Irish Revenue Compliance Interventions: The Tiered Framework Explained

Every practitioner in Ireland has had the conversation: a client rings in a panic because a letter has arrived from Revenue, and the first question is always "how bad is this?" The honest answer depends almost entirely on which tier of Revenue's compliance intervention framework the letter falls into. A profile interview and a full audit notification are both "Revenue contact" in a loose sense, but they carry completely different disclosure options, different timeframes and, ultimately, different penalty exposure for the client. Understanding the tiered structure set out in Revenue's Code of Practice for Revenue Compliance Interventions is no longer optional technical knowledge for Irish accountants and tax advisers — it is the difference between advising a client into a well-mitigated qualifying disclosure and watching a manageable error turn into a defaulter-list entry.

This post sets out the three levels of the framework in detail, explains how prompted and unprompted qualifying disclosures work at each level, looks at Revenue's REAP risk-profiling system that decides who gets contacted in the first place, and closes with what all of this means practically for a busy Irish practice in 2026. If you're advising individual clients on their own filing obligations rather than managing a Revenue intervention, our companion piece on Form 11 and Pay & File for the 2026 income tax year gives a shorter summary of this same framework in that context — this article is the fuller technical treatment.

Why the framework exists

Revenue's current Code of Practice for Revenue Compliance Interventions took effect for interventions commencing on or after 1 May 2022, replacing the previous 2019 Code of Practice for Revenue Audit and Other Compliance Interventions. The stated aim was to build a more graduated, risk-based structure — moving away from a binary "audit or nothing" model toward a spectrum of contact types, each with proportionate consequences (Revenue.ie; Grant Thornton Ireland, "New Code of Practice for Revenue Compliance Interventions"). The result is the three-level structure practitioners now work with day to day.

Level 1: supportive compliance interventions

Level 1 sits at the low-key end of the spectrum. It covers activity intended to support and remind taxpayers of their obligations rather than to challenge them directly — profile interviews, reminder letters to non-filers, and self-review requests are the typical examples. Crucially, a taxpayer contacted at Level 1 still retains the option of making an unprompted qualifying disclosure — the most favourable category of disclosure available under the Code, because it is treated as though the taxpayer came forward voluntarily rather than in response to Revenue pressure (Revenue.ie, Code of Practice for Revenue Compliance Interventions; International Bar Association, "What you need to know about the new Irish Code of Practice").

For practitioners, Level 1 contact is the best-case scenario for a client with an undisclosed error: it is the last point at which the client can still access unprompted-disclosure treatment, so a Level 1 letter should trigger an immediate internal review of the client's filing position rather than a "just reply and move on" response.

Level 2: risk reviews and audits

Level 2 is where Revenue moves from supportive contact to active examination. It covers two distinct intervention types: Risk Reviews (a desk-based intervention focused on a single issue, which replaced the old "aspect query" concept) and full Revenue Audits, which examine the taxpayer's overall tax affairs for a given period (Deloitte Ireland; Grant Thornton Ireland).

Once a taxpayer is notified of a Level 2 intervention, the unprompted disclosure route closes. What remains available is a prompted qualifying disclosure — still a valuable mitigation tool, but one that attracts a less generous penalty outcome than an unprompted disclosure would have, precisely because it is made only after Revenue has already made contact. Practitioners need to know the mechanics here in detail, because the windows are tight and formal: Revenue's own short guide to the Code confirms that a taxpayer has 28 days from the date of notification to make a prompted qualifying disclosure, with the option to request a further extension (bringing the total window out to around 88 days) provided that extension is requested within 21 days of the original notification (Revenue.ie, "Short Guide to the Code of Practice for Revenue Compliance Interventions"). For a Risk Review specifically, any disclosure made must cover all underpayments within the tax head under examination for the period in question — a partial or selective disclosure risks losing the protection altogether, alongside exposure to penalties and potential publication on Revenue's quarterly List of Tax Defaulters (Deloitte Ireland, "The new Code for Revenue Compliance Interventions").

This is also the level where the volume of Revenue's activity is concentrated in practice. Most day-to-day interactions a firm has with Revenue outside of routine filing sit somewhere in this tier, which is exactly why a working knowledge of the disclosure clock matters more here than anywhere else in the framework.

Level 3: investigations

Level 3 is reserved for cases where Revenue suspects serious tax evasion or fraud. This is a fundamentally different category from Levels 1 and 2: there is no qualifying disclosure route available once a Level 3 investigation has commenced, and the taxpayer faces the full weight of the Code's consequences — including publication on the defaulters list and the possibility of prosecution referral (Revenue.ie; International Bar Association). Cooperation during a Level 3 investigation can still influence how penalties and any prosecution decision are approached, but it does not restore the structured mitigation that a qualifying disclosure provides at Levels 1 and 2. For a practice, a Level 3 notification is a signal to bring in specialist tax controversy and, where appropriate, legal advice immediately — this is well outside routine compliance work.

Qualifying disclosures: unprompted vs prompted, and why the distinction drives penalty exposure

The entire tiered structure exists to answer one question for the taxpayer: how much of the statutory tax-geared penalty can be mitigated by coming forward, and how quickly did they come forward relative to Revenue's own contact? A qualifying disclosure is defined under the Code as a written disclosure of a tax or duty liability, accompanied by a declaration that the disclosure is correct and complete, together with payment (or an agreed arrangement to pay) of the tax and interest due (International Bar Association summary of the Code of Practice).

The two categories that matter are:

• Unprompted qualifying disclosure — made before Revenue has notified the taxpayer of any compliance intervention. This is the most favourable position under the Code and is only available at Level 1, before contact escalates further.
• Prompted qualifying disclosure — made after Revenue notification but within the disclosure window (the 28-day, extendable-to-88-day period referenced above for Level 2 interventions). Penalty mitigation is still meaningful, but on a less generous basis than an unprompted disclosure, reflecting that the taxpayer acted only once contact had already been made.

Beyond disclosure timing, the underlying behaviour that led to the default also affects the penalty outcome — broadly, a genuine error treated as careless behaviour attracts materially lower penalty exposure than an underpayment resulting from deliberate behaviour, and full cooperation throughout an intervention is treated as a further mitigating factor regardless of level (Revenue.ie, Code of Practice for Revenue Compliance Interventions). We've deliberately avoided quoting specific percentage penalty rates here: those rates depend on the interaction of disclosure type, behaviour category and cooperation, and change with policy updates, so practitioners should always check the current Code of Practice and Tax and Duty Manual on revenue.ie for the applicable rate in a live case rather than relying on a fixed figure from memory.

One further point worth reinforcing with clients: a qualifying disclosure that meets the Code's requirements also generally secures non-publication on Revenue's quarterly List of Tax Defaulters and removes the underlying default from consideration for prosecution referral — a benefit that is frequently as important to a client, reputationally, as the penalty mitigation itself.

REAP: how Revenue decides who gets contacted

None of this happens at random. Revenue selects cases for compliance intervention using its Risk Evaluation, Analysis and Profiling system — REAP — a risk-based case selection tool that draws on data held across Revenue's systems (return history, third-party data, sectoral and behavioural indicators) to flag taxpayers for a proportionate level of intervention (Deloitte Ireland, "Revenue compliance interventions"). REAP sits behind the graduated structure of the Code: it is part of why Revenue is increasingly able to direct low-risk, low-friction contact (Level 1 supportive measures) at taxpayers who show minor or first-time indicators, while channelling higher-risk profiles more directly toward Risk Reviews, full Audits, or in the most serious cases, Level 3 investigation.

For practices, the practical implication is that Revenue's targeting is increasingly data-driven rather than sector-wide or random. Consistent, accurate, and timely filing — including VAT, payroll and corporation tax returns that reconcile cleanly against each other — reduces a client's risk profile within REAP, whereas inconsistent filings, late returns, or figures that diverge from sectoral norms increase the likelihood of being selected for a Level 1 or Level 2 intervention in the first place.

What this means for Irish practices in 2026

A few practical takeaways for firms advising clients on Revenue contact this year:

• Treat Level 1 contact as time-sensitive. A profile interview letter or reminder is the last opportunity for a client to access unprompted disclosure terms — don't let it sit in an inbox while the file is "looked at when there's time."
• Know the Level 2 clock cold. The 28-day (extendable to roughly 88-day) window for a prompted qualifying disclosure on a Risk Review or Audit is a hard procedural deadline, and missing it closes off the client's best remaining mitigation route.
• Build REAP-awareness into routine compliance work. Clean, consistent, on-time filing across all tax heads is now a genuine risk-management tool, not just good practice — it directly affects a client's likelihood of being flagged for a higher-tier intervention.
• Escalate Level 3 immediately. Because no qualifying disclosure route exists once an investigation begins, a Level 3 notification needs specialist tax controversy input straight away, not a standard compliance response.
• Document cooperation throughout. Regardless of level, demonstrable cooperation with Revenue's requests for information is treated as a mitigating factor, so firms should keep a clear record of correspondence and response times on any live intervention file.

Getting the disclosure strategy right the first time — rather than correcting course mid-intervention — is one of the clearest ways a practice adds value on Revenue work, and it depends on genuinely understanding how the levels interact with the disclosure rules described above.

This tiered framework is exactly the kind of technical area that rewards structured, up-to-date CPD rather than picking it up piecemeal from case experience. Learnsignal's CPD courses cover Irish tax compliance and Revenue practice topics like this one in depth, helping practitioners stay current on Code of Practice changes, penalty mitigation rules and Revenue's evolving risk-based approach — so that when the next intervention letter lands on a client's desk, your advice is built on the current rules, not the ones that applied three Codes ago.