URSSAF Whistleblower Reports in France: What Triggers an Audit and Your Safeguards as Employer

A report to URSSAF (France’s social security and family benefit contributions collection agency) is a signal — often anonymous — flagging a suspicion of irregularity (undeclared work, under-declaration, etc.), coming from an employee, a former employee, a third party or a competitor. Such a report is not a conviction: it may trigger an audit, but that audit is then governed by a strict procedure, with safeguards for the employer. Here is what actually happens — and how you are protected.

Is a report enough to trigger a reassessment against you?

No. A report merely triggers a verification: URSSAF is not obliged to act, and if it does audit, it must establish the facts within the legal framework. A reassessment (redressement) does not rest on the report alone, but on the findings of the audit. That said, an important nuance: in principle it is for the employer, as the sole party liable for the contributions, to justify the declared contribution base (French Court of Cassation, 2nd Civil Chamber, 22 Oct. 2020, no. 19-21.933, published). Hence the value of keeping accounting and payroll records up to date.

The audit process, step by step

1. Notice of audit (avis de contrôle) — URSSAF notifies you of its intention to audit (Article R.243-59 of the French Social Security Code), stating a date and the scope of the verifications.
2. Verifications — the inspectors examine your documents and may exercise their right to obtain information (droit de communication).
3. Letter of observations (lettre d’observations) — this closes the audit and details the findings and the amounts contemplated.
4. Adversarial period (période contradictoire) — you have 30 days (extendable) to respond, challenge and provide your evidence.
5. Formal notice (mise en demeure) — if amounts remain due after your observations.
6. Enforcement order / CRA — in the absence of payment, URSSAF may issue an enforcement order (contrainte); the Amicable Appeals Board (Commission de recours amiable, CRA) must be seized before going to court.
7. Litigation — ultimately, the social division of the judicial court (pôle social du tribunal judiciaire).

Your safeguards: the procedure frames the audit

The audit is not discretionary. Several safeguards, enforced by the Court of Cassation, protect the employer:

• A sufficiently precise letter of observations — it must ensure the adversarial nature of the audit and the rights of the defence; if it lacks sufficient precision, the reassessment is liable to be declared void (Article R.243-59 of the Social Security Code; see Court of Cassation, 2nd Civil Chamber, 13 Feb. 2020, no. 19-11.645, published, requiring a year-by-year breakdown where a principal is pursued on a joint-liability basis).
• Compliance with the adversarial principle — your observations must be examined before any formal notice.
• Limitation period (prescription) — the recovery action is subject to time limits (3 years, extended to 5 years where an offence of illegal work has been recorded in an official report (procès-verbal): Court of Cassation, 2nd Civil Chamber, 12 March 2020, no. 18-21.648, published).

What to do (and what not to do)

• Keep your supporting documents up to date — since the burden of justifying the contribution base falls on you.
• Respond within 30 days to the letter of observations, with reasoned arguments: this is the decisive moment.
• Have the regularity of the procedure checked (notice, precision of the letter of observations, deadlines): a defect may ground the annulment of the reassessment.
• Do not ignore a formal notice: the appeal deadlines (CRA, then the social division) are short.

Frequently asked questions

Can an anonymous report trigger a URSSAF audit?

Yes. A report, even an anonymous one, may lead URSSAF to audit. But it is not in itself sufficient to justify a reassessment: the reassessment must rest on the findings of the audit, conducted in accordance with the procedure of Article R.243-59 of the French Social Security Code.

Who must prove what in a URSSAF audit?

In principle, it is for the employer, as the sole party liable for the contributions, to justify the base of its contributions, in particular through its accounting records (Court of Cassation, 2nd Civil Chamber, 22 Oct. 2020, no. 19-21.933). Hence the importance of rigorous documentation.

What is the deadline to respond to the letter of observations?

You have 30 days from receipt of the letter of observations to submit your observations (a deadline that may be extended in certain cases). This is the adversarial phase, and it must not be missed.

Can a reassessment be annulled for a procedural defect?

Yes. A letter of observations that is insufficiently precise, and that fails to guarantee the adversarial process, may result in the nullity of the reassessment (Article R.243-59 of the Social Security Code; Court of Cassation, 2nd Civil Chamber, 13 Feb. 2020, no. 19-11.645).

What is the limitation period for URSSAF contributions?

The period is in principle 3 years. It is extended to 5 years where an offence of illegal work has been recorded in an official report (Court of Cassation, 2nd Civil Chamber, 12 March 2020, no. 18-21.648).

In summary

A report to URSSAF is only a starting point: the audit that may follow is tightly regulated, and the employer has real safeguards (adversarial process, precision of the letter of observations, limitation period). The best defence remains anticipation: up-to-date documentation and a swift reaction at each stage. In the event of an audit, DAIRIA Avocats supports you in securing the procedure and the adversarial phase.

📌 This article is part of the complete file URSSAF Audits: The Employer’s Guide.