The ATO audits more businesses than most people realise. And in 2025, their data-matching capabilities will have closed a lot of the gaps that used to slip through quietly.
If you’re running a small or medium-sized business in Melbourne, here’s the direct answer: the most common triggers come down to a few patterns. Income that doesn’t match what third parties are reporting. Deductions sit well outside industry benchmarks. BAS figures that tell a different story from your tax return. Late lodgements round it out. Most audits don’t start as full investigations; they start as a request for information. But that doesn’t make them any less disruptive.
How the ATO Actually Selects Who to Audit
It’s not random..
The ATO runs a data-matching operation that pulls information from banks, government agencies, share registries, digital platforms, and social media, then cross-references all of it against what you’ve lodged. If your figures don’t line up with what those sources are reporting, the ATO flags it.
The ATO also maintains industry benchmarks, financial ratios built from millions of lodgements across different sectors. If your cost of sales or labour ratio sits well outside what’s typical for your industry, especially if your total expenses look inflated against your turnover, the ATO will look closer.
In Melbourne, hospitality, construction, retail, and trades get the most ATO attention. Cash-heavy operations. High-volume, lower-paper-trail environments are where underreporting is historically more common.
That said, any business can trigger a review. The triggers aren’t industry-specific,, they’re pattern-specific.
The 7 Most Common ATO Audit Triggers for Melbourne SMBs
1. Income That Doesn’t Match Third-Party Data
This is the most straightforward trigger, and the one businesses most often underestimate.
The ATO receives data from banks and payment processors. Airbnb reports it. Uber reports it. Crypto exchanges are required to. So does Centrelink. If you’ve declared $180,000 in turnover but your bank deposits suggest something closer to $230,000, the ATO will catch it.
For Melbourne hospitality operators running Airbnb short-stay rentals alongside their primary business, this is a particularly live risk. Both income streams get reported independently and cross-checked against your return.
Reconcile your declared income against all available third-party statements before lodging. Every time.
2. Deductions That Sit Outside Industry Benchmarks
Claiming what you’re entitled to is your right. Claiming well beyond what’s typical for your industry without documentation to explain why is a red flag.
The ATO publishes benchmark ranges for different business types. If your motor vehicle expenses, home office claims, or repairs and maintenance are significantly higher than the industry average, expect questions. This applies equally to a Melbourne plumbing business with unusually high subcontractor costs and a professional services firm with travel claims that don’t match its client base.
Keep real-time records. Not a spreadsheet you reconstruct at tax time, actual contemporaneous documentation.
3. BAS Figures That Don’t Reconcile With Your Tax Return
This one catches more businesses than it should, and it’s largely avoidable.
If the total sales you’ve reported across four quarters of BAS don’t match the income figure in your return, the ATO will notice. The mismatch often comes down to how income and expenses are coded. Cash vs accrual accounting is a common culprit. So are timing differences, or something as simple as a data entry error.
The fix: make sure your accounting system codes income and expenses consistently across both BAS and annual reporting. Your bookkeeper or accountant should be across BAS preparation before every lodgement, not after.
4. Late or Missing Lodgements
Habitual late lodgement is a compliance signal in its own right.
The ATO interprets repeated lateness as a potential indicator of poor record-keeping, which raises the question of what else might be missing. It’s not just the late fees that become a problem. It’s the attention that follows.
If cash flow is tight and you’re worried you can’t pay what you owe, that’s a separate conversation. The ATO has payment plans. What they respond less well to is silence.
Lodge on time. Even if it’s a nil BAS return. Even if you can’t pay the full amount immediately.
5. Cash-Heavy Business Operations
Melbourne’s hospitality and trades sectors know this one well.
Businesses that deal primarily in cash face a higher baseline of ATO scrutiny, not because every cash business is doing something wrong, but because the risk of underreporting is objectively higher in those environments. The ATO knows it, and they factor it into their risk-profiling.
If you run a café, a construction business, or a trade where cash payments are common, the burden of transparency falls harder on you. Bank all cash takings daily. Maintain point-of-sale records. Make sure your declared income is consistent with what your banking history shows.
6. Consecutive Business Losses
Reporting losses year after year isn’t automatically a problem. Start-up phases happen. Some years are genuinely difficult.
But the ATO applies non-commercial loss rules to ensure that ongoing losses represent a genuine business, not a hobby being used to offset other taxable income. If your business has been reporting losses for three or more consecutive years, having clear documentation of your business plan, profit intent, and commercial activity becomes important.
The question the ATO is effectively asking: Is this a real business, or a personal expense vehicle? Your records need to answer that clearly.
7. GST Credits That Don’t Add Up
Unusually large GST refund claims, credits on purchases that aren’t GST-creditable, or sudden spikes in input tax credits that don’t match your trading patterns, all of these can trigger a GST audit.
This is particularly relevant for Melbourne construction businesses that make large property-related purchases in a single quarter. The claim might be completely legitimate. But if the documentation isn’t in order, a review becomes an extended process that it didn’t need to be.
Have the tax invoices. Know what’s creditable and what isn’t. Make sure your BAS agent has reviewed the return before it’s lodged.
What Actually Happens If You’re Selected
Most audits don’t start with a full investigation. They start with a Request for Information (RFI).
The ATO will write to you specifying the time period they’re focused on, typically two years for most small businesses, four years for more complex cases, and the areas they want to examine. This might be deductions, undeclared income, GST claims, super contributions, or PAYG withholding.
You’ll usually have two to four weeks to respond. If that’s not enough time, request an extension; the ATO is generally reasonable when you’re upfront about it.
If you have a bookkeeper or accountant managing your affairs, they’ll likely have most of what’s needed and can liaise with the ATO on your behalf. That intermediary role matters more than people realise. The way you respond, the tone, how complete your documentation is, and how fast you move, all shape how the review proceeds.
If, while pulling the documentation together, you discover an error in your return, disclose it voluntarily. The ATO responds significantly better to proactive disclosure than to errors they find themselves. Penalties for voluntary disclosure are typically lower than penalties applied after ATO detection.
What Melbourne Businesses Should Be Doing Now
Audit risk isn’t something you manage at tax time. It’s something you manage continuously.
Keep your books current. Quarterly reconciliations aren’t enough in a business that transacts daily. Use cloud accounting software such as Xero, MYOB, or QuickBooks that captures transactions in real time. Everything stays reconciled, and your records are audit-ready when you need them.
Reconcile before lodging. Every BAS lodgement should be checked against your income figures before it goes in. Not after.
Store documentation properly. Receipts, invoices, bank statements, and logbooks should be kept for at least five years. The ATO can request records going back four years for most small businesses, and longer if fraud is suspected.
Know your industry benchmarks. The ATO publishes them for most business types, worth checking before your return goes in. If your figures sit outside the typical range, that’s a conversation worth having with your bookkeeper before lodgement, not after.
Work with a registered BAS agent or accountant. Not because it eliminates audit risk, it doesn’t, but because accurate, professionally reviewed lodgements are less likely to contain the errors and inconsistencies that trigger reviews in the first place.
The data sources keep expanding. Crypto exchanges, digital platforms, and payment processors, each year, there’s more being cross-referenced against what you’ve lodged. The businesses that manage audit risk well aren’t doing anything extraordinary. They’re keeping accurate records, lodging on time, and working with people who know what ATO-compliant books actually look like.
If your payroll, BAS, or bookkeeping has been running on autopilot and you’re not entirely confident in what’s been lodged, that’s usually worth reviewing before tax time, not after.
Speak with us about getting your books and lodgements in order.
