Keep tax returns and supporting documents for at least three years from the date you filed

The IRS standard is three years. That is how long the agency has to audit your return and assess additional tax. If you filed on time or early, the clock starts from the filing important date (usually April 15), not the date you actually submitted. If you filed late, it starts from the date you filed.

Three years covers most situations. But the actual time you need to keep records depends on what happened in that tax year — whether you reported income correctly, whether you claimed deductions, and whether the IRS has reason to look closer. Some situations require you to hold onto documents much longer.

Key Takeaways

  • The IRS can audit a return for three years after the filing important date, so keep your tax return and all supporting documents for at least that long.
  • If you underreported income by 25 percent or more, the IRS has six years to audit, so keep records for six years in those cases.
  • If you claimed a loss from a worthless security or bad debt, keep those records indefinitely because there is no statute of limitations.
  • For real estate or business property, keep records for at least three years after you sell the property, because the IRS may question the sale price or depreciation claimed.
  • Organize documents by tax year and store them in a safe, dry place — a filing cabinet, safe deposit box, or scanned digital copies all work.

When three years is not enough

The three-year rule has exceptions. If you underreported your income by 25 percent or more, the IRS has six years to audit. This applies to the entire return, not just the underreported portion. Six years also applies if you did not report income that should have been reported, even if the amount is small.

If you filed a return claiming a loss from a worthless security or a bad debt deduction, keep those records indefinitely. The IRS has no time limit to challenge these claims. The same applies if you claimed a net operating loss carryback or carryforward — keep records for the years involved in the carryback or carryforward, plus the year you claimed it.

If you did not file a return at all, there is no statute of limitations. The IRS can go back as far as it wants. If you filed a fraudulent return, the same applies — no time limit.

Property sales and depreciation records

If you own rental property, a business, or investment real estate, keep records for longer than three years. Hold onto purchase documents, improvement receipts, and depreciation schedules for at least three years after you sell the property. The IRS may question the cost basis you claimed or the depreciation deductions you took, and those questions can come years after the sale closes.

For a home sale, keep the purchase deed, closing statement, and receipts for any capital improvements (not repairs) for at least three years after you sell. If you claimed the home office deduction, keep those records for three years after you stop claiming it, because the IRS may recalculate depreciation recapture.

What documents to actually keep

Keep the tax return itself — the Form 1040 and any schedules you filed. Keep the IRS confirmation that it received your return. Then keep everything that supports what is on that return: W-2s and 1099s, receipts for deductions, bank and investment statements, mortgage interest statements, property tax bills, charitable donation receipts, medical expense records, business expense logs, and mileage records if you claimed vehicle deductions.

If you took the standard deduction, you do not need receipts for individual deductions, but you should still keep the documents that prove your income — W-2s, 1099s, and bank statements showing deposits. If you itemized deductions, keep every receipt and statement that backs up what you claimed.

For business owners, the rule is stricter: keep all business records for at least three years, including invoices, receipts, payroll records, and bank statements. The IRS audits business returns more often than individual returns, and the audit window can extend beyond three years if the IRS finds issues.

Digital storage and organization

You do not have to keep paper copies. Scanning documents and storing them digitally is acceptable to the IRS, as long as the scans are clear and legible. Use a dedicated folder structure organized by tax year, with subfolders for income documents, deduction receipts, and property records. Label files with the document type and date so you can find them quickly if you need them.

A safe deposit box at a bank works well for original documents like deeds and purchase agreements. A home filing cabinet or fireproof safe works for tax returns and supporting papers. Cloud storage (Google Drive, Dropbox, OneDrive) is convenient but make sure your account has a strong password and two-factor authentication enabled, since tax documents contain sensitive information.

Do not throw away documents the moment the three-year window closes. Mark the year on the folder, set a reminder on your calendar for the disposal date, and shred or securely delete the files when that date arrives. This prevents accidental loss and keeps your storage space from filling up with old records.

What happens if you do not have a document

If the IRS audits your return and you cannot find a receipt or statement, you are not automatically disqualified from the deduction. You can reconstruct the expense using bank statements, credit card statements, or other records that show the payment. You can also provide a written statement explaining what the expense was and why you cannot locate the original receipt.

The IRS is more likely to accept reconstructed records if you have a pattern of documentation — for example, if you have receipts for most of your charitable donations but are missing one, the IRS may accept your statement about the missing donation. If you have no receipts at all for a category of deductions you claimed, the IRS is more likely to disallow the entire deduction.

State tax records

Your state may have a different statute of limitations than the federal government. Most states follow the federal three-year rule, but some allow four or five years. A few states have no time limit for fraud. Check your state tax agency's website to confirm the requirement for your state, and keep records for whichever period is longer — federal or state.

If you filed returns in multiple states (because you moved, worked in another state, or had income from another state), keep records for each state's required period. This is especially important if you claimed credits or deductions that were state-specific.

Frequently Asked Questions

Can I throw away my tax return after three years?

Only if you did not underreport income, did not claim losses from worthless securities or bad debts, and do not own property you might sell later. For most people, three years is safe. But if any of those exceptions explore, keep the return and supporting documents longer. When in doubt, keep them for six years.

Does the IRS need the original receipt or is a copy okay?

A clear copy is acceptable. The IRS does not require original receipts. A photograph, scan, or digital image of the receipt is fine as long as it shows the date, amount, and what was purchased. Credit card statements and bank statements can also serve as proof of payment.

What if I filed an amended return?

Keep both the original return and the amended return, along with all supporting documents for both. The three-year clock runs from the filing date of the amended return, not the original. If you filed an amended return more than three years after the original, keep it for three years from the amendment date.

Do I need to keep documents if I used tax software?

Yes. The software creates a record of what you entered, but it does not replace the receipts and statements that back up those entries. Keep the actual documents — W-2s, 1099s, receipts, and statements — separate from your digital tax file.

Is it safe to store tax documents in the cloud?

Yes, if you use a reputable service with encryption and enable two-factor authentication on your account. Google Drive, Dropbox, and OneDrive all meet this standard. Avoid free email accounts or unencrypted storage. Make sure your password is strong and unique, and do not share your login with anyone.