Audits are a fact of life in cannabis. You operate in a cash-heavy, tightly regulated industry with unique tax rules. The IRS reviews your books through the lens of Section 280E, and state agencies test your records against seed-to-sale data. If your accounting is sloppy or your inventory is off, you pay for it.
Passing audits is less about perfect operations and more about defensible records, consistent controls, and an honest story backed by documents. Here’s how to get there.
What the IRS actually enforces
Federal tax remains the headwind. Until a final federal rule says otherwise, the IRS applies Section 280E to state-legal cannabis businesses. That means you cannot deduct or credit ordinary operating expenses. You can still reduce gross receipts by properly calculated cost of goods sold, but you have to do COGS right and you have to prove it.
The case law is clear on what wins and what fails. In CHAMP, the taxpayer prevailed because it truly operated two separate trades: caregiving and cannabis sales, with separate books and activities. In Olive, the court said the dispensary’s non-cannabis “services” were inseparable from cannabis sales, so no deductions. The Harborside line of decisions reinforced that aggressive attempts to expand COGS beyond inventory rules will be rejected. If you claim you run more than one business, your records had better prove it.
Expect examiners to scrutinize your entity structure, your COGS methodology under Section 471, your inventory valuation, and any “management company” arrangements. Agents also focus on cash reporting. If you receive more than $10,000 in cash in a single or related set of transactions, you must file Form 8300 within 15 days and issue the required annual statements. Cannabis retailers are squarely in scope.
What states test and why it matters
States audit different things, but the theme is consistency between your physical counts, your books, and your track-and-trace. In California, the Department of Cannabis Control requires licensees to reconcile on-hand inventory with the track-and-trace system at least once every 30 calendar days and to investigate significant discrepancies. The California Department of Tax and Fee Administration conducts inspections and audits for sales and excise taxes. You need the paper trail to match your system data.
Other states emphasize similar controls. Michigan’s Cannabis Regulatory Agency publishes best-practice manuals on documentation and compliance. Colorado’s Marijuana Enforcement Division publishes and is audited against rules that highlight consistency and oversight. If your seed-to-sale records and POS exports do not tie to financials, you are exposed.
Build audit-ready books before you are asked
Do not wait for the notice. Standardize your chart of accounts, lock your COGS policy in writing, and reconcile inventory to track-and-trace on a fixed cadence. Use perpetual inventory and close work-in-process monthly. If you use multiple entities, keep clean intercompany agreements, invoices, and transfer pricing support. Separating functions can help operations and risk, but it will not save you in tax court unless the separation is real and documented. The file needs to tell the same story every month.
Documentation you should be able to hand over in minutes
- COGS workpapers and inventory valuations by location and SKU, tied to Section 471 and your written policy
- Form 8300 filings and customer statements, cash logs, bank deposit reconciliations, and cash-handling SOPs
These are the first places IRS and state auditors look when testing 280E exposure, taxable sales, and cash integrity.
How to handle the initial contact and fieldwork
When you receive a federal or state audit notice, assign one point of contact, acknowledge receipt, and ask for the information IDR list in writing. Provide what is requested, nothing more, and keep delivery organized with index numbers that map to your policies and ledgers. Auditors will likely ask for a tour or system walk-through. That is normal. You should be ready to demonstrate how items flow from receiving to sale, how variances are resolved, and how corrections are posted in both accounting and track-and-trace. California publishes general audit guidance and inspection programs that mirror this approach.
If you discover issues while preparing documents, fix them and document the fix. Many findings become expensive because the operator tries to defend the indefensible instead of remediating and moving on.
Red flags that trigger deeper testing
- Deductions beyond COGS, vague “management fees,” or capitalization that does not match Section 471 rules
- Missing or late Form 8300 filings for large cash receipts, or POS totals that do not match deposits and tax returns
These patterns often lead to expanded sample sizes, penalties, or both.
State inventory controls are not optional
The fastest way to fail a state review is inventory that does not match track-and-trace. In California, monthly reconciliation is mandatory. If discrepancies are “significant,” you must audit and notify the regulator. That requires dated cycle-count logs, variance explanations, adjustment entries, and sign-offs. Treat these like your bank recs: scheduled, reviewed, and archived.
About rescheduling and audits
There has been public movement toward rescheduling marijuana to Schedule III through DEA rulemaking, but as of now a final, effective rule has not taken effect, and the IRS continues to apply 280E. Do not build your audit defense on future policy. Run your books for today’s rules. If rescheduling does become final, expect new IRS guidance before audit posture changes.
Final Word
Passing audits is about discipline. Write down your accounting policies. Reconcile everything on a schedule. Keep inventory tight and traceable. File 8300s on time. When the notice arrives, you will have a story that matches your numbers and a file that proves it.
FAQs: Cannabis Audit Survival
Does 280E still apply today?
Yes. The IRS has stated that 280E still applies while marijuana remains federally controlled as a Schedule I or II substance. You may reduce income by properly calculated COGS, but not deduct ordinary operating expenses.
What records do IRS agents ask for first?
COGS workpapers and inventory support under Section 471, sales and bank reconciliations, and Form 8300 filings with annual statements. These establish how you calculated taxable income and handled cash.
How often must I reconcile inventory to track-and-trace in California?
At least once every 30 calendar days, including reconciling on-hand inventory to the system and reviewing authorized users. Significant discrepancies require an audit and notification to the Department.
Do I have to e-file Form 8300?
You must file within 15 days of receiving more than $10,000 in cash in a single or related set of transactions, and the IRS provides e-file options. You also must deliver a written statement to the named party by Jan. 31 of the following year.