Sales Tax Audits in 2026: How Businesses Are Selected, What Auditors Check and How to Prepare

A letter from the state revenue department saying your sales and use tax account has been selected for audit is unsettling, but most audits follow a predictable path, and businesses with organised records come through them with small adjustments or none. This guide is for owners, controllers and bookkeepers of businesses that collect sales tax or buy equipment for their own use. It explains how states pick businesses, how far back an audit goes, the steps from first contact to appeal, how sampling turns a few errors into a large bill, why exemption certificates decide so many audits, and how managed audits and voluntary disclosure can cut the cost. Rules are drawn from California and Texas guidance and the Streamlined Sales Tax Agreement, checked in October 2026.

Quick answer

A sales tax audit is a state's review of your returns against your records, usually covering the last three or four years. Auditors test sales, exempt sales and your own purchases, often on a sample that's projected across the whole period. Most assessments come from missing exemption certificates and unpaid use tax on purchases.

• California: three years if you filed, eight years if you didn't

• Streamlined states give you 120 days after a request to produce missing certificates

• California managed audits cut interest on any tax due to one-half the normal rate

• Never registered where you should have? A voluntary disclosure limits the lookback and waives penalties

What a sales tax audit is

A sales and use tax audit checks whether you collected and paid the right tax for a past period. The auditor compares what you reported on your returns with your underlying records: sales journals, invoices, register reports, bank deposits, exemption and resale certificates, and the invoices for things you bought. Any difference becomes either an assessment, if you underpaid, or a refund, if you overpaid.

Audits come in a few forms. A field audit is done at your business or your accountant's office, sometimes over several weeks. A desk or correspondence audit is narrower and handled by mail or email, often focused on one issue such as a large exempt sale or a mismatch between returns. Many states now run computer-assisted audits, where you hand over electronic sales and purchase data and the auditor analyses it with audit software. California's Publication 147 explains what to expect in that format.

The audit looks at both sides of the business. On the sales side, the question is whether you charged tax on every taxable sale at the right rate and had support for every exempt one. On the purchase side, the question is whether you paid sales tax, or accrued use tax, on things you bought for your own use: equipment, furniture, software, supplies and items taken out of inventory. Many businesses are careful about sales and forget purchases entirely.

How businesses are selected for a sales tax audit

States don't publish formulas, but they describe their methods in broad terms. The Texas Comptroller lists several:

• Priority One accounts, the state's largest sales taxpayers, which are audited on a regular cycle.
• Random selection by industry, using computer-based sampling.
• Information sharing with other agencies, including federal and other state data.
• Analysis of tax returns, looking for unusual patterns.
• Public leads from customers, competitors or former employees.
• Prior productive accounts, where an earlier audit found $25,000 or more of tax due.

In practice, a few data signals raise the odds everywhere. Gross receipts on your income tax return that are much higher than the sales on your sales tax returns invite questions. So does a high share of exempt or resale sales compared with similar businesses, sharp swings between periods, or a cash-heavy business reporting low taxable sales. Payment card data reported on Form 1099-K gives states another number to compare with your returns. Registering late, after crossing an economic nexus threshold, can also put a business on the list.

Being selected isn't an accusation. Many audits close with no change or a small adjustment, and some find overpayments that are refunded.

How far back an audit goes

The audit period is set by each state's statute of limitations. In California, the limit is three years for businesses that filed returns and eight years for those that didn't, which is why an unregistered seller's exposure is so much larger. The California Department of Tax and Fee Administration says its audits usually cover three years.

Texas tells businesses to keep records for at least four years and says it may audit further back when a business should have held a permit but didn't, or when fraud is found. Most other states fall in the three-to-four-year range for filers, with longer or unlimited periods for non-filers and fraud.

Auditors sometimes ask you to sign a waiver of limitation, extending the deadline so the oldest period doesn't expire while the audit is in progress. That's common when you ask for a later start date. It also keeps your right to claim refunds for the same period. Read it before signing, and ask what period it covers.

The audit process step by step

The details differ by state, but the path is broadly the same. California and Texas describe it this way.

From audit notice to final assessment

1. 1

   Initial contact and scheduling

   The state contacts you, usually by phone or letter, names the audit period and the records needed, and agrees a start date. California says it rarely starts without notice and normally allows two or three weeks to prepare.

   Tip: Tell the auditor at the start if your accountant or a representative will handle the audit.

2. 2

   Entrance conference

   The auditor learns how your business works, what you sell, how you record sales and where records are kept, and designs the audit plan.

3. 3

   Records review and testing

   The auditor reconciles your returns to your books, then tests sales, exempt sales and purchases, in full or on a sample.

4. 4

   Discussing findings as you go

   Raise disagreements early. Many issues are resolved by giving the auditor more documents, such as a missing certificate or proof of shipment out of state.

5. 5

   Exit conference

   The auditor explains proposed additional tax, refunds, penalties and interest, or confirms your returns were accepted as filed. Review the working papers.

6. 6

   Billing and appeal

   You receive the assessment. In California you have 30 days from the Notice of Determination to pay or file a petition for redetermination.

Attend the exit conference even if a representative has handled the audit. It's your chance to see every schedule, check the arithmetic and understand how the law was applied, which also helps you avoid the same errors in future returns.

In Texas, after the exit conference you can ask for a reconciliation conference or an Independent Audit Review conference before the audit is finalised, and you can contest the assessment through a redetermination hearing by the deadline on the audit notification. In California, a petition for redetermination stops the bill becoming final, but interest keeps running, so CDTFA suggests paying at least the undisputed amount.

Sampling: how a few errors become a large bill

Checking every transaction over three years would take too long for most businesses, so auditors sample. California's auditors generally try to use a statistical sample: they randomly select enough invoices to draw a conclusion about the whole population and must discuss the sampling plan with you before finalising it. If records aren't suitable for that, the auditor may use another method, such as a test period, where a few months are examined and the result is projected. Fixed-asset purchases are often reviewed in full, while sales are sampled.

Texas auditors must tell you if they're sampling and explain how errors will be projected.

The key concept is the error rate. If the sample shows that 5% of exempt sales lacked support, the auditor applies 5% to all exempt sales in the audit period. That makes the quality of the sample, and your response to it, critical. An unusual one-off error in the sample can be projected across years of sales that were mostly correct.

Worked example: projecting an exemption error

A distributor in a Streamlined Sales Tax state reports $2,400,000 of exempt sales over a three-year audit period, mostly sales for resale. The auditor draws a statistical sample of exempt invoices worth $120,000 and finds $9,000 with no resale certificate on file.

Plus interest on each period's share, and possibly a penalty. Now the cure. Within 120 days of the auditor's written request, the distributor contacts the customers behind the $9,000 and obtains good-faith certificates covering $6,000 of it. The unsupported amount in the sample falls to $3,000, the error rate to 2.5%, and the projected unsupported sales to $60,000. Tax due drops to $4,800, a third of the original figure.

Two lessons follow. First, the sample result is not final: documents you produce within the deadline change the projection. Second, it's far cheaper to collect certificates at the time of sale, which in Streamlined states protects you if you receive a completed certificate within 90 days of the sale.

Exemption and resale certificates

Missing or defective certificates are the single biggest source of sales-side assessments. Every sale you didn't tax, whether to a reseller, a nonprofit, a government agency or a manufacturer claiming a production exemption, needs support. Without it, the sale is presumed taxable and the tax becomes your cost, because you can't usually collect it from the customer years later.

A valid certificate is complete (buyer's name, address, permit or exemption number, reason for exemption, signature where required), accepted in good faith, and on file before or within the state's window after the sale. In the 24 Streamlined member states, a seller that gets a fully completed certificate within 90 days of the sale is relieved of liability, and a blanket certificate stays valid while purchases are no more than 12 months apart. If a certificate is missing at audit, the Streamlined rules give you 120 days after the state's request either to obtain one in good faith or to prove the sale was exempt by other means.

Non-Streamlined states have their own deadlines, some tied to the date of the auditor's written notice or the exit conference, so ask the auditor at the start what the deadline is for producing certificates. Our guides to the sales tax exemption certificate and the resale certificate explain what each form must contain, including the Multistate Tax Commission's uniform certificate accepted in 38 states.

Sales tax audits at a glance

3–4 years

Typical audit period

longer for non-filers

eight years

California limit if no returns

vs three years if filed

120 days

Certificate cure period

Streamlined states

30 days

California appeal window

after Notice of Determination

Use tax on your own purchases

The purchase side catches businesses that collect sales tax perfectly. Auditors pull your fixed-asset register and expense accounts and check each significant purchase. If an out-of-state or online vendor didn't charge sales tax, and you didn't accrue use tax on your return, the tax is due now.

California notes that auditors often review asset purchases on an actual basis, meaning every item, while sampling sales. Items to expect questions on include machinery, computers and servers, furniture, vehicles and trailers, software (in states that tax it), promotional goods, and stock taken out of inventory for your own use or given away.

Example. A manufacturer bought a $85,000 machine from an out-of-state supplier that didn't charge tax, plus $12,000 of office furniture online, also untaxed. At a combined 8% rate, the auditor assesses $85,000 × 8% + $12,000 × 8% = $6,800 + $960 = $7,760 of use tax, plus interest from the period of purchase. If the machine qualifies for a manufacturing exemption in that state, the business needs the paperwork to prove it.

Penalties, interest and how to limit them

Interest runs on any tax found due from the date it should have been paid, so an assessment for the oldest quarter in a three-year audit carries three years of interest. Penalties vary by state. California may add a negligence penalty when additional tax results from inadequate record-keeping, and states impose heavier penalties for fraud or for collecting tax and not paying it over. Texas reviews penalty waiver recommendations at the exit conference, and a good compliance history often supports a waiver.

Two programs can reduce the bill before or during an audit.

Managed audits. Some states let qualifying businesses audit themselves under the state's instructions. In California's Managed Audit Program, you review your own records using the auditor's procedures, at a time and place that suits you, and if additional tax is due, interest is charged at one-half the normal rate. Texas also runs a Managed Audit Program for qualifying taxpayers. Managed audits suit businesses with good records and a manageable number of issues, such as one type of purchase that needs reviewing.

Voluntary disclosure. If you have nexus in a state where you never registered, coming forward before the state contacts you is almost always cheaper than waiting. A voluntary disclosure agreement (VDA) limits the lookback and waives penalties in return for registering and paying the back tax. California's out-of-state program limits the lookback for qualifying sellers to three years instead of eight and can waive late filing and payment penalties; you register and file Form CDTFA-38 within 30 days. The Multistate Tax Commission's Multistate Voluntary Disclosure Program lets you approach several member states at once and stay anonymous until the agreement is signed. Interest is usually still due, and the MTC doesn't process applications where the estimated lookback tax is under $500. Any prior contact with a state about that tax, including an inquiry letter, disqualifies you, so act before a letter arrives.

How to prepare for a sales tax audit

Audit preparation checklist

0/8

• Confirm the audit period, the taxes covered and the records requested
• Reconcile each return to the general ledger and to bank deposits
• Pull exemption and resale certificates for every exempt customer in the period
• List fixed-asset and expense purchases where no sales tax was charged
• Check that tax rates and local jurisdictions in your system match each period
• Prepare a short description of your business, systems and sales channels
• Decide who will deal with the auditor and agree the start date
• Ask how sampling will be done and agree the sampling plan

Share Print

Before the auditor arrives, do your own mini-audit. Reconcile your returns to your books for each quarter. Run a report of exempt sales and match it to certificates on file, chasing the missing ones now. List purchases where no tax was charged and work out whether use tax was accrued. If you find errors, you can often file amended returns or pay the tax before the audit starts; California notes that payments with amended returns are credited to the audit and stop interest on that amount.

During the audit, keep the scope tight. Answer what's asked, provide records promptly, and keep a log of everything you hand over. Ask questions about methods, especially sampling, and talk to the auditor's supervisor if you can't resolve a disagreement. Take the exit conference seriously, check every schedule, and use your appeal rights if you disagree with the result.

Common mistakes

Not collecting certificates until the audit. Customers who bought years ago may have closed, moved or stopped answering. Collect certificates before the first exempt invoice.

Ignoring use tax. Untaxed purchases of equipment and software are among the easiest findings for an auditor.

Accepting a sample without question. An unusual transaction in a small sample can distort the projection. Ask for it to be treated separately.

Missing the appeal deadline. In California you have 30 days from the Notice of Determination; after that, the only route is paying and claiming a refund.

Waiting for the state to find unregistered nexus. Once you're contacted, voluntary disclosure is no longer available.

Official links

• California CDTFA — Publication 76, AuditsThe audit process, sampling, managed audits
• Texas Comptroller — Understanding the audit process
• Texas Comptroller — Audit Division and managed audits
• California — Out-of-State Voluntary Disclosure Program
• Multistate Tax Commission — Voluntary disclosure
• Streamlined Sales Tax Governing Board

What to do next

If an audit letter has arrived, confirm the period and records, start reconciling, and chase missing certificates immediately. If not, use the checklist above as a yearly health check. Tighten your exemption certificate process, set up use tax accruals for untaxed purchases, and check your economic nexus position in every state you sell into. For rate questions, see how to calculate sales tax and the sales tax calculator.

This is general information, not legal or tax advice — confirm on the official source or with a professional.

Frequently asked questions

How far back can a sales tax audit go?

Usually three or four years if you filed returns. California's limit is three years for filers but eight years if you never filed. Texas asks businesses to keep records for at least four years and can go further back if you should have held a permit but didn't, or in cases of fraud. Signing a waiver of limitation extends the period.

How are businesses chosen for a sales tax audit?

States use a mix of methods: their largest taxpayers are audited routinely, others are picked at random within an industry, and many are flagged by data. Texas lists random selection by industry, information shared with other agencies, analysis of returns, public leads, and re-audits of accounts whose last audit found $25,000 or more of tax due.

What happens if I don't have exemption certificates in an audit?

The auditor treats the undocumented exempt sales as taxable, and you owe the tax yourself. Most states give you a chance to fix it. In Streamlined Sales Tax states you have 120 days after the state's request to obtain a completed certificate in good faith or prove the sale was exempt another way. Missing that window makes the assessment stick.

What is sampling in a sales tax audit?

Instead of checking every invoice for three years, the auditor examines a sample, finds the error rate, and projects it to the whole audit period. California's auditors generally try to use a statistical sample of randomly selected transactions, and must discuss the sampling plan with you. A small error in the sample can become a large assessment once projected.

What is a managed audit?

A managed audit lets a business audit itself under the state's instructions, at its own pace, and report the results. In California, a business that completes a managed audit pays interest on any additional tax at one-half the normal rate. Texas also runs a Managed Audit Program. You need to be invited or approved, and your records must be in good order.

Is a voluntary disclosure agreement better than waiting for an audit?

If you know you owe tax in a state where you never registered, usually yes. A voluntary disclosure agreement limits the lookback, typically to three or four years, and waives penalties. California limits it to three years for qualifying out-of-state sellers instead of eight. You must come forward before the state contacts you.

Sources & verification

Figures on this page were checked against the sources below when it was last reviewed on 12 October 2026. Each rate and limit is stored once with its own official source and review date, and official update channels are monitored daily so changes are picked up. How we verify

1. 1.Publication 76, Audits (September 2026) — California Department of Tax and Fee Administration · accessed 12 October 2026
2. 2.Understanding the Audit Process — Texas Comptroller of Public Accounts · accessed 12 October 2026
3. 3.Audit — Texas Comptroller of Public Accounts · accessed 12 October 2026
4. 4.Out-of-State Voluntary Disclosure Program — California Department of Tax and Fee Administration · accessed 12 October 2026
5. 5.Multistate Voluntary Disclosure Program — Multistate Tax Commission · accessed 12 October 2026
6. 6.NAC 372.735 — Establishment of exemption (Streamlined rule as adopted in Nevada) — Nevada Administrative Code (via Legal Information Institute) · accessed 12 October 2026
7. 7.Streamlined Sales Tax Exemption Certificate instructions — Nevada Department of Taxation / Streamlined Sales Tax Governing Board · accessed 12 October 2026
8. 8.Good faith no more? Streamlined exemption certificate rules — Alston & Bird · accessed 12 October 2026