On any ordinary day, you open your email and find a message from the SAT telling you that you have a notice in your Tax Mailbox. It is not spam. It is not a mistake. It is the start of an electronic audit, and if you do not know how to act, the clock has already started ticking against you. This digital tax audit process is now one of the quickest and most common mechanisms used by the Tax Administration Service to detect tax inconsistencies, and it can result in a final tax assessment if it is not handled properly and on time.

What is the SAT electronic audit and how does it differ from a traditional audit?

The electronic audit is a tax authority audit procedure in which, from start to finish, electronic means are used. This verification power is provided for in Article 42, Section IX and Article 53-B of the Federal Fiscal Code.

Unlike an on-site audit, where inspectors physically go to the taxpayer’s premises, electronic audits are audit procedures through which the SAT analyzes the tax information it already has about the taxpayer—such as CFDI, returns, payments, withholdings, and electronic accounting—to detect possible inconsistencies, omissions, or errors. The entire process is carried out through the Tax Mailbox, without physical visits or paper requests.

Electronic audits may be directed at taxpayers (individuals and legal entities), jointly liable parties (sole administrator, partners or shareholders, withholders) and third parties related to them (advisers, lawyers, notaries, accountants, etc.).

The authority’s main advantage is speed: deadlines are shorter and the information is already in its hands before it notifies you.

How does the SAT detect the inconsistencies that trigger an electronic audit?

Through cross-checking information, the tax authority can detect or identify that the taxpayer has engaged in acts or omissions for which they are not properly complying with their tax obligations. To do this, the SAT cross-checks multiple sources of information that taxpayers themselves have provided:

• Digital Tax Receipts via Internet (CFDI)

• Annual and monthly returns

• Electronic accounting

• Third-party information (suppliers, customers, banks)

• ISR and VAT withholdings

• Information Return on Transactions with Third Parties (DIOT)

• Referenced payments and information returns

Some concrete examples of situations that can trigger an audit:

How does the electronic audit process work step by step?

The Tax Mailbox sends a message to the taxpayer’s email address to inform them that they have a notice. If the documents sent by the authority are opened within the following three days, the notice is deemed served; if not, on the fourth day the electronic notice is deemed served.

From there, the procedure follows these stages:

1. Notification of provisional ruling: Through the Tax Mailbox, the tax authority informs the audited taxpayer of a provisional ruling through which it requires the taxpayer to, within 15 business days following notification, state whatever may be appropriate to their rights and provide the information and documentation that disprove the irregularities noted or otherwise prove payment of the contributions and levies allegedly omitted.

2. Taxpayer response (15 business days): During this period you may: submit documentation and evidence to refute the findings, voluntarily correct your tax situation and make the outstanding payments, or request a conclusive agreement before the Office of the Taxpayer Advocate (PRODECON).

3. Second request (10 business days): If you provide the required digital documents, the tax authority may make another request for information, to which you will have 10 days to respond or gather more information, correct your tax status, or make the outstanding payments.

4. Final ruling (40 business days): Section IV of Article 53-B of the Federal Fiscal Code requires tax authorities to issue the final ruling within 40 days, based on computerized information. The 40 days begin after the 10- or 15-day deadlines expire, or after you submit all documentation.

Important: If the taxpayer does not assert their rights, or does not provide the documents or information that correct the anomalies, the provisional ruling will become a final ruling, and the authority will proceed with collection through the administrative enforcement procedure.

How should you respond correctly to an SAT electronic audit?

Receiving the notice is not the time to panic, but to act in an orderly and swift manner. These are the recommended steps:

1. Read the provisional ruling carefully. The notice of initiation includes the facts or omissions detected, the period or fiscal years under review, and the proposed tax correction with the estimated amount of omitted taxes, adjustments, and surcharges.

2. Gather and organize supporting documentation. The most relevant documents you should have ready include:

   • CFDI for income and expenses for the period under review

   • Corresponding monthly and annual returns

   • Accounting work papers and reconciliations

   • Contracts and proof of deductible expenses

   • Financial statements and bank account statements

   • Proof of tax payments made

3. Submit your response within 15 business days. Timely attention to this stage is key, since a clear and well-supported response can prevent the electronic audit from resulting in a final tax assessment.

4. Consider voluntary correction. If you detect that an error or omission does in fact exist, voluntarily correcting it can significantly reduce surcharges and penalties, and sends positive signals to the authority about your willingness to comply.

5. Consult a tax defense specialist. Given the short deadlines and the technical complexity of the arguments, having professional advice from day one can make the difference between disproving the observations or facing a tax assessment.

What happens if you do not agree with the SAT’s final ruling?

If the electronic audit ends with a ruling you consider unfair or incorrect, you have the right to challenge it. The available defense remedies are:

• Motion for reversal: If the ruling is unfavorable, this motion may be filed with the SAT within 30 business days after notification. It must set out the inconsistencies in the authority’s determination. Under Article 131 of the Federal Fiscal Code, the authority must issue and notify the ruling within a maximum period of three months from the filing of the motion. This remedy is optional: you may choose to file it or go directly to administrative litigation.

• Administrative contentious proceeding (annulment lawsuit): If the motion for reversal is not favorable or you decide not to file it, the taxpayer may file a claim before the Federal Administrative Court of Justice (TFJA). This proceeding allows a more exhaustive review of the taxpayer’s arguments and evidence.

• Constitutional amparo: If the electronic audit violates fundamental rights, the taxpayer may file an amparo proceeding before the Federal Judiciary.

In any defense route you choose, the quality of the documentation and the strength of the legal arguments will be decisive. If your company is facing complex situations with the tax authority that go beyond a specific audit, it is also worth understanding how government collection and procedures to recover tax debts work, since the authority may initiate enforcement actions that directly affect the company’s assets.

Likewise, if your business operates under export or IMMEX schemes, it is important to know that electronic audits are not the only line of scrutiny: there is also the possibility of authority actions specific to that sector, and knowing your legal defense against authority actions in IMMEX or export operations can be decisive in protecting your operations.

How can you prevent an SAT electronic audit in your company?

It is essential to recognize that the taxpayer, through compliance with or omission of their tax obligations, provides the reason for becoming susceptible to an electronic audit. Prevention is achieved by implementing robust internal controls with clear policies.

These are the best practices to reduce the risk of being subject to an electronic audit:

• Monitor your Tax Mailbox continuously. The SAT electronic audit is the fastest audit process the tax authority has, so you must pay attention to all emails that arrive in your Tax Mailbox.

• Reconcile your invoicing with your returns every month. Any difference between CFDI issued and reported income is a warning sign for the SAT system.

• Keep organized and up-to-date electronic accounting. Given the short deadlines (15 days), smart defense lies in the quality, organization, and reconciliation of accounting information.

• Verify that your withholdings have been properly remitted. Omissions in payroll ISR withholdings or VAT are among the inconsistencies most easily detected by the SAT.

• Conduct periodic internal audits. Reviewing your tax situation before the SAT does allows you to correct errors without the consequences of a formal proceeding.

If your company has contracts with the government or participates in public tenders, remember that impeccable tax compliance also affects your eligibility as a supplier. Having a lawyer specializing in government contracts who oversees both the tax and contractual sides can be an important competitive advantage. Likewise, if you are already facing problems in the execution of public contracts, understanding the mechanisms for enforcement of public contracts will allow you to anticipate simultaneous legal and tax contingencies.

What every taxpayer should know about the SAT electronic audit

The electronic audit is not a threat that can be ignored, nor a process that can be handled without preparation. It is a legal, agile, and increasingly common mechanism that the SAT uses with information you yourself have provided. Knowing how it works, respecting deadlines, and keeping well-organized documentation are the three keys to coming through this process successfully.

In contexts where companies are also exposed to other regulatory authorities, the defense logic is similar: act on time, with solid arguments and specialized advice. Just as in an SAT audit you must know your rights and deadlines, the same applies if you ever face a situation with agencies such as COFEPRIS: knowing what legal remedies you have as a company in the event of a COFEPRIS shutdown can determine the continuity of your business. And if at some point your company goes through complex financial difficulties, it is also worth knowing the common disputes during a mercantile bankruptcy proceeding and how to anticipate them, given that tax obligations play a central role in those proceedings.

Frequently asked questions 

How long does the SAT have to conclude an electronic audit?

The Federal Fiscal Code establishes that the electronic audit may not exceed one year counted from the notice of initiation. However, in practice the procedural deadlines (15 days to respond, 10 days for a second request, 40 days for a final ruling) mean that the process may conclude within a few months.

Can I keep operating normally while the electronic audit is taking place?

Yes. The electronic audit does not imply suspension of activities or blocking of invoicing seals during its processing, unless the authority issues additional precautionary measures. You may continue invoicing and operating while you resolve the process.

What is the preliminary assessment in an electronic audit?

In the electronic audit, the tax authority informs the audited taxpayer of a provisional ruling that contains a preliminary assessment of the tax liability owed. In other words, it is the estimated amount the SAT considers you should pay, but it is not yet a final ruling: you can challenge it by providing evidence.

Can I voluntarily correct my situation by paying only part of what the SAT claims I owe?

The taxpayer has the right to make partial payments of tax debts. This can be a strategic option when you acknowledge part of the inconsistencies, but have arguments to refute the rest.

What happens if I ignore the SAT notice in the Tax Mailbox?

If the documents sent by the authority are not opened within the three days following notification, on the fourth day the electronic notice is deemed served. This means the deadlines to respond start running even if you have not read the document. Ignoring the notice only uses up your defense time.

Is a conclusive agreement before PRODECON a good option?

A conclusive agreement is an alternative resolution mechanism that can interrupt the audit deadlines and allow negotiation with the authority. It is especially useful when there is uncertainty about the outcome of the proceeding or when the amount of the presumed assessment is very high. It requires the intervention of the Office of the Taxpayer Advocate as mediator.

Does the motion for reversal suspend payment of the tax assessment?

If you timely and properly filed the motion for reversal, you will not be required to provide the corresponding guarantee until that motion is resolved. This provides a period of asset protection while the authority reviews your challenge.