What causes you to get audited by the ATO?

What triggers an ATO audit is usually not a random selection, but a data mismatch or reporting anomaly. The ATO compares tax returns and BAS lodgements against third-party data, industry benchmarks and prior-year patterns. Common triggers include income that doesn’t align with bank deposits, unusual deduction ratios, or GST/BAS inconsistencies. These reviews are typically risk-based rather than accusation-driven. Strong reconciliation processes, consistent reporting and clear substantiation significantly reduce the likelihood of escalation beyond an initial review.

How does the ATO pick who to audit?

How does ATO pick who to audit? The ATO uses a risk-based selection system supported by automated data matching and analytics. Income reported on tax returns is compared with third-party reporting from banks, employers, and payment platforms. The ATO also assesses anomalies against industry patterns. When discrepancies or unusual fluctuations are detected, a review may be initiated. The objective is to address inconsistencies — not to randomly target compliant taxpayers.

How does the ATO notify you of an audit?

How does ATO notify of audit? The ATO typically contacts taxpayers through an official letter and/or secure online portals such as myGov or Online services for business . The notification outlines the review scope, relevant periods and response timeframe. It may request documents or explanations to substantiate claims. It is important to verify authenticity, respond by the due date and avoid ignoring correspondence. You can appoint your accountant or tax agent to manage communication on your behalf.

How far back can the ATO audit a small business?

How far back can the ATO audit depends on the “period of review” linked to your notice of assessment. In most cases, this is two or four years from the assessment date, depending on the taxpayer type. However, if fraud or evasion is involved, there is no time limit. This review timeframe is separate from record retention obligations, which typically require business records to be retained for at least 5 years. The exact window varies depending on circumstances.

What are the penalties if the ATO finds mistakes?

ATO audit penalties depend on both the shortfall amount and the behaviour that caused it. The ATO distinguishes between failing to take reasonable care, recklessness and intentional disregard. Interest charges such as the General Interest Charge (GIC) or Shortfall Interest Charge (SIC) may also apply. Importantly, making a voluntary disclosure before or during a review can reduce penalties in certain circumstances. Outcomes vary based on facts, documentation and the timing of engagement.

What is the ATO looking at this year for small business?

What the ATO is looking at this year typically includes small business focus areas such as income reporting accuracy, GST compliance, non-commercial losses, small business CGT concessions and record keeping standards. These focus areas guide education campaigns and targeted review activity. Businesses operating in areas under active scrutiny should ensure their BAS, tax returns and financial records are internally consistent and well-documented to minimise risk.