Sales Tax Audit: What to Expect, How to Prepare, and How to Survive

Last updated: April 2026

Researched by the NexusFlag Research Team

Avg. assessment: $12K–$50KLook-back: up to 3–6 years

A sales tax audit is a review by a state's Department of Revenue to verify that a business has correctly collected and remitted sales tax. The average sales tax audit results in an assessment of $12,000 to $50,000, with penalties and interest potentially doubling the amount owed.

What Triggers a Sales Tax Audit?

Audits are not random strokes of bad luck. Most are triggered by specific signals that flag a business account for manual review. Understanding what those signals are — and avoiding them — is the first layer of audit defense.

TriggerRisk level
Late or missing filingsHigh
Inconsistent revenue reportsHigh
Large refund claimsHigh
Industry-wide campaignsMedium
Competitor or employee tipsMedium
Random selectionLow
Economic nexus non-registrationHigh

The Sales Tax Audit Process, Step by Step

If you receive an audit notice, knowing the sequence ahead of time makes the process far less stressful. Most state sales tax audits follow the same general pattern — though the timeline varies significantly by state and by how quickly you respond.

1

Audit notification

The state sends a formal notice of audit by certified mail. The notice identifies the audit period (typically 3 years), the type of audit (full or targeted), and the auditor assigned to your case. You have a right to request a postponement — up to 30 days in most states — to gather records.

2

Document request (IDR)

The auditor sends an Information Document Request listing exactly what they need: sales journals, exemption certificates, purchase records, bank statements, tax returns, and sometimes contracts with customers. You typically have 30 days to respond. Missing documents are treated as if the sale was taxable.

3

Review period

The auditor reviews your records — usually 2 to 4 months for a standard audit. For complex cases involving nexus disputes or multiple sales channels, this can run 6 to 12 months. You may receive follow-up document requests during this period.

4

Preliminary findings

The auditor presents preliminary findings before issuing a formal assessment. This is your first real negotiation opportunity. You can contest line items, provide additional documentation, and argue methodology. Most auditors have some discretion to adjust their findings.

5

Final assessment

If you cannot resolve all issues during preliminary findings, the state issues a formal Notice of Assessment listing the tax owed, penalty, and interest. You have 30 to 90 days to pay or file a formal appeal depending on the state.

6

Appeal (optional)

You can appeal to the state's administrative appeals office without going to court. Administrative appeals are free and resolve a significant percentage of cases. If unsatisfied with the administrative result, you can escalate to tax court — but that typically requires legal representation.

How to Prepare for a Sales Tax Audit

The best audit preparation happens years before any notice arrives — by keeping clean records and resolving nexus gaps proactively. But if a notice just landed, here is what to do in the first 30 days.

8-Step Audit Preparation Checklist

  • 1Confirm the audit period and which state is auditing — do not assume it is your home state
  • 2Pull all sales tax returns filed during the audit period and verify they match your records
  • 3Locate all exemption certificates collected from tax-exempt customers — missing certificates are your biggest liability
  • 4Gather sales journals, invoices, and bank statements for the full audit period
  • 5Identify any sales channels (Shopify, Amazon, direct invoicing) and make sure records are complete for each
  • 6Do not destroy or delete any documents — this can escalate a routine audit to a fraud investigation
  • 7Notify your accountant or tax advisor immediately — even if you plan to handle it yourself
  • 8Request the auditor's IDR in writing before your first meeting so you know exactly what they want

The exemption certificate gap is the most common audit finding. If a customer claimed they were tax-exempt and you did not collect tax, you need a valid exemption certificate to back that decision. Without it, the auditor assumes the sale was taxable and assesses you for the uncollected tax — plus penalties and interest going back to the sale date.

What Auditors Actually Find

State auditors see the same issues repeatedly. Knowing the most common findings lets you do a pre-audit self-check — and fix problems before they become audit liabilities.

Unregistered nexus states

Critical

The seller had $200,000+ in sales to a state but never registered. The full back tax — often 3 to 6 years — is owed with no offset for exemption or resale.

Missing exemption certificates

High

B2B sellers who sold to resellers or nonprofits without collecting certificates lose the exemption claim entirely. Each missing cert converts that sale to taxable.

Wrong rate applied

Medium

Using a state rate instead of the combined state + county + city rate. In Texas, the difference between state rate (6.25%) and full local rate (8.25%) on $500K in sales is $10,000 in uncollected tax.

Marketplace vs. direct sales confusion

Medium

Counting Amazon marketplace sales as the seller's own obligation when Amazon already collected those taxes. This typically results in over-collection, not under-collection — but it still generates audit attention.

Shipping taxability errors

Low

Collecting tax on shipping in states that exempt separately stated shipping charges (or not collecting in states where shipping is taxable). Both directions get flagged.

Product taxability misclassification

High

Treating a taxable product as exempt, or vice versa. SaaS companies, food sellers, and clothing retailers (in states with clothing exemptions) are the most common victims.

Penalties for Sales Tax Non-Compliance

Penalties on top of back tax are where audit costs spiral. States separate penalty types, and multiple penalties can stack on the same unpaid liability.

Penalty typeTypical range
Late filing penalty5%–25% of tax owed
Late payment penalty5%–10% of tax owed
Failure to registerUp to $1,000 per period in some states
Fraud or willful evasion50%–100% of tax owed
Interest0.5%–1% per month

Real example: A seller owed $30,000 in back tax for three years of unregistered sales in Ohio. With a 20% failure-to-file penalty ($6,000) and 36 months of 1% monthly interest ($10,800), the total assessment reached $46,800 — more than 50% above the original tax liability. Coming in voluntarily through a VDA before the audit could have reduced penalties to near zero.

Voluntary Disclosure Agreements: Come In Before They Find You

A Voluntary Disclosure Agreement allows businesses to register in states where they have unregistered nexus, typically with reduced penalties and a limited look-back period of 3 to 4 years. VDAs are available in 48 states and are usually anonymous during the negotiation phase.

If you have nexus exposure in states where you have never registered, a VDA is almost always the right move before the state finds you. The math is straightforward: a VDA typically waives all penalties and caps your exposure at 3 to 4 years of back tax. An audit that finds the same issue can go back 6 years with full penalties plus interest.

VDA terms (typical)

  • Look-back period: 3 to 4 years
  • Penalties: waived or significantly reduced
  • Interest: sometimes reduced or waived
  • Anonymous during negotiation
  • Available in 48 states
  • Can be filed through MDFA (multi-state at once)

Audit outcome (if found first)

  • Look-back period: 3 to 6+ years
  • Penalties: full 10%–25% of tax owed
  • Interest: full monthly rate from original due date
  • Your identity known from the start
  • State controls the timeline
  • Must respond to each state separately

The Multi-State Tax Commission (MTC) runs a voluntary disclosure program that lets businesses file VDAs in multiple states simultaneously through a single anonymous process. This is the most efficient path for sellers with nexus exposure in 5 or more states.

Monitor your nexus to avoid audit surprises

NexusFlag tracks your sales against state thresholds in real time and alerts you before you cross — so you register proactively instead of explaining yourself to an auditor.

Frequently asked questions about sales tax audits

What triggers a sales tax audit?

The most common audit triggers are late or missing sales tax filings, inconsistencies between reported revenue and tax collected, large refund claims, and industry-wide audits where your business type is being scrutinized. Random selection does happen — states periodically audit businesses across industries regardless of behavior. E-commerce sellers who have not registered in states where they have economic nexus are also increasingly being flagged through state data-sharing programs.

How far back can a sales tax audit go?

Most states can audit up to 3 years of sales tax records under the standard statute of limitations. However, if a state determines you were required to file but never did — meaning you had nexus but never registered — most states extend the look-back period to 6 years or longer. Some states have no statute of limitations for unfiled returns. This is why unregistered sellers with old nexus exposure face much higher potential liability than sellers who registered late.

What happens if you fail a sales tax audit?

After the audit, the state issues an assessment — a formal notice of the tax you owe plus calculated penalties and interest. Most states charge penalties of 10% to 25% of unpaid tax, plus monthly interest (typically 0.5% to 1% per month from the date tax was due). You have the right to appeal the assessment, typically within 30 to 90 days. If you do not appeal and do not pay, the state can issue a tax lien, seize business assets, or pursue personal liability against business owners.

What is a Voluntary Disclosure Agreement (VDA)?

A Voluntary Disclosure Agreement is a formal agreement with a state that allows a business to come into compliance voluntarily before the state finds the liability through an audit. In exchange for coming forward, states typically offer reduced or waived penalties and a limited look-back period — usually 3 to 4 years instead of the full statute of limitations. VDAs are available in 48 states. They are usually anonymous during the initial negotiation phase, meaning the state does not know your identity until you accept the terms.

Do I need a tax attorney for a sales tax audit?

For a straightforward audit of a properly registered seller with clean records, many businesses handle it with their accountant or in-house finance team. However, if the audit involves unregistered nexus exposure, multi-year assessments, significant penalties, or nexus disputes, engaging a state and local tax (SALT) attorney or specialist is worth the cost. The fee to get professional help is almost always lower than the difference between a negotiated settlement and paying the full assessment.

Disclaimer: NexusFlag provides informational data about sales tax compliance — not legal or tax advice. Audit procedures and penalty rates vary significantly by state and circumstance. If you have received an audit notice, consult a qualified state and local tax (SALT) professional before responding.