CDTFA audit selection is not random in most cases. The agency uses data analytics, industry targeting, and third-party information returns to identify audit candidates. This chapter walks through the four selection mechanisms and the specific red flags within each.

For the audit process, see California Sales Tax Audit Process. For preparation, see Prepare for CDTFA Audit.

The Four CDTFA Audit Selection Mechanisms

RandomLowest Rate
Data AnalyticsModerate
Industry TargetHigh
ReferralHighest

CDTFA audit selection mechanisms.
Mechanism Basis2
Random Statistical selection
Data Analytics Return comparison to industry norms
Industry Target CDTFA compliance priorities
Referral IRS, EDD, FTB, complainants, whistleblowers

Quick Reference

Jump to mechanism: random, data analytics, industry target, or referral. For the triggers reference, see CDTFA red flags lookup. 15-min consultation free.

1. Random Selection

A small percentage of CDTFA audits are random. Random audits calibrate data analytics models and provide compliance monitoring. Random selection is not linked to specific red flags.

If this is you: Audit notice with no obvious trigger. Random selection is possible. Documentation is still important; the audit proceeds like any other.

Random Audit Response

  1. Treat as any other audit. Documentation, preparation, counsel if stakes material.
  2. Expect thorough examination. Random audits have less specific scope.
  3. Prepare standard records. Sales, purchases, resale certificates.
  4. Engage counsel for complex case.
  5. Challenge sampling if applicable.

2. Data Analytics

CDTFA compares sales tax returns against industry benchmarks, prior-year patterns, and third-party data. Anomalies trigger audit selection.

If this is you: Your sales figures diverge from industry norms. CDTFA systems may have flagged. Be prepared to document variances with legitimate business reasons.

Common analytics flags:

  • Low reported sales relative to industry.
  • High resale certificate percentage.
  • Sudden reporting drops year-over-year.
  • Federal/state mismatch. IRS return shows higher gross receipts than CDTFA.
  • Credit card receipts exceed reported sales.

3. Industry Targeting

CDTFA publishes industry-specific audit priorities annually. Recent focus areas include cash-intensive retail, construction contractors, auto dealers, restaurants, cannabis, e-commerce, and used merchandise.

If this is you: Your industry is on the CDTFA priority list. Elevated audit risk regardless of specific return data. Clean recordkeeping and industry-specific compliance is the defense.

4. Third-Party Referral

Referrals from IRS, EDD, FTB, or private complainants produce CDTFA audits with high specificity.

If this is you: A federal IRS audit may generate a state CDTFA referral. An employment audit by EDD often triggers sales tax review. Former employees or competitors sometimes report suspected non-compliance.

CDTFA audit notice received? Understanding the trigger shapes the response. Book a consultation to scope audit strategy.

CDTFA Red Flags Lookup

CDTFA audit red flags by category.
Red Flag Category
Cash-intensive business Industry / Analytics
High gross receipts without sales tax Analytics
Frequent resale certificate Analytics
Industry-specific priority Industry Target
IRS / EDD / FTB referral Referral
Whistleblower complaint Referral
Credit card processor data mismatch Analytics
Prior non-filing Analytics
E-commerce nexus question Industry Target
Retailer outside California with CA sales Industry Target

CDTFA Audit Statute of Limitations

  • Standard: 3 years from due date.
  • Substantial understatement (25%+): 8 years.
  • No return filed or fraud: no limit.
  • Waiver available via Form CDTFA-122.

CDTFA Audit Rate Patterns

CDTFA audit selection by business type. Source: CDTFA published data; Brotman Law practice.
Business Type Audit Risk
Cash-intensive retail High
Construction contractor High
Auto dealer High
Restaurant / bar Elevated
E-commerce with CA nexus Elevated
Standard retail with clean compliance Baseline
Service-dominated business Lower

CDTFA Audit Escalation Pathway

Trigger to Notice

Selection mechanism identifies the taxpayer. Audit notice (CDTFA Form 1164 or similar) issues.

Notice to Examination

IDR (information document request) and scheduled examination. Auditor reviews records, applies sampling where appropriate.

Examination to Notice of Determination

Assessment via CDTFA-345-SP. 30-day petition window opens.

The First 48 Hours After CDTFA Audit Notice

  1. Confirm the notice is legitimate.
  2. Identify the audit type. Desk, field, or industry-specific.
  3. Pull sales, purchase, and resale certificate records.
  4. Reconcile against federal and bank records.
  5. Identify likely trigger.
  6. Engage counsel for material cases.
  7. Calendar response deadlines.

★
Brotman Law has been recognized by Inc. Magazine as one of California’s fastest-growing law firms. We represent California retailers and businesses in CDTFA audits across every industry. Our office is based in San Diego.

The ROI Question

CDTFA sales tax audit assessments can exceed $1 million. Professional representation in sales tax audits typically saves multiples of the representation fee through sampling challenges and documentation.

Facing a California Sales Tax Audit?

CDTFA audits move quickly once a notice arrives. The direction of the audit is largely set by how you handle the initial document request and auditor interview. If you’re at any stage — from notice through assessment — we can review where things stand and identify what options are available.

Discuss My Sales Tax Audit →    Or call: (619) 378-3138

When to Engage an Attorney for CDTFA Audit

  • Any CDTFA audit notice.
  • Cash-intensive business.
  • Out-of-state seller with CA nexus question.
  • Resale certificate audit.
  • Prior CDTFA assessment.
  • Criminal referral risk.

Audit notice received?

A 15-minute consultation is free. We scope the audit strategy.

Get a Candid Assessment — Free →

Or see how we handle CDTFA audit defense →