California CDTFA Sales & Use Tax Audits

A plain-English, taxpayer-focused guide to how California sales and use tax audits work, the methods auditors use, how assessments are calculated and challenged, and how the Los Angeles–based national tax representation firm of Mike Habib, EA can help

For a California business owner, few letters land harder than one from the California Department of Tax and Fee Administration announcing a sales and use tax audit. It is not the IRS — it is the state — and the difference matters more than most people realize. A CDTFA audit does not ask whether you reported your income correctly; it asks whether you collected, reported, and paid the right amount of sales tax on every transaction, and whether you paid use tax on everything you should have. It reaches into your point-of-sale records, your bank deposits, your purchase invoices, and sometimes your shelves and your cash register on a random day. And because sales tax is money a business is presumed to have collected from its customers and held for the state, the CDTFA pursues it with a particular intensity — an audit assessment can reach back years, apply statistical methods that turn a few sampled days into a six-figure liability, and, through California’s responsible-person rules, follow the owners personally. This guide is about understanding that process, and defending against it.

It is written for the people who actually face these audits — the restaurant owner whose cash sales are under the microscope, the retailer whose exemption certificates are being questioned, the auto dealer, the contractor, the online seller, the convenience store or liquor store operator, the business that bought equipment out of state and never self-assessed use tax. It explains what the CDTFA is and how a sales tax audit unfolds; the history and the law behind California’s sales and use tax; the audit methods auditors actually use — markup analysis, observation tests, bank deposit analysis, and book-to-return reconciliation; how assessments are calculated, with worked examples; why some audit results are wrong and how to challenge them; the petition and appeal process, including the Office of Tax Appeals; and the specific provisions of California’s Revenue and Taxation Code and the CDTFA’s own Audit Manual that govern every determination. It closes with two decades of practitioner lessons and anonymized case studies from the files of Mike Habib, EA — a Los Angeles–based national tax representation firm that defends CDTFA audits for California businesses.

One principle frames everything that follows: a CDTFA audit is not a verdict, it is a process built on estimates — and estimates can be challenged. Sales tax auditors rarely count every transaction; they sample, they project, they apply markup percentages and error rates, and they build an assessment from assumptions about the parts of your business they did not directly examine. Every one of those assumptions is a place where a well-prepared defense can push back — with better records, a more representative sample, a defensible markup, or proof that the auditor’s method does not fit your business. The taxpayers who accept the first number pay the estimate; the ones who understand the method pay closer to what they actually owe. This guide teaches you to see the audit the way the auditor does, and to find the room in it.

Part One: What a CDTFA Sales & Use Tax Audit Actually Is

Q: What Is the CDTFA, and What Does It Audit?

The California Department of Tax and Fee Administration is the state agency responsible for administering California’s sales and use tax, along with a long list of special taxes and fees. When it audits a business, it is verifying one central thing: that the business correctly collected, reported, and remitted sales tax on its taxable sales, and correctly self-assessed and paid use tax on its taxable purchases. Those are two distinct taxes that a CDTFA audit examines together. Sales tax is the tax a retailer collects from customers on retail sales of tangible personal property in California. Use tax is its mirror image — the tax owed on tangible personal property purchased for use in California when sales tax was not collected at the point of sale, most commonly on out-of-state or online purchases, and on items a business withdraws from inventory for its own use. A CDTFA audit tests both sides: did you charge and remit enough sales tax on what you sold, and did you pay use tax on what you bought and used?

The businesses most likely to be audited share recognizable features. Cash-intensive businesses — restaurants, bars, liquor stores, convenience stores, food trucks, salons — draw scrutiny because cash sales are harder to verify and easier to underreport. Businesses with large exempt or resale sales — wholesalers, businesses selling to resellers, sellers claiming exemptions — get examined on whether those exemptions were properly documented. High-volume retailers, auto dealers, contractors who both sell and install, and online sellers all sit on the CDTFA’s radar. And any business whose reported sales look inconsistent — with its purchases, its industry’s typical markup, its bank deposits, or the amounts reported on its income tax returns — invites a closer look. The common thread is a gap, real or apparent, between what the business reported and what the numbers suggest it should have reported. The audit exists to find and measure that gap.

Q: How does a CDTFA audit actually begin, and what does it look like?

A CDTFA audit typically begins with a letter — an audit engagement notice — assigning an auditor and requesting an initial appointment and a broad set of records. The records request is expansive because the auditor needs to reconstruct the business’s sales and purchases: sales journals and summaries, the filed sales and use tax returns, federal and state income tax returns, bank statements for all accounts, point-of-sale or cash register records (Z-tapes, digital POS exports), purchase invoices, resale and exemption certificates, and documentation of any claimed deductions or exemptions. Read that list the way the auditor will: the income tax returns and bank statements are there to test whether reported sales are complete, the purchase invoices are there to compute what the business should have sold (through markup) and what use tax it owes, and the exemption certificates are there to verify that every non-taxed sale was properly non-taxable.

The audit itself is a reconstruction exercise. The auditor examines the records, tests the reported figures against independent measures, and quantifies any differences as additional taxable sales or unpaid use tax. Because examining every transaction over a multi-year audit period is usually impossible, the auditor relies heavily on sampling and projection — testing a representative period or a representative set of transactions and projecting the results across the whole audit period. This sampling is both the auditor’s most powerful tool and the taxpayer’s greatest source of exposure and opportunity: a small error rate found in a sample, projected across three years, becomes a large assessment — and a sample that is not actually representative, or a method that does not fit the business, is the most contestable part of any CDTFA audit. The audit concludes with the auditor’s findings, an exit conference, and a proposed assessment, which the taxpayer can accept or challenge through the process this guide details.

Q: What is the history behind California’s sales tax and the CDTFA?

California’s sales tax was born of the Great Depression. Facing collapsing property tax revenues and a fiscal crisis, the state enacted the Retail Sales Tax Act of 1933, imposing a tax on retailers for the privilege of selling tangible personal property at retail — the foundation of the modern sales tax. The companion use tax followed in 1935, closing the obvious loophole the sales tax created: without a use tax, Californians could avoid the sales tax simply by buying from out-of-state sellers, so the use tax imposed an equivalent tax on the use in California of property purchased without paying California sales tax. Together, the sales and use taxes have funded California government for ninety years, and the legal architecture built in the 1930s — the retailer as the taxpayer, the presumption that gross receipts are taxable unless proven otherwise, the resale and exemption structure — remains the framework auditors apply today.

For most of that history, California’s sales and use tax was administered by the State Board of Equalization, a constitutionally established elected body that had overseen tax administration since the nineteenth century. The Board administered sales and use tax audits, assessments, and appeals for decades, and much of the case law and administrative guidance that governs sales tax disputes was developed under its authority. The decisive modern change came in 2017. Following controversy over the Board’s administration, the Legislature enacted the Taxpayer Transparency and Fairness Act of 2017, which stripped most of the Board of Equalization’s tax administration functions and transferred them to a new agency — the California Department of Tax and Fee Administration — effective July 1, 2017. At the same time, the Act created the Office of Tax Appeals (OTA), an independent body of administrative law judges, to hear appeals that had previously gone to the Board itself. This 2017 restructuring produced the system in place today: the CDTFA conducts the audits and issues the assessments, and the independent OTA — not the agency that made the assessment — hears the appeals. The separation of the auditing function from the appellate function was the central reform, and it is why a taxpayer who loses at the CDTFA level has a genuinely independent forum for appeal. Understanding this history matters because much of the governing law and precedent predates the CDTFA and was developed under the Board of Equalization, while the appeal path now runs through a body that did not exist before 2017.

Q: What law governs a California sales and use tax audit?

The operational rulebook is the CDTFA Audit Manual (and the companion Compliance Policy and Procedures Manual), which functions much as the IRS’s Internal Revenue Manual does for federal cases — it is not law, but it binds auditors in practice and dictates how they must conduct audits, select samples, apply markup and other indirect methods, and document their findings. Key portions govern audit procedures generally, the use of statistical and block sampling, markup and observation-test methods, and the treatment of specific industries (the Audit Manual contains industry-specific guidance for restaurants, bars, service stations, auto dealers, and other trades). A representative who knows the Audit Manual can hold an auditor to the agency’s own required procedures — challenging a sample that was not drawn as the Manual requires, or a markup that ignores the Manual’s own cautions — which is often where a CDTFA assessment is most vulnerable. Alongside the Audit Manual, the CDTFA’s regulations (Title 18 of the California Code of Regulations) interpret the statutes on specific issues like resale certificates, exemptions, and record-keeping, and they are frequently the decisive authority in an audit dispute.

Part Two: The Audit Methods — How Auditors Build an Assessment

Q: What methods does a CDTFA auditor actually use?

This is the most important thing to understand about a sales tax audit, because the method is the assessment. A CDTFA auditor does not simply add up your unreported sales — usually there is no direct record of them. Instead, the auditor uses indirect methods to reconstruct what your taxable sales and purchases should have been, and the difference between that reconstruction and what you reported becomes the assessment. There are four methods you are most likely to encounter, often used in combination:

• Markup analysis. The workhorse of retail and restaurant audits. The auditor determines what you paid for goods (from purchase invoices), applies a markup percentage (the ratio of your selling prices to your costs) to compute what your sales should have been, and compares that projected sales figure to what you reported. If your purchases, marked up, imply more sales than you reported, the difference is assessed as unreported taxable sales. The markup percentage is everything here — a markup that is even slightly too high, projected across all your purchases over three years, produces a large assessment.
• Observation test (also called a mark-up or pour test). The auditor observes your business on selected days — counting sales, watching the register, or, in a bar, measuring pours — to establish an error rate or a sales pattern, then projects it across the audit period. A single day’s observation, or a short observation period, can drive an assessment covering years. The representativeness of the observed period is the central issue.
• Bank deposit analysis. The auditor totals the deposits into your business bank accounts, subtracts identified nontaxable items (loans, transfers, capital contributions, nontaxable sales), and treats the remainder as an independent measure of your gross receipts, comparing it to reported sales. Deposits exceeding reported sales suggest underreporting — unless the excess can be explained.
• Book-to-return reconciliation. The auditor compares the sales recorded in your own books and on your income tax returns to the sales reported on your sales tax returns. If your federal income tax return shows more gross sales than your sales tax returns reported, the difference is a red flag the auditor will pursue — and this mismatch, between what you told the IRS and what you told the CDTFA, is one of the most common audit triggers and findings.

The use tax side runs in parallel: the auditor reviews your fixed-asset purchases and expense purchases for items on which no sales tax was paid — equipment bought out of state, supplies from online vendors, inventory withdrawn for personal or business use — and assesses use tax on them. For many businesses, especially those that buy equipment and supplies from out-of-state or online sellers, the use tax assessment is a significant and often overlooked part of the audit.

Q: Why is sampling so important, and where does it go wrong?

Sampling is where CDTFA audits are won and lost, because nearly every significant assessment rests on projecting a sample across the full audit period. The auditor cannot examine every transaction over three years, so the auditor examines a sample — a test period, a set of invoices, a block of days — measures an error rate or a markup within that sample, and projects it across the whole. The arithmetic is unforgiving: a 4 percent error rate found in a one-month sample, projected across a three-year audit period with millions in sales, becomes a very large number. This means the entire assessment can hinge on whether the sample was truly representative of the business as a whole.

And samples frequently are not representative, which is precisely where a defense lives. A test month that happened to be your busiest season overstates your annual sales. A markup computed from your highest-margin products overstates your blended markup. An observation day during a special event does not reflect a normal day. A sample period during which your prices or product mix differed from the rest of the audit period projects the wrong figures. The CDTFA’s own Audit Manual sets standards for how samples should be drawn and cautions against unrepresentative sampling, and a representative who knows those standards can challenge a projection built on a flawed sample — often the single most effective way to reduce a CDTFA assessment. The lesson is that the headline number in a sales tax audit is an estimate built on a sample, and the quality of that sample is the most contestable thing in the entire audit. Accepting the projection without scrutinizing the sample is accepting an estimate as if it were a count.

Part Three: The Calculation — How a Sample Becomes an Assessment

Q: How is a sales tax assessment actually computed?

Let us make the arithmetic concrete, because seeing it demystifies the audit. Suppose the auditor uses markup analysis on a retail business. The steps are: first, determine the cost of goods available for sale from purchase invoices over the audit period — say, $1,000,000 in taxable merchandise purchases over three years. Second, determine the markup — the auditor examines a sample of items, comparing selling prices to costs, and computes an average markup of, say, 50 percent, meaning goods costing $1.00 are sold for $1.50. Third, apply the markup to compute audited taxable sales: $1,000,000 in cost, marked up 50 percent, implies $1,500,000 in taxable sales. Fourth, compare to reported sales: if the business reported $1,300,000 in taxable sales, the auditor finds $200,000 in unreported taxable sales. Fifth, apply the sales tax rate: at a combined rate of, say, 9.5 percent, that $200,000 produces roughly $19,000 in additional tax — before interest and any penalties. Add the use tax the auditor assesses on unpaid purchases, add interest running from the original due dates, and the assessment takes shape.

Now see where every step is contestable. The purchase figure may include nontaxable items, items sold at a loss, spoilage, theft, breakage, employee meals, or promotional giveaways that never generated a marked-up sale — each of which, if not removed, overstates projected sales. The markup percentage may be too high if it was computed from high-margin items rather than the true blended mix, or if it ignored discounting, markdowns, and sales; even a small overstatement of markup, applied to a million dollars of purchases, swings the assessment by tens of thousands. The reported-sales comparison may be wrong if the auditor mismeasured what was actually reported. And the tax rate and period must be correct. A defense works through each step, testing the auditor’s numbers and assumptions, because an assessment built by projection can be reduced by correcting any input that fed the projection. This is painstaking work, but it is where CDTFA assessments are genuinely reduced — not by arguing that the tax is unfair, but by showing that the auditor’s reconstruction overstated the actual sales.

Q: What about penalties and interest?

A CDTFA assessment typically includes interest, and may include penalties. Interest accrues on the unpaid tax from the date it was originally due — often years before the audit — and can add substantially to the assessment; interest is generally not abatable except in narrow circumstances (such as unreasonable delay attributable to the CDTFA). Penalties are more contestable. A negligence penalty (commonly 10 percent) may be asserted where the auditor concludes the underreporting resulted from a failure to exercise ordinary care, but it can be challenged with a showing of reasonable cause — that the taxpayer made a good-faith effort to comply, relied on professional advice, or faced circumstances beyond their control. More serious is the fraud penalty (commonly 25 percent), asserted where the CDTFA believes the underreporting was intentional; a fraud penalty changes the entire character of the case, extends the statute of limitations, and must be resisted vigorously, because it carries both a heavy financial cost and the risk of referral for further action. And a distinct and dangerous penalty applies to sales tax collected but not remitted — where a business charged customers sales tax and kept it rather than paying it to the state, a substantial penalty (commonly 40 percent) can apply, reflecting that this is the state’s money the business held in trust. Challenging penalties is a separate and important front in any audit defense, because penalties can represent a large share of the total assessment and are often the most defensible piece.

Part Four: Worked Examples — Real Numbers, Start to Finish

Composites built from typical fact patterns. The numbers illustrate method; rates, markups, and standards vary, and every business differs. Notice that in each case the defense works by attacking the auditor’s method and inputs, not by disputing the tax itself.

Example 1: The restaurant markup that was too high

A restaurant is audited for a three-year period. The auditor computes food and beverage cost from purchase invoices at $900,000 and applies a markup of 300 percent (a common restaurant target), projecting taxable sales of $3,600,000 — against $3,100,000 reported, implying $500,000 in unreported sales and, at a 9.5 percent rate, roughly $47,500 in tax before interest and penalties. On review, the defense finds the problems: the auditor’s markup was computed from menu prices without accounting for the restaurant’s heavy use of discounts, daily specials, employee meals, spoilage, and a large volume of delivery-app sales on which the platform took a substantial cut. Adjusting the markup to the restaurant’s true blended figure, and removing employee meals and spoilage from the marked-up cost base, the projected sales fall close to what was reported. The revised assessment is a fraction of the original, plus a reasonable-cause challenge to the negligence penalty. Outcome: a $60,000-plus proposed liability reduced to a small fraction, because the markup — the single most powerful input — was corrected to fit the actual business.

Example 2: The bank deposits that were not all sales

A retailer faces an assessment built on bank deposit analysis: the auditor totaled $2,400,000 in deposits across the audit period against $2,050,000 in reported taxable sales, treating the $350,000 difference as unreported sales — about $33,000 in tax. The defense reconstructs the deposits and shows what the auditor’s summary missed: $120,000 was a capital contribution from the owner, $90,000 was proceeds from a business loan, $70,000 was nontaxable sales (resales to other businesses with valid resale certificates), and $40,000 was transfers between the business’s own accounts, double-counted. Removing these nontaxable and non-sales items, the deposits reconcile to reported sales, and the assessment largely collapses. Outcome: a $33,000 assessment reduced to near zero, because bank deposits are not the same as taxable sales — and the difference was documented item by item.

Example 3: The use tax on equipment nobody self-assessed

A manufacturer is audited and reports its sales correctly, but the auditor finds a different problem on the use tax side: over the audit period the business bought $600,000 of equipment and supplies from out-of-state and online vendors who did not charge California tax, and the business never self-assessed use tax on those purchases. At a 9.5 percent rate, that is about $57,000 in unpaid use tax. Here the tax is genuinely owed — the defense is not to dispute it wholesale but to work the details: identifying purchases on which California tax was in fact paid (removing them from the base), identifying items that qualified for exemptions (such as certain manufacturing equipment eligible for a partial exemption), correcting double-counted invoices, and negotiating the penalty. The assessment is reduced meaningfully through accurate accounting rather than eliminated. Outcome: a $57,000 use tax assessment cut substantially by identifying already-taxed and exempt purchases — a reminder that use tax is the quiet half of a CDTFA audit, and a common and legitimate source of assessment that still rewards careful review.

Part Five: Challenging the Assessment — Petitions and Appeals

Q: The audit produced an assessment I disagree with. What are my options, in order?

First, the audit itself and the exit conference. The best place to fix an assessment is before it is finalized. During the audit and at the exit conference, the auditor presents preliminary findings, and a represented taxpayer can contest the method, the sample, the markup, and the specific adjustments — often resolving much of the exposure through the auditor and their supervisor before any formal assessment issues. This is the cheapest and fastest stage to win, and it is where knowing the Audit Manual and the numbers pays off most directly.

Second, the petition for redetermination. When the CDTFA issues a Notice of Determination (the formal assessment), you generally have 30 days to file a petition for redetermination contesting it — the petition can be filed on form CDTFA-416 or through the CDTFA’s online services. This deadline is critical, and it is strict: miss it and the assessment becomes final and due, leaving only the pay-and-claim-refund route (though the CDTFA has discretion to treat a late petition as an administrative protest in some cases). The petition identifies the items you dispute and the grounds, and it moves the case into the CDTFA’s Appeals Bureau, where an appeals conference is held before an Appeals Bureau attorney or auditor who had no prior involvement in the audit. This is a genuine opportunity for reconsideration: the Appeals Bureau applies a hazards-of-litigation analysis — much like IRS Appeals — weighing the risk each side would face if the dispute were litigated, and it can reduce or eliminate assessments where the method was flawed, the sample unrepresentative, or the adjustments unsupported. Filing a timely petition also generally pauses collection while the appeal is pending, and the Appeals Bureau has settlement authority, so partial concessions and compromised assessments are common.

Third, the Office of Tax Appeals (OTA). If the CDTFA’s appeals process does not resolve the matter favorably, you can appeal to the Office of Tax Appeals — the independent body of administrative law judges created in 2017, entirely separate from the CDTFA. The OTA holds a hearing before a panel of ALJs who did not conduct the audit and do not work for the assessing agency, and it issues a written decision. This independence is the crucial reform of the 2017 restructuring: the agency that made the assessment does not decide the appeal. Many CDTFA assessments are reduced or reversed at the OTA, particularly where the audit method or sampling was flawed and the taxpayer presents a well-documented alternative.

Fourth, the claim for refund and the courts. If you pay the assessment and still dispute it, you can file a claim for refund under Revenue and Taxation Code §6901, and if that is denied, ultimately pursue the matter in superior court. Paying and suing for a refund is a slower and costlier path, but it preserves the dispute where the administrative process did not resolve it. For most taxpayers, the petition for redetermination and the OTA appeal are the practical battlegrounds — which is why protecting the 30-day petition deadline and building the record early are so important.

Part Six: Personal Liability — When a Business Debt Becomes Yours

Q: Can a CDTFA sales tax debt reach me personally?

Yes — and this is one of the most serious features of California sales tax, because it pierces the corporate or LLC shield that owners assume protects them. Under Revenue and Taxation Code §6829, when a corporation, partnership, or limited liability company terminates, dissolves, or abandons its business, any responsible person — an officer, member, manager, or other person responsible for filing returns or paying the tax — who willfully failed to pay the sales tax, or caused it not to be paid, can be held personally liable for the unpaid tax, plus interest and certain penalties. The logic mirrors the federal Trust Fund Recovery Penalty for payroll taxes: sales tax the business collected from customers is money held for the state, and a responsible person who diverts it to other uses rather than remitting it can be pursued individually when the business fails. The elements the CDTFA must establish are responsibility (the person had the authority and duty to pay the tax) and willfulness (they knew the tax was due and chose to use the funds otherwise), and both can be contested — a person with a title but no actual control over payments, or who did not know the tax was going unpaid, has real defenses that must be documented and asserted.

There is a second personal-exposure route worth knowing: successor liability. Under Revenue and Taxation Code provisions governing the purchase of a business, a person who buys a business or its stock of goods can become liable for the seller’s unpaid sales tax if they do not withhold enough of the purchase price to cover it and obtain a certificate from the CDTFA showing no tax is owed. This is why buying a California business requires a tax-clearance process — a buyer who skips it can inherit the seller’s sales tax debt. Both the responsible-person rules and successor liability mean that a CDTFA audit is rarely only about the business entity; it frequently carries personal and transactional consequences that must be managed as part of any competent defense. Coordinating the entity-level audit with the individual exposure of the owners and any successor issues is essential, and it is a place where experienced representation prevents a business tax problem from quietly becoming a personal one.

Part Seven: Special Situations and Strategy Notes

Q: How does a CDTFA audit interact with the IRS and the FTB?

A CDTFA audit rarely stays entirely within the CDTFA. The agencies share information, and a sales tax audit that finds unreported sales has direct implications for the business’s income tax — if you underreported sales to the CDTFA, you likely underreported income to the IRS and the California Franchise Tax Board as well, and a CDTFA finding of unreported sales can trigger or feed an income tax examination by one or both. This cross-agency exposure is one of the most underappreciated risks of a sales tax audit: the assessment in front of you may be only the first of three. It cuts the other way too — the book-to-return reconciliation that often starts a CDTFA audit works by comparing your income tax returns to your sales tax returns, so an income tax return that reports high sales can be the very thing that draws the sales tax audit. Because Mike Habib, EA handles IRS, FTB, EDD, and CDTFA matters together, a sales tax audit is defended with the income tax consequences in view — positions taken in the CDTFA audit are coordinated so they do not create problems federally or with the FTB, and any resulting income tax exposure is managed rather than left to surface later as a surprise.

Q: What records should I have — and what if I do not have them?

California law requires businesses to keep records adequate to verify their sales and use tax returns, and the absence of adequate records is itself a problem — it authorizes the auditor to rely more heavily on indirect methods and estimates, and it weakens the taxpayer’s ability to challenge them. The core records are: complete sales records (POS or register data, sales journals), purchase invoices, resale and exemption certificates for every non-taxed sale, bank statements, and the filed returns and their workpapers. Resale certificates deserve special mention: a sale claimed as a nontaxable resale must be supported by a valid, timely resale certificate from the buyer, and missing or defective certificates are one of the most common audit adjustments — the CDTFA simply treats the sale as taxable. If your records are incomplete, the situation is not hopeless, but it is harder: reconstruction from available sources (bank records, vendor records, third-party data) becomes necessary, and the defense shifts toward showing that the auditor’s estimates are unreasonable rather than proving the exact figures. The lesson for any business is that good records are the best audit defense that exists — but even for a business with poor records, a knowledgeable representative can often reconstruct enough to challenge an inflated estimate.

Q: Can I settle a CDTFA liability I cannot pay, or set up a payment plan?

Yes. California has its own collection-resolution tools, parallel to the federal ones but administered by the CDTFA. The CDTFA offers payment plans (installment agreements) for businesses and individuals who cannot pay a final liability in full, and it has an Offer in Compromise program under which it may accept less than the full amount owed where the taxpayer cannot pay it and is unlikely to be able to in the reasonable future — historically most accessible to businesses that have closed or individuals no longer associated with the business that incurred the debt, with financial disclosure requirements similar in spirit to the IRS program. These resolution tools come into play after the assessment is final, when the question shifts from how much is owed to how it will be paid. They are distinct from the federal programs — a CDTFA offer settles a California liability only — but the analysis is similar, and for a taxpayer facing both federal and California debts, the resolutions should be coordinated. This series’ companion guides on the IRS Offer in Compromise and installment agreements cover the federal side; the CDTFA versions follow the same logic under California law.

Q: How far back can a CDTFA audit go?

The general statute of limitations for a sales and use tax assessment is three years from the due date of the return or the date the return was filed, whichever is later, under Revenue and Taxation Code §6487. But there are important extensions. If a business failed to file returns, the CDTFA can assess for eight years. If a return was false or fraudulent with intent to evade, there is no statute of limitations at all — the CDTFA can reach back indefinitely, which is one reason a fraud penalty is so serious. And taxpayers are sometimes asked to sign a waiver extending the statute to give the audit more time; whether to agree is a strategic decision, because refusing may force the CDTFA to issue an assessment on incomplete information (sometimes good, sometimes bad for the taxpayer), while agreeing extends the period of exposure. Knowing exactly which years are open, and how the statute applies to your situation, is a foundational part of any audit defense — an assessment for a year outside the statute is simply not valid, and a taxpayer should never concede years the CDTFA cannot legally reach.

Part Seven-B: Lessons from 500+ IRS & State Cases — What Two Decades of Audit Defense Actually Teaches

Everything to this point could, in principle, be assembled from the Revenue and Taxation Code, the regulations, and the CDTFA Audit Manual. What follows cannot. In our experience representing taxpayers for more than 20 years — across hundreds of federal and California audits, including sales and use tax examinations among the most numbers-intensive files a business will ever face — the same patterns repeat with such regularity that they function as rules. These observations come from casework: from records reconstructed, samples challenged, markups recomputed, exit conferences argued, and appeals taken to the Office of Tax Appeals. They are not from AI summaries or public agency documents, and they are shared because California business owners who understand how a sales tax audit is actually built get outcomes that owners who simply hand over records and hope never do.

Ten mistakes California business owners make before hiring representation

• 1. Talking through the whole business at the first meeting. The opening interview is where the auditor learns how you operate, where the cash is, and which assumptions to build the audit on. Casual answers about cash handling, personal use of inventory, or “off the books” anything become the foundation of the assessment.
• 2. Handing over records without organizing or reviewing them first. A disorganized document dump invites the auditor to fill gaps with estimates, and lets contradictions in your own records drive the findings. Records should be reviewed and reconciled before they are produced.
• 3. Accepting the auditor’s markup without challenge. The markup percentage is the single most powerful number in a retail or restaurant audit, and it is frequently too high — computed from menu or list prices without discounts, spoilage, employee use, or product mix. An unchallenged markup, projected across years, is the largest self-inflicted assessment there is.
• 4. Treating bank deposits as if they were all sales. Loans, capital contributions, transfers between accounts, and nontaxable resales are not taxable sales, but they get counted as such unless someone removes them, invoice by invoice and deposit by deposit.
• 5. Not questioning the sample. A test period that was your busiest season, an observation day during an event, a block of high-margin items — an unrepresentative sample projected across the audit period drives an inflated assessment, and it is the most contestable thing in the audit.
• 6. Missing resale and exemption certificates. Every nontaxable sale needs a valid supporting certificate; missing or defective ones convert exempt sales into taxable ones. Gathering and curing certificates is often a large, straightforward reduction.
• 7. Ignoring the use tax side until it is too late. Owners focus on sales and forget that the auditor is also assessing use tax on out-of-state and online purchases — and that some of those purchases were already taxed or exempt, reductions that vanish if no one identifies them.
• 8. Missing the 30-day petition deadline. A Notice of Determination not petitioned within 30 days becomes final and due. It is the most expensive deadline in California sales tax, and it is missed by owners who set the notice aside.
• 9. Forgetting that the assessment can become personal. Owners treat the audit as the business’s problem and overlook the responsible-person rules that can move the sales tax debt onto them individually if the business fails. The personal exposure has to be managed from the start.
• 10. Waiting until the assessment is final to get help. The cheapest place to fix a sales tax audit is during the audit and at the exit conference, when the method and sample are still open. Representation that arrives after the Notice of Determination inherits a finalized number instead of shaping it.

What a state sales tax auditor actually asks — and what they are really testing

A CDTFA auditor’s questions, across hundreds of these examinations, orbit a consistent set of concerns, and understanding them changes how the audit should be handled. On operations: How does your business work — what do you sell, how do customers pay, how is cash handled, who rings up sales? These questions establish the assumptions the audit will rest on. On records: What point-of-sale system do you use, how are sales recorded, what happens to the Z-tapes, how do you track voids and discounts? These test whether your reported figures can be verified or must be reconstructed. On purchases: Who are your suppliers, what do you buy and at what cost, do you ever take inventory for personal use? These feed the markup and use tax analyses. On exemptions: Which sales are nontaxable, and can you support them with certificates? And, quietly probing for fraud indicators: Are there other bank accounts, other locations, cash sales that do not go through the register?

What the auditor is really testing is whether the reported sales are complete and whether the records support them — and, underneath that, whether the business is being candid. In our experience, the single most decisive factor in a sales tax audit is whether the reported figures reconcile: whether the sales tax returns tie to the income tax returns, whether the bank deposits tie to the sales, whether the markup on the purchases is consistent with the reported sales. When the numbers reconcile, the audit is short and the exposure limited; when they do not, the auditor turns to indirect methods and estimates, and the assessment grows. The proud-owner instinct to explain how well the business does, and the anxious instinct to minimize, are both dangerous at the opening interview — because both feed the auditor assumptions that become the assessment. The disciplined approach is to let the records, properly organized and reconciled, tell the story, and to have a representative who knows the methods present them. The auditor is building a reconstruction of your sales; the defense is making sure that reconstruction is accurate rather than inflated.

Why audit assessments are wrong — the file-level anatomy

Sales tax assessments come in high for a recognizable set of reasons, and seeing them at the file level shows where the reductions live. The markup was computed from a non-representative set of items or without accounting for discounts, spoilage, employee meals, and product mix, overstating projected sales. The sample period was unrepresentative — a busy season, an atypical block — and the projection inflated the whole. Bank deposits were treated as sales without removing loans, capital, transfers, and resales. Nontaxable sales were reclassified as taxable because the supporting certificates were missing rather than because the sales were actually taxable. Use tax was assessed on purchases that had already been taxed or were exempt. And penalties were asserted by default without the reasonable-cause analysis that would defeat them. The common thread is that the assessment is an estimate built from assumptions, and the assumptions were not tested. The reductions come from testing each one — recomputing the markup on the real product mix, challenging the sample, reconstructing the deposits, curing the certificates, identifying the already-taxed purchases, and contesting the penalties. This is unglamorous, numbers-intensive work, and it is where CDTFA assessments are genuinely reduced — case after case, the facts supported a far smaller number than the auditor’s method produced.

How California audits and collections have changed over the past decade

A practitioner who worked these cases a decade ago would recognize the sales tax, but the landscape has changed significantly. The single biggest structural change was the 2017 restructuring: the Board of Equalization’s audit and assessment functions moved to the new CDTFA, and appeals moved to the independent Office of Tax Appeals, giving taxpayers a genuinely independent appellate forum for the first time and reshaping how cases are litigated. Economic nexus transformed the seller landscape: following the 2018 Wayfair decision, California began requiring out-of-state and online sellers exceeding a sales threshold to collect California tax, and marketplace-facilitator rules shifted collection responsibility onto platforms — bringing a whole new population of remote sellers into the CDTFA’s audit universe. Data and technology sharpened audits: the CDTFA increasingly uses digital records, third-party data, and analytics to identify discrepancies and select audits, and point-of-sale and payment-processor data give auditors independent measures of sales that did not exist in the paper era. Enforcement of cash-based businesses intensified, with continued attention to industries prone to underreporting. And the interplay with the income tax agencies tightened, as information sharing among the CDTFA, FTB, and IRS made a finding at one agency more likely to surface at another. Net of ten years: audits are more data-driven, the seller population is broader, the appellate forum is genuinely independent, and the premium on records that reconcile and on challenging the auditor’s method has never been higher.

Part Seven-C: Anonymized Case Studies — Process and Outcome

Drawn from actual representation matters handled by the firm. No names, no identifying details, no confidential information; figures are rounded and certain facts generalized to protect client identity. They demonstrate process and outcome — never a promise of results, because every audit turns on its own records, methods, and facts.

Case study: the $486,000 restaurant assessment cut to a fraction

Client, a restaurant, received a proposed CDTFA assessment of roughly $486,000 built on a markup analysis — the auditor had applied a high markup to food and beverage costs and projected sales far above what the restaurant reported, treating the difference as unreported taxable sales. We entered before the assessment was final, rebuilt the markup from the restaurant’s actual operations, and documented what the auditor’s method had ignored: heavy discounting and daily specials, a large volume of third-party delivery sales on which the platform kept a substantial cut, employee meals, spoilage, and a product mix weighted toward lower-margin items. Recomputing the projection on the corrected markup and cost base, and challenging the representativeness of the auditor’s sample, brought the audited sales close to what had been reported. Outcome: a $486,000 proposed assessment reduced to a fraction of the original, plus a reasonable-cause challenge that removed the negligence penalty — because the markup, the single most powerful input, was corrected to fit the real business.

Case study: the bank-deposit assessment that collapsed

Client, a retailer, faced an assessment built on bank deposit analysis, with the auditor treating a large gap between total deposits and reported sales as unreported taxable sales. We reconstructed the deposits line by line and documented that the “excess” was not sales at all: an owner capital contribution, proceeds from a business loan, transfers between the business’s own accounts that had been double-counted, and nontaxable resales supported by valid resale certificates. Removing the non-sales items, the deposits reconciled to the reported figures. Outcome: an assessment in the tens of thousands reduced to near zero, because bank deposits are not taxable sales — and the difference was proven item by item.

Case study: the resale certificates that cured a large adjustment

Client, a wholesaler, was assessed on a substantial block of sales the auditor reclassified as taxable because the supporting resale certificates were missing or incomplete at the time of audit. The sales were genuinely nontaxable resales to legitimate businesses; the problem was documentation, not taxability. We worked with the client to obtain valid, properly completed resale certificates from the buyers and to document the resale nature of the transactions, presenting the cured certificates in the petition process. Outcome: the large certificate-based adjustment substantially eliminated, because the sales were exempt and the exemption was ultimately supported — a reminder that many sales tax adjustments are documentation problems that can be fixed.

Case study: the responsible-person assessment defended

Client, an officer of a restaurant corporation that had closed owing sales tax, received a proposed responsible-person assessment under the state’s dual-liability rules, seeking to hold him personally liable for the business’s unpaid sales tax. The title suggested responsibility; the facts were more complicated — another individual had controlled the finances and the decisions about which creditors were paid. We assembled the evidence of who actually controlled payments and contested the willfulness and responsibility elements. Outcome: the personal exposure substantially reduced by contesting the elements the state had to prove, rather than conceding personal liability because of a title — the same principle that governs the federal trust fund penalty, applied under California law.

Case study: the use tax assessment corrected through accounting

Client, a manufacturer, was assessed a significant amount of use tax on equipment and supply purchases from out-of-state and online vendors on which no California tax had been collected. Much of the tax was genuinely owed, but the auditor’s base was overstated. We reviewed the purchases in detail and identified items on which California tax had in fact been paid, purchases that qualified for the partial manufacturing-equipment exemption, and double-counted invoices. Outcome: the use tax assessment reduced substantially through accurate accounting rather than disputed wholesale — the use tax was real, but the base was corrected to what was actually owed.

Part Eight: Bad Audit Help — Recognizing Advice That Makes a CDTFA Case Worse

Q: How do I tell real CDTFA audit representation from marketing?

A sales tax audit is a specialized, numbers-intensive proceeding under California law, and it punishes generic help quickly. The tax-relief marketing machine that targets IRS debt also chases state audits, and a California business owner in the middle of a CDTFA examination is a prime target for a sales pitch that does not fit the problem. The warning signs are specific to this arena:

• A promise of a specific outcome — “we’ll get it dismissed,” a settlement figure — before anyone has reviewed the auditor’s workpapers, the sample, or the markup. A CDTFA case cannot be assessed, let alone priced, without seeing how the assessment was actually built.
• No fluency in the methods. A representative who cannot discuss markup analysis, observation tests, bank deposit analysis, and sampling projection does not understand how CDTFA assessments are constructed — and therefore cannot dismantle one.
• Indifference to the 30-day petition deadline. The petition for redetermination window is strict, and a firm that is not urgently protecting it is endangering your entire ability to contest the assessment.
• Treating it like an IRS income tax case. Sales and use tax is a different body of law, with different forms, a different agency, different appeal bodies (the CDTFA Appeals Bureau and the Office of Tax Appeals), and California-specific personal-liability rules. Generic “tax debt” help misses all of it.
• No plan for the records. The heart of a CDTFA defense is reconstructing and organizing the records — resale certificates, POS data, purchase invoices, bank reconciliations — and a firm that does not lead with that is not defending the audit.
• A call center with no named professional who will actually deal with the auditor, attend the appeals conference, and, if needed, argue the OTA appeal.

The contrast worth stating plainly: legitimate CDTFA audit representation begins by understanding how the assessment was built — the method, the sample, the markup, the base — and attacks it on those terms, while protecting the petition deadline and reconstructing the records that prove the true liability. In a California sales tax audit, the value of representation is the ability to speak the auditor’s statistical language and the appeal bodies’ legal one.

How Mike Habib, a Federally Licensed Enrolled Agent Helps

As a federally licensed Enrolled Agent admitted to practice before the Internal Revenue Service under Treasury Department Circular 230, and as a Los Angeles–based practitioner who represents California businesses before the state’s tax agencies, Mike Habib defends CDTFA sales and use tax audits from the initial notice through the exit conference, the petition for redetermination, the CDTFA Appeals Bureau, and the Office of Tax Appeals — and coordinates the federal and other state exposures that so often travel with a sales tax audit. That combined federal-and-California reach matters in a CDTFA case specifically, because a sales tax audit rarely stays in one lane: it can spill into an IRS income tax issue, an FTB matter, an EDD payroll question, and the personal liability of the business’s owners, all at once.

Mike Habib, EA brings a combination that is genuinely uncommon in sales tax audit defense: two decades of hands-on federal and California controversy experience layered on a corporate finance career as a former Controller at Xerox Corporation and Director of Finance at AEG. A CDTFA audit is, at bottom, an accounting and statistics problem dressed in tax law — a fight over markups, sampling, bank reconciliations, and the base to which a rate is applied. Clients get a representative who reads a set of books and an auditor’s workpapers the way the auditor does, finds the flawed assumption or the unrepresentative sample that inflated the assessment, and rebuilds the numbers to reflect the business as it actually operated.

What the engagement actually looks like at Mike Habib, EA:

• Control of the audit from the first notice. Power of attorney filed, the scope and sample method understood before records are handed over, and the auditor’s requests managed so the examination is built on complete, organized information rather than gaps the auditor fills with estimates.
• The method attacked on its own terms. Whether the assessment rests on a markup, an observation test, a bank deposit analysis, or a book-to-return reconciliation, the assumptions are tested and the flawed ones — an inflated markup, an unrepresentative sample period, deposits that were not sales — are challenged with documentation.
• The records reconstructed. Resale and exemption certificates gathered and validated, POS and purchase data organized, bank deposits reconciled to non-sale sources — the documentary work that turns an estimated assessment into a defensible, accurate one.
• Penalties and the statute contested. Negligence and fraud penalties challenged on reasonable-cause and factual grounds, the collected-but-not-remitted penalty resisted where it does not fit, and the statute of limitations enforced so no year outside the period is conceded.
• The appeal carried all the way. The 30-day petition for redetermination protected and filed, the case argued at the CDTFA Appeals Bureau on hazards-of-litigation terms, and, where needed, taken to the independent Office of Tax Appeals — with the pay-and-refund route preserved as a backstop.
• Personal and cross-agency exposure managed. The responsible-person and successor-liability risks addressed so a business assessment does not quietly become a personal one, and any IRS, FTB, or EDD dimensions coordinated rather than left to collide.
• Direct, personal representation from start to finish. Mike personally handles every case — no junior staff hand-offs, no case-manager roulette. When the auditor or the Appeals Bureau is dealt with, it is Mike who does it. When you call, you reach him.

The firm defends CDTFA sales and use tax audits for California businesses of every kind — restaurants and bars, retailers and convenience stores, auto dealers and repair shops, contractors, online sellers, liquor and cannabis retailers, and service businesses with use tax exposure — and coordinates the IRS, FTB, and EDD matters that ride alongside them. Whether you have just received an audit engagement letter or are holding a six-figure Notice of Determination with the petition clock running, the file is built by, argued by, and answered for by Mike Habib personally. The companion guides in this series go deeper on the neighboring matters — California EDD payroll tax audits, IRS audit representation, the IRS appeals process, offers in compromise, and the overall map of tax relief.

Part Nine: Rapid-Fire FAQs — Straight Answers to the Questions California Business Owners Ask

Q: Why was my business selected for a CDTFA audit?

Audits are triggered a number of ways: statistical anomalies in your returns (a gross-sales-to-taxable-sales ratio out of line with your industry), a large volume of claimed exempt or resale sales, information from other agencies (an IRS or FTB adjustment, a 1099-K showing card sales above your reported figures), industry-wide enforcement projects (restaurants, liquor stores, and cash-heavy businesses are perennial focuses), a prior audit that found problems, a tip, or simple random selection. Often you will not be told the exact reason. What matters more than why you were selected is how the audit is handled from the first notice — because the direction of a CDTFA audit is largely set by how the initial records request and the auditor’s early questions are managed.

Q: How long does a CDTFA audit take?

It varies widely — from a few months for a small, well-documented business to well over a year for a large or complex one, or one with poor records. The timeline depends on the size of the business, the quality of the records, the audit method, how responsive the parties are, and whether the case goes to appeal. A well-organized defense that provides complete, reconciled records tends to move faster and produce a smaller assessment than one where the auditor has to estimate from gaps. Appeals add time: the CDTFA Appeals Bureau conference can take many months, and an OTA appeal longer still.

Q: Can I handle a CDTFA audit myself?

You can, but a sales tax audit is one of the least forgiving places to go it alone, because the assessment is built on statistical methods and California-specific law that most business owners have never encountered. The auditor will apply a markup or a sample and project it across years; a business owner who does not know how to test that method, challenge an unrepresentative sample, or reconstruct the records to prove the true liability can end up conceding a six-figure assessment that a proper defense would have cut to a fraction. The stakes — years of tax, penalties, interest, and potential personal liability — and the technical nature of the methods make this a setting where representation frequently pays for itself many times over.

Q: What if my records are incomplete or missing?

Incomplete records are common, and they do not doom your case — but they do change the strategy. When records are missing, the CDTFA estimates using indirect methods (markup, bank deposits, observation), and those estimates are where assessments balloon. The defense is reconstruction: rebuilding the records from every available source — bank statements, purchase invoices, POS data, supplier records, third-party reports — and using them to challenge the auditor’s estimates with something more accurate. A represented business with reconstructed records is in a far stronger position than one that simply accepts the auditor’s indirect assessment. Missing records raise the stakes of good representation; they do not eliminate the defense.

Q: What is the difference between sales tax and use tax, and why does the audit cover both?

Sales tax applies to retail sales of tangible personal property in California and is collected by the seller from the buyer. Use tax is its complement: it applies when you buy taxable property for use in California without paying California sales tax — typically from an out-of-state or online seller who did not collect it — and it is owed by the buyer. A CDTFA audit covers both because businesses frequently underpay use tax without realizing it: equipment, supplies, fixtures, and materials bought out of state and never self-assessed are a classic audit finding. Many businesses that collected and remitted their sales tax correctly still get assessed for unpaid use tax on their own purchases. Both sides of the coin are in scope.

Q: Will the audit affect my personal finances, or just the business?

It can affect both. The assessment is initially against the business, but California’s responsible-person rules under Revenue and Taxation Code §6829 allow the CDTFA to pursue owners, officers, members, and managers personally for unpaid sales tax when the business fails and the nonpayment was willful — piercing the corporate or LLC shield. Successor liability can also attach personal or transactional consequences when a business is bought or sold. This is why a CDTFA audit should never be treated as purely a business matter: managing the entity-level assessment and the potential personal exposure together is part of a complete defense, and it is a place where experienced representation keeps a business problem from becoming a personal one.

Q: Can I appeal a CDTFA assessment, and how long do I have?

Yes. When the CDTFA issues a Notice of Determination, you generally have 30 days to file a petition for redetermination — a strict deadline that, if missed, makes the assessment final and leaves only the pay-and-claim-refund route. A timely petition moves the case to the CDTFA Appeals Bureau for a conference before a reviewer who was not part of the audit, and generally pauses collection while it is pending. If that does not resolve the matter, you can appeal to the independent Office of Tax Appeals, and ultimately pay and sue for a refund in superior court. The 30-day petition deadline is the one to protect above all others.

Q: Can I settle a CDTFA debt for less, or pay it over time?

Yes to both, in the right circumstances. The CDTFA has an Offer in Compromise program for taxpayers who cannot pay the full liability, evaluated on ability to pay much like the IRS program, and it offers installment payment agreements for those who can pay over time. These are collection resolutions that come into play once a liability is final; the priority during the audit and appeal stage is to reduce the assessment itself to its correct amount first, because settling or financing a wrong number is far worse than fixing the number. Reduce the assessment through the audit and appeals process, then resolve whatever legitimately remains through a payment plan or offer if you cannot pay it in full.

Q: Does a CDTFA audit mean the IRS or FTB will audit me too?

Not automatically, but the agencies share information, and findings in one audit can prompt attention from another. A CDTFA audit that uncovers unreported sales, for example, implies unreported income that could interest the IRS and the FTB; conversely, an IRS adjustment can trigger a CDTFA look. This cross-agency exposure is a strong reason to handle a sales tax audit with an eye to its federal and other state implications — resolving the CDTFA matter in a way that does not create or worsen problems with the IRS, the FTB, or the EDD. Coordinated representation across the agencies is exactly the kind of case where a firm handling all of them has an advantage.

Q: Where do I start if I just received a CDTFA audit notice?

With representation and a plan for the records, before you hand anything to the auditor. The direction of a CDTFA audit is largely set at the beginning — by the scope that gets defined, the sample method that gets used, and the completeness of the records provided. Getting a representative involved before the initial records request and the auditor’s first interview lets you shape the audit rather than react to it, organize and reconstruct records so the auditor is not estimating from gaps, and protect against the methods and assumptions that inflate assessments. The first step is to control the beginning, because that is where the audit is won or lost.

Your Next Step

If you have read this far, you understand what makes a CDTFA sales and use tax audit so different from the tax problems most people imagine — that it is built on statistical methods and California-specific law, that a sample of a few days can become a six-figure assessment projected across years, that the personal-liability rules can follow the debt to the owners, and that the assessment you first receive is frequently far higher than the tax actually owed, because it was built on assumptions that do not fit your business. It also means the assessment is contestable: markups can be corrected, samples can be challenged, records can be reconstructed, and the petition and appeal process exists precisely to bring an inflated number back to the truth. What no guide can do is apply that to your workpapers, your records, and your deadline — the defense that turns an estimated assessment into the real one.

That defense is where Mike Habib, EA starts every engagement. Call 562-204-6700 or toll-free 1-877-788-2937, or visit myirstaxrelief.com, for a confidential evaluation of your CDTFA audit. You will speak directly with Mike — a Los Angeles–based, federally licensed Enrolled Agent with 20+ years of representation experience and a corporate finance background as a former Controller and Director of Finance — not a salesperson working a script. Engagements are quoted as a transparent flat fee for the defined scope of your case, so you know the full investment before work begins: no hourly meters running through months of audit and appeal, no surprise invoices, and a fraction of what large firms charge for work handled by rotating junior staff. If you have received a CDTFA audit notice or a Notice of Determination, the goal is the same: understand how the assessment was built, dismantle the parts that are wrong, protect every deadline, and bring the number back to the tax you actually owe — while keeping a business problem from becoming a personal one.