The Ultimate Guide to California Sales Tax Audits

Common triggers: discrepancies between reported sales and sales-tax permit data, third-party reporting from credit-card processors and Form 1099-K, industry-targeted audit programs (restaurants, auto dealers, e-commerce, cannabis), customer complaints, prior audit results that suggest non-compliance, and dramatic year-over-year fluctuations in reported sales. The CDTFA also opens audits when a business files for sales-tax permit cancellation — closing audits are routine.

The auditor will request sales journals, purchase invoices, federal and state income tax returns, bank statements, exemption certificates, and all sales-tax returns for the audit period. Cash businesses face additional scrutiny — auditors will reconstruct sales using indirect methods if records are incomplete. California's recordkeeping requirement under R&T §7053 is four years; the CDTFA can look back further if they suspect fraud or substantial understatement.

The CDTFA's audit selection uses statistical scoring (similar to the IRS DIF system), industry-specific markup analysis, third-party data matching, prior-period results, and human referrals from agents and other agencies. Cash-intensive businesses, businesses with high markups, and businesses in industries with historical compliance issues get disproportionate audit attention. Random selection accounts for a smaller share.

When books and records are inadequate, the CDTFA reconstructs sales using an indirect method — typically markup. The auditor calculates cost of goods sold from purchase invoices, applies an industry markup percentage (or markup observed in a test period), and arrives at an estimated taxable sales figure. The markup method routinely produces assessments substantially higher than what was reported. Challenging the markup percentage and the underlying cost calculation is the key defense.

Yes. The CDTFA process: (1) Notice of Determination (the assessment), (2) Petition for Redetermination within 30 days (administrative protest), (3) Appeals Conference with a CDTFA Appeals Section attorney, (4) Office of Tax Appeals (OTA) review if you disagree with the Appeals decision. OTA is an independent state agency with binding decision authority. Missing the 30-day window for the initial petition forfeits administrative appeal rights — the only remaining remedy is pay and sue for refund.

Under R&T §6829, the CDTFA can assess sales tax personally against any officer, director, or shareholder who willfully fails to pay California sales tax that the business collected from customers. This is essentially a trust-fund concept — sales tax is held in trust for the state, and pocketing it (or using it for operations) creates personal liability that survives the corporate dissolution. Officers face this exposure even if they didn't personally direct sales-tax decisions, if they had authority to do so.

Most CDTFA audits run 6 to 18 months from the initial appointment to the Notice of Determination. Complex audits (cannabis, multi-location restaurants, online sellers with multi-state nexus) can run longer. The audit covers an examination period of three years (R&T §6487), extended to eight years for substantial understatement or fraud. The auditor will typically ask for an extension agreement (similar to federal Form 872) if the statute is closing — that's a strategic decision.

The CDTFA Voluntary Disclosure Program (VDP) allows out-of-state businesses that should have registered for California sales-tax collection to come forward, register, and pay back tax with reduced penalty exposure. Eligibility requires the business not have been previously contacted by the CDTFA. VDP is most useful for online sellers, drop-shippers, and remote service providers who developed California nexus and never registered. Properly structured VDPs cap the look-back period at three years.