In 2024–25, the Australian Taxation Office (ATO) estimated $8.3 billion in revenue effects from audit actions and incorrect claims stopped, so understanding ATO audit triggers matters even if your business is ordinary and your intentions are sound. The strongest trigger is usually a pattern of mismatch between what you lodge and what the ATO can verify through other records.
A café owner opens an ATO compliance letter between supplier calls. The business hasn't concealed income, but its BAS figures don't quite reconcile with the accounting file, and a platform report shows receipts that weren't coded correctly. That kind of notice can feel sudden, yet it often reflects a data-led risk signal rather than a random decision.
Who this article is for: Australian sole traders, companies, professionals earning personal services income (PSI), property investors, SMSF trustees, migrants, cross-border clients and advisers responsible for accurate tax reporting.
Currency note: This article reflects Australian rules, thresholds and regulator guidance current as at 09/2026.
Table of Contents
- Understanding ATO Audit Triggers
- How the ATO Selects Taxpayers for Audit
- Common and Industry-Specific Audit Triggers
- Reducing Your Audit Risk With Practical Steps
- Responding to an ATO Audit Request
- When to Engage Professional Advice
Understanding ATO Audit Triggers
The ATO's approach has moved from predominantly manual checking towards data analytics, computer-assisted verification and risk scoring. The agency can compare lodged income, deductions and BAS information with third-party data, including employer reports, platform information and banking records. A mismatch doesn't prove an error, but it can move a return or activity statement from routine processing into a review.
The ATO describes a pathway in which an identified compliance risk may first lead to a review of a taxpayer's affairs, with the matter potentially escalating into an audit where the risk remains unresolved, fraud or evasion is suspected, or a transaction is considered high risk. The process is explained in the ATO's guidance on risk reviews and audit processes.
A small business can therefore attract attention without being deliberately non-compliant. A BAS-to-tax-return difference, unusually high deductions compared with income, repeated late lodgements or an unexplained refund pattern may create a risk profile that warrants questions. The practical response isn't to avoid legitimate claims. It's to make sure the claim is supportable, consistently recorded and capable of being explained.
Practical rule: A defensible tax position needs more than a reasonable result. It needs a clear trail from the source document to the accounting record and then to the lodged return.
Businesses that need help reviewing their controls can consider Everglow's audits and compliance support, particularly where tax, accounting and governance records overlap.
How the ATO Selects Taxpayers for Audit
The ATO can form a risk picture by comparing information across several reporting systems. For an individual, that may include employer data, pre-fill information and platform income. For a business, it may include bank feeds, payroll reporting, BAS information, annual tax returns and industry comparisons. The issue is often not one isolated transaction, but whether the records tell the same story.
A sole trader who reports modest sales on a BAS while platform receipts and bank deposits indicate a different level of activity may receive questions. A company whose payroll records don't align with its accounts may also need to explain the difference. These discrepancies can arise from timing, GST coding, private transactions, clearing accounts or incomplete bookkeeping, but the ATO's systems generally can't infer the explanation without supporting records.
Why ordinary businesses can become outliers
Benchmarking adds another layer. The ATO's compliance materials identify income discrepancies, unusually high deductions, BAS-to-tax-return mismatches and late lodgements as recurring risk indicators. A deduction does not become problematic just because it is larger than a peer's deduction. It becomes harder to defend when the amount is materially out of line with the business model, lacks evidence or sits alongside other inconsistencies.
The same principle applies to specialised arrangements. The ATO's private-group risk framework uses a likelihood score, meaning the propensity for a tax outcome the ATO doesn't agree with. In transfer pricing, related-party arrangements may fall within a lower-risk green zone when outcomes are tested against published risk benchmarks. Documentation of that testing can therefore matter as much as the numerical result.
The ATO's own compliance data illustrates the scale of this environment. Its 2024–25 annual report records $8.3 billion in estimated revenue effects from audit actions and incorrect claims stopped, while the ATO's GST compliance reporting records $3.8 billion in liabilities raised through compliance activities in 2024–25. These figures don't mean every taxpayer faces an audit. They do show why reconciliation and evidence deserve attention before lodgement.
Common and Industry-Specific Audit Triggers
The same data-matching architecture affects different taxpayers in different ways. A sole trader may have to reconcile merchant settlements and bank deposits. A property investor must separate income-producing expenses from private use. A migrant professional may need to classify income correctly across Australian and overseas activities.
Sole traders and PSI earners
For a sole trader, income discrepancies, high deductions and late lodgements are common areas of scrutiny. Cash receipts, payment platforms and bank deposits should be reconciled rather than treated as separate sources. PSI earners also need to consider whether income is personal services income and whether the relevant attribution and deduction rules have been applied.
A contractor may have ordinary business expenses, but an inconsistent classification between invoices, business records and the individual return can create questions. The right control is a documented reconciliation, not reducing a legitimate claim merely because it appears higher than expected.
Property investors and SMSF trustees
Rental property records need to show receipts and invoices for expenses, periods of personal use and periods when the property was a main residence. Ownership, purchase and disposal records also need to be retained for the required periods. A property investor should be able to explain how interest, repairs, capital works and private use were treated.
SMSF trustees face a different risk profile. Related-party dealings, valuations and transactions that don't reflect arm's-length terms can attract attention, especially where the fund's records don't support the reported position. Complex fund structures warrant professional review before a transaction is implemented.
Migrants and cross-border clients
New migrants and overseas founders can face classification issues rather than obvious under-reporting. Australian residency, foreign income, business ownership, PSI and the distinction between personal and entity activity need to be considered together. A return that omits information appearing in overseas or Australian records may create a mismatch even where the taxpayer misunderstood the reporting obligation.
Repeated late lodgements and poor records compound these risks. For a concise explanation of the consequences and management issues, see Everglow's guide to ATO fines for late lodgement.
Reducing Your Audit Risk With Practical Steps
Risk reduction starts before the return is prepared. Accurate, traceable figures that reconcile across the systems the ATO compares are the goal.
Reconcile reporting layers. Compare BAS figures with the ledger, bank feeds, payroll records, platform settlements and the annual tax return. Investigate timing differences rather than carrying them forward, because unexplained differences can resemble omitted income.
Keep supplier-issued evidence. For work-related expenses, written evidence should show the cost, supplier, nature and date, together with how the amount was calculated and connected to earning income. A bank or credit card statement alone is not enough. Records generally need to be retained for 5 years from lodgement, while claims of $300 or less may qualify for a limited exception if the expenditure and calculation can still be demonstrated. See Everglow's ATO record-keeping requirements guide and the ATO record-keeping requirements.
Separate private use. Rental owners should retain records of personal use and main-residence periods, invoices and ownership documents. These details can change the tax treatment of interest, repairs and other expenses, even where the underlying cost is genuine.
Review unusual transactions early. Crypto may create a CGT event when converted to Australian or foreign currency, or used to buy goods or services. It may also be a personal use asset, depending on how it is held and used. Keep transaction records and establish the treatment before lodgement.
Document related-party pricing. Businesses with offshore hubs or related-party arrangements should retain benchmark testing where applicable. A written explanation of the commercial rationale is far more useful than reconstructing it after a review notice arrives.
Taxpayers may also find this guide to prepare for an audit Florida useful for general document-organisation principles. Australian taxpayers must follow Australian rules.
Responding to an ATO Audit Request
An ATO notice should be read carefully before anyone starts exporting documents. Identify the period under review, the questions asked, the due date and whether the request concerns a narrow issue or a wider set of records.
For a sole trader, the response may include financial statements, bank reconciliations, invoices, expense evidence, BAS workings, platform reports and explanations for selected transactions. Send an organised response that maps each document to the relevant question. A large unlabelled folder may contain the information, but it makes the review harder for everyone.
A worked example
Dr Anya Sharma, a Sydney sole trader, receives a review request after her professional receipts, bank deposits and BAS sales don't align. Her decision is whether to reply immediately from incomplete bookkeeping or pause to reconcile the records and seek advice. If the discrepancy reflects timing and a platform settlement account, a reconciliation can explain it. If income was omitted, early correction and a clear explanation may be more appropriate than waiting for the ATO to identify every issue.
A useful payments-control reference is this checklist for payments compliance, though the tax treatment and response strategy should remain specific to the Australian facts.
Professional assistance becomes sensible when the request covers several periods, involves PSI or foreign income, or raises possible penalties. Everglow's documentation standards guidance can help establish a consistent evidence pack before a response is lodged.
When to Engage Professional Advice
Self-management may be adequate for a straightforward return with complete records and no unusual transactions. It becomes less comfortable when the ATO's question reaches across entities, years or tax regimes.
Consider advice before responding where a matter involves a complex SMSF structure, cross-border income, substantial crypto activity, related-party transactions, disputed deductions or a proposed amendment. A registered tax agent or specialist adviser can help define the scope, test the evidence and distinguish a genuine error from a difference caused by timing or classification.
The small-business income tax gap is a significant compliance concern. The ATO has stated that small business income tax represents 47% of the $58.2 billion total tax gap, and its published material records the small-business gap increasing from 15% to 17.4% over two years, reaching $27.2 billion. The ATO's methodology series also reports a small-business income tax gap of 15.9% in 2025. These figures describe an aggregate compliance estimate, not an individual taxpayer's guilt or risk, but they help explain the agency's continued focus on small-business data integrity.
An adviser can also help decide whether an error should be corrected through an amendment. Everglow's resource on amending tax returns provides context, but the right action depends on the facts, the period involved and the nature of the discrepancy.
Clean records and consistent reporting can reduce avoidable scrutiny, but they can't guarantee that the ATO won't review you. The appropriate response depends on your circumstances, the scope of the notice and the evidence supporting your position.
Frequently asked questions
What are the main ATO audit triggers?
Common triggers include income discrepancies, unusually high deductions, BAS-to-tax-return mismatches and repeated late lodgements. The ATO may also examine industry outliers, related-party arrangements, foreign income classification and records that don't reconcile with third-party data. A trigger is a reason for review, not proof that the taxpayer has done something wrong.
Can an ordinary small business be selected?
Yes. A business doesn't need to be large or deliberately non-compliant to receive questions. Bank feeds, employer reports, platform data, payroll information and lodged statements can create a risk signal when figures don't align. Accurate bookkeeping helps, but the records must also reconcile across reporting systems.
Is a large deduction automatically suspicious?
No. A large deduction may be commercially justified. The concern arises where the amount isn't supported, doesn't relate to income-producing activity, is treated incorrectly for GST, or sits outside the business's broader records without an explanation. Written evidence should show the supplier, cost, date, nature and calculation of the claim.
What records should a rental property owner keep?
Rental owners should keep receipts and invoices for expenses, together with records of personal use and periods when the property was a main residence. Buying, owning and selling records are also important. The ATO generally requires relevant rental records to be retained for the applicable period, including 5 years after disposal for buying, owning and selling records.
What should I do when the ATO contacts me?
Read the scope and deadline, then preserve the relevant records. Reconcile the figures before responding, prepare a document index and answer each question directly. Seek professional advice before replying if the matter involves several periods, foreign income, PSI, an SMSF, crypto, related parties or possible penalties.
If you would like clarity on how these principles may apply to your own circumstances, contact Everglow on 1300 913 929 or email contact@everglow.au.
To book directly: Book a meeting with Panbo.
Tags: ATO audit triggers, Australian tax compliance, BAS reconciliation, PSI tax, rental property tax, SMSF compliance, migrant tax Australia, tax record keeping
