A Melbourne tradie opens an ATO letter asking for documents supporting his last two tax returns. His first thought is predictable: “They're auditing me.” Usually, the situation is less dramatic. The ATO may be checking one deduction, reconciling income reported by a third party, or testing a GST position against information already in its system.
That distinction matters. Tax return audit risk isn't a verdict that you've done something wrong. It reflects how likely your return is to attract scrutiny, combined with the financial and legal consequences if the ATO finds an error, omission, or unsupported claim. The safest response isn't panic. It's understanding what the ATO can see, fixing weak records, and responding precisely.
What Audit Risk Really Means for Your Tax Return
A taxpayer sees a large deduction, a sudden drop in income, or an ATO request for records and assumes the return has been singled out. That is the wrong starting point. Tax return audit risk reflects how likely the ATO is to scrutinise a return, how much the tax position could change, and whether the taxpayer can support each figure with reliable evidence.
The ATO's approach is risk-based and data-driven, rather than a random sweep of ordinary taxpayers. It assesses all taxpayers, while less than 5% of the population requires correction because of non-compliance, according to Australian parliamentary material on tax administration and compliance. A full audit is uncommon for an individual or small business, but mismatched information, unusual claims, and weak records can push a return into review.
The first contact may be a risk review, a focused check of particular figures or circumstances. The ATO can compare your return with third-party information and ask for an explanation. A desktop audit usually requires supporting material such as invoices, bank records, logbooks, calculations, or contracts. A deeper audit examines the return and underlying records in greater detail, and may also consider business processes, interviews, or site information.
The ATO describes audits as more extensive than risk reviews and uses them where a material underpayment of income tax, GST, or excise presents a risk, as set out in its guidance on audits and taxpayer records. An evidence request is therefore a demand for proof, not automatic proof of wrongdoing.
Practical rule: Treat every ATO request as a deadline-driven evidence exercise. Read the scope carefully, gather only relevant records, and answer each question directly.
Assess your position across four areas:
- Selection risk: How likely is scrutiny?
- Error exposure: How much tax could change?
- Evidence strength: Can source documents support the calculation?
- Behavioural risk: Do your records show consistent processes?
For a clear explanation of review and audit differences, see this guide to understanding tax audits in Australia. Make the return easy to reconcile and hard to misunderstand: every figure should trace to a source document.
How the ATO Decides Who Gets Reviewed
A return can look ordinary on your screen and still produce a clear ATO data signal. The ATO compares lodged returns, BAS, Single Touch Payroll records, property information, financial data, and other third-party reports. When those records do not reconcile, the return can move into a higher level of scrutiny without any complaint or random tip.
Three layers explain the gap between what feels risky to a taxpayer and what the ATO's systems flag.
Third-party data creates the first comparison
Employers, financial institutions, share registries, property systems, business registers, and other reporting bodies send information that can be matched against tax records. For a contractor, the ATO may compare income declared in the return with payment data reported by the business. For an employee, prefill information may reveal omitted interest, dividends, or investment distributions.
Many problems begin with how income is reported. A contractor might declare net receipts after informally subtracting expenses, while the payer reports the gross amount. The taxpayer sees a reasonable business result. The ATO sees two income figures that do not agree.
Check prefill data, invoices, bank deposits, payment summaries, and payer records before lodging. Report gross business income correctly, then claim eligible deductions separately.
Analytics identify unusual movement
Risk models compare current figures with earlier returns, occupation patterns, and industry benchmarks. A sharp fall in turnover, a new deduction category, repeated losses, or a substantial change in business-use percentages can prompt questions. A single unusual item may be explainable. A pattern that makes the entire return difficult to reconcile creates greater exposure.
A business claiming heavy motor vehicle use without a contemporaneous logbook has an evidence problem. The percentage may be accurate, but the taxpayer still needs records showing how it was calculated and separating business travel from private use.
High-risk transactions receive deeper attention
Property disposals, large capital gains, private-company payments, GST refunds, related-party arrangements, and SMSF compliance matters involve more complex tax treatment. The selection process can consider both the transaction's value and the likelihood that its treatment is incorrect.
The practical lesson is simple: focus less on whether a deduction feels large and more on whether your records match the ATO's data. Turnover mismatches, property dates that conflict with transfer information, and BAS figures that do not align with the income tax return are stronger warning signs than one carefully supported claim.
The ATO also directs assurance work toward higher-value and higher-risk areas. Its assurance activities have covered a substantial share of the corporate tax base by value, according to Parliamentary Joint Committee material on ATO assurance activity. Small businesses are not assessed like large corporate groups, but inaccurate or incomplete data still creates avoidable review risk. Reconcile connected records before lodgment, and keep the source documents ready to explain anything that differs.
Common ATO Audit Triggers and Red Flags
The ATO's most useful signals usually come from inconsistencies, unsupported claims, and transactions that don't fit the taxpayer's wider financial picture. A claim doesn't become invalid because it's large. It becomes vulnerable when the taxpayer can't reconcile it to income, business activity, private use, or source records.
Income mismatches
A contractor might receive payments reported by an agency but declare a different amount in the tax return because expenses were deducted before income was reported. The ATO sees the agency's figure and the contractor's figure, then asks why they differ.
Declare gross business income correctly, then claim eligible deductions separately. Review prefill information, invoices, bank deposits, and payment summaries before lodging.
Large or unusual deductions
A café claiming substantial home office costs in a small apartment needs clear evidence of the workspace, work-related use, actual costs, and calculation method. A sole trader claiming a new vehicle against a modest business also needs to establish business purpose, ownership, depreciation treatment, and private use.
Rounding is another warning sign. A deduction that always lands on a neat figure can look estimated rather than calculated. Keep the underlying invoices and workpapers, and claim only the portion you can explain.
Capital gains tax events
Property and investment transactions create several matching points. The contract date, settlement date, ownership history, main-residence use, rental periods, acquisition costs, improvement costs, and sale costs can all affect the calculation.
A taxpayer who claims a full main-residence exemption after renting out a property may need to explain the occupancy history. Someone who receives an inherited asset must retain the relevant estate and valuation records rather than guessing the cost base.
SMSF and private-group issues
The ATO identifies concerns in private groups such as incorrect deductions, misuse of the CGT discount, Division 7A failures, poor record keeping, and arrangements designed to obtain GST refunds improperly. SMSF risk also rises around related-party loans, in-house assets, and transactions that don't satisfy the sole-purpose test.
These matters need specialist review because a return can contain technically correct-looking figures while the underlying arrangement breaches a separate rule.
BAS and income tax inconsistencies
A business that reports one turnover figure through BAS and a materially different figure in its income tax return creates an immediate reconciliation problem. GST credits that exceed the purchases shown in the accounts create another.
The ATO's GST controls show how targeted this area has become. In 2022–23, the ATO completed 43,103 pre-issue refund checks and 26,796 post-issue refund checks, while the pre-issue refund strike rate reached 81.8%, according to the Australian National Audit Office report on GST administration. The report also recorded that 81.9% of GST audits completed that year produced an adjustment. These figures don't mean every business claiming GST will be audited. They show that refund and GST claims receive concentrated checking.
| Trigger | What It Looks Like | ATO Data Source |
|---|---|---|
| Income mismatch | Declared income doesn’t match payer or employer records | STP, payment reports, bank information |
| Unusual deduction | Claim doesn’t fit the taxpayer’s income, occupation, or records | Prior returns, industry comparisons, lodged schedules |
| CGT inconsistency | Property use, dates, or cost base don’t reconcile | Property transfer and asset information |
| SMSF concern | Related-party or fund transaction requires further testing | SMSF annual return and related records |
| BAS mismatch | BAS turnover, GST, or purchases conflict with the accounts or return | BAS, income tax return, bookkeeping data |
These triggers can compound. One mismatch may lead the ATO to examine the connected deductions, GST treatment, private use, and record quality. Use this guide to avoiding an ATO tax audit as a practical prompt to test each connected area before lodgment.
A Real Example of a Return Escalating into a Review
Consider a sole-trader plumber in suburban Sydney. He reported income of $78,000 and claimed $14,500 in work-related car expenses. The claim wasn't automatically wrong, but it represented a substantial deduction against the reported business income and required reliable evidence.
The ATO's risk system compared the vehicle claim with the return's broader figures. The deduction-to-income relationship looked unusual enough to trigger an automated risk review. The ATO sent a letter requesting substantiation, including receipts, travel records, and the calculation supporting the business-use portion.
The plumber had receipts for fuel and repairs, but his logbook wasn't complete. He had reconstructed some business kilometres from memory, which weakened the claim. He also needed to show that the vehicle expenses related to earning business income rather than private travel between home and ordinary places of work.
The response changed the result
He engaged an adviser, gathered the available invoices, separated private costs, and prepared a clear reconciliation. The evidence supported only part of the original claim, so the deduction was reduced by half. The taxpayer was assessed on the lower figure, and the example assumes no penalty applied because he cooperated and supplied the records requested.
The lesson isn't that every large vehicle claim will fail. The lesson is that the calculation must exist before the ATO asks for it. A claim based on year-end memory gives the ATO little reason to accept the full amount.
Evidence beats explanation: A well-organised logbook, invoices, and calculation usually carry more weight than a confident description of how the vehicle was used.
Responding promptly also limits escalation. Ignoring the letter, sending unrelated documents, or revising figures without a line-by-line explanation can make a narrow review harder to close.
Practical Ways to Reduce Your Audit Risk Before Lodgment
Audit-risk management starts in the bookkeeping file, not when an ATO letter arrives. A return becomes easier to defend when each figure traces back to a bank transaction, invoice, contract, logbook, or calculation.
Build the evidence as you trade
Use a cloud accounting platform to capture invoices and receipts as they arrive. Tools such as Xero, MYOB, or QuickBooks can help, but software doesn't fix poor coding. Review categories regularly and attach the document to the transaction.
Keep business and personal accounts separate. If you pay a private household bill from the business account, record it correctly as a private transaction or drawing. The ATO specifically identifies using business money or assets for personal benefit as a small-business behaviour that can attract scrutiny, as explained in its small-business audit guidance.
Reconcile before the numbers become permanent
Reconcile bank feeds, sales, purchases, payroll, GST, and BAS figures regularly. Monthly review is far safer than trying to reconstruct a year's activity during tax preparation.
Before lodging, compare:
- Income totals: Match invoices, deposits, payment reports, and prefill information.
- BAS figures: Tie reported turnover and GST to the general ledger and bank activity.
- Vehicle claims: Maintain a contemporaneous logbook and retain supporting costs.
- CGT calculations: Keep contracts, settlement statements, valuations, improvement invoices, and ownership records.
- Contractor payments: Retain invoices, ABN information, payment evidence, and the basis for the deduction.
The ATO generally expects relevant records to be kept for five years, and its record-keeping guidance says businesses must keep records that record and explain transactions relevant to tax law. The practical retention rule is covered in Australia's record-keeping requirements. Store records electronically if they're accessible, readable, and understandable.
Claim conservatively and lodge on time
Don't round deductions up to what feels fair. Calculate the actual business portion and keep the working paper. Declare side income, platform income, investment income, and crypto transactions rather than hoping a small amount stays invisible.
Review the prior year's return for recurring mistakes. Fixing the same coding issue year after year makes the pattern harder to explain. Also respond to pre-lodgment prompts, lodge on time, and avoid unexplained last-minute adjustments that create a sudden change from earlier reporting.
How EndureGo Tax Supports You During an ATO Review or Audit
An ATO review becomes manageable when someone controls the scope, evidence, and correspondence. EndureGo Tax can start with a triage call to identify the return, periods, issues, and response deadline. That prevents a common mistake, sending the ATO a disorganised collection of records without explaining what each document proves.
The next step is a gap review. The adviser gathers the lodged return, BAS records, bank statements, invoices, contracts, calculations, and relevant asset or vehicle records. The team then compares the ATO's questions with the filed position and identifies unsupported items before drafting a response.
A structured response protects your position
A written submission should reconcile each flagged item. It should state the amount claimed, the calculation method, the supporting evidence, and any correction required. If the original claim was wrong, correcting it early is usually more credible than defending a figure the records don't support.
Representation can also reduce disruption. An adviser can manage ATO correspondence, attend calls or interviews where appropriate, explain the accounting treatment, and respond to requests without pulling the business owner away from customers and staff. Where an amended assessment or penalty issue arises, the adviser can present the facts and request appropriate treatment where the taxpayer acted in good faith.
A registered tax agent isn't a shield against review. The value comes from accurate preparation, a complete evidence trail, and disciplined communication. Firms comparing their own visibility and client acquisition may also find accounting SEO with SEO2RANK useful when building a compliant advisory practice online.
Tax Return Audit Risk Questions Australian Taxpayers Ask
What's the difference between a risk review, a desktop audit, and a full audit?
A risk review is a focused check of figures or circumstances, often driven by data matching. A desktop audit requests documents and explanations without requiring a site visit. A full audit examines the return and underlying records in greater depth, potentially including interviews and business-process questions.
The ATO's guidance says audits are broader in scope than risk reviews. Your obligation at each stage is to read the scope, meet the deadline, provide relevant evidence, and avoid making unsupported statements.
How long should I keep tax records?
Keep BAS records, bank statements, invoices, logbooks, CGT documents, calculations, and elections for the required retention period. The ATO generally states five years from lodgment, and its documents supporting and verifying claims guidance also supports electronic storage where records remain accessible and understandable.
Incomplete records can lead to an amended assessment because the taxpayer may not prove the deduction, GST credit, or calculation.
Does late lodgment increase audit risk?
Late lodgment isn't automatically an audit trigger, but it can create compliance and debt-collection problems. It also gives the ATO another reason to examine whether the taxpayer's reporting and payment obligations are under control. Company directors and trustees should take overdue obligations seriously because separate penalty and liability issues can arise.
Lodge on time even if you need to manage payment separately. If a return is overdue, get the figures reconciled and address the outstanding lodgment rather than allowing the problem to grow.
Do work-related and home office deductions attract attention?
Legitimate deductions don't create a problem just because they're work-related. The ATO questions claims that lack a clear connection to income-producing activity, rely on estimates, include private use, or don't match the taxpayer's occupation and records.
For a home office claim, retain the calculation, eligible running costs, work-use basis, and evidence of the work arrangement. For vehicle expenses, record business travel contemporaneously. The dividing line is substantiation and genuine business purpose, not whether the claim exists.
Taking Action on Your Audit Risk This Week
Start with the records that would take longest to rebuild. Reconcile BAS figures to bank statements, check income against payer information, and remove deductions you can't support. Scan invoices, organise digital folders, and retain records for the required five-year period.
Then review special-risk areas. Document property dates and costs, test private use in mixed transactions, and check SMSF or private-company arrangements before lodgment. Don't wait for an ATO letter to discover that the number in the return came from an estimate.
A practical checklist is short:
- Reconcile BAS, accounts, and bank activity.
- Check prefill and third-party income.
- Review vehicle, home office, and contractor evidence.
- Document CGT events and cost-base calculations.
- Fix recurring errors from earlier returns.
- Lodge on time and save the final evidence pack.
If you want an independent review, ask a registered tax agent to examine your prior two years of returns and BAS lodgments before the ATO does. That review can identify mismatches while you still control the explanation.
EndureGo Tax helps individuals and small businesses prepare records, review tax returns and BAS, and manage ATO review or audit correspondence. Visit EndureGo Tax to arrange a practical assessment of your audit exposure and supporting documents.
