The Australian Taxation Office (ATO) cross-references over 2.7 billion data points from banks, employers, government agencies, and digital platforms against taxpayer returns each year. Income discrepancies, overclaimed deductions, BAS-to-tax-return variances, and unpaid superannuation are among the most common triggers that flag businesses for ATO audit selection. Cash-intensive industries, including construction, hospitality, and trades, face elevated scrutiny through ATO benchmarking across 100+ sectors.
Penalties for errors range from 25% to 75% of the tax shortfall, though voluntary disclosure before audit notification reduces penalties by up to 80%. Understanding which triggers the ATO monitors, and addressing compliance gaps before lodgement, is the most effective defence against audit selection.
How the ATO Selects Taxpayers for Audit
The ATO selects audit targets through automated data-matching systems that compare tax returns against information received from over 600 third-party sources, including banks, crypto exchanges, property registries, employers, and international tax authorities. The ATO’s data-matching program detects compliance gaps across multiple tax obligations using real-time feeds from financial institutions, digital platforms, and government agencies.
Each year, the ATO processes this data using 60+ identity-matching techniques to verify that reported income, deductions, and obligations align with third-party records. Selection operates through three primary pathways: automated data-matching flags where declared figures conflict with external data, industry benchmarking that identifies businesses outside ATO norms for their sector, and tip-offs from employees, competitors, or the public.
The ATO’s annual compliance program sets specific focus areas each financial year. For 2025-26, rental property deductions, work-related expenses, undeclared cryptocurrency gains, and gig economy income sit at the top of the priority list. A review (an initial check, often resolved quickly) differs from a full audit, which involves an in-depth examination of records and can extend for months.
12 Triggers That Flag an ATO Audit in 2026
The ATO flags taxpayers for audit based on specific data discrepancies, behavioural patterns, and compliance gaps detected through automated matching and industry benchmarking. The ATO’s 2025-26 compliance focus areas confirm rental deductions, work-related expenses, and undeclared platform income as top priorities this financial year.
1. Unreported or understated income
The ATO matches bank interest, dividends, employer payments, and platform income against declared figures. Any mismatch between ATO pre-fill data and the lodged tax return raises an automated flag.
2. Excessive deductions relative to income or industry
Work-related claims that exceed ATO benchmarks for your occupation attract scrutiny. The ATO compares your deductions against those of peers in the same income bracket and role.
3. BAS and tax return variances
Discrepancies between amounts reported on Business Activity Statements and the corresponding annual tax return are a direct escalation trigger. PAYG withholding, GST, and turnover figures must reconcile.
4. Late or non-lodgement of returns
A pattern of overdue BAS, income tax returns, or FBT returns signals poor compliance discipline. Late lodgement penalties compound per 28-day period, and the ATO treats persistent non-lodgers as high-risk.
5. Unpaid or late superannuation guarantee
Single Touch Payroll (STP) data allows the ATO to identify Superannuation Guarantee (SG) shortfalls in near real-time. From mid-2026, Payday Super requires employers to remit super alongside wages, making late payments instantly visible.
6. Cash business with low declared turnover
Businesses operating predominantly in cash attract automatic benchmarking. If declared turnover falls below ATO industry norms without a documented explanation, the ATO assumes undeclared revenue.
7. Lifestyle-to-income mismatch
Registering a luxury vehicle, purchasing property, or maintaining assets inconsistent with reported income triggers the ATO’s Lifestyle Assets data-matching program. The ATO cross-references motor vehicle registries, land title offices, insurance records, and publicly visible social media activity.
8. Rental property deduction errors
Recent ATO audits found errors in 9 out of 10 rental property returns reviewed. Common issues include claiming capital improvements as repairs, incorrect interest apportionment, and deducting expenses on properties not genuinely available for rent.
9. Cryptocurrency and digital asset non-reporting
Australian crypto exchanges report transaction data directly to the ATO. Failing to declare capital gains on disposals, staking rewards as assessable income, or crypto-to-crypto swaps as CGT events flags an immediate discrepancy.
10. International transactions and foreign income
The Common Reporting Standard (CRS) gives the ATO access to offshore bank account and investment data from 100+ countries. Material fund transfers and transfer pricing arrangements involving foreign entities are standing audit priorities.
11. Division 7A and trust distribution issues
Private company loans to shareholders that fail to meet Division 7A loan agreement requirements, and trust distributions lacking genuine entitlement, are 2025-26 ATO focus areas for privately owned groups.
12. Contractor misclassification and FBT gaps
Engaging workers as contractors when the arrangement resembles employment avoids PAYG withholding and superannuation obligations. The ATO cross-checks contractor payments against STP and ABN data. Motor vehicles purchased through a business without corresponding Fringe Benefits Tax (FBT) reporting also trigger review.
Industries the ATO Targets With Higher Audit Rates
The ATO compiles income and expense statistics from over 1.5 million businesses across more than 100 industries to establish performance benchmarks that identify outliers for review. If your business reports turnover, margins, or expense ratios significantly outside ATO norms for your sector, that deviation alone can trigger a closer examination.
Consistently targeted sectors include construction, hospitality, beauty and personal services, property and real estate, retail, and transport. Cash-intensive businesses face baseline elevated risk because the ATO assumes a higher potential for undeclared income where electronic transaction records are limited.
Businesses scaling into new complexity face a different category of trigger. Growing from $5 million to $20 million in turnover introduces new layers: international expansion, R&D Tax Incentive claims, multi-entity structures, and related-party transactions. The ATO actively monitors businesses entering these thresholds, and the audit risk profile shifts as organisational complexity increases.
How a Review Escalates to a Full ATO Audit
A variance between Business Activity Statement figures and annual tax return disclosures is one of the fastest pathways from an initial ATO review to a full compliance audit. The typical escalation follows a predictable sequence:
Data-matching flag → ATO information request → Compliance review → Full audit
STP data feeds give the ATO real-time visibility into payroll, PAYG withholding, and super payments. Any inconsistency between STP submissions and BAS figures triggers automated alerts that can initiate this chain. Understanding BAS lodgement due dates and late penalties is critical to avoiding the cascading issues that escalate a review into a full audit.
Scope broadening is a significant risk. An audit that begins as a superannuation guarantee check can expand to cover income tax, GST, and FBT if the initial review reveals wider issues. The ATO can also proceed directly to audit without a review stage in cases involving suspected fraud or high-risk arrangements.
How To Reduce Your ATO Audit Risk
Proactive reconciliation of BAS and tax return figures, accurate record-keeping for a minimum of five years, and timely lodgement across all tax obligations are the strongest defences against ATO audit selection.
- Reconcile BAS to your tax return quarterly at a minimum to catch variances before annual lodgement.
- Retain substantiation records for a minimum of five years. CGT assets require records for the entire holding period plus five years after disposal.
- Lodge all obligations by their statutory due dates, including BAS, income tax, FBT, and PAYG summaries.
- Benchmark your own figures against ATO industry norms before lodging. If your numbers fall outside expected ranges, prepare documented explanations.
- Disclose errors voluntarily before ATO contact. Unprompted voluntary disclosure reduces penalties by up to 80% and can eliminate them for shortfalls under $1,000. A structured approach to ATO audit readiness protects your business from both audit selection and adverse outcomes if a review occurs.
What Penalties Apply if the ATO Finds Errors
ATO audit penalties range from 25% of the tax shortfall for failure to take reasonable care to 75% for intentional disregard of tax law.
- 25% shortfall penalty: Failure to take reasonable care (careless errors, poor records)
- 50% shortfall penalty: Recklessness (disregard for accuracy without intent to evade)
- 75% shortfall penalty: Intentional disregard of tax law (deliberate underreporting or false claims)
- General Interest Charge (GIC): Applies on unpaid tax from the original due date, compounding daily
- Voluntary disclosure before audit notification reduces penalties by up to 80%. Disclosure during an active audit still reduces penalties by 20%
- Criminal prosecution is reserved for serious offences involving fraud or deliberate evasion
Book a Complimentary 30-Minute Tax Compliance Strategy Session
Blackwattle Tax’s Chartered Accountants benchmark your tax position against ATO industry norms, identify compliance gaps before they trigger audit selection, and structure your obligations for the lowest-risk lodgement outcome. If your business is growing, expanding internationally, or claiming R&D incentives, a pre-lodgement review is the most effective audit defence.
Frequently Asked Questions
How far back can the ATO audit?
The ATO can review returns for two years from the date of assessment for most individuals and small businesses, and four years for larger entities. There is no time limit if fraud or evasion is suspected.
Does the ATO audit randomly?
Most ATO audits result from data-matching discrepancies and risk scoring rather than random selection. The vast majority are triggered by specific red flags in lodged returns.
What should I do if I receive an ATO audit notification?
Respond within 28 days. Engage a registered tax agent or Chartered Accountant immediately to review the scope, gather required documentation, and coordinate your response.
Can an ATO review become a criminal investigation?
Yes. If the ATO uncovers evidence of fraud or deliberate evasion during a review, the matter can be referred for criminal investigation. Voluntary disclosure before this stage significantly reduces exposure.
Does audit insurance cover penalties?
No. Audit insurance covers professional fees incurred in responding to an ATO audit, but does not cover tax shortfalls, penalties, or interest charges.
Disclaimer: This article provides general information only and does not constitute legal or tax advice. For personalised guidance, consult a registered tax agent.
Schedule a FREE 30-minute consultation today to discover how we can help you make strategic decisions and streamline your business operations.
Stay informed and empowered by subscribing to our monthly newsletter, where you’ll receive valuable insights on business advice, investment tips, and strategic tax planning.
Disclaimer: We endeavour to make sure the information provided in this guidance is up to date and accurate. Please note, that the information is only intended to be a guide, with a general overview of information. This guidance is not a comprehensive document and should not be interpreted as legal advice or tax advice. The information is general in nature. You should seek the assistance of a professional opinion for any legal and tax issues related to your personal circumstances.