11 Things That Trigger an ATO Audit (and How to Avoid Them in 2026)
An ATO audit is rarely random in the way people imagine. For the 2025-26 financial year, the bigger risk is mismatch: your return says one thing, while third-party data, ATO benchmarks, or your own records point somewhere else.
The most common ATO audit triggers in 2026 are unsupported work-related deductions, round-number claims, copy-pasted prior-year figures, working-from-home claims without actual-hour records, unsubstantiated car logbooks, missing platform or gig income, rental discrepancies, undeclared crypto disposals, foreign income gaps, and inconsistency between reported income and lifestyle data. Triggers are not proof of wrongdoing. They mean the ATO may ask for an explanation.
TL;DR
- ATO data matching runs when you lodge and after assessment, using data from employers, banks, platforms, agencies, and other third parties.
- High deductions are not wrong by themselves, but unusual claims need evidence.
- Round numbers, repeated prior-year claims, and unsupported work-from-home or car claims create avoidable risk.
- Gig, crypto, rental, foreign, and online-selling income are visible through ATO data programs.
- The safest return is not the smallest claim. It is the claim you can explain with records.
What the 2026 Federal Budget changes for ATO scrutiny
The 2026 Federal Budget (handed down 12 May 2026) introduces some structural changes that affect how the ATO scrutinises returns from 2026-27 onward.
Negative gearing tracking. From 1 July 2027, losses from established residential properties bought after 7:30pm AEST on 12 May 2026 can only be deducted against rental income or capital gains from residential property, not against salary. The ATO will need to track each investment property by acquisition date, and your return will need to show which property is grandfathered and which is not.
CGT changes. From 1 July 2027, capital gains will be calculated using indexation rather than the 50% discount for most assets. Returns will need to show whether a gain accrued before or after 1 July 2027, and which method applies.
Discretionary trust distributions. From 1 July 2028, distributions from discretionary trusts face a 30% minimum tax rate. Family business owners using these structures will face new scrutiny on distribution patterns.
Most of these measures are proposed and need to pass Parliament. The 11 triggers below apply to your 2025-26 return regardless. For the full picture, see our 2026 Federal Budget guide.
How the ATO actually picks returns
The ATO does not need to guess as much as taxpayers think. It receives third-party data from banks, financial institutions, employers, government agencies, companies, private health funds, digital platforms, and other sources. The ATO says more than 600 million transactions are reported to it annually, and data matching runs both when you lodge and after assessment.[1]
Data matching looks for missing or inconsistent income such as interest, employment income, government payments, capital gains, foreign income, contractor payments, private health fund data, and distributions from trusts or managed funds.[1] If something does not match, the ATO may contact you for an explanation.[1]
The ATO also uses nearest-neighbour analytics. Its data and analytics guidance says it compares amounts entered in myTax with amounts entered by people in similar circumstances, along with other checks, and prompts taxpayers where a claim is significantly different from what is expected.[2]
Some ATO programs have very large coverage. Rental bond data matching expects to collect data on about 2.2 million individuals each financial year, and property management data matching has estimated about 2.3 million individuals annually.[3][4] Crypto data matching is expected to obtain records for about 700,000 to 1.2 million individuals and entities each financial year from 2023-24 to 2025-26.[5]
Dob-ins also exist. The ATO's data matching guidance points taxpayers to a tip-off form where they suspect someone is not doing the right thing.[1] A single tip-off does not prove anything, but it can lead to a closer look when matched with other data.
Trigger 1: work-related deductions above industry benchmark
A deduction above the average is not automatically wrong. A nurse with genuine protective equipment costs, a teacher with work-related resources, or an employee who drives between worksites can have higher expenses than a desk-based employee. The problem is a high claim with weak evidence.
ATO speeches and guidance describe comparisons against similar occupations and circumstances.[2] The ATO has also warned that its data analytics look for unusually high claims, particularly where deductions are much higher than people with a similar job and income.[6]
How to avoid it: Claim what you are entitled to, but keep the story attached. For each large claim, save the receipt, work purpose, private-use split, and any employer policy or duty statement that explains why the expense was needed.
Trigger 2: round numbers ($300 exactly, $1,500 exactly)
Round numbers look like estimates. A $300 work expense claim may be legitimate, but the ATO has repeatedly said there are no automatic deductions and that taxpayers need to show how the amount was calculated.[7]
The $300 rule is often misunderstood. If your total work-related expenses are $300 or less, you may not need full written evidence, but you still need to show you spent the money and how you calculated the claim.[7] If the total claim is more than $300, written evidence is generally required for the whole work-related expense claim, not just the excess.[7]
How to avoid it: Avoid tax-time estimates. Use actual receipt amounts. If you claim a rounded figure because it comes from a log, diary, or formula, keep the working.
Trigger 3: under-reported gig, crypto, or rental income
Side income is visible. The ATO collects data from sharing economy platforms, including ride-sourcing, accommodation, and other sharing economy platforms.[8] It also collects crypto data through protocols covering 2014-15 to 2025-26 and matches transactions against tax returns.[5]
Rental income is another focus. ATO rental guidance says rental income includes rent and related payments, including where you rent part or all of your home through the sharing economy.[9] Rental bond and property management data programs exist to identify income and expense reporting issues.[3][4]
How to avoid it: Include gross income first, then claim eligible expenses. Do not report only the net cash that landed in your bank account after platform fees unless the tax label specifically asks for that treatment.
Trigger 4: claiming WFH while reporting in-office occupation
Working from home is normal, but the evidence has changed. The ATO's current fixed-rate method requires a record of actual hours worked from home for the entire income year. Estimates are not accepted under that method.[10]
The risk is inconsistency. If your occupation, roster, employer, or travel claims suggest you worked on-site, but your WFH claim suggests heavy home use, the ATO may ask for records. You need to show that you worked from home to fulfil employment duties, not just checked emails at night.[11]
How to avoid it: Keep timesheets, rosters, calendar entries, or employer records as you go. If you use the fixed-rate method, do not separately claim phone, internet, energy, stationery, or computer consumables covered by that rate.[10]
Trigger 5: sudden year-on-year deduction spike
A spike can be legitimate. You may have bought a work laptop, changed jobs, started driving between worksites, or moved to a hybrid role. It becomes risky when this year's claim is much higher and there is no evidence explaining the change.
The ATO has warned taxpayers not to copy and paste previous year claims without evidence, and its analytics can identify unusual movements.[6] A spike is not a problem if the underlying facts changed and your records prove it.
How to avoid it: Attach a note for yourself before lodging. "New role from 1 September required client travel", "Bought monitor for WFH", "Employer stopped reimbursing phone costs". That note can save hours later.
Trigger 6: unsubstantiated car logbooks
Car claims are a frequent review area because the dollars can add up. For 2025-26, the cents-per-kilometre method uses 88 cents per work-related kilometre, unchanged from 2024-25, and applies for a maximum of 5,000 work-related kilometres per car.[12] You do not need fuel receipts under that method, but you need records showing how the kilometres were worked out.[12]
The logbook method needs stronger records. ATO business car guidance says a logbook must cover at least 12 continuous weeks, and actual car expense evidence is needed, except for fuel and oil where odometer records can support an estimate.[13]
How to avoid it: Keep trip dates, start and end points, purpose, kilometres, odometer readings, and receipts. Do not include ordinary home-to-work commuting unless a specific exception applies.
Trigger 7: multiple side hustles, no ABN
An ABN is not the tax line between hobby and business, but side hustles create reporting risk. Business.gov.au says there is no one factor that determines whether you are in business, and factors include profit intention, businesslike activity, repetition, and size or scale.[14]
ATO guidance says sole traders must declare business income in their individual tax return, and even non-business platform services income can still need to be reported.[15][16] Ride-sourcing is stricter: ride-sourcing drivers must have an ABN and be registered for GST regardless of how much they earn.[17]
How to avoid it: Decide whether each activity is a hobby, other income, or business activity. Keep platform statements, invoices, payment records, and expenses separately for each activity. For more, see our side hustle tax rules guide.
Trigger 8: rental income and expenses
The ATO has multiple rental data programs, including rental bond, landlord insurance, residential investment property loan, and property management data programs.[3][4] Report gross rental income and keep records for interest, repairs, agent fees, insurance, and private-use periods.
How to avoid it: Report gross rental receipts, then claim each expense category separately with evidence. If you rent part of your home short-term, apportion expenses for the rented period and the rented space.
Trigger 9: crypto disposals
A CGT event can happen when you sell, gift, swap, trade, convert crypto to fiat currency, or use crypto to buy goods or services.[18] The ATO crypto data-matching program matches crypto reports against tax returns.[5]
How to avoid it: Export your full transaction history from every exchange and wallet. Track cost base, disposal proceeds, and dates in AUD. A swap between two cryptocurrencies is a disposal, not a hold.
Trigger 10: foreign income
Australian residents generally need to declare worldwide income. The ATO says financial data is exchanged automatically using the Common Reporting Standard and FATCA, and it also receives data through AUSTRAC and international agreements.[19]
How to avoid it: Declare overseas employment, dividends, interest, rental, and crypto income, even when foreign tax has been paid. Foreign tax credits may reduce the Australian tax payable, but the income still needs to be reported.
Trigger 11: lifestyle mismatch
This is not a single ATO label in the way a car claim is, but it is the common pattern behind many reviews. Reported taxable income, asset data, platform income, rental data, and bank-visible activity do not line up. The fix is not to lower legitimate claims. It is to make sure every income stream and expense category is consistent.
How to avoid it: Reconcile your return against everything the ATO is likely to see, not just what you remember. Income statements, bank interest, platform 1099s, share registry data, rental statements, and crypto records all flow to the ATO independently.
What happens if you get audited
Many people call every ATO contact an audit, but there are softer steps first: pre-lodgment prompts, post-lodgment matching, letters asking for clarification, reviews, and then audits. In data-matching programs, ATO protocols commonly give taxpayers an opportunity to verify information before administrative action is taken.[5]
The cost is usually time first. You may need to gather receipts, bank statements, logbooks, diary notes, platform statements, employer letters, and calculations. If you use a registered tax agent, the cost of managing your tax affairs can itself be deductible in the year paid.[20]
If the ATO adjusts your return, the financial cost can include extra tax, interest, and penalties depending on the facts. Honest mistakes with good records are a different risk profile from deliberate false claims. The best defence is a return you can explain line by line.
How Finwell AI prevents these triggers before you lodge
Most audit triggers are visible before lodging if the records are structured. A system can detect round numbers, missing receipts, a WFH claim without actual-hour records, a car claim with no trip basis, a phone bill with no private-use split, or side-hustle income without matching expenses. By the time the return is being prepared, the warning signs are already in the data.
That is the compliance layer Finwell AI is built around. AI receipt scanning at point of sale, ATO-style categorisation on every transaction, automatic apportionment prompts on shared costs, and a real-time live tax ledger you can see all year. Before lodgement, Finwell AI runs a peer desktop review that checks the return against the patterns that typically trigger ATO contact: unusual claims relative to your occupation, round numbers, year-on-year spikes, missing platform income, gaps in WFH records, car claims without supporting logs.
If the review surfaces something, you see it before the ATO does. You can amend, add evidence, or remove the claim. You press a button to lodge only when the return is clean. Your accountant or bookkeeper can sign in to review before you do. Where you authorise it, Finwell AI can represent you to the ATO.
The aim is not to scare people into under-claiming. The 27 most-missed deductions cost Australians more than aggressive claims ever do. The aim is to help legitimate deductions survive review by attaching the evidence and apportionment to each one at the moment they happen, not at the moment you lodge.
Finwell AI is a flat monthly subscription, not a percentage of your income. It works with whatever bank, card, invoicing tool, and POS you already use. For more on the deductions most Australians miss, see our most missed deductions guide.
Take the 2-minute survey. Founding 500 members get 6 months Premium free.
Frequently asked questions
Q: What triggers an ATO audit in Australia?
Common triggers include missing income, claims that differ sharply from similar taxpayers, unsupported work-related deductions, inconsistent working-from-home claims, weak car records, side-hustle income not reported, rental discrepancies, crypto disposals, and foreign income gaps. A trigger is not proof of wrongdoing. It means the ATO may ask for an explanation.
Q: Does claiming exactly $300 trigger an ATO audit?
Not automatically. The problem is treating $300 as an automatic deduction. If your total work-related expenses are $300 or less, you still need to show you spent the money and how you calculated the amount.[7] A rounded claim with no working is weaker than actual itemised costs.
Q: Can the ATO see my bank account?
The ATO receives data from many third-party sources and says more than 600 million transactions are reported to it each year.[1] That does not mean an officer casually watches your account. It does mean bank, platform, employer, investment, rental, and foreign data can be matched against what you lodge.
Q: Are high tax deductions illegal?
No. High deductions can be legitimate if they directly relate to earning income, you paid them yourself, you were not reimbursed, and you have records.[21] The higher or more unusual the claim, the more important it is to keep receipts, calculations, diaries, logbooks, and work-use evidence.
Q: What should I do if the ATO contacts me?
Read the request carefully, check the year and deduction label, and gather the exact records requested. Do not guess or send unrelated documents. If the amount is material or the issue is complex, contact a registered tax agent before responding. Keep a copy of every response and supporting calculation.
Q: Can Finwell AI help if the ATO has already contacted me?
Finwell AI is built to prevent audit triggers before lodgement by structuring records as they happen. For returns already lodged and under ATO review, the records you reconstruct still need to meet ATO substantiation rules. A registered tax agent should be your first call for any active ATO correspondence.
This article is general information only and not personal tax advice. For your situation, consult a registered tax agent.