Gold IRA Audit Trail: What Records to Keep and For How Long

Updated: July 30, 2026

OPRS may receive compensation when readers open an account through partner links on this page. Our analysis is based on independent research, BBB data, and IRS publications.

A gold IRA generates more paperwork than a publicly traded brokerage IRA. The underlying asset has no daily public market price. The custodian relies on the dealer or a third-party pricing service for the year-end fair market value. The IRS does not pre-validate the IRA balance, and the burden of proof in an examination shifts to the taxpayer for any item where the records are missing or thin.

Element I of a defensible audit trail is the IRC Section 6001 general recordkeeping rule, and it applies to every IRA owner regardless of account size. Check the dealer naming your custodian against the 2026 OPRS list before the first wire sends. The documentation quality each year is anchored to the dealer chosen at account opening.

This page lists the seven document categories the IRS examiner asks for first, the retention period each one requires, and the storage practice that keeps the audit trail intact across decades of IRA ownership.

The retention math is driven by the statute of limitations rules at IRC Section 6501, the substantiation expectation at IRC Section 6001, and the IRS Internal Revenue Manual instructions at IRM Section 4.72.7. The retention table at the end of this page summarizes the categories in one place.

Why the IRA owner carries the records, not the custodian

The general recordkeeping rule at IRC Section 6001 requires every person liable for any tax to keep such records as the Secretary may prescribe. The implementing regulation at 26 CFR Section 1.6001-1 requires the books and records to be sufficient to establish the gross income, deductions, credits and other matters required to be shown on the return.

An IRA does not file its own return. The owner reports IRA activity on the Form 1040 line items for taxable IRA distributions. The substantiation burden therefore falls on the owner, not on the custodian.

Custodians issue Form 5498 by May 31 of the year following any contribution or rollover. They issue Form 1099-R by January 31 of the year following any distribution, per the IRS Instructions for Forms 1099-R and 5498. The IRS receives a copy of both. The custodian retains its internal copy only for the period set in the account agreement, typically 7 years past account closure.

That window is shorter than the practical lifetime of an IRA. The custodian does not warrant document availability decades later. The IRA owner therefore has to keep the primary documents in a personal archive.

The IRS Internal Revenue Manual instructs examiners on substantiation expectations for IRAs at IRM Section 4.72.7. The examiner expects to reconstruct contributions, rollovers, year-end fair market value, required minimum distributions, and any in-kind transactions inside the IRA wrapper. For a gold IRA the reconstruction is harder than for a brokerage IRA because the metal has no daily public price. The owner’s personal archive has to fill the gap the custodian cannot.

The seven document categories the IRS examiner asks for

The audit trail for a gold IRA breaks into seven document categories. Each one corresponds to a specific IRA event, a specific IRS form or third-party statement, and a specific retention period anchored to the underlying statute. The categories below are listed in chronological order of when the document is generated during the IRA lifecycle.

1. Account opening package and dealer due diligence file

The account application, the custodial agreement, and the disclosure statement under 26 CFR Section 1.408-6 open the file. The depository agreement, the dealer purchase invoice, and the prudent investor file complete it. The prudent investor file contains the BBB rating screenshot, the dealer comparison checklist, and any third-party magazine designations cited at the decision.

The dealer due diligence file matters for the prohibited transaction analysis under IRC Section 4975. The IRS can raise that question years after account opening. Retain the package for the full life of the IRA plus 6 years past the year of account closure.

2. Form 5498 fair market value statements (annual)

The custodian files Form 5498 with the IRS by May 31 each year and sends the owner a copy. The form reports contributions, rollovers, and the December 31 fair market value of the account.

The 5498 is the load-bearing document for the required minimum distribution computation. It also supports any rollover that the IRS may try to reclassify. Retain every annual Form 5498 for the full life of the IRA. The earliest 5498 establishes the basis chain for any nondeductible contribution reported on Form 8606, and the basis can survive for decades inside a traditional IRA.

3. Depository inventory report with bar serial numbers

The depository issues an annual inventory report listing each piece of IRS approved metal held under the IRA wrapper. The report records bar serial number, weight, purity, and mint of origin. The inventory ties the metal to the wrapper under the collectibles exception at IRC Section 408(m)(3).

Metal that fails the test is a deemed distribution under IRC Section 408(m)(1). It is taxed at ordinary income rates with a possible 10 percent additional tax under IRC Section 72(t) if the owner is under 59 and a half. Retain every annual inventory report for the full life of the account.

4. Year-end custodian statement supporting the RMD

The required minimum distribution under IRC Section 401(a)(9) is computed against the prior year December 31 fair market value. The value is divided by the life expectancy factor from 26 CFR Section 1.401(a)(9)-9 Uniform Lifetime Table. The custodian statement showing the December 31 value is the load-bearing document for the computation.

Retain the year-end statement for every RMD year for at least 6 years past the RMD year. An under-distributed RMD triggers the 25 percent excise tax under IRC Section 4974 (reduced from 50 percent by SECURE Act 2.0). The substantial omission rule under IRC Section 6501(e) can extend the audit window beyond 3 years.

5. Form 1099-R distribution statements and box 7 codes

The custodian issues Form 1099-R for any distribution from the IRA. The form covers cash RMDs, in-kind RMDs (metal shipped to the owner), Roth conversions, and direct trustee-to-trustee rollovers. The box 7 distribution code controls how the distribution is treated for tax purposes.

Code G is a direct rollover. Code 7 is a normal distribution after 59 and a half. Code 1 is an early distribution subject to the 10 percent additional tax. A miscoded 1099-R can convert a tax-free rollover into a taxable event, the scenario the Tax Court addressed in Bobrow v Commissioner, TC Memo 2014-21. Retain every 1099-R for at least 6 years past the year of the distribution.

6. Rollover certifications and trustee-to-trustee paperwork

A rollover from a 401(k), TSP, 403(b), 457(b) or another IRA under IRC Section 408(d)(3) generates a paper trail across both sides. The distributing plan issues a check or wire. The receiving custodian issues a deposit confirmation.

For an indirect rollover, the 60-day rollover self-certification under Revenue Procedure 2016-47 applies if the deadline is missed for a covered reason. The one-rollover-per-12-months aggregation rule applies across all IRAs of the same owner, as confirmed in Bobrow. Retain the rollover file for the full life of the IRA plus 6 years past the year the rollover funds were withdrawn in a subsequent distribution.

7. Form 8606 basis tracking for nondeductible contributions

Any nondeductible contribution to a traditional IRA generates basis that is recovered tax-free at distribution under IRC Section 408(d)(1). The basis is reported on Form 8606 with the tax return for the contribution year. The running basis is reported on Form 8606 every year a distribution is taken.

The IRS does not store the basis chain on the owner’s behalf, and the running total can survive 30 to 40 years for a long-lived traditional IRA. Retain every Form 8606 and every contribution-year Form 5498 for the full life of the IRA plus 6 years past the year the last basis dollar is recovered. Run the 2026 dealer screen before any custodian conversation. A dealer that fumbles the 5498 issuance fumbles the basis chain a few years later.

The retention window anchored to the statute of limitations

The retention period for each document category is anchored to the IRS statute of limitations at IRC Section 6501. The 3 year general statute under IRC Section 6501(a) applies to most returns. The 6 year extended statute under IRC Section 6501(e) applies if there is a substantial omission of more than 25 percent of gross income.

An unreported distribution or a misclassified rollover can trigger the 6 year window. The unlimited window under IRC Section 6501(c) applies if no return was filed or if the return was fraudulent. The conservative retention rule is therefore the 6 year window. Documents that establish basis or wrapper qualification get the longer treatment: the account opening file, the Form 5498s, the depository inventory, and the Form 8606 basis chain stay for the full life of the account.

The chart below shows the typical retention window per document category in years. The horizontal axis is the document category. The vertical axis is the minimum recommended retention period in years past the relevant tax year. Categories with “life of IRA plus 6” are charted at a representative 30 year horizon for a long-lived account.

The five step audit trail workflow

The procedural workflow that builds the audit trail across the seven document categories runs in five sequenced steps each year. The flow ties every document to a specific calendar event so the owner does not skip a year. The five steps repeat annually for the full life of the IRA.

Storage practice that survives 30 years of IRA ownership

The records have to survive longer than most home filing systems. A traditional IRA opened at 50 and held through the SECURE Act 2.0 RMD age of 75 generates 25 years of annual statements before the first RMD year. The 6 year retention past the final RMD pushes the archive to 30 years or longer. The practical storage rule is two formats and two physical locations.

• Digital archive. Scan every paper document to PDF the day it arrives. Store the PDF in an encrypted cloud archive (with two-factor authentication) and on a local hard drive that is backed up to a second drive. The cloud archive survives a house fire. The local drive survives a cloud provider account lockout.
• Paper archive. Keep the original paper documents in a locked file cabinet at home or in a safe deposit box at the bank. Paper holds up across decades when digital formats may be deprecated.
• Index document. Maintain a one-page index listing every document by category, year, custodian, and storage location. Update the index every January when the prior year Form 5498 arrives.
• Beneficiary access. The named beneficiary on the IRA needs to know where the records are kept. Include the file location in the estate planning binder shared with the executor.

What the IRS examiner asks for in an IRA audit

An IRS examination of an IRA typically opens with an Information Document Request. The request follows the items listed in IRM Section 4.72.7.

The standard request covers the account application, the most recent year-end fair market value statement, the prior year RMD computation, every contribution and rollover statement for the audit period, and the depository inventory if the IRA holds non-publicly-traded assets. The examiner cross-references the owner’s records against the custodian’s filings with the IRS (5498 and 1099-R). Discrepancies between the owner’s records and the IRS internal file trigger follow-up requests.

The audit is rarely a surprise. The IRS first sends a CP-2000 notice or an examination opening letter that identifies the tax year and the specific item under review. The owner has 30 days to respond with documentation.

Records that are organized by year and by category can be produced within the 30 day window. Records scattered across email archives, dealer portals and old filing cabinets typically miss the window and force the owner to request an extension. The IRS grants reasonable extensions, but the audit posture is stronger when the records produce on the first request.

How a missing record changes the audit outcome

The burden of proof on a missing record falls on the taxpayer under the general substantiation rule at IRC Section 6001. The IRS can reconstruct an IRA event from third-party data when the owner cannot produce a document. The reconstruction usually disfavors the owner.

A missing Form 5498 leaves the IRS to compute fair market value from the custodian’s electronic filing. That filing may not reflect the year-end inventory if a late-year purchase was made. A missing 1099-R can be reclassified by default into the highest-tax category.

A missing rollover certification can convert a tax-free direct rollover into a taxable distribution. The 10 percent additional tax applies if the owner was under 59 and a half. The defensive posture is to retain the primary documents in the owner’s personal file.

The audit trail retention table

The table below summarizes the seven document categories, the retention period anchored to the IRS statute, and the trigger event that starts the retention clock.

Common recordkeeping mistakes that surface in an audit

• Discarding the 5498 after the tax return is filed. The 5498 establishes the basis chain and the rollover history. It is a permanent document for the life of the IRA, not an annual disposable.
• Relying on the custodian portal as the archive. Custodian portals retain statements for a limited window, often 7 years. The portal is closed when the IRA is closed. Download every statement to PDF the day it is issued.
• Missing bar serial numbers on the depository inventory. A depository inventory that lists only weight and purity (no serial number) is thin under the IRC Section 408(m)(3) tie-back test. Request a serial-numbered inventory at account opening and verify it appears on every annual statement.
• Not retaining the dealer due diligence file. A prohibited transaction analysis under IRC Section 4975 can arise years after account opening. The dealer comparison checklist used at the decision is the prudent investor reasonableness file.
• Treating Roth conversions as untraceable. A Roth conversion is a taxable event reported on Form 1099-R with code 2 or code 7. The five-year clock on the conversion runs separately for each conversion under IRC Section 408A. A 2020 conversion and a 2024 conversion have two separate five-year holding periods.

How long does the IRS have to audit a gold IRA distribution?

The general statute of limitations at IRC Section 6501(a) is 3 years from the date the return was filed. The 6 year statute at IRC Section 6501(e) applies if there is a substantial omission of more than 25 percent of gross income.

The unlimited statute at IRC Section 6501(c) applies if no return is filed or if the return is fraudulent. For an IRA distribution that is not reported on the return, the 6 year statute is the practical exposure window.

Does the custodian keep records on my behalf?

The custodian retains its internal copy for the period set in the account agreement, typically 7 years past the year the account closes. That window is shorter than the practical lifetime of an IRA. The custodian does not warrant document availability decades later, and the substantiation burden at IRC Section 6001 falls on the owner, not on the custodian.

Do I need to keep paper copies or are PDFs enough?

The IRS accepts PDFs as part of the audit response under Revenue Procedure 98-25 on electronic records. A digital archive is sufficient if it is organized, retrievable, and unaltered. A paper backup of the most important documents is a low-cost insurance policy against a digital archive failure.

What if the depository goes out of business mid-life of my IRA?

The depository’s records transfer to the successor depository or to the custodian as part of the wind-down. The owner’s personal archive of prior-year inventory reports preserves the chain of custody on the metal. This is one reason the inventory reports belong in the owner’s permanent file, not just in the depository portal.

What records does the named beneficiary need after my death?

The named beneficiary needs the account opening package, the most recent Form 5498, the prior year RMD statement, the depository inventory, the Form 8606 basis chain, and the beneficiary designation form. The post-death RMD timing follows the SECURE Act 2.0 rules at IRC Section 401(a)(9)(H). The beneficiary inherits the basis carryover on the Form 8606 chain.

Sources cited

1. IRC Section 6001, Notice or Regulations Requiring Records, Statements, and Special Returns
2. IRC Section 6501, Limitations on Assessment and Collection
3. IRC Section 408, Individual Retirement Accounts
4. IRC Section 408A, Roth IRAs
5. IRC Section 401(a)(9), Required Minimum Distributions
6. IRC Section 4974, Excise Tax on Failure to Make RMDs
7. IRC Section 4975, Tax on Prohibited Transactions
8. IRC Section 72(t), 10 Percent Additional Tax on Early Distributions
9. 26 CFR Section 1.6001-1, Records
10. 26 CFR Section 1.408-6, Disclosure Statements
11. 26 CFR Section 1.401(a)(9)-9, Uniform Lifetime Table
12. IRS Instructions for Forms 1099-R and 5498
13. IRS Form 5498, IRA Contribution Information
14. IRS Form 8606, Nondeductible IRAs
15. IRS Publication 590-B, Distributions from Individual Retirement Arrangements
16. IRM Section 4.72.7, Employee Plans Technical Guidance for IRAs
17. Revenue Procedure 2016-47, 60-Day Rollover Self-Certification
18. Revenue Procedure 98-25, Electronic Records
19. Bobrow v Commissioner, TC Memo 2014-21, One Rollover Per 12 Months Aggregation (IRS Announcement 2014-15, PDF)

More on OPRS

• IRS audit defensibility for HNW gold IRA holders above $1M income
• Form 1099-R box 7 distribution codes explained
• 2026 IRA contribution limits and gold IRA basis tracking
• Run the 2026 OPRS dealer screen before the documentation chain begins