Highlights

  • Every SMSF must be audited annually by an ASIC-registered, independent SMSF auditor — there are no exceptions regardless of fund size or complexity.
  • The auditor checks both the fund's financial statements (Part A) and its compliance with Superannuation law (Part B), and must report any contraventions to the ATO.
  • SMSF trustees must keep Trustee minutes and member reports for at least 10 years, accounting records for at least five years, and audit reports for at least 10 years.
  • Common audit issues include missing trustee meeting minutes, Investment strategies that do not match actual investments, and in-house asset breaches.
  • Auditor independence is mandatory — an auditor cannot audit a fund where they have a financial, Business, employment, or personal relationship with the trustees.

Running a self-managed super fund gives trustees direct control over their retirement savings — but it also means taking on a substantial administrative burden that large APRA-regulated funds handle behind the scenes. Chief among those burdens is the mandatory annual audit and the record-keeping regime that underpins it. Understanding what SMSF audit and record-keeping obligations actually require — and what happens when they are not met — is essential knowledge for every trustee.

Why Does an SMSF Need an Annual Audit?

Direct answer: Every SMSF must be audited by an independent, ASIC-registered SMSF auditor each year, regardless of the fund's size or how straightforward its investments are. The audit serves two functions: verifying the fund's financial statements, and checking that the fund has complied with superannuation law throughout the year.

Unlike the financial accounts of a private company — which may only require an audit above certain size thresholds — there is no SMSF equivalent of a 'small company' exemption. Every fund, every year. The audit must be completed before the SMSF Annual Return (SAR) can be lodged with the ATO. The SAR is how the fund pays its annual Supervisory Levy ($374 in FY 2025-26) and its income tax.

The audit is the key mechanism by which the ATO maintains oversight of the sector. Rather than auditing all 663,867 SMSFs itself, the regulator relies on ASIC-registered auditors to verify compliance and flag problems. When auditors find a contravention, they are legally required to report it to the ATO via an Auditor Contravention Report (ACR) in most circumstances — it is not discretionary.

What Does an SMSF Auditor Check?

The audit is conducted in two parts. Part A is the financial audit: the auditor reviews the fund's financial statements, member accounts, tax return, and supporting documentation to confirm the accounts give a true and fair view of the fund's financial position. Part B is the compliance audit: the auditor checks whether the fund has operated in accordance with the SIS Act and SIS Regulations throughout the year.

Key compliance areas examined in Part B include: whether the fund has maintained a current written investment strategy under Regulation 4.09; whether the fund's investments are consistent with that strategy; whether any in-house asset rules have been breached; whether the sole purpose test has been maintained; whether any related-party transactions were conducted on arm's-length terms; and whether any contributions exceeded the applicable caps.

Common Issues Found During SMSF Audits

Auditors and the ATO consistently report that a relatively small set of issues recur across many SMSF audits. Being aware of them in advance is the most effective way to avoid them.

  • Trustee meeting minutes missing, incomplete, or unsigned — required to be kept for 10 years.
  • Investment strategy not updated to reflect the fund's actual Assets or recent member changes.
  • Loans to members or related parties in breach of the in-house asset rules (which cap related-party exposure at 5% of fund assets).
  • Residential property used by a related party — a clear breach of the sole purpose test.
  • Contribution amounts exceeding the applicable cap ($30,000 concessional, $120,000 non-concessional in FY 2025-26).
  • Non-arm's-length transactions, such as acquiring an asset from a related party at below-Market Value.
  • Failure to document insurance decisions in the investment strategy.

Auditor Independence: Why It Matters

SMSF auditors must be independent of the fund they audit. This is not merely a professional standard — it is a legal requirement. An auditor cannot audit a fund where they have a financial relationship, a close business relationship, an employment relationship, or a personal relationship with the trustees or members that could compromise their objectivity.

In practical terms, this means that an accounting firm that also prepares the fund's annual accounts should not be auditing those same accounts. The auditor and the Accountant must be separate, independent parties. Auditors who breach independence requirements face sanctions from ASIC, including suspension or cancellation of their registration as an ASIC-approved SMSF auditor.

Trustees are responsible for ensuring they engage an independent, ASIC-registered auditor. You can verify an auditor's registration on the ASIC Auditor Register. If a trustee uses an auditor who is not registered or who lacks independence, the audit is invalid, and the SAR cannot be validly lodged.

SMSF Record-Keeping: What You Must Keep and For How Long

The SIS Act specifies minimum record-keeping periods for different categories of SMSF documentation. These are not suggestions — they are legal minimums. Failure to maintain required records is a breach of trustee obligations, independent of any other compliance issue.

  • Trustee meeting minutes (including minutes of any decisions made by trustees): minimum 10 years.
  • Copies of all reports given to members (including annual member statements): minimum 10 years.
  • Audit reports: minimum 10 years.
  • Accounting records (including transaction records, bank statements, and investment records): minimum five years.
  • Copies of all SMSF Annual Returns lodged with the ATO: retained until the ATO confirms they are no longer required.
  • The trust deed and any subsequent deed amendments: retained for the life of the fund and after winding up.

Trustees who are approaching a wind-up of the fund should be aware that record-keeping obligations do not end when the fund is closed. Records must continue to be held for the applicable period even after the fund has been wound up and its assets distributed.

Practical Tips for SMSF Record-Keeping

Most trustees use a combination of physical and digital storage for SMSF records. Cloud-based SMSF administration software can automatically retain transaction records, audit reports, and annual returns — reducing the risk of documents being lost or inadvertently destroyed. However, trustees remain responsible for ensuring records are complete and accessible, regardless of who does the day-to-day administration.

  • Keep digital and physical copies of all trustee meeting minutes, signed by all trustees.
  • Maintain a folder — physical or electronic — for each financial year, containing the annual accounts, audit report, SAR, and all investment transaction records.
  • Store the trust deed and all amendments securely — preferably in multiple locations.
  • Review your record-keeping at least annually, ideally as part of the audit preparation process.
  • Ensure all documents are dated and signed where required.

What Happens When a Contravention Is Found?

When an auditor identifies a contravention of the SIS Act or SIS Regulations, they are required to lodge an Auditor Contravention Report (ACR) with the ATO if the contravention meets specified criteria. The ATO then reviews the ACR and decides whether to take action. Possible responses range from an educational letter for minor, isolated issues to an administrative penalty, a direction to rectify, or in serious cases, trustee disqualification or criminal referral.

Administrative penalties under section 166 of the SIS Act range from five to 60 penalty units per breach (each unit currently worth $330, equating to $1,650 to $19,800 per breach). Civil penalties for the most serious breaches can reach 2,400 penalty units — approximately $751,200. These penalties are imposed on trustees personally, not on the fund.

The most effective way to avoid a contravention report is to maintain accurate records throughout the year, conduct an internal compliance review before engaging the auditor, and address any issues proactively — rather than waiting for the auditor to find them.

The Annual SMSF Audit Process: What Trustees Should Prepare

Understanding what the auditor will ask for — and having it ready — is the most effective way to make the annual SMSF audit a smooth, low-stress process rather than a scramble. Auditors typically request a standard package of documents, and assembling that package well in advance of the audit date saves time and reduces the risk that gaps will be discovered under pressure.

The standard audit package typically includes the fund's annual financial statements (profit and loss, Balance Sheet, and member statements), the income tax return, bank statements for all fund accounts, investment statements and contract notes for all acquisitions and disposals, the current signed investment strategy, minutes of all trustee meetings and decisions made during the year, contribution records including employer payment summaries where applicable, and — where the fund holds property or other non-standard assets — current valuations from an independent source.

  • Annual financial statements and member account balances — prepared by the accountant or administrator.
  • All bank and investment account statements for the full financial year.
  • The signed, current investment strategy with trustee minutes of the most recent review.
  • Transaction records for all asset purchases and sales, including any property valuations.
  • Contribution records for each member, including employer SGC receipts and any personal contribution notices.
  • Insurance policy documents if the fund holds life, TPD, or income protection cover.
  • LRBA Loan statements and the separate bare trustee deed, if applicable.

Trustees who maintain organised, year-round records — rather than assembling them in a rush before the audit — consistently report that the audit process is faster, less expensive, and less stressful. Many professional SMSF administrators provide a cloud-based portal where documents can be uploaded throughout the year, making audit preparation straightforward.

Contraventions and the ATO's Response Framework

Not every audit finding is a crisis. The ATO applies a graduated response framework to SMSF contraventions, distinguishing between minor, inadvertent issues and serious or repeated breaches. For minor, first-time contraventions where the trustee is cooperative and takes prompt corrective action, the ATO often issues an educational letter with no financial penalty. For more serious or repeated breaches, administrative penalties, rectification directions, enforceable undertakings, or trustee disqualification may follow.

The ATO's stated preference is for trustees to self-report issues where possible — which typically results in a more favourable outcome than waiting for the auditor or the ATO to identify a problem. Voluntary disclosure before an audit is completed, or before the ATO has opened an investigation, is treated as a significant mitigating Factor. Trustees who discover a compliance issue during the year — rather than at audit time — should document the discovery, seek professional advice, and consider whether voluntary disclosure is appropriate.