GmbH Tax Audit in Germany 2026: What the Tax Office Checks and How to Prepare

Receiving a tax audit notice from the German Finanzamt (tax office) is stressful for any GmbH director. But if your bookkeeping is clean and records are in order, there is little to worry about. This guide explains how a German GmbH tax audit (Betriebsprüfung) works, what the auditor examines, what changed with the 2025 reform, and how to prepare effectively.

In Brief

• A Betriebsprüfung (external audit under §193 AO) reviews a GmbH's last three to five years: corporate income tax, trade tax, payroll tax, and VAT.
• The tax office gives at least two weeks' written notice (the Prüfungsanordnung). Only when fraud is suspected can an audit happen at short notice.
• Large businesses (revenue above €14M or profit above €800,000) are audited almost continuously; small GmbHs only when something looks off, or by random sampling.
• In 2024, auditors nationwide identified around €10.9 billion in additional tax, and the most common trigger is deficient bookkeeping.
• Since 2025, the qualified cooperation request (§200a AO) applies: failing to cooperate risks a delay penalty of €75 per day.
• Best protection: GoBD-compliant digital bookkeeping with complete receipt archiving, so your GmbH can hand over any requested export instantly.

What Is a German Business Tax Audit?

A Betriebsprüfung (external audit under §193 AO) is a review of a company's tax records by the German tax authority. It typically covers the last three to five fiscal years and examines corporate income tax (Körperschaftsteuer), trade tax (Gewerbesteuer), payroll tax (Lohnsteuer), and VAT (Umsatzsteuer). The goal is to identify underpayments or overpayments of tax. Being selected does not automatically mean the tax office suspects wrongdoing.

The full audit differs from special forms such as the VAT special audit (Umsatzsteuer-Sonderprüfung, VAT only), the payroll audit (Lohnsteuer-Außenprüfung, payroll accounts only), and the cash inspection (Kassen-Nachschau under §146b AO), which may take place unannounced. The classic Betriebsprüfung is the most comprehensive of these.

Which GmbHs Are Audited?

The tax office assigns every business to a size class. The thresholds are reset every three years by the Federal Ministry of Finance; the figures below apply to trading businesses (Handelsbetriebe) from 1 January 2024. The larger the business, the higher the audit probability.

The numbers show how unevenly audit risk is spread: in 2024, around 140,764 businesses were audited out of more than 8.8 million registered, a rate of just 1.6%. For large businesses the rate was 29.6%. In total, the regional tax offices identified additional tax of roughly €10.9 billion. Small GmbHs face an audit far less often, but when one happens, every gap counts.

The Audit Process Step by Step

The Finanzamt gives at least two weeks' written notice before the audit begins (the Prüfungsanordnung). Unannounced audits are only possible when tax fraud is suspected. Once notified, you gather all books, bank statements, invoices, payroll records, driver logbooks, and shareholder resolutions covering the audit period.

The auditor either visits your premises or reviews digitally exported bookkeeping data in GoBD format. The tax office has three levels of data access: direct read access (Z1), indirect access via your own reports (Z2), and handover of the data on a storage medium in GoBD format (Z3). The review phase can take weeks to months. It concludes with a closing meeting (Schlussbesprechung) where findings are discussed and you can respond before the final audit report and any amended tax assessments are issued.

What Does the Auditor Actually Check?

The auditor focuses on the areas with the greatest potential for errors and structuring. For a GmbH, the relationships between the company and its shareholder-managing director get the most attention, because that is where hidden profit distributions (verdeckte Gewinnausschüttung) arise.

A hidden profit distribution arises, for example, when the managing director's salary is unusually high or a shareholder loan was granted without a contract and market-rate interest. Such findings lead to corporate income tax and capital gains tax back payments.

What Changed in 2025?

The DAC7 implementation act reformed the external audit. The new rules apply to audit orders issued after 31 December 2024. At the core of the reform is a give-and-take: more duties to cooperate for you, in exchange for faster legal certainty.

For a well-prepared GmbH the reform is an opportunity: hand over records digitally at once and you avoid the delay penalty, then use a partial closing assessment (Teilabschlussbescheid) to settle undisputed points without keeping the whole audit period open.

GoBD-Compliant Bookkeeping as Your Best Defense

GoBD-compliant digital bookkeeping is your strongest protection in any tax audit. Receipts must be recorded promptly, stored completely, and archived in an unalterable format. Your GmbH bookkeeping must be exportable in GoBD format on request. The cash register log must be complete and updated daily.

Retention periods matter too. The Fourth Bureaucracy Relief Act shortened the retention period for accounting receipts from ten to eight years as of 2025 (§147 (3) AO). Annual financial statements, commercial books, and inventories still have to be kept for ten years.

If an audit is already under way, the period extends for as long as the records remain relevant for tax purposes. Norman provides GoBD-certified AI bookkeeping with revision-safe receipt archiving, so you are ready for any audit request immediately.

Common Mistakes That Attract Scrutiny

Most findings arise not from bad intent but from formal gaps. These are the weaknesses auditors find most often:

A classic trigger for estimated add-ons is a negative cash balance: arithmetically impossible and therefore an immediate red flag. See also our overview of GmbH bookkeeping obligations.

How to Prepare: Checklist

• Keep all bookkeeping data for the audit period ready as a GoBD export
• Receipts archived completely, chronologically, and revision-safe
• Cash book complete, with no negative balance
• Contracts for salary, company car, and loans put in writing
• Shareholder resolutions documented
• Name a fixed point of contact (tax advisor) for the audit

Frequently Asked Questions

How often is a GmbH audited? It depends on the size class. Large businesses are audited almost continuously (2024 rate: 29.6%), while small GmbHs face a rate of around 1.6%, usually by random sampling or when anomalies appear.

How much notice do you get before an audit? Usually at least two weeks, in writing via the Prüfungsanordnung. Only when tax fraud is suspected are short-notice or unannounced audits permitted.

Which years does the tax office audit? Typically the last three consecutive years. If fraud is suspected, the period can extend as long as the assessment limitation period has not yet expired.

What does an audit cost if errors are found? Besides the tax back payment, interest of 0.15% per month (1.8% per year) applies. In cases of intent, criminal or administrative fine proceedings may follow.

Do I have to hand over my data in a digital audit? Yes. The tax office has a right of data access (Z1 to Z3). Since 2025 it can enforce cooperation via a qualified cooperation request; delay risks a penalty of €75 per day.

Conclusion

A tax audit is a normal part of running a GmbH, not a sign that something is wrong. The key is maintaining complete, orderly records every year, not just when a notice arrives. A correct GmbH tax return, GoBD-compliant bookkeeping, and well-archived receipts will let you face any audit with confidence. A modern digital accounting tool reduces your preparation time from days to minutes and prevents the formal errors that most findings hang on.