The ATO’s New Data Sharing Agreement — What Your Bank Is Now Automatically Reporting

By The Fine Print editorial team  |  Last updated: June 2026  |  12 min read  |  ⚠️ Not financial advice

Most Australians know the ATO gets data from employers through Single Touch Payroll. Fewer know the scope of what else flows in automatically. In 2026, more than 600 million records per year arrive at the ATO from banks, investment platforms, health insurers, government agencies and overseas tax authorities — and that number is growing. A significant expansion in 2024 added the ATO to the Australian Financial Crimes Exchange, enabling it to receive account and transaction data from financial institutions for fraud and tax-crime detection. On top of that, the international Common Reporting Standard means banks in over 100 countries are quietly sending your overseas account details to Canberra. This guide explains the full picture: what’s being reported, by whom, how it affects you, and what to do to make sure your tax return aligns with the data the ATO already holds.

---

How Much Data the ATO Actually Receives

The scale of the ATO’s data collection is not widely understood. In 2026, professional commentary and practitioner publications confirm that the ATO receives in excess of 600 million third-party records per year. These come from: ^[4][5][9]

---

The AFCX Program — The Newest Data Feed

The most significant recent expansion to the ATO’s data collection is its membership of the Australian Financial Crimes Exchange (AFCX). The ATO joined in May 2024 to exchange data and intelligence aimed at identifying fraud and tax crime. In August 2025, the ATO published a formal public notice confirming it will acquire account and transaction data from AFCX for the 2024–25, 2025–26 and 2026–27 financial years. ^[1][2]

---

CRS and FATCA — How Your Overseas Accounts Are Reported

For Australians with overseas bank accounts, investments or assets, the Common Reporting Standard (CRS) is the most directly relevant development in international tax data-sharing. As of 2026, CRS is described as “fully matured, utilising AI to cross-reference global data with domestic tax returns.” ^[8][10]Here is how it works in practice. Banks and other “reportable financial institutions” in more than 100 countries are required to identify customers who are tax residents of other jurisdictions. If your bank in the UK, Singapore, the US or elsewhere identifies you as an Australian tax resident, it must report your account balance, gross interest and dividend income to its local tax authority. That authority then transmits the data to the ATO under a bilateral tax information exchange agreement. The ATO’s list of tax information exchange agreements was updated to 1 June 2026. ^[6][8][10]FATCA (the US Foreign Account Tax Compliance Act) adds a separate layer for US persons and US-linked accounts. Commonwealth Bank and other major Australian institutions are FATCA-compliant, meaning US tax residents with Australian accounts have their data reported to the IRS, and reciprocally, Australians with US accounts have their data sent to the ATO. ^[7][12]The combined effect: if you have undeclared offshore accounts or investments, the ATO has the data to reconstruct your income, issue amended assessments for prior years, and apply penalties and interest. Voluntary disclosure before receiving a data-matching letter typically results in significantly lower penalties. ^[8][11][10]

---

Bank Interest Pre-Fill and What Happens When You Change It

The ATO maintains a short list of major banks and financial institutions that automatically supply interest income data for pre-fill, updated in January 2026. When you open your 2025–26 return in myTax or through a tax agent, the interest earned on your accounts at these institutions is already populated before you touch anything. ^[3][4]The critical implication: if you override or delete that pre-filled figure, the ATO can see the discrepancy between what your bank reported and what you lodged. A difference that might once have been treated as an oversight is now an obvious data mismatch — the kind that risk-based systems are specifically designed to catch. This doesn’t mean you can never change pre-filled figures; sometimes they are genuinely wrong (joint accounts where you only own part, accounts closed during the year, timing differences). But when you do change them, you need to be able to explain why with documentation. ^[3][5][9]

---

How the Data Web Affects Everyday Australians

The scale of data ingestion has practical consequences well beyond catching deliberate evaders. ^[5][9][2]

Innocent mismatches get flagged

If your lifestyle — mortgage repayments, regular spending, asset purchases — looks inconsistent with your declared income, AI-driven systems may flag your return for review even when you’ve done nothing wrong. The mismatch might reflect a loan from family, an insurance payout, proceeds from selling a car, or any number of non-taxable cash flows. If you can’t explain it quickly, the review takes time. ^[2][5]

The privacy imbalance

Most Australians have limited visibility into which specific fields their bank is sending to the ATO, how long the data is retained, and what analytical models are applied to it. Data sharing is authorised by law and justified as anti-evasion and anti-crime — but if the ATO’s inferences about your financial behaviour are incorrect, you bear the burden of proving your actual position. The ATO’s statutory right to access bank records for specific taxpayers — not just from pre-fill feeds but via direct request — adds a further layer. No major court decisions between 2023 and 2026 have rolled back these powers; challenges have been policy- and privacy-driven rather than judicial. ^{[7][2][10][11]}

Side-hustle and gig income

Platforms including Airbnb have publicly welcomed data-sharing frameworks that make tax compliance “simpler” — which also means simpler for the ATO to cross-check your lodgement. The SERR program and AFCX together give the ATO substantially more visibility over digital-platform income flows and high-risk transaction patterns than it had even three years ago. ^[14][15][2]

---

✅ Three Actions to Take Now

Action 1: Line up your return with what the ATO already sees

Before finalising your 2025–26 return, download your pre-fill in myGov/ATO Online and compare it against your own records for bank interest, dividends and all other third-party amounts. Check for any accounts you may have overlooked — a term deposit, an online savings account, an investment in a managed fund. If you want to change a pre-filled figure (because the account was joint, was closed during the year, or the interest is attributed at different times), keep clear evidence: account statements, joint-ownership documentation, percentage splits. A clean reason for any change you make is far better than an unexplained discrepancy. ^[3][4][5]

Action 2: Audit your overseas accounts and disclose any gaps

Make a list of every overseas bank account, investment account, superannuation-equivalent, or financial asset you hold in any foreign country. For each one, check whether the interest, dividends, and any capital gains were declared on your Australian return for recent years. The safe assumption is that the ATO is receiving CRS data on every account — the question is whether your return matches it. If you find gaps in prior years, speak to a registered tax agent about making a voluntary disclosure before the ATO contacts you. Voluntary corrections made before a data-matching letter is issued typically attract substantially lower penalties than those made in response to ATO contact. ^{[8][10][11][12]}

Action 3: Document unusual bank transactions now, not later