ATO Audit Record-Keeping: What Geelong Businesses Must Have Ready

Getting a letter from the Australian Taxation Office asking for "supporting documentation" is enough to make any business owner's stomach drop. But an ATO audit or review isn't necessarily bad news — it's a request to prove what you've already reported is correct. The businesses that struggle are the ones scrambling through shoeboxes and old bank statements at the last minute. The ones that sail through have their records sorted from day one.

Geelong's mix of trades, retail, allied health and NDIS providers each face slightly different scrutiny, but the underlying record-keeping obligations are the same under the Income Tax Assessment Act 1997 (ITAA 1997) and the Taxation Administration Act 1953. Here's what you actually need to have on hand.

Why the ATO audits Geelong businesses

The ATO doesn't pick businesses at random most of the time. Reviews and audits are usually triggered by:

• Data-matching mismatches — bank data, Single Touch Payroll (STP) reports, and third-party platforms (like Uber, Airbnb or trade marketplaces) that don't line up with your lodged figures.
• Industry benchmark variances — the ATO publishes small business benchmarks by industry and postcode-region, and outliers get flagged.
• Repeated late lodgements or amendments — a pattern of correcting BAS or income tax returns raises questions.
• Cash-heavy operations — cafes, hospitality and some trades in the Geelong and Bellarine region attract more attention simply due to cash transaction risk.
• Random compliance checks — sometimes it really is just your turn.

Whatever the trigger, the outcome depends entirely on whether your records back up what you've claimed.

What records you must have ready

At minimum, the ATO expects you to be able to produce:

• Tax invoices for all sales and purchases over $82.50 (GST-inclusive), matching the format required under GST law.
• Bank and credit card statements for every business account, reconciled against your bookkeeping software.
• Receipts and expense evidence for every deduction claimed — a bank line item alone isn't proof of purpose.
• Vehicle and travel logs where car, fuel or travel expenses are claimed.
• Asset registers showing purchase date, cost and depreciation method for equipment, tools and vehicles.
• Loan and finance agreements for any business borrowing, hire purchase or chattel mortgage.
• Contracts and invoices supporting income, especially for larger or one-off transactions.

If you can't substantiate a deduction with a genuine record, the ATO can disallow it entirely — even if the expense was legitimately incurred.

How long you legally need to keep records

Under Division 900 of the ITAA 1997 and section 262A of the Income Tax Assessment Act 1936, the general rule is:

• Five years from the date you lodge the relevant return, or from when the transaction occurred — whichever is later.
• Five years after disposal for records relating to depreciating assets, capital gains events, or anything with an ongoing tax consequence (e.g. a vehicle or piece of equipment).
• Indefinitely for records relating to a dispute or where the ATO has specifically requested extended retention.

If your Geelong business is registered for GST, PAYG withholding or superannuation guarantee obligations, those records fall under the same five-year rule but are frequently the first thing an auditor asks for, so they need to be easy to retrieve — not buried in an old email inbox.

GST and BAS-specific record requirements

BAS reviews are the most common type of ATO contact for small businesses, and they focus heavily on:

• Tax invoices matching every GST credit claimed on your Business Activity Statement.
• Reconciliation reports showing your BAS figures tie back to your accounting software, not just estimates.
• Adjustment notes — bad debts, part payments, and any GST adjustments need a clear paper trail.
• Export/GST-free sales documentation, if applicable to your industry.

A Registered BAS Agent lodging under the Tax Agent Services Act 2009 (TASA 2009) is required to keep working papers supporting every BAS they lodge on your behalf — which is exactly the kind of second layer of protection that makes an audit far less painful.

Payroll, STP and super records

With Single Touch Payroll now standard for all employers, the ATO can cross-check your payroll data in near real time. You still need to retain:

• Employment records under the Fair Work Act 2009 — pay rates, hours worked, leave balances and awards applied. See fairwork.gov.au for current record-keeping obligations.
• Superannuation guarantee payment records proving contributions were paid on time and in full under the Superannuation Guarantee (Administration) Act 1992 (SGA Act).
• STP finalisation declarations for each financial year.
• Contractor vs employee assessments — a common audit focus area, particularly in trades and allied health where classification is frequently tested.

Super guarantee shortfalls are treated seriously — unpaid SG amounts attract the Superannuation Guarantee Charge, which isn't tax-deductible, on top of the outstanding contribution itself.

Getting audit-ready in Xero

The businesses we work with across Geelong that handle ATO reviews with the least stress all have one thing in common: clean, reconciled Xero files with source documents attached. Practically, that means:

• Using Xero's file attachment feature (or Hubdoc integration) so every transaction has its invoice or receipt linked directly to the line item.
• Reconciling bank feeds weekly, not quarterly — so nothing gets forgotten or misclassified.
• Running a fixed asset register inside Xero rather than tracking depreciation in a spreadsheet that goes stale.
• Keeping payroll, super and STP filings inside Xero Payroll, where records are timestamped and exportable on demand.
• Generating a GST reconciliation report each BAS period and saving it alongside your lodged BAS.

None of this requires extra software or a big time investment — it just needs to be built into your regular bookkeeping rhythm rather than treated as a once-a-year scramble.

What to do next

Don't wait for an ATO letter to find out your records have gaps. Start by pulling your last two BAS periods and checking whether every GST credit claimed has a matching tax invoice attached in Xero. Confirm your super guarantee payments are up to date and lodged on time. If you're a Geelong business owner who isn't confident your books would survive a review tomorrow, that's exactly the kind of thing a Registered BAS Agent should be checking regularly — not just at tax time.