An ATO audit can feel confronting, particularly when you are already focused on customers, staff, cash flow and day-to-day operations. The important point is that an audit is a process for checking whether tax, GST, PAYG withholding, superannuation or other obligations have been reported correctly. It is not, by itself, proof that your business has done anything wrong.
Knowing what an audit involves, what records matter and how to respond can make a meaningful difference to the time, cost and stress involved. A calm, organised response also helps ensure the ATO receives a clear explanation of your business’s actual circumstances.
What an ATO tax audit is, and how it differs from a review
Australia’s tax system largely operates on self-assessment. This means the ATO generally relies on the information businesses and individuals provide in tax returns, BAS statements and other reports, while retaining the ability to check that information later.
An ATO review is usually an earlier-stage enquiry. The ATO may request information to better understand your business, test a potential risk or decide whether no further action is needed. A review can cover financial records, working papers, business processes and explanations for particular transactions.
An audit is generally more detailed. It is usually conducted after the ATO has identified an issue it wants to examine more closely, and it involves verifying the facts and evidence needed to reach a position under the law. The ATO may seek documents such as contracts, invoices, bank statements, accounting records, payroll information and correspondence.
The distinction matters because a review does not always become an audit. However, a review should still be taken seriously. Early, accurate and well-supported responses may help resolve questions before they develop into a more intensive compliance process.
For many small businesses, an audit may focus on one area rather than every aspect of the business. For example, it may concern GST reporting, deductions, cash sales, contractor arrangements, employee entitlements, trust distributions, company loans or the treatment of a particular transaction.
Why a business may come to the ATO’s attention
The ATO uses information reported by taxpayers, data from third parties and analytical processes to identify possible inconsistencies or risks. A difference does not necessarily mean there has been an error. It may simply mean the ATO needs more information to understand a result that looks unusual on the data available to it.
Common areas that may prompt questions include:
- income reported in tax returns or BAS statements that does not appear to align with available third-party information
- deductions that are not adequately supported, or that appear to include a private component
- GST credits claimed without appropriate tax invoices or evidence of business use
- large or unexplained movements in sales, margins, expenses, assets, loans or cash flow
- late or inconsistent lodgments
- payments to business owners, associates or related entities that are not clearly documented
- worker arrangements where the legal and practical position may differ from the labels used in contracts or payroll systems
- incomplete records, particularly where transactions are cash-based or spread across multiple systems.
It is worth avoiding the assumption that only businesses with poor compliance are reviewed. A business can receive an enquiry because of data matching, industry-based risk work, changes in its financial position or a transaction that requires clarification.
The practical lesson is simple: your reported tax position should be capable of being explained by records, commercial reasoning and a consistent accounting trail. If an item is unusual but legitimate, it is useful to have the supporting documents and explanation ready before the ATO asks.
What to expect after receiving ATO contact
The first contact may be a letter, phone call, secure message or formal notice. It should identify the relevant tax periods, the information requested and the response timeframe. Read it carefully before responding, and do not assume the request is limited to the documents specifically named in the first paragraph.
The ATO may initially ask for information informally. If the information is not provided, is incomplete or needs to be obtained under a formal process, the Commissioner has statutory powers to require a person to provide information, attend and give evidence, or produce documents relevant to the administration of a taxation law.
The audit process often follows this general pattern:
Initial notification
The ATO advises that it is reviewing or auditing particular obligations, transactions or periods.
Information gathering
The business is asked for records, explanations and supporting material. This may include accounting reports, source documents, contracts and records held by third parties.
Discussion of issues
The ATO may ask follow-up questions, hold meetings or seek clarification about how the business operates and why a particular tax treatment was adopted.
Preliminary position
Before finalising an outcome, the ATO may set out its preliminary view and give the taxpayer an opportunity to respond with further evidence or submissions.
Outcome and next steps
The matter may be closed with no adjustment, resolved through agreed corrections, or result in an amended assessment, liability, interest or penalty consideration.
An ATO officer may also seek to inspect records at your premises. The legislation provides authorised officers with access powers, including the ability to enter premises at reasonable times and inspect, copy or extract documents and other relevant material. An occupier can ask an officer to produce written authority.
Do not ignore contact from the ATO, even if you believe the enquiry is based on a misunderstanding. Missing a deadline can create unnecessary complications and may limit the opportunity to explain the facts properly. If you need more time, seek an extension as early as possible and give a realistic reason.
Your obligations and rights during an audit
A cooperative approach is usually the most effective one, but cooperation does not mean responding without checking the facts. Your business should provide complete, accurate information while ensuring it understands what is being asked and why each document is relevant.
Business owners remain responsible for their tax affairs even where bookkeeping, payroll or tax work has been delegated to an employee, bookkeeper or registered agent. That makes oversight important. You should know where key records are held, who can access them and whether the information lodged with the ATO agrees with the underlying accounts.
You should also understand that some documents may require careful handling. Legal professional privilege may protect certain confidential communications with lawyers. The ATO also recognises limited administrative concessions in relation to some accountants’ working papers and corporate board advice. These issues can be complex, so obtain legal or tax advice before making a privilege claim, withholding documents or agreeing to provide material that may be sensitive.
During an audit, good practice includes:
- keeping a copy of every request and response
- recording telephone discussions, including dates, attendees and agreed actions
- asking for clarification where a request is unclear or overly broad
- providing documents in an organised format, with clear file names and explanatory notes
- identifying information that cannot be located, rather than guessing or creating a replacement record
- ensuring statements made to the ATO are checked by the relevant people before they are sent
- keeping your adviser informed of all direct contact with the ATO.
It is also important not to alter, backdate or destroy records after receiving an enquiry. If a record is missing, explain that honestly and provide any available supporting evidence, such as bank records, supplier correspondence, calendar entries or contemporaneous notes.
Records are your strongest audit defence
Good record keeping is not simply an administrative task. It is the foundation of a defensible tax position.
The general income tax record-keeping rules require a person carrying on a business to keep records that record and explain transactions and other acts relevant to their tax affairs. Records must allow tax liabilities to be readily determined. The general retention period is five years, although some circumstances require records to be retained longer.
For a typical small business, useful records may include:
- sales invoices, point-of-sale reports and online marketplace statements
- bank statements, loan records and merchant facility reports
- supplier invoices, receipts and expense claims
- payroll records, employment agreements and superannuation payment evidence
- BAS workpapers and GST reconciliation reports
- annual financial statements and income tax return workpapers
- asset purchase documents, depreciation schedules and disposal records
- lease agreements, insurance documents and major customer or supplier contracts
- documents supporting private-use adjustments for expenses with both business and personal use
- records of related-party transactions, director or shareholder loans, trust resolutions and distributions where relevant.
Digital accounting systems can make record retrieval easier, but only if the information is complete and retained properly. A cloud-based system does not automatically solve record-keeping problems if invoices are missing, bank feeds are unreconciled or users can change historical entries without an audit trail.
A practical scenario
Imagine a trades business receives an ATO enquiry about income and vehicle expenses. The owner has lodged tax returns on time, but cash jobs were recorded separately in a diary before being entered into the accounting system. Some vehicle costs were paid from a personal bank account, and there is no clear record of business versus private use.
The issue may not be whether every expense is invalid. The difficulty is proving the correct amount. If the business can provide job records, bank deposits, invoices, diary entries, fuel receipts, odometer records and a clear reconciliation, it is in a much stronger position. If the records are scattered or incomplete, the business may spend far more time reconstructing the position and may have less ability to support the claims made.
How to respond effectively if your business is audited
An audit response should be managed like an important business project. Assign responsibility, preserve records and work to a clear timetable. If you use an accountant or registered tax agent, involve them early so they can help coordinate the response and ensure the information is presented consistently.
Start by identifying exactly what the ATO is asking for. Create a request register showing:
- the request date
- the due date
- the tax period involved
- the documents or questions requested
- the person responsible for gathering the information
- the status of the response
- any follow-up questions or agreed extensions.
Do not send a large volume of unreviewed material simply to meet a deadline. That can create confusion, reveal irrelevant information and make it harder to explain the key facts. At the same time, do not selectively omit documents that are directly relevant. The aim is a complete, accurate and well-organised response.
Where an error is identified, take advice promptly. In some circumstances, correcting an error voluntarily or cooperating fully may be relevant to how penalties are administered. The ATO can impose administrative penalties for failures to meet tax obligations, including false or misleading statements, but it also has discretion to remit penalties in appropriate circumstances.
If you disagree with the ATO’s position, do not treat the matter as automatically final. Depending on the circumstances, options may include further discussion, facilitation, an independent review for eligible small businesses, a formal objection and external review or appeal avenues. An objection should clearly identify what is disputed, why it is disputed and the evidence supporting your position.
Independent advice is particularly valuable where the audit involves complex legal interpretation, related-party dealings, significant liabilities, serious penalty concerns or allegations of intentional non-compliance.
Reducing audit stress before it happens
No business can guarantee it will never receive an ATO enquiry. What you can do is make your business easier to understand, easier to verify and less likely to be disrupted if questions arise.
Build the following habits into your regular bookkeeping and tax processes:
- reconcile bank accounts, loans, payroll and GST reports regularly
- review BAS and tax return figures against management reports before lodgment
- retain source documents at the time a transaction occurs
- separate private and business expenditure wherever possible
- document unusual transactions and related-party arrangements when they happen
- keep written agreements for material commercial arrangements
- investigate significant movements in sales, expenses, margins or tax outcomes
- ensure your accountant receives complete information, not just a year-end bank statement
- seek advice before implementing restructures, asset sales, trust distributions, loans or other significant transactions.
An audit is easier to manage when your records tell a coherent story. If the accounting system, bank accounts, invoices, contracts and tax returns all support one another, the process is usually more straightforward than trying to recreate decisions months or years later.
The key takeaway
An ATO audit is a serious process, but it does not need to become overwhelming. Respond early, keep communications professional, provide accurate information and make sure your position is supported by reliable records and a clear explanation.
This article is general information only and is not personal financial or tax advice. Tax outcomes depend on your business structure, records, transactions and circumstances. Speak with a registered tax agent or accountant, such as Ample Finance, for advice tailored to your situation.