What actually happens after a state sales tax notice is ignored
At TaxCloud, we see two clean patterns when a brand brings us a state notice it set aside. Brands that engaged tax counsel within seven days closed the matter in 60 to 90 days at a manageable assessment. Brands that ignored the notice for 60 to 90 days closed 12 to 18 months later at three to five times the original assessment, plus interest and penalties, with the remediation options narrowed at every step. The escalation itself is procedural and reasonably predictable. It is the brand's silence that drives the multiplier.
The escalation chain runs in five stages, with state-specific variation in deadline and procedure.
| Stage | What it is | Trigger | Typical window | Statute (example) |
|---|---|---|---|---|
| 1. Nexus questionnaire | Information request from state DOR | Marketplace data, 1099-K, third-party reports | 30 days to respond | CDTFA, NY DTF, TX Comptroller administrative practice |
| 2. Registration demand | State directs the brand to register | Questionnaire confirms nexus, brand has not registered | 30 to 60 days | State-specific administrative orders |
| 3. Notice of Determination | State estimates tax and assesses it | Brand has not registered or filed | 30 to 90 days to protest | |
| 4. Jeopardy assessment | State declares collection at risk | Indicators of dissipation, removal of assets, or non-response | Immediately due and payable | |
| 5. Lien and collections | State files lien; cross-state enforcement | Assessment becomes final | Lien remains until paid; enforcement is ongoing |
Each stage requires a different response posture and carries a different deadline math. A nexus questionnaire is answerable directly with sales history and channel-mix data from Shopify and marketplace reports. A Notice of Determination is no longer information-gathering. It is a fixed-deadline protest window. A jeopardy assessment compresses that window to a single-digit number of days.
What the chain does structurally is move the burden of proof and the lever of negotiation. At stage 1, the brand controls the facts. By stage 5, the state controls the record and the brand is paying or protesting against a fixed number on a fixed clock.
Default and best-information-available assessment mechanics
Default assessments typically run two to five times what the brand would have owed had it responded. The mechanic that produces that multiplier is straightforward. When the state has no return data and no taxpayer cooperation, statute authorizes it to compute the assessment from the best information available (Cal. Rev. & Tax. Code §6481[1]; NY Tax Law §1138(a)(1)[5]; Tex. Tax Code §111.008[7]). In practice, the state pulls gross-receipts proxies it can obtain without the brand's cooperation: 1099-K data from Shopify Payments and Stripe, marketplace facilitator reports from Amazon and Walmart, freight or 3PL records, and credit-card processor settlement summaries.
The state applies its blended state and local rate to that gross figure, with no exemption for non-taxable categories, no offset for marketplace-collected sales, and no credit for tax already paid in other jurisdictions. The number is high by design. The state knows it is high. The state also knows the burden of proof has flipped.
Under the rebuttable-presumption framework that governs most state assessment statutes, a best-information-available determination is presumed correct. The brand has the burden of disproving it line by line. That means producing Shopify and ERP transaction logs, marketplace settlement reports, exemption certificates, and product taxability classifications for the lookback period, then mapping each transaction to the correct rule. The 30 to 90 day protest window (Cal. Rev. & Tax. Code §6561, 30 days [3][15]; NY Tax Law §1138, 90 days [5][16]; Tex. Tax Code §111.009, 60 days [8][17]) is the window inside which the rebuttal must be filed. Once that window closes, the best-information-available number becomes the final assessment.
The brands that beat the multiplier are the ones that bring source records: Shopify exports by state and period, marketplace settlement reports by transaction, exemption certificates indexed by customer, and a written nexus analysis showing the date physical or economic nexus was triggered. That documentation chain is the foundation of the protest letter.
The VDA eligibility cliff: how ignoring a notice locks out remediation
The single decision that destroys voluntary disclosure agreement (VDA) eligibility is ignoring a nexus questionnaire while having unregistered exposure in the same state. VDA exists as the structured remediation path for brands that arrive at the state voluntarily: full disclosure of prior periods in exchange for a capped lookback (typically three to four years) and a waiver of failure-to-file and failure-to-pay penalties. The economics are direct. Aggregate exposure that runs six to seven figures at standard registration drops by 60 to 100 percent when run through VDA. The "in contact" moment is what determines which path is available.
State VDA programs define contact narrowly and consistently. The Multistate Tax Commission's Joint Voluntary Disclosure Program, which coordinates VDA negotiations across MTC member states, disqualifies any taxpayer that has received written contact from the state about the tax type and period at issue. California's CDTFA, the New York DTF, and the Texas Comptroller each independently apply the same rule. Receipt of a nexus questionnaire counts. Receipt of a registration demand counts. Receipt of a Notice of Determination counts. Once the questionnaire is dated and the period it covers is named, that period is closed to VDA in that state for that tax type.
The cliff has two operational implications.
First, the VDA decision has to be made before the questionnaire is answered, not after. A brand that responds to a New York DTF questionnaire confirming five years of sales into the state has just established contact for those five years. The VDA-eligible window collapsed before the brand had a chance to evaluate it.
Second, ignoring a notice does not preserve VDA. It accelerates the loss. The state's contact, once dated, applies whether the brand reads the letter or not. The window does not reopen. Brands sometimes assume that not engaging keeps options open. The statute and program rules say the opposite.
Once VDA eligibility is confirmed available or unavailable per state and the remediation strategy is set, the prospective filing chain has to be in place before any registration is finalized. Registration, ongoing calculation at checkout, and a consolidated filing model across SST states are the three pieces that close new exposure while remediation proceeds.
Lien filing, the M&A consequence, and audit-committee exposure
Lien filing is the moment the consequence becomes public record. A state tax lien filed in California by the CDTFA (Cal. Rev. & Tax. Code §6711)[4] or in New York by the DTF (NY Tax Law §1141)[6]attaches to all real and personal property the taxpayer holds in that state. Texas files state tax liens with the Secretary of State and county clerks (Tex. Tax Code §113.005)[10]. Lien records are publicly searchable, indexed by entity name and federal employer identification number, and surface in standard M&A diligence searches and lender underwriting reviews.
For a $20M to $80M ecommerce brand mid-cycle on a strategic transaction, an unresolved state tax lien is a deal-killer. The pattern we see in diligence: the acquirer's tax counsel runs a multistate lien search, the lien surfaces, and the brand's controller has to produce the underlying assessment, the protest filings, the resolution agreement, and any payment evidence on a 48-hour clock. Brands in active diligence treat any state sales tax notice as an existential timeline. Brands that hid notices from diligence faced indemnification claims post-close, with the indemnification cost typically multiplying the underlying tax exposure by the legal and audit cost layered on top.
The audit-committee question is the same shape on a quarterly cycle. ASC 450 reserves attach to known and probable contingent liabilities, including unrecorded sales tax exposure. A state notice in the file makes the liability known. From that point forward, the audit committee asks whether the exposure has been quantified, whether a reserve has been booked, and what the remediation plan is. "We are not responding" is not a defensible posture in front of an auditor or an audit committee.
Three operational requirements follow once a lien is on the public record or an assessment is final. The first is documentation: the assessment letter, every prior notice with envelope and postmark, the protest filings, counsel's nexus analysis, and the underlying transaction data by period. The second is a financial reserve estimate, run state by state, with a clear methodology that auditors can test. The third is the prospective filing chain, in place and operating, so the brand is not accumulating new exposure while resolving the existing one. TaxCloud's reporting API exposes the transaction-level calculation logs and filing records that support both the protest documentation and the audit reserve estimate.
Cross-state collections and the cascade to adjacent states
States share data. The first notice ignored is rarely the last. Once one state has a final assessment, the brand often gets follow-up letters from adjacent states within 90 days. Three data-exchange mechanisms drive the cascade.
The first is IRC §6103(d)[11], which authorizes the IRS to share federal tax return information with state revenue departments for tax administration purposes. State DORs receive federal data on filed returns, 1099-K reports, and partnership and S-corp pass-through detail. When one state has flagged a remote seller as having unregistered nexus, the federal return data identifying the seller's revenue concentration across states is available to other state DORs through this channel.
The second is the Multistate Tax Commission's Joint Audit Program[12], which coordinates audit activity across MTC member states. A finding of unregistered nexus in one participating state surfaces in the joint audit pipeline. The MTC's Joint VDA Program operates the inverse: a brand voluntarily disclosing to one state can be brought into a multistate VDA negotiation, but only if VDA eligibility remains intact in each state.
The third is the Uniform Enforcement of Foreign Judgments Act (UEFJA)[14], adopted in some form by 47 states. A final state tax assessment, once reduced to judgment, can be domesticated and enforced in any other state where the brand holds assets. A brand headquartered in Texas with a California assessment can have that judgment domesticated in Texas and enforced against Texas-located assets including bank accounts and accounts receivable.
The practical implication: a single ignored notice in California or New York is rarely a single-state problem 12 months later. The brand's name is now in three or four state DOR queues simultaneously, each running its own timeline. The prospective filing chain across all states where nexus has been confirmed is the only operational path that closes new exposure while remediation proceeds. TaxCloud operates as one of the program's Certified Service Providers and handles consolidated SST filing across the 23 full member states; state-direct filing covers the rest.
The brand-side response timeline and the prospective filing chain
Engagement timing predicts the outcome more reliably than the underlying exposure number. The cadence that holds across the brands we see arriving with state notices in hand:
- Day 0 to 7 (questionnaire received). Engage tax counsel or a sales tax specialist CPA before drafting any response. The VDA decision sits inside this window. The classification of the document (questionnaire vs. registration demand vs. Notice of Determination) determines the entire downstream chain.
- Day 7 to 14 (registration demand received). Engage immediately. A registration demand presumes nexus and asks the brand to register. The protest path is narrower than at the questionnaire stage.
- Same day (Notice of Determination received). The 30 to 90 day protest window starts on the notice date, not the receipt date. The protest filing requires the source documentation chain assembled and counsel engaged. The day-one task is to confirm the deadline and reserve the filing date in the protest queue.
- Same day (jeopardy assessment). Engage tax counsel immediately. Jeopardy assessments under Cal. Rev. & Tax. Code §6536[2], NY Tax Law §1138[5], and Tex. Tax Code §111.022[9] are immediately due and payable. The procedural posture shifts from protest to emergency injunction or bond posting.
Once the protest or VDA negotiation is sequenced through counsel, the operating model question is what the prospective filing chain looks like across the states where nexus has been confirmed. Protest and VDA workflows are CPA or tax attorney work. The post-resolution registration, calculation, and filing chain is the sustained operating model, and the only thing that closes new exposure as resolution proceeds.
The reader here is past the question of whether to respond. The question is what the brand's operating model looks like once the notice chain is resolved and the brand is registered in 20 to 35 states. TaxCloud is built for that: registration across confirmed-nexus states, native Shopify, Shopify Plus, BigCommerce, and QuickBooks Online integration, consolidated SST filing across the 23 full member states, and the documentation trail through the reporting API that supports both audit defense and audit-committee reserve estimation.