By the time you lodge your 2026-27 tax return, the ATO already holds most of the numbers that belong on it. Your employer has reported your wages every pay run, your bank has reported your interest, your crypto exchange has handed over your trades, and Airbnb has reported your short-term stays. The ATO receives more than 600 million transactions a year from third parties and compares them against every return lodged. If the two don’t line up, you will hear about it — usually by letter.
The short answer
- Data matching is automatic and universal. It runs on every lodged return, not a random sample.
- Pre-fill is the ATO showing you its hand. Most of what it knows appears in myTax — but pre-fill is incomplete until mid-August, so lodging in early July means lodging with missing income.
- There is no minimum amount. One taxpayer received an ATO letter after buying $20 of Ethereum.
- A mismatch costs more than the missing tax. You pay the shortfall, plus a penalty of 25% to 75% of it, plus general interest charge at 11.51% a year (Oct–Dec 2026 quarter), compounding daily — and the interest is no longer tax deductible.
- You usually get a chance to fix it first. The ATO typically gives you up to 28 days to respond. Amending your return yourself before the ATO finds the problem is cheaper.
- You have two years to amend. For individuals, the window runs two years from the day after your notice of assessment is issued. There is no time limit where there is fraud or evasion.
How ATO data matching actually works
Data matching is not one big database. It is dozens of separate programs, each with its own published protocol setting out what data is collected, from whom, and how it is used. The legal authority is generally a formal notice under section 353-10 of the Taxation Administration Act 1953, and each program is notified in the Commonwealth Gazette under the Privacy Commissioner’s data-matching guidelines.
The process runs in three stages. First, third parties report data through the year — employers report wages every pay run through Single Touch Payroll, banks report interest, exchanges report trades. Second, the ATO validates that data against tax file numbers, names and dates of birth. Third, once you lodge, the system compares what you declared with what it holds. A gap gets flagged at lodgement, against the pre-filled figures, or after your assessment has been finalised — sometimes well after. If you change a pre-filled figure, the ATO may change it back where it has a high level of confidence in the information it received. Pre-fill is not a suggestion: if you think it is wrong, you need evidence, and you should keep that evidence for five years.
The programs: what the ATO knows, and from whom
These are the programs that touch ordinary individual taxpayers in 2026-27. Several run across multiple years at once, and a few are generating letters right now.
| Data source | What it reports | What it catches |
|---|---|---|
| Employers (Single Touch Payroll) | Wages, allowances, PAYG withheld, super — every pay run | Undeclared second jobs |
| Banks and financial institutions | Interest, dividends, account details | Interest from a forgotten account or term deposit |
| Share registries and brokers | Dividends, franking credits, share sales, fund distributions | Undeclared share and ETF capital gains |
| Crypto exchanges (2014-15 to 2025-26) | Account details, wallet addresses, every purchase, sale, swap and transfer | Undeclared crypto gains, including crypto-to-crypto swaps |
| Rental bond authorities | Bond lodgements, property addresses, tenancy dates | Rentals with no rental income declared |
| Property management software | Rent collected, expenses, management fees | Understated rent, overstated deductions |
| State title offices and revenue agencies | Every property sale, purchase and transfer | Undeclared property capital gains |
| Sharing economy platforms | Payments to drivers, hosts and sellers — ride-sourcing and short stays from 1 July 2023, other platforms from 1 July 2024 | Undeclared Uber, Airbnb and marketplace income |
Crypto: the program with the longest reach
The crypto asset data-matching program has run since 2014 and covers the years 2014-15 to 2025-26. The ATO expects to collect data on between 700,000 and 1.2 million individuals and entities each year from every crypto exchange legally operating in Australia — Binance, Coinbase, CoinSpot and the rest. What it receives is thorough: your name, date of birth, tax file number if the exchange holds it, linked bank accounts, every deposit and withdrawal, every trade, every crypto-to-crypto swap, the wallet addresses tied to your account, and staking activity. Australia has also signed up to the Crypto-Asset Reporting Framework, under which countries swap crypto account data — reported as starting from 1 January 2026, with the first exchange in 2027. Our crypto tax guide walks through which events are taxable and how the 50% discount works.
Rental property: three programs at once
Rental property is the ATO’s highest-volume problem — it has reported that more than 90% of rental property schedules contain errors. Three programs feed into it at once: the rental bond program, the property management program, and sharing economy reporting for Airbnb and other short-term stays. All three run through 2025-26, and in 2026 the ATO began sending rental data-matching letters directly to property owners, asking them to review their records and amend where their return doesn’t reflect the periods the property was rented or used privately. See our rental income tax guide for what is deductible and how private use is apportioned.
Sharing economy, vehicles and lifestyle assets
Ride-sourcing and short-term accommodation platforms have reported income to the ATO since 1 July 2023, and other electronic distribution platforms — marketplaces, task platforms, food delivery — since 1 July 2024. This data now pre-fills into myTax and generates nudge messages when your return doesn’t match what was reported. State motor vehicle registries report vehicles sold, transferred or newly registered, and insurers report high-value assets — cars, boats, artwork — so the ATO can check whether the life someone is living matches the income they declared.
Three worked examples: what a mismatch actually costs
Most articles say “the ATO will find you” and then stop. Here is what finding you costs, in real 2026-27 dollars — resident rates of 15% to $45,000, 30% to $135,000, 37% to $190,000 and 45% above, plus the 2% Medicare levy. Penalties run at 25% for failure to take reasonable care, 50% for recklessness and 75% for intentional disregard. Interest is the general interest charge at 11.51% a year for the October to December 2026 quarter, compounding daily, and it is no longer tax deductible.
Example 1: the crypto swap Sarah forgot
Sarah earns $85,000 a year. In 2025 she bought $10,000 of Bitcoin, and fourteen months later she swapped it for Ethereum when it was worth $16,000. She never touched Australian dollars, so she didn’t report anything — but the swap was a disposal, and the ATO’s crypto program has the exchange record.
- Capital gain: $16,000 − $10,000 = $6,000
- 50% CGT discount (held more than 12 months): $6,000 × 50% = $3,000 added to her taxable income
- Extra tax at her 30% marginal rate plus 2% Medicare levy: $3,000 × 32% = $960
- Penalty for failure to take reasonable care: $960 × 25% = $240
- General interest charge on $960 at 11.51% for roughly six months: about $55
- Total cost of the omission: about $1,255 — on a $6,000 gain she thought was invisible
Had Sarah amended the return herself before the ATO wrote to her, the penalty would very likely have been reduced or remitted entirely. You can test your own numbers with our capital gains tax calculator.
Example 2: the rental weeks Mark didn’t count
Mark owns a unit rented at $520 a week. It was tenanted for 48 weeks and on Airbnb for the other four while he was between tenants. He declared 48 weeks of rent — $24,960 — and left the Airbnb income off, figuring it was too small to matter.
- Rent actually received: $520 × 52 = $27,040
- Rent declared: $24,960 — shortfall $2,080
- Extra tax at his 37% marginal rate plus 2% Medicare levy: $2,080 × 39% = $811.20
- Penalty at 25%: $811.20 × 25% = $202.80
- Total before interest: $1,014 — for four weeks of rent he assumed nobody would notice
Example 3: the term deposit Priya forgot
Priya has three bank accounts. Her interest for the year totals $2,400, but she declared $1,850 — she forgot a $550 term deposit that matured in March. Her bank reported all of it, and it pre-filled into her return.
- Interest omitted: $550
- Extra tax at her 30% marginal rate plus 2% Medicare levy: $550 × 32% = $176
- Penalty at 25%: $176 × 25% = $44
- Total: $220 — and because the ATO had high confidence in the bank’s data, it could simply adjust the pre-fill back
It is also the most common kind of mismatch there is — small, forgettable, and fully visible to the ATO. Our bank interest tax guide explains how joint accounts are split and why interest is taxed in the year it is credited, not the year it is withdrawn.
The full cost stack, in one table
| What you pay | How it is calculated | 2026-27 figure |
|---|---|---|
| Tax shortfall | Undeclared income × your marginal rate + 2% Medicare levy | Depends on your income |
| Shortfall penalty — failure to take reasonable care | 25% of the shortfall | 25% |
| Shortfall penalty — recklessness | 50% of the shortfall | 50% |
| Shortfall penalty — intentional disregard | 75% of the shortfall | 75% |
| General interest charge (GIC) | Daily compounding on the unpaid amount; not deductible since 1 July 2025 | 11.51% p.a. (Oct–Dec 2026) |
| Shortfall interest charge (SIC) | Applies to amended assessments | 7.51% p.a. (Oct–Dec 2026) |
| Failure to lodge on time | 1 penalty unit per 28 days late, capped at 5 units | $364 per unit; max $1,820 |
What happens when the ATO contacts you
Most people imagine an audit. In practice, data matching usually starts much more quietly, and the earlier you engage, the less it costs.
The nudge letter
The first contact is usually a letter, sometimes an SMS or a message in myGov, pointing out a specific discrepancy and asking you to check your records. The letter sets out the data the ATO holds and gives you an opportunity to confirm or correct it. The ATO has also published a new form for people who receive a crypto letter but don’t need to amend — you can use it to explain why no amendment is needed, or to confirm that the gain or loss you already reported is correct.
The review, then the audit
If the discrepancy isn’t resolved by a letter, the ATO may open a review: it looks at specific items on specific returns and asks for records — bank statements, exchange exports, lease agreements, loan statements. The ATO will typically allow up to 28 days to respond before taking administrative action. Use that window. An audit is broader and more formal: it can cover multiple years and multiple tax types, and it is where penalties at the recklessness or intentional disregard rates start to appear. For most individuals the ATO can generally go back two years — but where there is evidence of fraud or evasion, there is no time limit at all.
The move that saves the most money: amend first
If you realise you left something out, lodge an amendment before the ATO contacts you. A voluntary disclosure made before detection is treated far more leniently — penalties are commonly reduced, sometimes to nil for a genuine mistake, and the shortfall interest charge is lower than the general interest charge. Individuals generally have two years from the day after their notice of assessment is issued to amend. Waiting for the letter is the most expensive option on the table.
How to check your own pre-fill before you lodge
The best defence against a data-matching letter is a twenty-minute check before you press lodge. The ATO’s data is not perfect — payers report late, and a platform can report gross income where you should report net. Your own records are the tiebreaker, but only if you actually compare them.
- Wait for “Tax ready”. Do not lodge in early July. Pre-fill data arrives progressively through July and into August, and lodging before your income statement shows “Tax ready” in myGov is the leading cause of returns with missing income.
- Match your income statement against your payslips. Check every employer, including a second job that lasted only a few weeks.
- Reconcile bank interest line by line. Pull the annual interest summary from every bank and account, including term deposits. If the total differs from pre-fill, your statement wins.
- Check your broker and share registry statements. Dividends pre-fill, but CGT events from share sales often don’t appear in full.
- Pull your platform reports. Uber, Airbnb, Airtasker and eBay should each have an annual summary. The platform reports gross payments — your expenses still belong on your return.
- Check crypto separately. Crypto gains and losses do not pre-fill. Export your full transaction history from every exchange you used.
If pre-fill and your records disagree, trust your records — but keep the evidence. If you use a registered tax agent, the same check still matters — your agent can only work with what you give them, and the extended agent lodgement deadline (typically 15 May 2027) gives you time to do it properly. Our guide to lodging your tax return walks through the full process step by step. And if you want to see what the extra income does to your bill before you amend, run it through our income tax calculator.
Common mistakes that trigger data matching
- Lodging in the first week of July. Pre-fill isn’t complete, income goes missing, and the return has to be amended.
- Deleting pre-filled figures you don’t recognise. Check them against your statements first.
- Assuming small amounts don’t count. There is no de minimis. A $20 crypto purchase generated a letter; a $550 interest omission generated an adjustment.
- Thinking a crypto swap isn’t a disposal. Swapping one crypto for another is a CGT event at market value, even if no Australian dollars are involved. So is spending crypto.
- Declaring rent for the tenanted weeks and forgetting the Airbnb weeks. The sharing economy data and the bond data arrive separately, and the ATO puts them together.
- Ignoring the letter. A nudge letter ignored becomes a review; a review ignored becomes an audit. The 28-day window is real, and responding inside it is free.
Frequently asked questions
Does the ATO know about my crypto if I only used an overseas exchange?
The ATO’s program covers Australian exchanges — the designated service providers that report under the crypto data-matching protocol. If you only ever used an overseas exchange, that automatic feed doesn’t apply. But Australia has signed up to the Crypto-Asset Reporting Framework, under which countries exchange crypto account data — reported as starting from 1 January 2026 with the first exchange in 2027.
I got an ATO letter but I never sold anything. Do I still need to respond?
Yes. Holding crypto is not taxable — but swapping tokens, receiving staking rewards, getting an airdrop or spending crypto are all taxable events even though you never sold for dollars. The ATO has published a form for letter recipients who don’t need to amend: you can use it to explain why, or to confirm the gain or loss you already reported.
I only made $20 on crypto. Will the ATO really care?
The matching is automated, and there is no minimum threshold. A taxpayer was reported as receiving an ATO letter after buying $20 of Ethereum. Small amounts usually mean small penalties, but they still mean a letter, an amendment, and interest.
Can the ATO see my bank account balance?
Not your live balance. What it receives is reported data: interest earned and account identifiers. What it can do is compare the life your records describe with the income you declared — the lifestyle assets program collects insurer data on high-value cars, boats and artwork.
What to do now
Data matching is not something to fear and not something to ignore. It compares what other people reported about you with what you reported about yourself, for every return, every year. Most of the time the two agree and nothing happens. When they don’t, the cost is the missing tax plus a penalty plus interest — and the penalty is almost always smaller if you find the problem first.
Before you lodge your 2026-27 return, wait until your income statement shows “Tax ready”, then spend twenty minutes reconciling pre-fill against your own statements: payslips, bank interest summaries, broker reports, platform summaries, your crypto export and your property manager’s statement. If something is missing, amend it — you have two years, and amending first is cheaper than being found. And if a letter arrives, open it and respond inside the window it gives you. The ATO’s data is extensive, but it is not a verdict. Your records are your answer to it — so keep them.
This article is general information about the Australian tax system for the 2026-27 income year. It is not personal tax advice. If your affairs involve multiple income sources, foreign income or a dispute with the ATO, speak to a registered tax agent.
Sources: Australian Taxation Office, Data matching (updated 16 December 2025); ATO general interest charge rates for the October to December 2026 quarter.


