SMSF Audit Guide
A guide to the annual audit requirement for Australian self-managed super funds. Covers what the audit involves, what auditors check, how to prepare records, what happens when a finding is raised, and how to avoid the most common audit failures.
Every SMSF must complete an annual audit before lodging the fund's annual return. The audit must be conducted by a registered SMSF auditor who is independent of the fund. Failing to arrange the audit on time is itself a compliance breach.
What is the SMSF audit?
The annual audit is a legal requirement for every SMSF. It is not optional, it cannot be waived, and it cannot be conducted by the trustees themselves. It must be completed every year before the annual return is lodged with the ATO.
The audit is your fund's annual health check. A clean audit report gives peace of mind. A qualified opinion or auditor contravention report triggers ATO attention. Good record-keeping makes the process faster, cheaper, and less stressful.
The two parts of the audit
The SMSF audit has two distinct components, and both must be completed:
1. Financial audit: A review of the fund's financial statements - the balance sheet, income statement, and member statements. The auditor checks that the financial statements accurately represent the fund's financial position and comply with applicable accounting standards.
2. Compliance audit: A review of whether the fund has complied with the SIS Act, SIS Regulations, and other superannuation law during the financial year. This is the component that identifies operational breaches - things like the sole purpose test, the in-house asset rule, related party transactions, pension payment minimums, and investment strategy documentation.
A fund that completes only one component is not compliant.
What the audit is not
The audit is not:
- A tax return preparation service
- Investment advice
- A guarantee that the fund is compliant in all respects
- A substitute for the trustees' own responsibility to understand and comply with superannuation law
The auditor provides independent assurance. Legal responsibility for running the fund compliantly remains with the trustees at all times.
When the audit must be completed
The audit must be finalised before the fund's annual return is lodged. Auditors must generally be appointed at least 45 days before the annual return lodgement deadline to allow sufficient time for the audit process.
- Self-lodging funds: Annual return due 31 October - audit should begin no later than mid-September
- Via a registered tax agent: Extended deadline (typically February or May) depending on the agent's lodgement program
Most SMSF accountants begin the audit process in August or September for a 30 June year-end fund.
A fund that lodges its annual return without a completed audit has breached the SIS Act. If an audit is not arranged at all, the ATO may treat this as a serious compliance failure - potentially resulting in a compliance review, administrative penalties, or referral for enforcement action. The audit is not an optional formality.
Who can conduct the audit?
The audit must be conducted by a registered SMSF auditor. Not every accountant or financial adviser is qualified or registered to audit an SMSF.
ASIC registration requirement
Since 1 July 2013, SMSF auditors must be registered with ASIC. Registration requires:
- Holding a relevant accounting qualification
- Meeting minimum competency requirements, including SMSF-specific training
- Holding professional indemnity insurance
- Passing ASIC's fit and proper assessment
Trustees can verify whether an auditor is registered by searching the ASIC professional registers at asic.gov.au.
The independence requirement
The auditor must be independent of the fund and its trustees. This is a legal requirement. The independence rules mean:
- The auditor cannot be a member of the fund
- The auditor cannot be a trustee or director of the corporate trustee
- The auditor cannot be a relative of a fund member or trustee
- The auditor cannot be an employer or employee of the trustees in the same business
- There must be no financial or other relationship that could compromise independence
In practice, the fund's own accountant can prepare the financial statements and tax return, but a separate, independent registered auditor must conduct the audit. Many accounting firms use genuinely separate divisions or refer to external auditors for this purpose.
Using the same auditor each year
There is no legal requirement to rotate SMSF auditors annually. Many funds use the same registered auditor year after year, which has practical advantages - the auditor builds familiarity with the fund's history, recurring transactions, and any prior findings.
However, if any change in circumstances affects independence (such as the auditor becoming a business partner of a trustee), the fund must appoint a different auditor immediately.
Using an unregistered person to conduct the audit is a serious breach regardless of the quality of the work performed. The ATO requires a valid SMSF auditor number (SAN) on the annual return. If the person who conducted the audit is not registered with ASIC, the audit is not valid and the annual return cannot be lodged correctly.
Super Informed is a free weekly newsletter for Australian SMSF trustees. Every Thursday.
Subscribe freeWhat the audit covers
The compliance audit covers the fund's activities across the entire financial year. Auditors work from a standard checklist of superannuation law requirements and assess the fund against each one.
Financial statement review
The financial audit checks:
- Opening balances match the prior year's closing balances and audited statements
- All transactions during the year are recorded accurately
- Assets are valued at market value at year end
- Member balances are correctly calculated
- Income, expenses, and tax provisions are correctly reported
- Financial statements comply with the AASB accounting standards applicable to SMSFs
Investment compliance checks
The auditor checks that the fund's investments comply with the SIS Act:
- Sole purpose test: Are all investments consistent with providing retirement benefits? Is there any evidence of personal benefit to trustees or related parties?
- In-house asset rule: Do in-house assets exceed 5% of total fund assets?
- Arm's length rule: Were all transactions conducted at market rates?
- Related party transactions: Were any assets acquired from or disposed of to related parties, and if so, were they permitted?
- Investment strategy: Is there a current written investment strategy? Does the fund's actual asset allocation reflect the strategy? Has it been reviewed during the year?
Contribution and benefit checks
- Were all contributions received validly - for example, age and work test conditions met for personal contributions?
- Were contribution amounts within the applicable caps?
- Were benefits paid in accordance with a valid condition of release?
- Were pension payments made at or above the minimum drawdown amount by 30 June?
- Were any lump sums paid correctly from preserved or restricted non-preserved amounts?
Trustee and administrative compliance checks
- Is the trust deed current and appropriate for the fund's activities?
- Have all trustees signed the trustee declaration (NAT 71089)?
- Are trustee records maintained - minutes, resolutions, and investment strategy?
- Is the fund correctly registered with the ATO?
- Are TFNs held for all members?
- Has the fund lodged prior year returns? (Auditors check for outstanding returns.)
- Were any reportable TBAR events lodged correctly and on time?
Asset-specific checks
Different asset types attract different audit procedures:
- All assets: Must be held in the correct trustee name (or corporate trustee name). Mis-titling is a frequent administrative finding.
- Listed shares and managed funds: Verified against brokerage statements, share registry records, and end-of-year valuations from market data.
- Real property: Verified against title documents, council rates, lease agreements (where applicable), and independent valuations where required.
- Bank accounts and term deposits: Verified against bank statements reconciled to fund records.
- LRBAs: Verified for correct holding trust structure, loan documentation, and PCG 2016/5 compliance for related party loans.
- Unlisted investments: May require additional evidence of valuation and legitimacy.
- Crypto assets: Verified against exchange records, wallet addresses, and year-end valuations. The auditor will check that custody arrangements are consistent with the sole purpose test and that assets are held by the fund - not in a member's personal wallet.
The compliance audit looks at different questions to the tax return. A clean tax return does not mean a clean audit. The accountant checks whether the numbers add up. The auditor checks whether the fund actually operated within the law throughout the year. These are two separate assessments, and trustees should not assume one implies the other.
How to prepare for your audit
Most audit delays and findings are caused by incomplete or disorganised records - not by genuine compliance breaches. Providing the auditor with complete, well-organised documentation at the outset significantly reduces the time, cost, and risk of the process.
Key documents to provide
Financial records:
- Bank account statements for all fund accounts (full year)
- Term deposit certificates and interest statements
- Brokerage statements and contract notes for all share transactions
- Year-end portfolio valuations from broker, share registry, or market data
- Dividend and distribution statements
- Rental income records and property management statements where applicable
Governance and compliance records:
- Copy of the current trust deed with all deeds of variation
- Trustee minutes and resolutions for the year
- Current written investment strategy
- Evidence of annual investment strategy review (trustee resolution)
- Signed trustee declarations for all trustees (NAT 71089)
- Member contribution records and contribution caps tracking
- Pension documentation: commencement documents, minimum drawdown calculations, payment records
- Binding death benefit nominations where applicable
- LRBA loan agreements and repayment records where applicable
Property-specific documentation
If the fund holds property:
- Certificate of title confirming ownership in the fund's or corporate trustee's name
- Lease agreements for residential and commercial properties
- Rental income records and bank statements showing rent received
- Current independent valuation or documented basis for the value used
- Evidence of market-rate rental where the tenant is a related party
- Building insurance policy in the fund's or corporate trustee's name
- Mortgage and loan statements for LRBA properties
Crypto and pension-specific documentation
Crypto assets:
- Exchange account records for all transactions during the year
- Wallet addresses confirming custody is in the fund's name
- Year-end valuations from the exchange or a recognised market data source
Pensions:
- Pension commencement documents signed before the first payment
- Trustee resolution to commence the pension
- Account balance at 1 July and minimum drawdown calculation
- Bank records confirming payments meet or exceed the minimum
- TBAR lodgements and ATO confirmation of any reportable events
Auditors charge by the time they spend. An audit requiring multiple rounds of follow-up requests for missing documents takes longer and costs more. Providing complete records upfront is the single most effective way to reduce the cost and duration of the annual audit. Many accounting firms include an audit documentation checklist with their engagement letter - use it.
Common audit findings
These are the issues auditors find most frequently in SMSF audits. Most are avoidable with basic record-keeping and a working understanding of the rules.
Pension payment failures
Missing the minimum pension drawdown by 30 June is the most commonly identified compliance breach. It is entirely avoidable.
When the auditor identifies a shortfall, the audit report must be qualified. The fund may need to apply to the ATO for relief under the Commissioner's discretion. If relief is not granted, the pension is taken to have failed for the whole year and all earnings lose their tax-free treatment.
Investment strategy deficiencies
The investment strategy is checked at every audit. Common problems:
- No written strategy exists at all
- Strategy not reviewed or updated for several years
- Generic template that does not reflect the fund's actual asset allocation
- Strategy does not address insurance needs of members
- Fund's actual investments are materially inconsistent with the stated strategy
Loans to members or related parties
Any loan from the fund to a member or related party is prohibited under s65 SIS Act. The auditor will identify these arrangements - including informal ones that are not documented as loans but function as loans, such as expenses paid by the fund on behalf of a member that are not properly reimbursed.
Related party asset acquisition
Acquiring assets from a related party - particularly residential property - is one of the most serious breaches an auditor can identify. Where found, the auditor must report it to the ATO via an auditor contravention report (ACR) and qualify the audit report.
Asset valuation issues
Common valuation problems:
- Property carried at historic cost rather than current market value
- Unlisted investments with no documented basis for the value used
- Crypto assets valued at the wrong date or using an unreliable source
- Artwork or collectibles without current independent valuations
Titling and ownership issues
Assets not held in the correct name - the trustee's name in their capacity as trustee, or the corporate trustee's name - are a common administrative finding. This occurs most often when:
- Individual trustees change and assets are not re-titled
- Assets were acquired in a member's personal name
- Bank accounts are held in a member's personal name rather than the fund account
In-house asset breaches
Where in-house assets exceed 5% of total fund assets at year end, the auditor must report this. The most common cause is a related party lease arrangement not correctly classified, or the fund's total asset value declining while the in-house asset value remains static.
TBAR reporting failures
From 1 January 2026, all SMSFs must lodge TBARs quarterly. Auditors are identifying funds where quarterly TBARs have not been lodged (or were lodged late) for pension commencements, commutations, or death benefit income stream events.
Late TBAR lodgements can cause the ATO to issue incorrect excess transfer balance determinations based on incomplete data.
Missing or outdated records
Auditors frequently encounter:
- Trustee minutes and resolutions that have not been completed for the year
- Investment strategy that predates significant changes to the fund's asset mix with no evidence of review
- Trustee declarations not signed by newer trustees
- Contribution records that do not allow the auditor to verify cap compliance
What happens when a finding is raised
An audit finding does not automatically mean the fund is in serious trouble. Auditors distinguish between minor administrative deficiencies and substantive compliance breaches, and the response required differs accordingly.
Types of audit findings
Audit findings fall into a spectrum:
- Minor deficiencies: Administrative issues that do not represent a breach of superannuation law - for example, a minor formatting issue in the minutes or a document that was prepared but not formally signed. Typically resolved without reporting to the ATO.
- Qualified audit opinion: A material issue with the financial statements or a compliance matter the auditor cannot resolve. This appears in the audit report and is disclosed in the annual return.
- Reportable contraventions: Certain breaches must be reported to the ATO by the auditor via an Auditor Contravention Report (ACR), specified under s130 of the SIS Act and ATO reporting criteria - regardless of whether the breach has been rectified.
Auditor contravention reports (ACRs)
When an auditor identifies a reportable contravention, they have an independent legal obligation to lodge an ACR with the ATO within 28 days of completing the audit. They cannot skip or delay this obligation because the trustee has already self-reported or rectified the breach.
Reportable contraventions include:
- Loans to members or related parties (s65)
- Acquisition of assets from related parties (s66)
- In-house asset limit exceeded (s84)
- Benefits paid without a condition of release being met
- Failure to maintain an investment strategy
- Other breaches specified under s130 SIS Act and ATO reporting criteria
An ACR triggers an ATO review of the fund.
Responding to a finding before it escalates
Where the auditor identifies a potential breach during the audit process:
- The auditor will typically contact the trustee or their accountant to discuss the issue
- In many cases, documentation can be provided or a minor issue rectified before the audit opinion is finalised
- Where a substantive breach has occurred, early engagement with the auditor about steps taken to rectify it is important - auditors take remediation into account
- If the breach is reportable, consider engaging an SMSF specialist before the ACR is lodged
ATO response to an ACR
The ATO's response depends on the nature and severity of the breach. Possible responses include:
- An educational letter explaining the rule that was breached
- A rectification direction requiring specific steps within a set timeframe
- An education direction requiring trustees to complete an approved course
- Administrative penalties (per breach, per trustee for individual structures, or to the company for corporate trustee structures)
- A compliance review of the fund
- In the most serious cases, a notice of non-compliance - making the fund a non-complying fund, taxed at 45% on its taxable income
The ATO has a published compliance approach that signals it aims to work with trustees to rectify issues, particularly for first-time or inadvertent breaches.
Early engagement with both the auditor and the ATO is consistently the best approach when a breach has occurred. Trustees who self-identify, rectify promptly, and engage proactively are treated more favourably than those whose breach surfaces through an audit or ATO review with no prior disclosure. The worst outcome is a breach that remains unaddressed and compounds over multiple years.
The auditor's report
At the conclusion of the audit, the auditor issues two reports. Both must be completed before the annual return can be lodged.
The independent auditor's report (financial)
This covers the financial audit. It states whether, in the auditor's opinion, the financial statements give a true and fair view of the fund's financial position and comply with applicable accounting standards.
The opinion is either:
- Unqualified: The auditor is satisfied the financial statements are materially correct
- Qualified: The auditor has identified a material issue they cannot resolve
A qualified financial report is a serious matter and will trigger ATO scrutiny.
The compliance audit report
Part B of the audit report covers the fund's compliance with the SIS Act and SIS Regulations. For each relevant section of the Act, the auditor states whether the fund complied, whether there was a breach, or whether they were unable to obtain sufficient evidence.
The auditor's SMSF auditor number (SAN) is included in the annual return. If the auditor has identified a reportable contravention, they independently lodge an ACR with the ATO - regardless of what the trustee discloses in the annual return.
Audit report lodgement process
The auditor issues their report to the trustees (or their accountant). The full audit report is retained by the fund - it is not lodged directly by the auditor with the ATO. Key information from the report (including the auditor's SAN and any qualified opinions) is included in the annual return when lodged by the trustee or their tax agent.
If a reportable contravention exists, the auditor lodges an ACR directly with the ATO as a separate, independent obligation - this occurs regardless of the annual return lodgement process.
The annual return asks whether the auditor's report contains a qualified opinion. Answering this incorrectly - for example, leaving it blank when the opinion is qualified - is a lodgement error. The ATO matches information from the ACR database against the annual return. Discrepancies are identified and may trigger further review of the fund.
Common mistakes trustees make
These are the most frequently occurring audit-related mistakes in SMSFs. Most are avoidable with basic planning and an understanding of the process.
- 1Not appointing an auditor until it is too late. The audit must be completed before the annual return is lodged. Leaving it until October for a self-lodging fund may not leave enough time, particularly if the fund's records are incomplete. Registered auditors have capacity constraints at peak season - appoint at least 45 days before the lodgement deadline.
- 2Using an accountant who is not a registered SMSF auditor. Not every accountant is registered. The ATO requires a valid SMSF auditor number (SAN) on the annual return. If the person who signs off the audit is not ASIC-registered, the audit is not valid.
- 3Using an auditor who is not independent. The auditor cannot have any financial, personal, or business relationship with the fund or its trustees that could compromise independence. Using a family member, business partner, or the same person who prepares the tax return without a genuinely separate engagement may invalidate the audit.
- 4Providing incomplete records to the auditor. Every follow-up request from the auditor adds time and cost. Missing bank statements, unsigned minutes, or an absent investment strategy are the most common causes of delays. Provide complete records at the start of the process.
- 5Failing to review the investment strategy before the audit. The investment strategy is checked at every audit. If it has not been reviewed or updated to reflect the fund's current asset allocation, the auditor will raise a finding. Review it annually and document the review with a trustee resolution.
- 6Missing the minimum pension drawdown by 30 June. The most common and most avoidable compliance finding. Set a reminder in June each year for every pension account in the fund. Even a small shortfall requires a complex remediation process.
- 7Not re-titling assets after a trustee change. When a trustee is added or removed, assets must be re-titled to reflect the new trustee arrangement. This is frequently missed and flagged by auditors as an administrative finding that requires legal correction.
- 8Assuming the audit will find nothing because the accountant prepared the return. The accountant prepares the financial statements and tax return. The auditor independently checks compliance. These are separate functions. A clean tax return does not mean a clean audit.
- 9Ignoring an ACR after it is lodged. If the auditor has lodged an ACR, the ATO will contact the fund. Trustees who do not respond or provide inadequate responses escalate the severity of the outcome. Engage promptly and consider obtaining specialist advice before responding to the ATO.
- 10Not keeping records for the required period. Financial records must be kept for at least 5 years. Trustee declarations, minutes, and investment strategy documents must be kept for at least 10 years. Discarding records before these periods expire creates an audit problem if prior-year records are requested.
- 11Failing to keep the audit file organised for future years. Auditors increasingly request prior-year working papers or evidence of rectification from previous findings. A well-organised audit file - retained year to year - makes subsequent audits faster and provides evidence that prior issues were genuinely addressed.
Related resources: The Rules & Limits Reference covers the investment strategy requirement, sole purpose test, in-house asset rule, and arm's length rule - the areas most commonly flagged in compliance audits. Pension payment obligations and TBAR requirements are covered in the SMSF Pension Guide. Key dates including the annual return deadline are on the SMSF Compliance Calendar.
Stay up to date every week
Super Informed is a free weekly newsletter for Australian SMSF trustees. No advice. Every Thursday.
Subscribe free