The deferrals left your employees' paychecks on the 15th of the month. They landed in the 401(k) trust on the 12th of the following month. Nobody noticed, nobody complained, and payroll closed as usual.
In the eyes of the Department of Labor, you just used your employees' retirement money interest-free for nearly four weeks. That is a prohibited transaction, it carries a 15% excise tax, and it is the single most common compliance failure in small business retirement plans — usually committed by sponsors who had no idea a deadline existed.
Here is the part almost nobody tells you: the IRS expects you to make mistakes like this. It built an entire correction system — the Employee Plans Compliance Resolution System, or EPCRS — around the reality that small plans run on part-time attention, and it lets you fix most operational errors yourself, without calling the IRS, without a filing, and without a fee. The system is governed by Revenue Procedure 2021-30 and it exists precisely so that a fixable mistake never escalates into the catastrophe of plan disqualification.
This guide walks through how EPCRS works, which errors you can self-correct, what the standard fixes look like for the failures small plans actually commit, and how to document a correction so it holds up later.
What Disqualification Actually Means
Before the fix, understand the stakes. A 401(k) plan is a promise the tax code makes to itself: contributions go in untaxed, earnings compound untaxed, and everything is taxed once, at distribution. If the IRS disqualifies the plan — retroactively — that bargain unwinds in every direction at once.
The plan's trust loses its tax exemption and becomes a nonexempt trust that must file its own income tax return and pay tax on its earnings. Employees must include vested employer contributions in their taxable income for the disqualified years. Distributions from the disqualified plan can no longer be rolled into an IRA or another plan. Employer deductions get deferred until the amounts are taxable to employees, and FICA and FUTA can attach to contributions either when made or when they vest. If the disqualification stems from a coverage or participation failure, highly compensated employees can be taxed on their entire untaxed vested account balance — not just the years in question.
This is why correction programs matter. Almost no plan error forces disqualification if you find it and fix it through the right door.
EPCRS: Three Doors Out of Trouble
EPCRS offers three programs, and choosing among them is mostly a function of timing and error type:
| Program | When you use it | IRS involvement | Cost |
|---|---|---|---|
| Self-Correction Program (SCP) | You find the error yourself, no audit underway | None — no application, no filing, no contact | Free |
| Voluntary Correction Program (VCP) | Errors not self-correctable, or you want written IRS sign-off | Written submission; IRS issues a compliance statement | User fee based on plan assets — currently $2,000 to $4,000 |
| Audit Closing Agreement Program (Audit CAP) | The IRS found the problem on examination first | Negotiated closing agreement | A sanction negotiated with the IRS, always more than the VCP fee |
The economics are deliberately shaped so that coming forward early is always cheaper. Every step closer to Audit CAP raises the price: SCP is free, VCP costs a filing fee, and Audit CAP opens with a negotiating position that starts above the VCP fee and scales with the number of affected employees, how long the error ran, and whether you had internal controls that should have caught it.
Door One: The Self-Correction Program
SCP is the workhorse, and the remarkable thing about it is what it does not require. There is no application, no reporting requirement, no fee, and no contact with the IRS. You find an operational failure — a case where the plan was not operated according to its written terms — you correct it, you document it, and you move on. The plan keeps its tax-favored status.
Eligibility turns on two axes. The first is error severity:
- Insignificant operational failures can be self-corrected at any time. There is no deadline.
- Significant operational failures can still be self-corrected, but you must act within the correction period — generally by the end of the third plan year after the plan year in which the failure occurred. Miss that window and your only voluntary option is VCP.
Whether a failure is significant is judged on the facts: how many employees were affected, how much money was involved, how long it lasted, and whether it's part of a pattern. A single quarter of late deposits affecting a handful of participants is a very different animal from three years of systematically excluding the receptionist from the plan.
The second axis is process. Self-correction presumes the plan has compliance practices and procedures in place — routine internal checks designed to catch failures — because SCP is built for plans that stumble despite good controls, not for plans that never look. This is also the practical argument for a real reconciliation habit: a sponsor that reconciles payroll to trust deposits monthly both catches errors inside the cheapest correction windows and can demonstrate the internal-controls posture that SCP assumes.
Not everything fits through this door. Failures in SIMPLE IRA and SEP plans acquired in corporate mergers, for example, require VCP rather than SCP.
Door Two: The Voluntary Correction Program
VCP is the formal option: you put the failure, your proposed correction, and your process fixes in a written submission, pay a user fee, and the IRS issues a compliance statement — its written agreement not to disqualify the plan over the disclosed failures. It is available only when the plan is not already under IRS examination, and the IRS generally will not audit the plan while a submission is pending.
The mechanics are more accessible than most owners expect. The submission goes through Pay.gov using Form 8950, and the IRS publishes a full kit — Form 14568, the model compliance statement, plus schedules 14568-A through 14568-I matched to specific common failures. For a straightforward operational error, an employer can complete the filing without an attorney, and anonymous pre-submissions through a representative let you test a novel correction method before putting your name on it.
Three details worth remembering:
- The fee is not refunded if the IRS rejects your correction method, and corrections you made before filing may have to be undone if the IRS disagrees with your approach.
- You generally have 150 days from the compliance statement to finish the corrections.
- VCP can waive excise taxes that SCP cannot. A missed required minimum distribution, for instance, is self-correctable — make the payment plus earnings — but the participant-level excise tax can only be waived through VCP, using the dedicated RMD schedule.
VCP also has honest limits: late Form 5500 filings belong to the DOL's delinquent filer program, not EPCRS, and fiduciary violations belong to the DOL's Voluntary Fiduciary Correction Program.
Door Three: Audit CAP
If the IRS finds the failure on examination before you find it yourself, you are in Audit CAP: correct the errors, sign a closing agreement, and pay a negotiated sanction. The sanction is capped in relation to the plan's Maximum Payment Amount and calibrated to the nature and duration of the failures, how many employees were affected, and — pointedly — whether the sponsor had internal controls that should have caught the problem earlier. Every dollar of Audit CAP exposure is avoidable by walking through doors one or two first.
The Five Failures Small Plans Actually Commit — and Their Standard Fixes
1. Late deposits of employee deferrals
The rule: participant contributions must hit the trust by the earliest date they can reasonably be segregated from company assets — not by the 15th business day of the following month, which is only a regulatory outer boundary that plan lawyers treat as a trap rather than a deadline. Plans with fewer than 100 participants have an explicit safe harbor: deposit within seven business days of withholding.
The fix: deposit everything late, plus lost earnings for the period the money sat in the company account. The fiduciary side is usually resolved through the DOL's Voluntary Fiduciary Correction Program, which includes a self-correction component for deposits made within 45 days of withholding — calculator-based, no formal filing. The tax side is separate: file Form 5330 and pay the 15% excise tax on the amount involved.
2. Missing an eligible employee
Somebody met the eligibility rules — age, service, entry date — and nobody enrolled them. The fix depends on speed. If you catch it within three months, correction is cheap: start the deferrals, make the associated employer match, and no make-up contribution is required. Past that window, the standard correction is a qualified nonelective contribution equal to 25% of the employee's missed deferral opportunity — the employee's compensation for the missed period multiplied by the average deferral rate of their employee group — plus matching contributions, plus earnings. The pattern is consistent across EPCRS: correction cost roughly doubles when you find things late.
3. The wrong match, or failed ADP/ACP tests
An employer match computed against the wrong definition of compensation, or a nondiscrimination test the plan failed and ignored. The principle is that corrections must put participants where they would have been had the plan operated correctly: make-up contributions plus earnings. Failed ADP and ACP tests are corrected with qualified nonelective contributions for non-highly compensated employees, and a 10% excise tax on the shortfall comes with the failure.
4. Plan loan failures
A participant loan that exceeded the Section 72(p) limits when it was issued, or one that went into default because repayments stopped through a payroll hiccup. Corrective options include re-amortizing the outstanding balance over the remaining term, curing the missed payments, or replacing the loan with a distribution — with the right method depending on whether the loan was defective at origination or defaulted later. Owner and officer loans get extra scrutiny under the prohibited transaction rules, and VCP is the door for loan failures SCP can't cover.
5. Missed required minimum distributions
A departed participant turned 73 or 75 and nobody was watching. Correction is mechanical — distribute the missed RMD plus earnings — but the excise tax on the participant is punishing, and only VCP can waive it. This failure is almost always a data problem: the plan lost track of a former employee. A terminated-participant census reviewed annually is cheaper than the correction.
A Correction You Can't Prove Is a Correction That Didn't Happen
Self-correction has no filing, which means the burden of proof sits entirely in your records. A defensible SCP file contains:
- A memorandum identifying the failure, how it was discovered, and the correction period analysis showing why SCP was available
- The calculations behind corrective contributions and earnings
- Proof the corrections actually moved money — dated entries from the operating account into the trust
- The procedural change that prevents recurrence, dated and implemented
That last element is not decorative. Internal controls are what made SCP available in the first place, and the same documentation is what convinces an examiner years later that the quiet fix in 2023 was a real correction rather than an unreported failure.
Where Bookkeeping Earns Its Keep
Almost every failure above is at heart a reconciliation failure: payroll withholding that didn't reach the trust on time, an eligibility date nobody compared against the census, a loan repayment that stopped when someone changed payroll systems. The controls that prevent them — and the evidence that cures them — are bookkeeping artifacts: a payroll register reconciled line by line against trust deposits every month, each entry dated; a compensation definition in the ledger that matches the plan document's; a dated audit trail you can hand an examiner.
That is also the case for keeping those records in a ledger you control end to end. When the question is "what is the earliest date these deferrals could reasonably have been segregated," an append-only, dated record of when money was withheld and when it moved is about the strongest answer a small employer can produce. A plain-text ledger gives you exactly that; the Fava dashboard puts a live view over the same data, and the docs cover how to structure accounts for payroll and trust transfers.
Keep a Plan That Can Be Defended
A retirement plan mistake is rarely a scandal; it is usually a Tuesday. Someone changed payroll processors, an entry date passed unremarked, a deposit slipped a week. What separates a footnote from a disqualification event is whether the sponsor had the controls to notice and the records to prove the fix.
Run the reconciliation monthly, know which door the failure needs — self-correct inside the window, file VCP when you must — and keep the paper. The IRS built EPCRS on the assumption that you would err; the rest of the system is up to you.
Simplify Your Financial Management
Retirement-plan compliance is, at bottom, a record-keeping discipline: dated deposits, reconciled payroll, a defensible audit trail. Beancount.io provides plain-text accounting that is transparent, version-controlled, and AI-ready, so every correction you make carries its own evidence. Get started for free and keep your financial records as auditable as your plan deserves.