California Resale Certificate Verification: CDTFA Lookup and Good Faith

To verify a California resale certificate, confirm through the CDTFA’s online permit verification tool that the buyer’s seller’s permit number is active and matches the business name on the certificate, then check that the certificate itself contains every required element, including the exact phrase “for resale.” Learning how to verify a California resale certificate is not optional housekeeping. If the certificate turns out to be bad and you didn’t take reasonable steps to check it, you owe the uncollected sales tax, plus interest and penalties, when the CDTFA audits you.¹

California presumes every sale of tangible goods is taxable until the seller proves otherwise. Taking a resale certificate is how you meet that burden, but only if the certificate is valid and you verified it before the transaction.²

Check the Certificate Has Every Required Element

Verification starts with the document, not the permit number. Any form of writing can serve as a resale certificate — a letter, a purchase order, or the CDTFA’s Form CDTFA-230 — as long as it contains all of the required elements.³ Missing even one makes the certificate incomplete, and an incomplete certificate will not protect you in an audit.

The purchaser’s business name and address, matching CDTFA records.
The purchaser’s valid California seller’s permit number. If the buyer isn’t required to hold a permit, they must state the reason on the certificate instead of giving a number.²
A description of the property: either an itemized list of what’s being bought or a general description of the kind of goods the buyer resells.
The phrase “for resale.” Words like “nontaxable,” “tax exempt,” or “wholesale” do not satisfy this requirement.
The date the certificate was signed. An undated certificate isn’t automatically void, but dating it strengthens your record.³
A signature from the purchaser, an employee, or an authorized representative.

Most verification failures start here. Sellers glance at the permit number, run it through the CDTFA tool, and never notice the certificate says “tax exempt” instead of “for resale,” or that the property description is blank.

Run the CDTFA Online Verification

The CDTFA’s Permit, License, or Account Verification system is the primary tool for confirming the buyer’s permit status. It’s on the CDTFA’s Online Services page and covers seller’s permits, Certificates of Registration for use tax, cigarette retailer licenses, and eWaste accounts.⁴⁵

To run a check:

Enter the seller’s permit number exactly as it appears on the resale certificate.
Enter the purchaser’s registered business name. A small discrepancy — an ampersand instead of “and,” or a shortened form — can cause a mismatch.
Read the status returned by the system. If it comes back as anything other than active, do not accept the certificate. Collect sales tax on the transaction.

Print or screenshot the result page and save it with the certificate. That printout is your proof of due diligence if the CDTFA later questions the sale.

Get the Certificate in Time

A resale certificate is timely if you obtain it before any one of three points, whichever comes first: before you bill the purchaser, within your normal billing and payment cycle, or at or before delivery of the goods.² A certificate produced months after the sale, especially after an audit notice arrives, will not retroactively exempt the transaction. Collect the certificate at the point of sale, or during onboarding for a new wholesale customer.

Apply the Good-Faith Test

A complete certificate isn’t automatically enough. California applies a good-faith standard: did you, as the seller, reasonably believe the certificate was legitimate? If the certificate contains every required element and appears valid on its face, you’re presumed to have accepted it in good faith.²

That presumption breaks when the transaction should have raised a question. If a plumbing supply company gives you a resale certificate for a bulk order of consumer electronics, you’re expected to ask for a certificate that explains how the property will be resold in the regular course of business. Accepting it without question in that situation won’t hold up under audit.

Verification Failures Auditors Catch

CDTFA auditors see the same problems repeatedly. Knowing the pattern helps you avoid it.

Wrong permit number. The buyer supplies an incorrect number, or one that belongs to a different business. Always cross-reference the number against the business name in the CDTFA tool; a mismatch is an immediate red flag.⁶
Expired or canceled permit. The buyer’s permit was closed before the purchase date. The online tool catches this, but only if you actually check.
Pattern purchases that don’t fit the buyer’s business. A restaurant supply buyer repeatedly ordering consumer appliances is the kind of pattern that should prompt questions before you accept another certificate.
Missing “for resale” language. The certificate uses “tax exempt” or “nontaxable” and never includes the required phrase. That failure alone invalidates the certificate regardless of what else is on it.

A buyer who knowingly misuses a certificate faces a penalty of 10% of the tax owed or $500, whichever is greater, per transaction.⁷ That penalty on the buyer does not erase your liability. If you accepted the bad certificate without verifying it, you’re still the one assessed for the uncollected tax.

Out-of-State Buyers, Drop Shipments, and the MTC Form

An out-of-state buyer who doesn’t make sales in California isn’t required to hold a California seller’s permit. They can still give you a valid resale certificate, but in place of a permit number they must state on the certificate the reason no permit is required.⁸

Drop shipping adds a layer. When you’re a California vendor shipping goods directly to a California consumer on behalf of an out-of-state retailer, you’re presumed to be the retailer responsible for the sales tax. You can overcome that presumption with a timely, good-faith resale certificate from your customer that includes either their valid California seller’s permit number, or, if none is required, their Certificate of Registration – Use Tax account number along with an explanation. If your out-of-state customer is a marketplace seller whose sales are facilitated by a registered marketplace facilitator, the certificate can instead identify the facilitator by name with the facilitator’s valid permit or use tax account number. Without one of these, you owe tax on the full retail price the California consumer paid.⁹

California accepts the Multistate Tax Commission’s Uniform Sales & Use Tax Resale Certificate, but only as a resale certificate, not as a general exemption certificate. The MTC form has to meet every Regulation 1668 requirement — California seller’s permit number (or a valid reason for not having one), the “for resale” language, and the rest — and you verify the permit number through the CDTFA tool the same way you would for any other certificate.¹⁰

Keep the Certificate and Your Proof of Verification

Retain two things for every resale transaction: the certificate itself and proof that you verified the buyer’s permit status. A dated screenshot or printout of the CDTFA verification result satisfies the second item. The CDTFA requires you to keep resale certificates and supporting documentation for at least four years.¹¹ If you’re under audit, hold the records for the audit period until the matter closes, even if the four-year window has run.

You can convert paper records to digital formats and discard the originals if your system preserves enough detail for auditors to trace individual transactions, can extract records to a standard format at examination time, and demonstrates internal controls against unauthorized additions, edits, or deletions.¹¹

What Happens if You Didn’t Verify

If the CDTFA audits you and finds an invalid certificate, a missing element, or no evidence you checked the permit, you’ll receive a deficiency determination for the full uncollected tax. Interest runs from the date the tax was originally due. A 10% negligence penalty applies if the CDTFA finds you should have caught the problem; a 25% penalty applies where fraud is involved.¹²

The standard lookback for a deficiency determination is three years from the later of the return’s due date or its filing date.¹³ The four-year retention rule gives you a cushion over that window. Verification takes minutes per customer. An audit assessment on years of unverified resale sales can run into the tens of thousands, and by the time the notice arrives, the buyer whose certificate you accepted on faith may be long gone.

1
California Department of Tax and Fee Administration. California Sales and Use Tax Law – Section 6091
2
California Department of Tax and Fee Administration. California Regulation 1668 – Sales for Resale
3
California Department of Tax and Fee Administration. Sales for Resale (Publication 103) Valid Resale Certificates
4
California Department of Tax and Fee Administration. Online Services — Overview
5
California Department of Tax and Fee Administration. Permits and Licenses
6
California Department of Tax and Fee Administration. Field Audit Manual Chapter 5 – Penalties
7
California Department of Tax and Fee Administration. California Sales and Use Tax Law – Section 6094.5 – Improper Use of Certificate
8
Taxes. Resale Certificates
9
California Department of Tax and Fee Administration. California Regulation 1706 – Drop Shipments
10
Multistate Tax Commission. Uniform Sales and Use Tax Resale Certificate – Multijurisdiction
11
California Department of Tax and Fee Administration. California Regulation 1698 – Records
12
California Department of Tax and Fee Administration. California Regulation 1703 – Interest and Penalties
13
California Department of Tax and Fee Administration. California Sales and Use Tax Law – Section 6487