An ATO audit notice rarely comes with an explanation of why your business was selected. Most small business owners’ first reaction is to assume the worst, when in reality a large share of ATO contact starts as a routine check against data the ATO already holds, not a sign something’s necessarily wrong.
This guide covers what actually triggers ATO attention, what a review or audit involves, and the practical steps to take if you’re contacted.
ATO review vs ATO audit: what’s the difference
The ATO uses more than one level of scrutiny, and the terms get used loosely, so it’s worth being clear on what you’re actually facing:
- A review is typically a preliminary check of specific items, such as one deduction category or a single BAS period, often resolved through a request for more information.
- A full audit is a more detailed examination across your records and lodgements, usually covering a longer period and multiple aspects of your tax affairs.
Both are handled in a broadly similar way: understand exactly what’s being asked, then prepare a clear, complete response. The label on the letter matters less than getting that first step right.
What triggers an ATO audit for small business
The ATO doesn’t publish an exact formula, but the patterns that show up repeatedly across accounting firms’ experience with clients are consistent:
| Trigger | What it typically looks like |
|---|---|
| Income mismatches | Reported income doesn’t match data the ATO already holds from banks, payment platforms, and other third parties |
| Deductions outside industry benchmarks | Claims that sit well above what similar businesses in your industry typically claim |
| Cash-heavy business models | Businesses with a high proportion of cash transactions, where income is harder to independently verify |
| GST and BAS inconsistencies | Figures reported on your BAS that don’t reconcile with your income tax return or prior BAS periods |
| Late or missing lodgements | A pattern of overdue lodgements, or one lodged very late compared to your usual timing |
| Contractor vs employee misclassification | Workers treated as contractors where the actual working relationship looks more like employment |
| Lifestyle and asset mismatches | Assets or spending that don’t appear consistent with the income reported, drawn from sources like vehicle and property registries |
| Related-party transactions | Transactions between connected entities or family members that shift income or deductions in ways the ATO checks closely |
| Undeclared capital gains | Selling a business asset, property, or equipment without reporting the resulting gain |
Most of these come down to the ATO’s data-matching capability: it cross-checks what you’ve reported against records already held by banks, payment processors, government registries, and other government agencies, rather than starting from a blank page.
How far back can the ATO go?
For individuals and most small businesses, the ATO generally has 2 years from your notice of assessment to amend a return. Larger or more complex entities typically have 4 years. Where fraud or evasion is suspected, there is no time limit at all. This is one reason getting professional advice before lodging, rather than after, matters more than it might seem.
What to do if the ATO contacts you
- Read the notice properly before responding. Understand exactly what’s being asked, which years or periods it covers, and the deadline for your response.
- Don’t respond before you understand the scope. A rushed or incomplete answer can extend a straightforward review into something longer.
- Get your registered tax agent involved early, rather than after you’ve already started drafting a response. Consistent handling from the first letter matters more than most business owners expect.
- Gather the specific records requested, organised clearly rather than handed over as a raw pile of documents.
- If you find a genuine error yourself before the ATO raises it, consider a voluntary disclosure. Correcting it through your tax agent generally results in a better outcome than the ATO identifying the same error independently.
How to reduce your audit risk
None of this guarantees you’ll never be contacted, since some reviews are close to random, but it materially reduces both the odds and how straightforward any contact turns out to be:
- Keep business and personal finances separate, with a dedicated business account and card.
- Reconcile your accounts regularly rather than leaving it until year-end.
- Keep supporting records (receipts, invoices, logbooks) as you go, not reconstructed later from memory.
- Lodge on time, every time, even if a payment plan is needed for anything owing.
- Get advice before claiming a deduction or structuring a transaction that sits outside your industry’s norm, rather than after it’s already lodged.
Good bookkeeping and properly reconciled BAS lodgements do more to keep a business off the ATO’s radar than anything done after a notice has already arrived.
Frequently asked questions
Does being audited mean I’ve done something wrong?
Not necessarily. A review or audit can conclude with no changes at all. Some contact is close to random or part of broader industry-wide checks rather than a response to anything specific in your affairs.
How far back can the ATO look?
For individuals and most small businesses, the ATO generally has 2 years from your notice of assessment to amend a return. Larger or more complex entities typically have 4 years. Where fraud or evasion is suspected, there is no time limit at all. Confirm the specific period that applies to you rather than assuming a standard figure.
What if I discover an error myself before the ATO contacts me?
Making a voluntary disclosure through your registered tax agent generally leads to a better outcome than the ATO finding the same error first. It’s worth raising with your accountant as soon as you notice it, not once a notice has already arrived.
How long does an ATO audit typically take?
It varies with scope. A narrow review of one item can resolve in weeks; a full audit across multiple years and issues can run considerably longer, particularly if records need to be reconstructed.
Can my existing accountant represent me, or do I need someone else?
Your existing registered tax agent can generally represent you throughout, provided they’re familiar with your affairs and comfortable managing ATO correspondence directly. Continuity matters here: one adviser handling the process from the first letter to resolution keeps your explanation of events consistent.
What happens if the audit finds I owe more tax?
An outcome can range from no change, to an adjustment, to a liability plus possible penalties and interest. Where something is owed, a payment plan can usually be negotiated with the ATO rather than needing to pay a lump sum immediately.
If a letter from the ATO has landed in your inbox, or you’d rather get your record-keeping in shape before one ever does, Manraj Singh and his team can review your notice or your current setup and tell you plainly where you stand. See ATO correspondence and audit support or book a consultation directly.
