ATO Risk Management and Record Keeping

The ATO uses sophisticated data-matching and risk-profiling tools. They receive data from banks, real estate agents, share registries, AUSTRAC, Centrelink, and third-party employers. They compare your declared income against your asset accumulation, lifestyle spending, and industry benchmarks. Unexplained wealth growth, expenses above industry norms, or income significantly below industry benchmarks are triggers for closer review. Specific triggers to be aware of: unexplained large cash deposits, business-to-personal fund transfers (Division 7A risk), home office claims above benchmark for your industry, motor vehicle claims with no logbook, large deductions with no supporting documentation, and distributions from trusts that seem designed to avoid tax (wash sales, distribution to minors above the unearned income threshold). The ATO's 'Cash Economy' program focuses on businesses with high cash turnover. The 'Tax Gap' program focuses on high-wealth individuals. If your net assets exceed $5M, you're potentially in the High Wealth Individual program and subject to periodic risk reviews. Operating cleanly with good documentation is the only defence.

Tax records must be kept for at least 5 years from the date of lodgement (or longer for capital assets — until 5 years after the asset is disposed of). The ATO can request records going back 4 years in a standard audit and longer in fraud cases. For a software business with mixed personal and business use of assets (laptops, phones, home office), the documentation requirements are specific: logbooks for motor vehicles used for business, floor area calculations and photos for home office claims, purpose records for assets claimed as business-use, and timesheets or activity records for time-based claims. Xero is your foundation — properly categorised transactions with receipt attachments (Xero's receipt capture feature or Hubdoc) create a complete, auditable record. Back this up with: bank statement PDFs archived annually, Xero data export annually, and a folder of tax returns, BAS lodgements, and ATO correspondence. Store this in a cloud service (iCloud, Dropbox) with version history — not just a local hard drive.