URSSAF Whistleblower Reports: What Triggers an Audit and Your Safeguards as an Employer

A report to URSSAF (France’s social security contributions collection agency) is a tip-off — often anonymous — flagging suspected irregularities (undeclared work, under-declaration, etc.), coming from an employee, a former employee, a third party or a competitor. Such a report is not a finding of liability: it may trigger an audit, but that audit is then governed by a strict procedure, with safeguards for the employer. Here is what actually happens — and how you are protected.

Is a report enough to justify a reassessment?

No. A report merely triggers a review: URSSAF is not required to act, and if it does audit, it must establish the facts within the legal framework. A reassessment (redressement) does not rest on the report alone, but on the findings of the audit. There is, however, an important nuance: in principle it is for the employer, as the sole party liable for the contributions, to justify the declared base (assiette) (French Court of Cassation, 2nd Civil Chamber, 22 Oct. 2020, no. 19-21.933, published). Hence the importance of keeping accounting and payroll records up to date.

The audit process, step by step

1. Notice of audit — URSSAF notifies you of its intention to audit (Article R.243-59 of the French Social Security Code), with a date and the subject matter of the checks.
2. Checks — the inspectors examine your documents and may exercise their right to obtain information (droit de communication).
3. Letter of observations (lettre d’observations) — this closes the audit and sets out the findings and the amounts contemplated.
4. Adversarial period (période contradictoire) — you have 30 days (extendable) to respond, challenge and produce your evidence.
5. Formal demand (mise en demeure) — if amounts remain due after your observations.
6. Enforcement order / Amicable Appeals Board — failing payment, URSSAF may issue an enforcement order (contrainte); the Amicable Appeals Board (Commission de recours amiable, CRA) must be referred to before going to court.
7. Litigation — as a last resort, the social division of the judicial court (pôle social du tribunal judiciaire).

Your safeguards: the procedure frames the audit

The audit is not discretionary. Several safeguards, enforced by the Court of Cassation, protect the employer:

• A sufficiently precise letter of observations — it must ensure the adversarial nature of the audit and the rights of the defence; if it lacks sufficient precision, the reassessment is liable to be declared void (Article R.243-59 of the Social Security Code; see Court of Cassation, 2nd Civil Chamber, 13 Feb. 2020, no. 19-11.645, published, requiring a year-by-year breakdown where the principal is pursued jointly and severally).
• Respect for the adversarial process — your observations must be examined before any formal demand.
• Limitation periods (prescription) — the recovery action is subject to time limits (3 years, extended to 5 years where an offence of illegal work has been established by official report (procès-verbal): Court of Cassation, 2nd Civil Chamber, 12 March 2020, no. 18-21.648, published).

What to do (and not to do)

• Keep your supporting documents up to date — since the burden of justifying the contribution base falls on you.
• Respond within 30 days to the letter of observations, with a reasoned answer: this is the decisive moment.
• Have the regularity of the procedure checked (notice, precision of the letter of observations, time limits): a defect may be grounds for annulling the reassessment.
• Do not ignore a formal demand: the time limits for appeals (Amicable Appeals Board, then the social division) are short.

Frequently Asked Questions

Can an anonymous report trigger a URSSAF audit?

Yes. A report, even an anonymous one, may lead URSSAF to carry out an audit. But it is not on its own sufficient to justify a reassessment: the latter must rest on the findings of the audit, conducted in accordance with the procedure of Article R.243-59 of the French Social Security Code.

Who must prove what in a URSSAF audit?

In principle it is for the employer, as the sole party liable for the contributions, to justify the base of its contributions, in particular through its accounting records (Court of Cassation, 2nd Civil Chamber, 22 Oct. 2020, no. 19-21.933). Hence the importance of rigorous documentation.

How long do I have to respond to the letter of observations?

You have 30 days from receipt of the letter of observations to present your observations (a period that is extendable in certain cases). This is the adversarial phase, which must not be missed.

Can a reassessment be annulled for a procedural defect?

Yes. A letter of observations that is insufficiently precise, and that does not guarantee the adversarial process, may lead to the reassessment being declared void (Article R.243-59 of the Social Security Code; Court of Cassation, 2nd Civil Chamber, 13 Feb. 2020, no. 19-11.645).

What is the limitation period for URSSAF contributions?

The period is in principle 3 years. It is extended to 5 years where an offence of illegal work has been established by official report (Court of Cassation, 2nd Civil Chamber, 12 March 2020, no. 18-21.648).

In summary

A report to URSSAF is only a starting point: any audit that may follow is tightly framed, and the employer has genuine safeguards (the adversarial process, the precision of the letter of observations, limitation periods). The best defence remains anticipation: up-to-date documentation and a swift reaction at every stage. In the event of an audit, DAIRIA Avocats assists you in securing the procedure and the adversarial phase.

📌 This article is part of the complete guide URSSAF Audits: The Employer’s Guide.