4 CDTFA Sales Tax Audit Triggers Catching California Businesses in 2026
5 min read · By Tuan Phan, EA & Jonathan C. Do, Esq. · May 2026
California's tax agency doesn't pick audit targets at random. The CDTFA audits roughly one percent of active accounts every year, and in 2026 it's using more cross-referenced data than ever to decide who gets the letter. The good news: most of what flags a small business is predictable — and fixable before an auditor ever calls.
Trigger 1: Your sales tax returns don't match your income tax returns
This is the single most common trigger. The CDTFA compares the total sales you reported to the state against the gross receipts on your federal income tax return. When the two numbers don't line up, the system flags it. A restaurant that reports $1.2M to the IRS but $900K in taxable sales to California is asking to be looked at — even if there's an innocent explanation (exempt sales, out-of-state sales, a bookkeeping difference).
Trigger 2: Unreported use tax on out-of-state purchases
The CDTFA pulls purchase data from large vendors and carriers — including Amazon and FedEx — to find businesses that bought equipment or supplies out of state and never paid California use tax on them. If you've furnished your office, bought machinery, or stocked inventory from out-of-state sellers without paying tax, that gap is visible to the state.
Trigger 3: Economic nexus and Amazon FBA inventory
If your business crosses $500,000 in California sales, or stores inventory in a California warehouse (including Amazon FBA fulfillment centers), you are legally "doing business" in the state and owe sales tax collection obligations. Out-of-state sellers who assume they're invisible to California are a growing audit category.
Trigger 4: High cash volume and thin margins
Cash-heavy businesses — restaurants, bars, salons, liquor and convenience stores — draw extra scrutiny because cash sales are easy to underreport. When your reported margins look low for your industry, or your supplier purchases imply more sales than you declared, the CDTFA may run a markup analysis or a one-day observation test and project it across the entire audit period. That's how a single slow Tuesday can balloon into a six-figure assessment.
What a CDTFA audit looks like
A California sales tax audit generally runs in four stages: an appointment letter and initial records request; examination of your sales records, purchase invoices, and resale certificates; sampling and projection (if your records are incomplete); and finally a Notice of Determination with the proposed tax. Start to finish, expect six to eighteen months.
Penalties stack quickly: a 10% penalty for late filing or payment, an additional 10% for negligence, and up to 25% if the CDTFA suspects fraud — all on top of interest.
How to protect your business before the letter arrives
- Reconcile annually. Make sure your sales tax returns and income tax returns tell the same story, and keep a written explanation for any legitimate difference.
- Track use tax. Log out-of-state purchases and self-assess use tax instead of waiting for the state to find them.
- Keep resale certificates current. Missing or expired certificates are one of the easiest items for an auditor to disallow.
- Don't agree to a sampling method you don't understand. The sample period and markup assumptions drive the entire result — this is where representation pays for itself.
Got a CDTFA audit letter? Talk to us first.
If you've received an audit appointment letter — or you just want to know whether your returns would survive one — we'll review your situation for free and tell you honestly where the exposure is.
Request Free CDTFA Review →About the authors: Tuan Phan is an Enrolled Agent and Jonathan C. Do is a tax attorney at Tax Resolution Center LLC in San Jose, CA. Together they defend California businesses in CDTFA sales tax audits, EDD payroll disputes, and IRS controversies.