Financial Record Keeping: Retention Periods, Storage, and Disposal

For most federal tax returns and their supporting documents, the safe answer to how long to keep tax records is three years from the date you filed. That is the general window the IRS has to assess additional tax under 26 USC 6501.¹ Several categories of records need to stay on file longer, some for six or seven years, and a few forever. The rules below tell you which is which and why.

The Three-Year Baseline

The clock starts on the date you filed the return. Returns filed before the due date are treated as filed on the due date, so filing early does not shorten the retention period.¹

Within that window, you need to be able to substantiate every number on the return. That means W-2s, the various 1099s (1099-NEC for contract income, 1099-INT for interest, 1099-DIV for dividends), and any receipts, invoices, or canceled checks behind a deduction. Supporting documents should identify who was paid, how much, the date, and what the payment was for.² Bank and credit card statements do secondary duty when an original receipt is missing.

If you cannot back up a position when the IRS asks, the accuracy-related penalty adds 20% to any resulting underpayment under 26 USC 6662.³ Willful evasion carries fines up to $100,000 and up to five years in prison.⁴

When Three Years Is Not Enough

Federal law extends the assessment window in specific situations, and your records should match whichever period applies:

Six years. If you omit gross income exceeding 25% of what was reported on the return, or omitted income tied to foreign financial assets tops $5,000.¹
Seven years. If you claim a refund tied to a bad debt deduction or worthless securities.⁵
No limit. If a return was fraudulent, or if you never filed at all, the IRS can assess tax at any point.¹

The working rule: if there is any chance income was left off a return, treat six years as your floor rather than three.

Records to Keep Permanently

Some documents outlive any statute of limitations. Nondeductible IRA contributions are reported each year on Form 8606, and those filings should be kept for as long as any money remains in any of your traditional, SEP, or SIMPLE IRAs.⁶ Without that paper trail, you can end up paying tax a second time on money that was already taxed when you contributed it. It is one of the more expensive recordkeeping failures for people approaching retirement.

The Federal Trade Commission also recommends keeping originals of birth certificates, Social Security cards, passports, marriage licenses, divorce decrees, military records, wills, powers of attorney, and death certificates of family members.⁷ These support insurance claims, estate settlements, and government benefits that can surface decades after the fact.

Property, Investment, and Basis Records

Property records follow the property, not the calendar. Purchase closing documents, capital improvement receipts, and depreciation schedules should be kept until the statute of limitations expires for the year you sell or otherwise dispose of the property.⁵ A home bought in 2010 and sold in 2026 means holding every improvement receipt until at least 2029, and longer if any of the extended periods apply.

The stakes are real. Every documented improvement adds to your cost basis and reduces the taxable gain when you sell. A new roof, a kitchen remodel, a replaced furnace. If you cannot prove the expense, you cannot claim it.

Investment records work the same way. Brokerage statements, trade confirmations, and dividend reinvestment records establish the cost basis of each asset you hold. Losing track of your original purchase price almost always means overpaying, because without documentation the IRS treats basis as zero.

Cryptocurrency and Digital Assets

Digital asset recordkeeping falls heavily on the taxpayer. Starting January 1, 2026, custodial brokers must report transactions on the new Form 1099-DA, but only for covered securities: digital assets acquired after 2025 in a custodial account.⁸ Anything bought before 2026, or held in a personal wallet, is a noncovered security, and the broker is not required to report basis.

The IRS expects documentation of every purchase, sale, exchange, and transfer of digital assets, along with the fair market value at the time of each transaction. If you want to choose which specific units of a cryptocurrency you are selling, that identification has to be recorded no later than the date and time of the sale, or the IRS defaults to first-in, first-out. For assets received as gifts, if you cannot document the donor’s basis, the IRS treats it as zero.⁹ Given how long people sometimes hold crypto, these records may need to survive a decade or more.

Health Savings Account Receipts

HSA rules bend the usual retention timeline. You are expected to keep records proving that every distribution went toward a qualified medical expense, that no other plan reimbursed the expense, and that you did not also claim it as an itemized deduction.¹⁰ You do not submit these with a return, but you have to produce them on request.

Because HSAs allow reimbursement for qualified expenses incurred any time after the account was opened, some people pay medical bills out of pocket now and reimburse themselves years later. That strategy only works if you still have the original receipts and explanations of benefits when you finally take the distribution. Effectively, HSA-related medical receipts stay relevant as long as the account is open and you have unreimbursed expenses on the books.

Business and Employment Records

If you run a business, employment tax records behind Forms 941 and 940 must be kept at least four years after the tax is due or paid, whichever is later.¹¹ That covers payroll records, tax deposit receipts, and fringe benefit documentation.

Federal wage and hour rules add a parallel requirement. Payroll records, collective bargaining agreements, and sales volume records must be preserved at least three years; supplementary records such as time cards, wage rate tables, and shipping records must be kept two years.¹² To satisfy both agencies, four years is the practical minimum for payroll documentation.

Business income and expense records follow the same framework as individual returns: three years standard, six years if there is any risk of a substantial income omission.²

Storing Records So They Actually Count

Scanning paper records into digital form is not just convenient. Under Revenue Procedure 97-22, an electronic storage system that meets IRS standards satisfies the recordkeeping requirements of federal tax law, and once the system is verified you can destroy the paper originals.¹³

The IRS sets a quality bar. Digital reproductions must be fully legible (every letter and number positively identifiable) and fully readable (groups of characters recognizable as words and numbers). The system also needs an indexing method that lets you find and retrieve specific documents, comparable to a well-organized paper file.¹³ A desktop folder called “taxes 2025” with 200 unsorted files does not meet that standard.

In practice, scan at a resolution where fine print stays crisp, use descriptive filenames, and back up to at least two locations. Cloud storage plus a local encrypted drive gives you redundancy against both hardware failure and ransomware. For paper originals you decide to keep, a fireproof cabinet or fire-rated safe is worth the money for anything that cannot be replaced, like signed deeds or original contracts.

Disposing of Records Once the Period Is Up

Old tax records left in a drawer are raw material for identity theft. Once a retention period expires, disposal should be deliberate.

Federal regulation requires that papers containing consumer information be burned, pulverized, or shredded so the content cannot practicably be read or reconstructed. A cross-cut shredder meets that bar; strip-cut shredders that produce long ribbons do not, because the strips can be reassembled. For larger volumes, professional shredding services provide a certificate of destruction. If you use one, federal rules expect due diligence on your part: check references, review security policies, and confirm the company holds certification from a recognized industry association.¹⁴

Digital files need more than the trash icon. Deleted files sit on the drive until their storage sectors are overwritten, and forensic tools recover them easily. Use dedicated data-wiping software, or physically destroy the drive when you retire old hardware. The same federal standard applies to electronic media: the information has to be rendered unreadable and unreconstructable.¹⁴

1
Office of the Law Revision Counsel. 26 USC 6501 – Limitations on Assessment and Collection
2
Internal Revenue Service. What Kind of Records Should I Keep
3
Office of the Law Revision Counsel. 26 USC 6662 – Imposition of Accuracy-Related Penalty on Underpayments
4
Office of the Law Revision Counsel. 26 USC 7201 – Attempt to Evade or Defeat Tax
5
Internal Revenue Service. Topic No. 305, Recordkeeping
6
Internal Revenue Service. About Form 8606, Nondeductible IRAs
7
Federal Trade Commission (Consumer Advice). Protecting Your Personal Information: Which Documents to Keep and Which to Shred
8
Internal Revenue Service. Instructions for Form 1099-DA (2026)
9
Internal Revenue Service. Frequently Asked Questions on Digital Asset Transactions
10
Internal Revenue Service. Publication 969, Health Savings Accounts and Other Tax-Favored Health Plans
11
Internal Revenue Service. How Long Should I Keep Records
12
eCFR. Records to Be Kept by Employers
13
Internal Revenue Service. Revenue Procedure 97-22
14
eCFR. 16 CFR 682.3 – Proper Disposal of Consumer Information