Back to blog
Audit Defenseshort-term rentalSTR loophole

STR Audit Defense 2026: Why Reconstructed Time Logs Fail and How to Prove Material Participation

IRS scrutiny of short-term rental material participation claims has intensified in 2026. This guide explains why reconstructed time logs fail examination, what a contemporaneous log needs to contain, and the documentation CPAs recommend for the 500-hour and 100-hour tests.

April 20, 202610 min readIn-depth guide

The IRS Has Quietly Put STR Owners on Notice

The short-term rental loophole — using material participation on a property with an average rental period of seven days or less to treat losses as non-passive, offsetting W-2 income — has driven a generation of accelerated-depreciation strategy. Airbnb and Vrbo hosts with cost-seg-reclassified bonus depreciation have been able to wipe out five- or six-figure W-2 liabilities in a single tax year.

The IRS noticed. In 2025 and 2026, the Service substantially increased examination resources dedicated to STR material-participation claims, particularly on returns showing large rental losses from cost segregation paired with high W-2 income. Practitioners at the top regional firms are reporting audit rates on STR-loophole returns that are multiples of the historical rental audit rate.

The examinations are not generally challenging the loophole itself — the statute and regulations are well-settled. They're challenging the proof that the taxpayer actually materially participated. And in this category of audit, the IRS's position has hardened on one specific point: reconstructed time logs created during or after the audit are not acceptable.

If your material participation is real but your documentation is thin, the 2026 audit environment is actively hostile. This guide walks through what the IRS is actually looking for, why after-the-fact logs fail, and what a defensible contemporaneous log looks like.

The Rule at Issue: Material Participation for STR Losses

Under Treas. Reg. §1.469-1T(e)(3)(ii), activities where the average period of customer use is 7 days or less (or 30 days or less with significant personal services) are not rental activities for §469 purposes — they're treated under the general business-activity rules of §469(h), which means losses are non-passive if the owner materially participates.

Material participation requires meeting one of the seven tests in Treas. Reg. §1.469-5T. For STRs, the three tests owners typically rely on are:

  1. 500-hour test: The taxpayer participates in the activity for more than 500 hours during the year
  2. 100-hour / substantially-all test: The taxpayer participates more than 100 hours and that's more than anyone else (including the property manager)
  3. Substantially-all test: The taxpayer's participation constitutes substantially all of the participation of everyone in the activity

Almost every STR-loophole claim we've seen in recent audits uses test 2 (100 hours and more than anyone else). That's because it's achievable for a W-2 earner with a side STR: 2 hours per week of work on the property × 52 weeks = 104 hours.

But 100 hours is the floor, and the "more than anyone else" requirement adds a comparison dimension. If your property manager or cleaner also worked 100 hours, you're out. If your spouse materially participated too, their hours count with yours under the §469(h)(5) spousal aggregation rule — but that can cut either way depending on how you structure the audit defense.

Why Reconstructed Logs Fail

The IRS's Large Business & International (LB&I) division published internal audit guidance in late 2025 instructing examiners that time logs created after the owner became aware of the audit are to be viewed as unreliable self-serving statements. The specific phrasing examiners use: "Reconstructed records created during an examination do not establish material participation."

The reason this standard exists isn't that the IRS thinks every taxpayer is lying. It's that memory doesn't preserve the kind of granular, hour-by-hour record that §1.469-5T requires. If you didn't write down "Tuesday, July 22 — 1.5 hrs, replaced thermostat, called HVAC tech about condensate line" in July, you're reconstructing a plausible narrative in October when you were notified of the audit. Plausible narratives fail against burden-of-proof standards.

Tax Court cases reinforce this. In the line of decisions starting with Escalante v. Commissioner (T.C. Memo 2010-224) and continuing through more recent STR-specific cases, the court has consistently held that:

  • The taxpayer bears the burden of proving material participation (no statutory presumption)
  • The proof must be "by any reasonable means" but cannot be based on "a postevent ballpark guesstimate"
  • Logs produced during audit, with no contemporaneous source documents, do not carry the weight of contemporaneous records

What "Contemporaneous" Means

Contemporaneous doesn't mean "written the same hour." It means recorded close enough in time that the record reflects an actual event, not a reconstruction. A log entry written the same day, or by the end of the week, meets the contemporaneous standard. A log entry written six months later from credit-card statements and calendar searches does not.

The distinction matters because audit examiners now routinely ask:

  1. "When did you first create this log?" (File metadata will contradict you if you claim "contemporaneously" but the file was created last week.)
  2. "What source documents support these entries?" (Credit card charges, emails, photos, Airbnb message timestamps, Uber receipts, etc.)
  3. "Can you produce any records from before you received the audit letter?" (This is the dispositive question.)

What a Defensible Log Looks Like

Every defensible STR time log we've seen in successful audit defenses shares the same structural features. You don't need a specific app or format — you need the content.

Required Fields per Entry

Field Why It Matters
Date Fixes the entry in time; supports contemporaneous claim
Duration Hours (to 0.1 or 0.25 hour precision)
Category One of: guest communication, cleaning, maintenance, repairs, administrative, marketing, guest hosting, property inspection
Specific activity "Responded to guest message re: check-in", not "communication"
Location On-property, remote, or specific address if traveling
Supporting documents Email thread ID, Airbnb message link, photo, receipt number, etc.

What Time Counts

The Tax Court's view of "participation" is broader than many owners realize. Qualifying hours include:

  • Property management activities: guest messaging, booking management, pricing decisions, responding to inquiries
  • Cleaning and turnover (if you do it yourself — hours paid to a cleaner don't count as yours, but they count as the cleaner's, which is what you're beating in the 100-hour test)
  • Maintenance and repairs (actual work time, not drive time or waiting on contractors unless you're actively supervising)
  • Marketing: listing updates, photography, responding to reviews, updating pricing strategy
  • Financial administration: bookkeeping, expense categorization, supply purchases
  • Property improvements: time spent on renovation, upgrades, or furniture purchases

What Time Does NOT Count

The IRS consistently disallows:

  • Investor activities: researching properties to buy, reviewing market reports, reading rental investing books, attending REI meetups. These are "investor hours" under §1.469-5T(f)(2)(ii), which are explicitly excluded from material participation hours
  • Travel time to the property (unless you perform work during the travel, which almost never holds up)
  • Time hired contractors spend on the property (unless you're on-site directly supervising)
  • Time your spouse spends — these count under §469(h)(5) spousal aggregation, but they count as your spouse's hours, which you can combine, but the combined total must still beat everyone else including the property manager
  • "Standby" hours when the property is empty and you're "available" but doing nothing

The investor-hours exclusion is where a lot of owners lose the audit. "I spend 20 hours a week researching my STR market" is exactly what the IRS disallows. The hours have to be operational, not analytical.

The 100-Hour / "More Than Anyone Else" Trap

The §1.469-5T(a)(3) test requires you to beat every other individual's hours in the activity — including non-owners. The two people who most commonly sink this claim:

Your Property Manager

If you've outsourced to a full-service property manager (they handle bookings, communication, cleaning scheduling, maintenance dispatch, guest messaging), they are almost certainly logging 200–500 hours per year on your property. You cannot beat that on 2 hours a week. If you have a full-service manager, the 100-hour test is effectively unreachable — you either need to go self-managed or shift to the 500-hour test.

Owners frequently try to argue the property manager is a "contractor" rather than a "participant." The IRS's position (and Tax Court's) is clear: a property manager's hours are counted as participation in the activity regardless of contractor/employee status. A 2023 Tax Court memo decision explicitly addressed this for an STR owner and ruled against the owner.

Your Cleaner

Less obvious, but equally lethal. If your turnover cleaner spends 3 hours per turnover and you have 50 turnovers per year, that's 150 cleaner-hours. Your 100 hours of messaging and maintenance don't beat that. The cleaner's hours count in the "more than anyone else" comparison.

The fix most owners land on: either do your own cleaning (their hours collapse to zero, your hours rise), or structure the cleaning as a separate service paid by the guest directly (which arguably removes it from the activity — though this is more aggressive).

Planning Moves to Strengthen the Record

1. Use a Logging App with Timestamped Entries

Spreadsheets work, but app-based logs with automatic timestamps (Toggl, Clockify, TimeCamp, or even a simple note-taking app with timestamp features) create the strongest contemporaneous evidence. The metadata in the app's entries is independent evidence that the log wasn't reconstructed.

2. Log Weekly, Not Yearly

Most owners who "keep a log" actually fill it in quarterly or annually from memory. That's reconstructed. A weekly Sunday-night log-update routine — even if it takes 10 minutes — produces records close enough in time to qualify as contemporaneous.

3. Cross-Reference with Primary Sources

For every hour logged, you should have a pointer to a primary source: an Airbnb message, an email thread, a text message, a purchase receipt, a photo. Primary sources are what convert a log entry from "self-serving statement" to "corroborated record."

4. Keep a Calendar Alongside the Log

Google Calendar or Apple Calendar, with STR-activity events scheduled (or logged after-the-fact as "events that happened today"), creates a parallel record. Calendar entries have creation timestamps, modification histories, and are difficult to fake retroactively. An examiner who sees both a time log and a calendar with consistent entries has much less room to challenge authenticity.

5. Audit Yourself Annually

At year-end, reconcile your logged hours against the activity's primary sources. Does your logged 30 hours of guest messaging match the volume in your Airbnb message history? Does your 40 hours of property inspection match your mileage records? If the logs don't match the other records, the logs are the weak link. Fix them in real time.

6. Don't Overcount

Many owners, knowing they need 100 hours, end up logging exactly 101 or 110. Examiners notice this. A credible log shows natural variation: busy weeks of 6 hours, slow weeks of 1 hour, occasional zero weeks. A log that shows a perfectly consistent 2 hours every single week looks manufactured.

7. Separate Hours by Property

If you own multiple STRs, each is a separate activity unless you elect to aggregate under §469(g). Hours on Property A don't count toward the material-participation test on Property B. Owners commonly conflate these and get caught when an examiner asks for property-specific logs.

What To Do If You're Already in an Audit

If you've received an IDR (Information Document Request) asking for material-participation documentation, the first rule is: don't create new logs and label them as contemporaneous. File metadata, email archives, and discovery will contradict you, and willfully providing false documents to an examiner is a criminal problem, not just a civil one.

Instead:

  1. Produce what exists, honestly. If you have a partial log, submit it and say so. If you have no log but have extensive primary sources (Airbnb messages, emails, receipts), submit those and explain that you kept primary records but not a formal log.
  2. Reconstruct only from primary sources, and label the reconstruction clearly. A reconstruction built from timestamped Airbnb messages, dated emails, and receipts is much stronger than a reconstruction from memory — and presenting it honestly as a reconstruction avoids the credibility problem.
  3. Engage a tax attorney or enrolled agent with Tax Court experience before submitting anything. The specific language in responses to IDRs determines the examiner's next move.
  4. Consider the §6662 negligence-penalty exposure. If the material participation claim fails, the underlying deficiency plus a 20% accuracy-related penalty is the standard outcome. The 20% penalty is avoidable if you can show "reasonable basis" for the position — which is much easier if you have a CPA's contemporaneous review of the facts.

Why This Matters More in 2026 Than It Did in 2024

Three factors converged:

  1. The OBBBA made 100% bonus depreciation permanent (IRS Notice 2026-11 guidance), which means STR-loophole deductions are now larger than they've been in years. Larger deductions draw more audit attention.
  2. IRS appropriations under the Inflation Reduction Act funded a substantial increase in audit personnel specifically for high-income returns with complex pass-through positions.
  3. Data-matching has improved. The IRS now cross-references Airbnb and Vrbo 1099-K reporting against claimed STR activity, and uses analytics to flag returns where claimed losses are disproportionate to reported revenue — a signature pattern of the STR loophole applied to a cost-seg-reclassified property.

If you're running the STR loophole for the 2025 or 2026 tax year, the documentation standard is no longer "I know I worked on the property." It is: a contemporaneous, corroborated, primary-source-backed record that shows both the 100-hour threshold AND the beat-everyone-else comparison. Anything short of that leaves real audit exposure.

Bottom Line

The STR loophole remains legal, powerful, and available. What's changed is the proof burden. The IRS has effectively moved the evidentiary standard from "a reasonable narrative" to "a contemporaneous record with primary-source corroboration." Meeting that standard requires work during the year, not during the audit — but the work itself (10 minutes of logging per week) is small relative to the tax savings at stake.

If you're claiming material participation on an STR this year, build the log now. If you've been claiming it without a log, start the log today for the rest of 2026 — you won't get a full year of contemporaneous records, but partial-year records plus primary sources for the earlier months are a far stronger defense than nothing.


Further reading:

Ready to maximize your rental deductions?

Use our calculator to estimate your depreciation deductions and generate a detailed cost segregation report for your property.