You open the mail and there’s a letter from the ATO. Your first reaction: mild panic. Your second: confusion. The letter says “review”. Is that better than an audit? Worse? Just a different word for the same thing?
Here’s what matters: the label on the letter matters less than what the ATO is actually asking for, how far they’re prepared to dig, and whether you’re dealing with a targeted question or the beginning of a formal investigation.
Most business owners think reviews are routine and audits are serious. That’s partly true. But it misses the real issue.
A review can become an audit the moment the ATO decides your answers raise more questions than they answer.
This article explains the difference between an ATO review and an audit, what usually causes one to escalate into the other, and what you should do when the ATO starts asking questions.
Key Takeaways
- Reviews are risk-based checks, the ATO tests a specific position, usually from your desk, and decides whether to dig deeper.
- Audits are formal investigations, broader in scope, often spanning multiple years and tax types, with serious compliance consequences.
- Reviews can escalate quickly, inconsistent records, missing documentation, or evasive answers can turn a narrow query into a full audit.
- The ATO can start with an audit, if they already suspect non-compliance, they don’t need to begin with a review first.
- Your first response matters, how you engage early determines whether the matter stays contained or expands.
- Authority comes from preparation, businesses with clean records and clear answers tend to resolve reviews quickly; those without often face escalation.
What Is an ATO Review?
An ATO review is a targeted check. The ATO has identified something in your return, your BAS, or your tax position that sits outside normal patterns. They want to test whether it’s legitimate.
Reviews are typically desk-based. The ATO sends you a letter asking for specific information: documents, explanations, reconciliations. They’re testing one or two issues, not investigating your entire tax history.
Think of it as a spot check.
The most common triggers for reviews include:
- Work-from-home deductions that are significantly higher than your industry peers
- Contractor payments where the ATO suspects you should be treating the worker as an employee
- GST refunds that don’t match the income you reported
- Rental property deductions that seem unusually high
- Business losses over consecutive years without a clear explanation
- Income mismatches where what you reported doesn’t align with what third parties reported to the ATO
A review doesn’t automatically mean you’ve done anything wrong. It means the ATO wants to satisfy itself that the position you’ve taken is supportable.
If you respond with clear, consistent evidence, the matter often closes quickly. If your records are incomplete, inconsistent, or missing, the ATO starts to wonder what else might be wrong.
That’s when a review starts to look like something more.
The ATO doesn’t call something a “review” to be polite. It’s a specific phase in their compliance approach, narrower than an audit but still requiring a complete and accurate response.
What Is an ATO Audit?
An audit is a formal examination. The ATO has moved beyond testing a single issue and is now investigating your broader tax position across one or more years.
Audits are typically broader in scope, more intensive in process, and carry higher stakes. Where a review might ask for documents related to a specific deduction, an audit will request bank statements, invoices, contracts, payroll records, director loan accounts, and detailed reconciliations across multiple tax periods.
The process is more structured. The ATO will usually:
- Issue a formal audit notification letter
- Schedule meetings or interviews with you, your accountant, or your advisers
- Request access to business premises if necessary
- Issue position papers outlining their concerns
- Provide you with opportunities to respond before issuing an amended assessment
Field audits involve ATO officers visiting your business. Desk audits are conducted remotely but are no less serious in consequence.
Audits can cover income tax, GST, payroll tax, FBT, superannuation, or PAYG withholding. They can span one year or several. The ATO’s focus is on whether you’ve complied with your obligations, and if not, by how much.
If the ATO concludes you owe more tax, they’ll issue an amended assessment. You’ll face the primary tax liability, interest, and potentially penalties ranging from 25% to 75% of the shortfall, depending on the nature of the non-compliance.
In serious cases, audits can lead to criminal prosecution, though that’s rare and usually reserved for deliberate fraud or significant evasion.
The practical difference between a review and an audit is this: a review asks whether a specific position is right. An audit assumes something is wrong and investigates how much.
If the ATO upgrades a review to an audit, they’ll usually tell you explicitly in writing. If the scope of their questions suddenly widens or they start requesting multiple years of records, you’re likely in audit territory even if they haven’t used the word yet.
How Does the ATO Decide Which One to Use?
The ATO doesn’t flip a coin. They use data, risk models, and compliance history to determine how much scrutiny you’re likely to need.
Reviews are used when the ATO has identified a potential issue but hasn’t yet formed a view that non-compliance is likely. It’s an evidence-gathering step. They’re asking: does this position hold up, or is there a problem here?
Audits are deployed when the ATO already has concerns. That might be because:
- They’ve reviewed your position and the answers you gave raised more red flags
- They’ve identified patterns across your lodgements that suggest systematic non-compliance
- Third-party data (bank interest, supplier invoices, contractor payments) doesn’t reconcile with what you’ve reported
- You’re in a high-risk industry or occupation where non-compliance is common
- You’ve been audited before and the same issues have recurred
The ATO also considers your compliance history. If you’ve lodged on time, paid when required, and responded cooperatively to past queries, you’re less likely to attract an audit. If you have a history of late lodgements, unpaid liabilities, or previous adjustments, the ATO assumes a higher risk and acts accordingly.
In some cases, the ATO skips the review phase entirely. If they believe non-compliance is serious or deliberate, they’ll open an audit immediately.
Can you tell which one you’re facing just from the letter? Usually, yes. Review letters tend to be narrower in scope, asking for information on a specific issue. Audit letters are broader, more formal, and often reference multiple tax periods or obligations.
But here’s the practical reality: if you’re unsure, assume it’s serious and treat it that way. The cost of underestimating an ATO inquiry is far higher than the cost of responding thoroughly from the start.
The ATO’s risk models are sophisticated. They compare your deductions, income, and ratios against thousands of similar businesses. If you’re an outlier, you’re more likely to be reviewed. If you’re an outlier and your records are weak, you’re more likely to be audited.
When Does an ATO Review Become an Audit?
This is the question most business owners actually want answered.
A review becomes an audit when the ATO decides the issue is broader, more serious, or more entrenched than they initially thought. That decision usually comes from one of three triggers:
Your answers are incomplete or inconsistent
You provide some documents but not others. The explanations don’t align with the records. The bank statements show transactions that aren’t in your accounting software. The ATO starts to suspect the problem isn’t just one deduction or one year, it’s systemic.
The issue touches multiple tax types or periods
A review into a GST claim reveals income discrepancies. A contractor payment query uncovers PAYG withholding issues. A motor vehicle deduction check exposes FBT problems. Once the ATO sees connections across different obligations, they expand the inquiry.
You delay, dodge, or fail to respond properly
Every time you ask for an extension without good reason, every time you provide vague answers, every time you make the ATO chase you for documents, you increase the likelihood of escalation. The ATO interprets poor engagement as a risk signal.
Here’s what escalation looks like in practice:
Stage 1: The ATO sends a letter asking for documents related to a specific deduction. You send most of what they ask for.
Stage 2: The ATO notices gaps in your records and asks follow-up questions. You provide explanations, but they don’t fully reconcile.
Stage 3: The ATO issues a more formal letter stating they’re expanding the scope of their inquiry to cover related tax periods or additional tax types. This is the transition point.
Stage 4: The ATO formally notifies you that they’re conducting an audit. They request bank statements, meeting schedules, and detailed reconciliations. You’re now in a full compliance examination.
The shift from review to audit isn’t always clean or obvious. The ATO doesn’t always announce the upgrade immediately. You might notice the tone of the letters changing, the requests becoming broader, or a senior ATO officer being assigned to your file.
The key is recognising the warning signs early. If the ATO starts asking for documents outside the original scope, if they mention other tax periods, or if they request a meeting, the matter is escalating.
At that point, treating it like an audit, even if the ATO hasn’t formally used the word, is the smarter approach.
The fastest way to escalate a review into an audit is to be slow, evasive, or incomplete in your responses. The ATO interprets delay as risk. If you need time to gather records, explain why and commit to a realistic deadline.
What the ATO Asks for in a Review vs an Audit
The scope of the ATO’s requests tells you where you sit.
In a review, the ATO typically asks for:
- Invoices, receipts, or contracts supporting a specific deduction or claim
- A written explanation of how you calculated a figure or applied a tax treatment
- Bank statements covering a short period related to a specific transaction
- Logbooks, work diaries, or usage records for claims like motor vehicle or home office deductions
- Reconciliations showing how a figure in your return ties to your underlying records
Reviews are focused. The ATO wants to see whether a particular position is supportable. If you provide clean, consistent evidence that addresses the question, the review usually closes.
In an audit, the ATO typically asks for:
- Bank statements covering all accounts for one or more full financial years
- Sales and purchase ledgers, GST worksheets, and BAS reconciliations
- Payroll records, contractor agreements, and superannuation payment summaries
- Loan agreements, director loan account schedules, and shareholder transactions
- Asset registers, depreciation schedules, and capital works deductions
- Business records including meeting minutes, board resolutions, and financial statements
- Explanations of specific transactions, income sources, and expense categories
- Interviews with directors, accountants, or key personnel
Audits are exhaustive. The ATO wants to reconstruct your tax position from the ground up and test whether what you lodged is accurate. If they find discrepancies, they’ll quantify the shortfall and issue amended assessments.
The practical difference: a review assumes you’re right until proven otherwise. An audit assumes you might be wrong and wants proof that you’re not.
If the ATO starts asking for documents you didn’t expect to provide based on the original letter, you’re likely no longer in review territory.
The volume and breadth of the ATO’s requests are the clearest signal of escalation. A three-page document list covering multiple years is an audit, regardless of what the letter calls it.
What the Process Feels Like for a Business Owner
Reviews and audits don’t just differ in scope. They differ in intensity, time commitment, and stress.
A review is usually manageable. You gather the requested documents, provide a short explanation, and send it to the ATO. If the records are clear, the matter resolves in weeks or a few months. You continue running your business largely uninterrupted.
An audit is a different experience.
You’re fielding regular requests for documents, many of which you haven’t looked at in years. Your accountant is spending hours reconstructing figures. Your bookkeeper is tying out bank statements. You’re in meetings with ATO officers explaining transactions you barely remember.
It’s disruptive, time-consuming, and expensive. Even if the audit ultimately finds nothing wrong, the cost in lost time and professional fees can be significant.
The emotional toll matters too. Many business owners describe audits as intrusive and stressful. You’re constantly second-guessing past decisions, worrying about what the ATO will find, and wondering whether you’re going to face a large liability at the end of the process.
The key to managing both reviews and audits is understanding that the ATO’s questions don’t go away. Ignoring them, delaying them, or hoping they’ll lose interest only makes the situation worse.
If you’re in a review, respond thoroughly and quickly. If you’re in an audit, get advice early, stay organised, and engage constructively. The businesses that fare best are the ones that take the process seriously from the first letter.
Don’t treat a review as a minor inconvenience and an audit as a crisis. Treat both as serious compliance matters that require accurate, complete responses. The effort you put in early determines whether the matter stays contained or spirals.
What Triggers a Review or Audit in the First Place?
The ATO doesn’t randomly select businesses to review or audit. They use data-matching, risk profiling, and industry benchmarking to identify who is most likely to be non-compliant.
Common triggers include:
- Income mismatches: What you reported doesn’t match what payers reported to the ATO (PAYG summaries, interest statements, contractor payments).
- Unusual deductions: Your claims are significantly higher than industry averages, or inconsistent across years.
- GST refunds: You’re claiming refunds regularly, or the refund amount is disproportionate to your reported income.
- Cash businesses: Industries with high cash turnover (hospitality, trades, retail) attract higher scrutiny.
- Losses over multiple years: Businesses reporting losses year after year without a clear turnaround strategy.
- Related-party transactions: Payments to family members, trust distributions, or director loans that look uncommercial.
- Contractors vs employees: Payments to workers where the ATO suspects you should be withholding PAYG.
- Work-from-home claims: Significant increases in home office deductions, especially post-COVID.
- Private use of business assets: Motor vehicles, properties, or other assets where private use isn’t accounted for properly.
The ATO also uses third-party data. Banks report interest income. Payment platforms report merchant transactions. Suppliers report payments they’ve made to you. If those numbers don’t reconcile with what you’ve lodged, the ATO notices.
Your industry matters too. If you’re in a sector the ATO has flagged as high-risk (construction, cleaning, IT contracting, beauty services, cafes), you’re more likely to be reviewed even if your individual returns look clean.
The bottom line: the ATO is looking for outliers. If your tax position sits well outside normal patterns for your industry, income level, or business type, you’re more likely to attract attention.
The ATO’s data-matching is sophisticated and getting better every year. Assuming they won’t notice discrepancies or unreported income is a mistake that leads directly to reviews and audits.
How to Respond Without Making the Matter Worse
When the ATO contacts you, your first instinct might be to minimise, explain quickly, or buy time. Resist that instinct.
The way you respond in the first few weeks often determines whether the matter stays a review or escalates into an audit.
Do this:
Read the letter carefully. Understand exactly what the ATO is asking for, which tax periods are in scope, and when they expect a response.
Gather the requested documents. Don’t guess, don’t provide part of what they ask for, and don’t volunteer documents they haven’t requested. Answer the question, nothing more.
Test your position before you respond. If the ATO is questioning a deduction, make sure the records actually support it. If they don’t, acknowledge the issue and correct it. Defending a weak position makes escalation more likely.
Engage early with an adviser. If the ATO’s questions are technical, if the amounts are material, or if you’re uncertain about your position, get advice before you respond. A poorly constructed answer can cause more harm than no answer at all.
Respond on time. If you need an extension, ask for it early and explain why. But don’t treat extensions as a way to avoid dealing with the issue.
Be clear and direct. The ATO values cooperation. If you made a mistake, say so. If you need clarification on what they’re asking, ask. Evasion signals risk.
Don’t do this:
Don’t ignore the letter. The ATO won’t forget. They’ll follow up, escalate, or issue an assessment based on their own view of your position.
Don’t provide incomplete answers. Sending half the documents or vague explanations just prompts more questions and signals poor record-keeping.
Don’t argue aggressively without evidence. Asserting that you’re right without backing it up with records doesn’t help. The ATO will escalate to an audit to test your claims.
Don’t volunteer unrelated issues. If the ATO asks about one deduction, don’t offer commentary on three others unless they’re directly relevant.
Don’t assume it will go away. Reviews and audits don’t resolve themselves. They require active, accurate engagement.
The businesses that handle reviews and audits well are the ones that treat them as compliance exercises, not confrontations. You’re providing evidence to support a position you’ve taken. If the evidence is there, the matter resolves. If it’s not, the issue expands.
If the ATO asks a question you can’t answer immediately because your records are incomplete, reconstruct them before you respond. Saying “I don’t have that document” or “I’m not sure” without offering a solution is a fast track to escalation.
When to Get Legal Advice
Not every ATO review requires a lawyer. Many are straightforward information requests that your accountant can handle.
But some situations call for legal advice early:
The ATO is questioning a complex tax position. If the issue involves technical law (trust distributions, CGT rollovers, thin capitalisation, R&D claims), you need expertise beyond standard bookkeeping.
The review is escalating quickly. If the ATO’s requests are broadening, if they’re asking for documents across multiple years, or if they’ve mentioned penalties, get advice before you respond further.
You’re facing a significant liability. If an adverse outcome could result in a six or seven-figure tax bill, the cost of advice is trivial compared to the stakes.
The ATO has issued a position paper or draft assessment. These documents represent the ATO’s formal view. Responding to them requires precision and strategy, not guesswork.
You’re considering objecting or disputing the outcome. If you disagree with the ATO’s conclusion, you need to understand your rights, the evidence required, and the likely success of an objection before you commit to that path.
The matter involves potential fraud or evasion allegations. If the ATO is suggesting deliberate non-compliance, you need a lawyer immediately. The stakes are criminal, not just civil.
The right adviser will help you understand the ATO’s position, assess the strength of your case, identify what evidence you need, and structure your response to minimise risk. They’ll also tell you when fighting isn’t worth it and when settling is the smarter move.
Litigation lawyers bring a different skill set than accountants. Accountants are excellent at reconstructing figures and preparing submissions. Lawyers are trained to assess risk, frame arguments, and navigate dispute resolution processes.
If the matter has moved beyond simple compliance and into contested territory, you’re in legal dispute territory. Treat it that way.
The time to engage legal advice is not after the ATO has issued an assessment and you’re stuck objecting. It’s when the questions start to feel more like an investigation than an information request.
Why ATO Reviews and Audits Are Not Going Away
The ATO’s compliance activity is increasing, not decreasing. They have more data, better technology, and stronger enforcement powers than ever before.
Data-matching programs now capture employment income, contractor payments, bank interest, rental income, capital gains, crypto transactions, and cross-border payments. The ATO compares this data to what you’ve lodged. When it doesn’t match, you get a letter.
The ATO is also focusing on high-wealth individuals, privately owned groups, and industries with high cash turnover. If you run a business, employ contractors, or have complex group structures, the likelihood of ATO contact at some point is high.
That doesn’t mean you should expect an audit every year. It means you should assume the ATO can see what you’re doing, and structure your affairs accordingly.
The businesses that avoid ATO problems are the ones that:
- Keep accurate, contemporaneous records
- Lodge and pay on time
- Claim only what they can substantiate
- Engage proactively with their accountants to test their positions before lodging
- Respond constructively when the ATO makes contact
The businesses that end up in protracted disputes are usually the ones that ignored warning signs, claimed aggressively without evidence, or treated reviews as minor inconveniences.
A review is not a crisis. But it’s also not something you can afford to take lightly. Respond properly, and it stays a review. Respond poorly, and it becomes an audit, then a dispute, then an expensive problem.
The best time to prepare for an ATO review or audit is before you receive one. Clean records, supportable positions, and early advice cost less than reconstructing your case under pressure when the ATO is already asking questions.
Final Thoughts: Clarity Is Your Best Defence
An ATO review tests a position. An audit investigates a problem. The transition from one to the other is not always formal or obvious, but it’s real.
If you can answer the ATO’s questions clearly, provide the documents they request, and demonstrate that your tax position is supportable, reviews resolve quickly. If you can’t, the matter escalates.
The difference between businesses that manage ATO contact well and those that don’t comes down to one thing: preparation. The records are either there or they’re not. The position is either supportable or it’s not.
You can’t control whether the ATO contacts you. But you can control how ready you are when they do.
And if the matter has already escalated, if the questions are getting harder, or if the ATO is suggesting significant adjustments, don’t try to navigate it alone. Get advice early, test your position rigorously, and engage constructively.
Litigation is complex, yes. But the pathway shouldn’t be.
Disclaimer: This article provides general information only and does not constitute legal advice. Every tax dispute is different, and outcomes depend on the specific facts, evidence, and applicable law. If the ATO has contacted you regarding a review or audit, seek advice from a qualified legal or tax professional before responding.
