and IRS examination guidance.

Mistake 1: Treating credit-card statements as receipts. A Chase statement showing “$847.32 STAPLES” proves payment, not purchase. The IRS routinely disallows expenses where only the statement is produced. Keep the itemized receipt alongside the statement.

Mistake 2: Missing business purpose on meals. A restaurant receipt without attendee names and topic discussed is treated as personal entertainment. Add the note at the time of the meal, not at audit time.

Mistake 3: Vehicle logs reconstructed at year-end. Section 274(d) requires contemporaneous records. Tax courts have repeatedly rejected mileage logs visibly created in a single sitting. Track in real time — a calendar with addresses and a mapping tool generates a defensible log automatically.

Mistake 4: Mixing personal and business on the same card. Auditors interpret commingled accounts as evidence of weak internal controls and apply heightened scrutiny to every deduction. Separate business and personal accounts on day one.

Mistake 5: Discarding records too early. The 3-year rule is a floor, not a ceiling. Property records, employment tax records, and any year with substantial losses or unusual deductions should run the full 7-year window.

The Audit Defense Stack: What Strong Recordkeeping Looks Like

Strong recordkeeping is a system, not a habit. The system has four layers, each addressing a specific audit risk.

Layer 1: Capture. Every transaction documented at point of sale or within 24 hours. Phone-camera apps with OCR (Expensify, Dext, QuickBooks Receipt Capture) extract amount, date, and vendor automatically. The 24-hour window matters because the IRS standard is “contemporaneous” — courts have ruled that records created weeks after the fact carry less weight.

Layer 2: Categorize. Every transaction tagged to a Schedule C line or general-ledger account at capture. Untagged transactions accumulate, lose context, and become reconstruction problems six months later.

Layer 3: Reconcile. Monthly match between bank statements, credit-card statements, and the books. Unmatched transactions get resolved within 30 days. This is where reconstruction happens if it needs to happen.

Layer 4: Retain. Two backup locations minimum. Cloud sync plus a local archive, or two cloud providers. Annual integrity check on the oldest year still inside your retention window.

According to BILL’s 2026 recordkeeping guidance, the IRS recommends keeping receipts for at least three years from the date you filed your return, or two years from when you paid the tax, whichever is later. The four-layer stack runs the same regardless of business size, but the tools scale from a spreadsheet and Dropbox folder at one extreme to ERP-integrated expense management at the other.

The reflection question that exposes most weak systems: if the IRS sent a notice tomorrow asking for substantiation of every meal deduction on last year’s return, could you produce the receipts and the business-purpose annotations within 30 days? If the answer is no, the system is not the receipts — it is the capture layer.

FAQ: IRS Receipt Requirements

Do I need a paper receipt or is a digital copy acceptable?

Digital copies are fully acceptable under Revenue Procedure 97-22. The IRS requires that electronic records accurately reproduce the original, remain readable for the full retention period, and prevent unauthorized alteration. Scanned PDFs, photos, and downloaded emails all qualify.

What’s the $75 rule and when does it not apply?

Under Treasury Regulation 1.274-5(c)(2)(iii), you do not need a paper receipt for travel, meal, or business-gift expenses under $75 — but you must still document the amount, date, place, and business purpose. The rule does not apply to lodging (any amount), business gifts above $25, or self-employed taxpayers using Schedule C, who should keep every receipt.

How long do I keep tax records for my small business?

Three years from the filing date covers the standard IRS audit window. Six years if you underreported income by more than 25%. Four years for employment tax records. Indefinitely if you never filed or filed a fraudulent return. Most accountants recommend seven years as a defensible default.

Can I deduct a business expense if I lost the receipt?

For most expenses, yes — under the Cohan rule, you can reconstruct using bank statements, vendor records, and a contemporaneous log. The major exception is travel, meals, gifts, and listed property (vehicles, computers), which fall under IRC Section 274(d) and require strict substantiation. Lost receipts in those categories usually mean lost deductions.

Is a credit card statement enough proof for the IRS?

No, not on its own for expenses requiring documentary evidence. A statement proves payment but not what was purchased. The IRS expects the itemized receipt plus the statement for any expense above the $75 travel/meal threshold and for all lodging and gift expenses.

What records must I keep for vehicle expenses?

For the standard mileage rate, keep a contemporaneous log with date, destination, business purpose, and miles for every business trip. For the actual expense method, keep receipts for gas, maintenance, repairs, insurance, and depreciation records, plus the same mileage log to calculate the business-use percentage.

Do AI-generated receipts count as valid IRS documentation?

No. A receipt generated to represent a transaction that never occurred is tax fraud under IRC Section 7206. However, an AI-assisted reconstruction of an actual transaction — clearly labeled as a reconstruction and supported by bank or card statements proving payment — is legitimate for non-274(d) categories under the Cohan rule.

Build the System This Quarter, Not Next April

The audit you defend successfully is the one you set up records for two years before it happens. The IRS does not give credit for good intentions, organized folders created in March, or reconstructed logs that look too clean. It credits contemporaneous documentation that matches the four-field standard and survives the applicable retention window.

Three concrete moves this week: separate your business and personal accounts if they are still mixed, install a receipt-capture app and use it for every transaction starting today, and pick one cloud storage location and one local archive as your two-location backup. The receipts you save in the next thirty days will sit in the audit window for the next three to seven years. Start the system before you need it.

The information in this article is general educational content about IRS recordkeeping requirements and is not tax, legal, or accounting advice. Tax laws change and apply differently based on individual circumstances. Consult a CPA or tax attorney about your specific situation before relying on any retention period, deduction method, or substantiation approach described above.