Updated 2026-04-24 · compliance

Good-faith acceptance: you’re not a tax auditor

Most Shopify merchants who start collecting resale certificates have the same worry: what if the cert turns out to be fake? You don’t know resale-tax law. You don’t know what a real CDTFA-230 looks like. You just want to sell to wholesale customers without getting hit with a five-figure tax bill three years later.

Here’s the answer, and it’s better than you think.

The one-line answer

Under US sales-tax law, a seller who accepts a resale certificate in good faith is not liable if the buyer turns out to have been lying. The state chases the buyer, not you.

“Good faith” is a specific legal standard, not a vibe. Every US state that charges sales tax has codified some version of it. You meet the standard by doing two things:

  1. Accept a certificate that looks legitimately filled out and signed.
  2. Keep the record.

That’s the product promise Resale Proof is built around.

What your job actually is

When a wholesale customer submits a cert, here’s the entire checklist you owe:

  1. Is the form the right one for the state? CA expects CDTFA-230; TX expects 01-339; MTC Multistate is accepted by 37 states but not CA, IL, or several others. Resale Proof’s per-state form library handles this for you on submission.
  2. Are the fields filled in? Name, address, permit number, description of goods, signature, date.
  3. Does the permit number look like a real one? (It doesn’t have to be verified against the state database — that’s belt-and-suspenders. It just has to be formatted plausibly.)
  4. Is the date within the cert’s validity window? Blanket certs are perpetual until revoked; dated certs should not be past their expiration.

Click Approve. That’s it.

What your job isn’t

What an audit actually tests

A state DOR audit is not a tax-law pop quiz. The auditor asks two questions:

  1. Did you collect a cert for every exempt sale?
  2. Can you produce it?

That’s the entire test. If the answer to both is yes, you pass. The auditor doesn’t second-guess the cert’s validity — that’s the buyer’s problem. Your responsibility ends at the paper trail.

Resale Proof’s audit PDF export (cover sheet, state-grouped table of contents, every cert concatenated in order) is built specifically to answer these two questions in one click.

When good-faith protection disappears

Three failure modes strip the protection:

  1. No cert on file at all. You applied an exemption without collecting the documentation. Indefensible.
  2. You knew the buyer was lying. Documented evidence (emails, sales-rep notes) that you were told the buyer wasn’t actually reselling. Rare; avoidable.
  3. You kept applying a cert after it expired. Sale date after cert expiration, no renewed cert. This is the most common failure mode among small merchants, and it’s exactly what Resale Proof’s 90/60/30/7-day renewal reminders + automatic expiry revocation are designed to prevent.

Per-state statutes

If your CPA or a skeptic wants to read the primary source, here are the tax-code citations for the five largest states by B2B resale volume. Every state has an equivalent statute.

StateStatuteOne-line summary
CaliforniaRev. & Tax. Code §6091–6094Seller not liable where cert accepted in good faith without knowledge it was false.
TexasTax Code §151.054Burden of proving exemption shifts to buyer when seller accepts a properly completed cert.
New YorkTax Law §1132(c)Acceptance in good faith relieves seller of tax liability.
Illinois35 ILCS 120/1cGood-faith acceptance of certificate of resale satisfies seller’s burden.
FloridaFla. Stat. §212.085Annual Resale Certificate presumption applies when accepted in good faith.

← Back to help center