Typical triggers include sharp fluctuations in PPh 21 remittances, headcount growth that doesn’t match withholding trends, large year-end adjustments without schedules, frequent amended filings, and staff cost increases that don’t align with reported withholding. These patterns are easy to detect and often lead to document requests even without a formal audit.