California Sales Tax for Shopify Sellers — What the CDTFA Actually Does When You Cross the Threshold
Of all the states an online seller has to think about, California tends to cause the most anxiety. That anxiety is not misplaced. California has more online shoppers than any other state, a threshold that most growing stores will eventually cross, and a tax authority with a reputation for pursuing what it's owed.
Here is what actually happens when your Shopify store crosses into California territory.
The $500,000 Threshold — What It Really Means
California uses a $500,000 economic nexus threshold, enforced by the California Department of Tax and Fee Administration (CDTFA). That's significantly higher than most states, which sit at $100,000.
What the threshold measures: your total sales of tangible personal property to California customers in the current or previous calendar year. Once you cross $500,000 in California sales — not total business revenue, specifically California sales — you have economic nexus there.
There's no transaction count requirement in California. It's purely revenue-based. One big order that pushes you over $500K in California sales triggers nexus just the same as thousands of small ones.
What "Aggressive Enforcement" Actually Looks Like
The CDTFA isn't just technically strict. It actively looks for unregistered remote sellers.
The department has used third-party data — including marketplace transaction records and financial institution data — to identify sellers who are crossing the threshold without registering. They've sent notices to sellers who didn't know they were on anyone's radar.
When the CDTFA finds an unregistered seller who crossed the threshold, the assessment isn't just for the current year. It can be retroactive. They look back at when you actually crossed the threshold and calculate what should have been collected from that point forward — plus interest and penalties.
This is what sellers usually mean when they talk about California being aggressive. It's not just that they enforce the rules. It's that they pursue the back years too.
The California Rate — It's Not a Single Number
One thing that catches sellers off guard is that California doesn't have a single statewide sales tax rate. The base rate is 7.25% but local district taxes stack on top of that.
In Los Angeles, the combined rate can be 10.25%. In San Francisco it's 8.625%. Some districts are even higher.
When you register with the CDTFA, you're expected to collect the correct rate for the customer's ship-to location — not just the statewide base. For most sellers, their ecommerce platform handles this automatically once registered, but understanding that the rate varies by ZIP code is important context.
How Registration Actually Works
Once you determine you've crossed the California nexus threshold, registration happens through the CDTFA's online system at cdtfa.ca.gov. You'll need your business details, a description of what you sell, and information about where your business operates.
After registration, you're assigned a filing frequency — monthly, quarterly, or annual — based on your sales volume. Most growing stores end up on quarterly filing. Returns and remittances go directly to the CDTFA on those schedules.
For most sellers, Shopify's built-in tax settings can handle the rate calculation is automatically once you've entered your California registration details. The administrative burden is the registration itself and keeping the filings current — not the calculation work.
What If You've Already Crossed the Threshold Without Registering
This is a more common situation than most sellers want to admit. A store grows, California revenue quietly crosses $500,000 at some point in the past year or two, and nobody noticed until now.
California has a Voluntary Disclosure Program through the CDTFA. Sellers who come forward on their own before being contacted by the department can often negotiate limited lookback periods and penalty waivers. The program doesn't eliminate the liability but typically results in a much better outcome than being discovered and assessed retroactively.
If you think you've crossed the threshold and haven't registered, speaking with a CPA who handles California sales tax before doing anything else is the right first step. The voluntary disclosure process has specific procedures that are worth understanding before you approach the CDTFA.
The Sellers Who Don't Have to Worry
If your total California sales are well below $500,000 annually, California economic nexus isn't your immediate concern. The threshold is high enough that many independent sellers aren't there yet.
That said, if you're growing steadily and California is a meaningful part of your customer base, building awareness of where you are relative to that threshold is a reasonable habit. Crossing it unexpectedly — especially mid-year — creates complications that are easier to handle when you see them coming.
All information in this article comes from the official CDTFA and California government publications. Regulens is informational only and this article is not legal or tax advice. Speak to a licensed professional about your specific California tax situation.
Check Your California Exposure
Regulens includes California as one of its 39 covered jurisdictions, with a 1.8x enforcement weight — the highest of any state in the scoring system — reflecting the CDTFA's documented enforcement activity against remote sellers. Your store's California nexus status is factored into your overall readiness score based on your revenue inputs.
Free to check, takes three minutes, no credit card needed. Not legal advice — informational only.
Further Reading
Does Your Store Need to Detect a Browser Signal? A State-by-State Guide
Some states require your store to automatically recognize a consumer's opt-out preference through their browser settings, with no click required on your site at all. Here's exactly which states require it.
Four More States Are About to Get Privacy Laws — Here's Your Advance Notice
Alabama, Oklahoma, Louisiana, and Vermont have all signed comprehensive privacy laws into effect between 2027 and 2028. None are enforceable yet, but each is worth understanding well before its clock starts.