How to verify income with 1099s — the lender checklist

Four core types: (1) personal and business tax returns (typically 2 years), (2) business bank statements (typically 12-24 months), (3) profit-and-loss statements (year-to-date, CPA-prepared preferred), and (4) a CPA letter — particularly for add-back analysis or to explain a one-time income decline. Some lenders also accept 1099-NEC and 1099-K forms directly for gig-platform borrowers.

CFPB's ability-to-repay rule (Reg Z §1026.43) requires lenders on covered loans to make a good-faith determination that the borrower can repay. W-2 income is verifiable through one employer call. 1099 income requires reconstructing the borrower's actual cash flow from multiple sources — which is why the documentation package is heavier.

It depends on the product. Conventional mortgage and VA: 24 months. FHA: 24 months default, 12 with prior W-2 in same field. Personal loan (prime): 24 months typical, some accept 12. SBA: 2 years tax returns. MCA / revenue-based: 3-12 months of deposit history is often enough. Bank-statement non-QM mortgage: 12-24 months.

A non-QM (non-Qualified Mortgage or non-conforming personal loan) product that underwrites on 12-24 months of business bank statement deposits instead of tax returns. Pencils when your tax returns show too little qualifying income because of legitimate but aggressive deductions. Rate premium is typically 1-2 points above conforming pricing.

Lenders weight CPA-prepared P&Ls more heavily because the CPA carries professional liability (PCAOB / AICPA standards) for the numbers they put their name on. Self-prepared P&Ls are accepted on smaller-dollar products but often require additional documentation (bank statements, deposit verification) to compensate.

An add-back letter is a CPA-prepared document that walks the lender through the legitimate non-cash and discretionary deductions on the borrower's tax return that should be added back to qualifying income. Standard add-backs: depreciation, depletion, amortization, business-use-of-home, casualty losses, and certain owner-discretionary expenses. The CPA signs and dates the letter; the underwriter applies the adjustments to the file.

Almost never. Unreported cash income doesn't appear on the documents lenders accept and creates a separate ATR risk for the lender — if you can't prove you reported it to the IRS, the lender can't count it. Bank-statement loans technically count deposits regardless of source, but unexplained large cash deposits are red-flagged for sourcing.

Platform 1099-NEC or 1099-K plus the deposit history matching the form. Schedule C on the tax return reports the net (gross minus platform fees). Most lenders accept 24 months of platform 1099s plus deposit verification; some specialized lenders pull the data directly from the platform via API for the cleanest underwriting.

Each business gets its own documentation set — separate Schedule C / 1120-S / K-1 per entity, separate bank statements per business. The underwriter aggregates qualifying income across all entities but needs to see each one independently. This is where files get heavy — a borrower with 3 entities and 2 years of history sends 12+ statements plus 3 returns each year.

CFPB Regulation Z §1026.43 (the ability-to-repay rule) requires lenders on consumer-purpose covered loans to verify income before lending. For self-employed borrowers, that verification process is what drives the heavy documentation package. ATR doesn't apply to business-purpose loans (most SBA and commercial lending is exempt), which is one reason business lending often has faster documentation cycles than consumer lending for the same borrower.

Yes. A Federal Reserve Bank of St. Louis analysis of over 30 million mortgage applications filed between 2018 and 2024 found that aggregate denial rates widened from 12.2% of applicants to 15.7% of applicants during the 2022-2023 rate-tightening cycle, driven mainly through the debt-to-income channel. Self-employed borrowers feel that swing harder than W-2 borrowers — a thin or inconsistent income file is exactly the kind of file that gets pushed to the denial side when DTI tolerances tighten, which is why clean 2-year documentation matters more in a higher-rate environment, not less. Source: Federal Reserve Bank of St. Louis, "The Determinants of Mortgage Denial" (stlouisfed.org, 2026).