ATO Audit Record-Keeping: What Mornington Peninsula Businesses Must Have Ready

If you run a business on the Mornington Peninsula — whether it's a Mount Eliza café, a Rosebud trades outfit, or a Dromana allied health clinic — an ATO audit letter is one of the most stressful pieces of mail you'll ever open. The good news: audits are far less painful when your records are already in order. This guide sets out exactly what the ATO expects, referencing the actual legislation, so you know precisely what to have ready.

Why ATO Audits Are on the Rise for Peninsula Businesses

The ATO has significantly expanded its data-matching capability in recent years, cross-referencing Single Touch Payroll (STP) data, bank transaction feeds, GST reporting and third-party income sources such as ride-share, short-stay accommodation and marketplace platforms. Mornington Peninsula's mix of seasonal hospitality, tourism-driven trade, and a large number of sole traders and small companies makes the region a natural focus for benchmarking reviews.

• Industry benchmarks: the ATO compares your reported income and expenses against similar businesses in your postcode and industry code.
• STP mismatches: payroll reported through Xero is compared against super guarantee and PAYG withholding lodgements.
• Cash-heavy sectors: hospitality, trades and personal services attract closer scrutiny under the ATO's cash economy program.

The Five-Year Rule: What Records You Must Keep

Section 262A of the Income Tax Assessment Act 1936 requires businesses to keep records that explain all transactions and enable a true assessment of taxable income. Similarly, GST record-keeping obligations under the A New Tax System (Goods and Services Tax) Act 1999 apply to every BAS you lodge. In practice, this means:

• Records must be kept for at least five years from the date of the transaction, or from when the return was lodged — whichever is later.
• Records must be in English (or readily convertible), and stored in a way that's accessible if the ATO requests them.
• Digital storage is fine, but you must be able to produce a legible copy on request — a folder of unsorted paper receipts in a shed doesn't meet this standard.

Income Records Every Business Must Retain

Every dollar that hits your business must be traceable back to a source document. For Peninsula businesses this typically includes:

• Tax invoices issued to customers, including GST-inclusive amounts and your ABN.
• Point-of-sale and EFTPOS settlement reports for cafés, retail and hospitality venues.
• Bank statements for every business account, reconciled monthly.
• Booking platform statements for short-stay accommodation or tour operators around Sorrento, Portsea and Flinders.
• Cash sale records where applicable — the ATO will specifically ask for these in cash-economy reviews.

Expense and Deduction Substantiation

Under general deduction principles in section 8-1 of the Income Tax Assessment Act 1997, an expense is only deductible if it's substantiated and connected to earning assessable income. The ATO routinely disallows deductions where the paperwork simply isn't there. You should retain:

• Supplier tax invoices and receipts for every claimed expense, showing GST where applicable.
• Vehicle logbooks if claiming work-related motor vehicle expenses.
• Home office and equipment purchase records, including depreciation schedules.
• Loan and asset finance statements supporting interest deductions.
• Contracts and invoices for subcontractors and professional services.

A missing receipt doesn't automatically kill a deduction, but the burden of proof sits with you — and reconstructing records months or years later is far harder than attaching them to the transaction the day it happens.

Payroll, Super and Contractor Records

Payroll compliance sits under both the Fair Work Act 2009 and the Superannuation Guarantee (Administration) Act 1992 (SGA Act). Employers across the Peninsula — from Frankston to Mornington township — must retain:

• Employment contracts and Fair Work Information Statements — see fairwork.gov.au for current templates and award rates.
• Time and wages records for at least seven years under Fair Work record-keeping rules.
• Superannuation guarantee payment confirmations, matched to STP reporting each quarter.
• Contractor agreements and ABN validity checks, particularly where contractor-versus-employee status could be questioned.

Super guarantee shortfalls are one of the fastest-growing audit categories nationally, and penalties under the SGA Act can be substantial — including the loss of the tax deduction for the super contribution itself if it's paid late.

How Xero Makes Audit-Readiness Easier

As a Xero Certified Advisor, we set clients up so that record-keeping happens automatically rather than as a scramble every June. Xero's features that directly support ATO audit requirements include:

• Receipt attachment directly to each bank transaction, satisfying the "legible copy" requirement.
• Automatic bank feeds and reconciliation, creating a clean audit trail with no manual re-entry errors.
• STP-enabled payroll, reporting wages and super directly to the ATO each pay run.
• Locked periods once a BAS is lodged, preventing retrospective tampering with reported figures.
• Audit trail reporting, showing exactly who created, edited or approved each transaction.

What Happens During an ATO Review or Audit

Most audits start as a "review" — a request for specific documents relating to a BAS period or income year. If discrepancies appear, it can escalate to a full audit. Throughout the process:

• The ATO will issue a formal request specifying which records and periods are in scope.
• You (or your registered agent) typically have 28 days to respond, though extensions can be requested.
• Under the Tax Agent Services Act 2009, a registered BAS agent can liaise with the ATO on your behalf and manage the document exchange.
• If records are incomplete, the ATO can make a default assessment based on industry benchmarks — usually to your disadvantage.

The bottom line: ATO audit readiness isn't a once-a-year task — it's a habit built into how you record every invoice, receipt and pay run. Set up Xero properly, reconcile monthly, and keep source documents attached at the point of entry, and an audit letter becomes a minor administrative task instead of a business emergency.