Tax Audit Readiness in 2026: Turnover Limits, Cash Tests, and Form 26

Tax Audit Triggers Under Section 63 for SMEs: A 2026 Refresh

For many SMEs, tax audit only becomes visible when the CA asks for books in the last quarter and everyone suddenly starts reconciling ledgers, cash trails, and contracts. That is the wrong moment to think about it. Under the Income-tax Act, 2025, tax audit now sits in section 63, and the reporting format has moved to Form No. 26 under the Income-tax Rules, 2026. The law came into force on 1 April 2026, which makes this a real transition year rather than a cosmetic rename of the old regime.

What changed in 2026, and what did not

The biggest change is procedural, not conceptual. The department has shifted tax-audit reporting from the familiar Form 3CA / 3CB / 3CD structure to Form No. 26 for tax years commencing on or after 1 April 2026. The FAQs also make clear that Forms 3CA, 3CB and 3CD continue only for previous years relevant to AY 2026-27, after which Form 26 takes over. In other words, businesses may still be closing old-law work, but the 2026-27 tax year is already operating under the new form architecture.

What did not change is the core trigger logic. The section 63 thresholds still look familiar: ₹1 crore for business, ₹50 lakh for profession, and a higher ₹10 crore business threshold where both cash receipts and cash payments stay within 5% of totals. For SMEs, that means the real issue is not whether the law “got stricter” on paper; it is whether the business’s revenue and payment pattern quietly pushes it into audit territory.

The main triggers SMEs need to watch

For a business, section 63 says accounts must be audited if total sales, turnover, or gross receipts exceed ₹1 crore in a tax year. But there is an important carve-out: if both the aggregate cash receipts and the aggregate cash payments during the year do not exceed 5% of the respective totals, the threshold effectively moves to ₹10 crore. That means the cash trail matters just as much as the revenue figure. A business with modest turnover but heavy cash activity is not in the same position as a fully digital business with similar receipts.

For profession, the trigger is simpler: gross receipts above ₹50 lakh in the tax year. That is particularly relevant for founder-led service businesses, consultancy firms, design practices, engineering outfits, advisory businesses, and similar professional models where revenue can cross the limit faster than the team expects.

The practical mistake many founders make is to look only at turnover and ignore the payment mix. The 5% cash test is not a small technical detail. It is the difference between being tested at ₹1 crore and being allowed to go up to ₹10 crore. If the business crosses the revenue line but still relies on cash collections, cash reimbursements, or cash-heavy vendor payments, the higher threshold may not be available.

Presumptive taxation can trigger audit even before scale feels “large”

A second trigger is easy to miss: presumptive taxation. The department’s Form 26 FAQs say audit is required where a taxpayer covered by the presumptive framework declares income lower than the deemed income, and also where the taxpayer opts out of a presumptive scheme within the five-year lock-in period and the income exceeds the basic exemption limit. That matters because many SMEs assume presumptive schemes are a simpler, lower-compliance path. They can be, but they are not audit-proof if the declared income falls short of what the scheme presumes.

This is where founder behaviour can create avoidable exposure. A business may move into presumptive taxation for convenience, then later maintain books that do not align with the scheme’s deemed profit logic. From a compliance point of view, the issue is not just how much money the company made; it is whether the chosen tax position is consistent with the books, the declaration, and the scheme rules for that year.

Form 26 is now part of the compliance story

If section 63 is the legal trigger, Form 26 is the reporting endpoint. The department says Form 26 is mandatory for all persons carrying on business or profession who fulfil the section 63 conditions. It also makes a practical distinction: Part C applies where the assessee’s accounts are already audited under another law, while Part D applies where accounts are not audited under any other law. That means the tax audit report is no longer a single generic form; it is structured around the existing audit environment of the business.

There is another detail that matters operationally. The FAQs say Form 26 is due one month before the due date for filing the return of income under section 263(1). So the tax-audit deadline is not a fixed date that can be memorised once and forgotten; it moves with the return filing timeline. The department even gives the example that if the return due date is 31 October or 30 November, the Form 26 deadline becomes 30 September or 31 October respectively.

For SMEs, this matters because audit delay is rarely caused by one dramatic issue. It is usually caused by ten small ones: unreconciled sales, missing purchase support, weak expense coding, cash mismatches, or a late decision on presumptive eligibility. Form 26 makes those weaknesses more visible, not less.

The cost of getting it wrong

Section 446 of the Income-tax Act, 2025 now gives a specific penalty for failure to get accounts audited or furnish the audit report under section 63. The penalty is the lesser of 0.5% of total sales, turnover, or gross receipts for the relevant tax year, or ₹1,50,000. For a small company, that may look manageable in isolation. In practice, it is usually accompanied by delayed filing, internal cleanup costs, and a weaker compliance story when the business later faces due diligence, banking review, or investor scrutiny.

That is why tax audit should be treated as a finance-control issue, not as a year-end paperwork issue. The threshold trigger is only the starting point. Once the business is near the line, the real questions are whether revenue is properly classified, whether cash exposure is controlled, whether the accounting policy is consistent, and whether the books are defensible enough to survive audit under the new form structure.

What founders and CFOs should do differently

The most practical habit is to review audit exposure quarterly, not annually. If turnover is approaching ₹1 crore, if professional receipts are nearing ₹50 lakh, or if the business uses any presumptive scheme, the finance team should model audit applicability before the year closes. That is especially true for service businesses, founders with mixed business and professional income streams, and SMEs that still have a meaningful cash component in collections or disbursements.

The second habit is to document the threshold logic itself. If the business qualifies for the ₹10 crore business threshold, keep the cash-test working paper ready: receipts, payments, and the 5% calculation. If the business is under presumptive taxation, keep the scheme position, opt-out history, and deemed-income comparison ready. If another law already requires audit, make sure the tax-audit file reflects that and the tax auditor gives due consideration to the other audit where applicable. The department’s Form 26 guidance explicitly recognises that structure.

Closing thought

For SMEs, the 2026 refresh is not really about a new audit culture. It is about a new reporting system around the same commercial triggers. Section 63 still asks the same basic questions: how much did you turn over, how much came in cash, what kind of work are you doing, and whether your presumptive position is consistent with your books. What has changed is the way the department now wants that story told, filed, and defended. Businesses that understand that early will find the transition manageable. Businesses that treat it like a late-season compliance task will probably find out the hard way.