7-Day Payroll Security Australia Playbook: Fix STP, Super, and BAS Compliance.

Payroll-Security-Australia-BetterPayroll

What “recovery” means in payroll

The 60-minute triage (do this before touching anything else)

Open your latest draft pay and look through two mirrors. First, the STP Phase-2 preview: it should mirror your draft payslips line-for-line, paid leave, each allowance by purpose, overtime, bonuses/commissions, salary sacrifice. If the names or amounts don’t match, you have a mapping problem, not a math problem. Second, your W1/W2 view: totals subject to withholding (W1) and tax withheld (W2) should align to how the ATO expects you to complete the BAS; if they don’t, fix the pay-item definitions before you worry about spreadsheets. While you’re there, pull one payslip and run the basic legality test, issued within one working day, with the required content (period, payment date, gross, net, itemised extras, deductions with destinations, super and fund). Fail any of these three checks and you know where to start.

Day 1–2: stop the bleeding and make the file tell the truth

You’re not “closing a pay”; you’re producing an approved form the ATO will read. Rebuild your pay-item catalogue so the STP preview equals the payslip without translation, split any “all-purpose” blobs and tag each allowance to its Phase-2 purpose (travel, car, overtime meal, tool/laundry, first aid, etc.). Lock the names so they travel from payslip to STP to BAS. Once the preview matches the payslips, re-run the W1/W2 view; you’ll see the BAS argument evaporate because you’re speaking the ATO’s labels, not your own.

Day 3: fix super for today, and for what’s next

Confirm the 12% SG rate on payments made from 1 July 2025; then move from “quarterly by habit” to a monthly or per-pay cadence and stand up a simple accrued vs paid report so timing differences are the only differences. Now look ahead: from 1 July 2026, payday super aligns contributions to pay day, and the ATO’s Small Business Superannuation Clearing House is being retired, no new registrations from 1 October 2025, and the service closes 1 July 2026. Start testing your replacement flow while stakes are low; cashflow and approvals will change.

Day 4: payslips that pass an audit in under a minute

Your payslip is a legal document with a one-day deadline. Make the template do the compliance for you: employer/employee names, ABN (if applicable), pay period and payment date, gross and net, clearly named allowances/penalties/bonuses, deductions with destinations, super amount (or intended amount) and the fund. Encode this once and auto-send on payday; it’s cheaper than explanations later.

Day 5: close the “late super” trap properly

If contributions are late, don’t hide it, fix it. The Super Guarantee Charge (SGC) is deliberately painful: the shortfall is recalculated on salary and wages (not OTE), plus 10% nominal interest from day one of the quarter, plus $20 per employee per quarter, and it’s not tax-deductible. Lodge the SGC statement and reset your cadence so you never pay this tax again.

Day 6: Security, treat the ABA file like cash

Most payroll incidents aren’t cinematic; they’re boring: a believable email asking to change bank details or a swapped ABA/Direct Entry file. Put maker–checker in writing: one person builds, another person approves in the bank; never email ABA files; restrict the export folder; turn on MFA for payroll, HRIS, email, banking; and measure yourself against the ACSC Essential Eight maturity model. This is dull on purpose, and that’s why it works.

Day 7: make EOFY boring before EOFY arrives

End-of-year STP finalisation is due 14 July for most employees (30 September for closely held). If your STP preview equals your payslips every run and your W1/W2 view equals your BAS labels, July stops being a scramble. Bake the finalisation dates into your calendar and attach the signed pack (pay-run summary, STP preview, W1/W2, super accrued vs paid, bank and clearing confirmations) to each pay record so future you doesn’t need to do archaeology.

If-this-then-that: quick routes out of common holes

If STP won’t reconcile to payslips, stop chasing totals and start fixing labels, Phase-2 demands disaggregated categories; once items are mapped correctly, the numbers will line up. If BAS W1/W2 keeps disagreeing with prefill, you’ve either included/excluded the wrong items from W1 or you’re mis-classifying salary sacrifice, check your ATO treatment and rebuild the W1 view to those rules. If super is drifting, move to per-pay or monthly contributions now; anything else just delays the SGC conversation and makes payday super a bigger shock next year.

Small business vs mid-market: same standards, different tempo

Under 20 staff, you can run lean: one pay-run pack per cycle (pay-run summary, STP preview, W1/W2, accrued vs paid super), maker–checker in the bank, payslips out within one day. In the mid-market add jurisdiction splits for payroll tax and a monthly control check for bank-detail changes. The standards don’t change; only the cadence does.

How you’ll know you’re “recovered”

Quarter-end becomes dull: W1/W2 equals prefill without debate; super is paid and reconciled with clearing confirmations; payslip complaints disappear because the slips are clear and on time; and the July STP finalisation happens by the book. None of this needs heroics. It needs a system that speaks the regulator’s language the first time, every time.