Accepting an invalid certificate creates more liability than having no certificate at all. Here is exactly how to verify the certificates you accept will actually protect you.
What You'll Learn
- What makes an exemption certificate valid vs. invalid
- Required information for each type of exemption certificate
- How to verify exemption numbers against state databases
- Red flags that indicate potentially fraudulent certificates
- State-by-state validation requirements and resources
- When to accept vs. reject questionable certificates
Many businesses treat exemption certificates as simple paperwork. If the customer provides something that looks official, they accept it without scrutiny. This approach fails during audits when state examiners review your certificates and find problems that should have been obvious. Missing signatures. Invalid exemption numbers. Certificates claiming exemptions that do not exist in that state.
Proper certificate validation takes a few minutes per certificate. It saves thousands or tens of thousands of dollars in audit assessments. Here is exactly how to verify that the certificates you are accepting will actually protect you.
Check for Required Basic Information
Every valid exemption certificate must contain specific information regardless of which state issued it or what type of exemption it claims. Before you verify exemption numbers or research state-specific rules, check that the certificate includes these fundamentals.
-
Business Name and Address
The certificate must identify who is claiming the exemption. A certificate without a business name, or with only a personal name when purchases are for business use, is invalid. The address should be a physical location. Compare the business name on the certificate to the name on your customer account and invoices. Significant differences require explanation.
-
Signature and Date
Every exemption certificate requires a signature from an authorized representative. Digital signatures are acceptable in most states. Unsigned certificates are invalid. Do not accept a certificate with a note saying "signature to follow." The date tells you when the certificate was issued and whether it was valid at the time of your sales. A certificate dated after your first exempt sale does not cover that earlier sale.
-
Description of Exempt Property or Purpose
The certificate should explain what types of purchases qualify for exemption. Vague descriptions like "business purchases" or "various items" are not specific enough to demonstrate that the particular items you sold qualify. If the description does not reasonably cover what the customer is buying from you, request a more specific certificate or charge tax.
-
Exemption or Permit Number
Most states require a permit number, registration number, or exemption number that identifies the buyer's authorization to claim exemption. This number is what allows you to verify the certificate's validity. Format requirements vary by state, but the number must be present and readable. Illegible handwritten numbers create verification problems.
On seller information: Many certificate forms include space for the seller's name and address. While not always required, completing this field demonstrates the certificate was prepared specifically for transactions with your company. It strengthens the documentation in the event of an audit review.
Verify Exemption Numbers Against State Databases
The exemption or permit number is the most critical piece of information to verify. It confirms the customer is actually registered with the state and authorized to claim the exemption.
Most states provide online tools where sellers can verify that an exemption number or seller's permit exists and is currently active.
States with online verification tools
- California — CDTFA website; confirms permit is valid and active
- Texas — Comptroller's Taxpayer Search; search by permit number or business name
- New York — Department of Taxation and Finance; validates Certificate of Authority numbers
- Florida — Department of Revenue; verifies Certificate of Registration numbers
States without online verification
- Check that the number format matches that state's pattern
- Verify the business is registered via the Secretary of State
- Contact the state's Department of Revenue directly for high-value customers
- Document what you checked and when, regardless of the method used
Document every verification. Save screenshots of verification results. Note confirmation numbers if provided. Keep records of any calls or written requests to state agencies. This documentation demonstrates reasonable diligence if you are audited later and the certificate proves problematic.
If verification shows an exemption number is invalid, suspended, or revoked, do not accept the certificate. Contact the customer and request an updated, valid certificate or begin collecting sales tax on their purchases.
Manual verification takes minutes per certificate. At scale, that compounds into hours every week. ACTSOLV's CertSOLV automates exemption number verification against state databases, validates certificate fields at submission, and maintains a documented audit trail automatically.
Talk to a Sales Tax ExpertUnderstand State-Specific Certificate Requirements
Exemption certificate requirements vary significantly by state. What is acceptable in one state may be invalid in another. Multi-state sellers need to know the specific rules for each jurisdiction where they make exempt sales.
Certificate forms
Some states require state-specific forms. California strongly prefers CDTFA Form 230 for resale exemptions. New York has specific forms by exemption type: ST-120 for resale, ST-121 for utilities. Other states accept uniform multi-state certificates or any format that contains required information.
Expiration rules
Some states issue certificates that expire on a fixed date and require periodic renewal. Others issue blanket certificates that remain valid indefinitely until revoked. Sellers should periodically revalidate even non-expiring certificates to ensure the buyer's permit remains active.
Out-of-state certificates
Some states do not accept out-of-state certificates. A customer using a multi-state resale certificate may need to provide a state-specific form once you register to collect tax in that state. This catches many businesses off guard.
Special exemption types
Manufacturing, agricultural, government, and nonprofit exemptions often require additional documentation beyond standard resale certificates. Do not accept a federal 501(c)(3) determination letter as a state sales tax exemption. Each state has its own rules for nonprofit exemptions.
Best practice: Create a reference guide for each state where you make significant exempt sales. Document acceptable certificate forms, required information, expiration rules, and verification resources. Update it when state rules change. This guide becomes part of your documented compliance process.
Recognize Red Flags That Indicate Problems
Some certificates look legitimate at first glance but contain warning signs that should trigger closer scrutiny. Auditors are trained to spot these. You should be too.
Residential address for a wholesale business
Residential addresses combined with claims of high-volume wholesale activity are worth investigating. Legitimate home-based businesses exist, but the combination often indicates a fraudulent certificate.
Exemption number that does not match state formatting
Each state formats its permit and exemption numbers in consistent ways. A number that does not match the expected format for that state is either invalid or incorrectly entered. Do not assume it is a typo without verifying.
Very recent certificate date from a long-standing customer
If a customer has been making exempt purchases for years but provides a certificate dated in the last few weeks, ask why. They may have renewed an expired certificate. Or they may be scrambling to produce documentation they never actually had.
Handwritten or altered information
Professional certificates are completed electronically or typed. Handwritten exemption numbers, crossed-out information with corrections, or other signs of alteration warrant extra verification before acceptance.
Certificate type that does not match business type
A software company claiming a manufacturing exemption. A service provider claiming resale exemption. When the certificate type does not align with the customer's obvious business model, verify that the exemption actually applies to their purchases from you.
Inconsistent business information
The business name on the certificate does not match invoices. The address differs from the shipping address with no explanation. Contact information does not work. These inconsistencies suggest the certificate may belong to a different entity or contain fraudulent information.
Red flags are triggers for investigation, not automatic rejection. Contact the customer for clarification. Check the exemption number. Research whether the claimed exemption type applies. The goal is catching problems before you make tax-exempt sales based on invalid documentation.
Make Accept / Reject Decisions Based on Risk
After checking required information, verifying exemption numbers, reviewing state-specific requirements, and looking for red flags, you need to decide: accept the certificate, reject it, or request clarification and corrections.
| Decision | When to use it |
|---|---|
| ✅ Accept | All required information is present. Exemption number verifies as valid and active. Certificate type matches the customer's business and purchases. No red flags. Complies with state-specific requirements. |
| 🔄 Request corrections | Minor information is missing (signature, date, full address) but otherwise valid. Exemption number format looks incorrect but might be a typo. Business name variation needs explanation. State-specific requirements not quite met but easily fixed. |
| ❌ Reject and collect tax | Exemption number does not exist or is invalid. Critical information is missing and the customer cannot provide it. Certificate type clearly does not apply to the purchases. Multiple red flags suggest fraudulent documentation. |
When requesting corrections, be specific. "Your certificate is missing a signature. Please sign and return it within 5 business days to continue processing orders without tax." Vague requests invite delays. Specific requests with deadlines get responses.
Document every decision. When you accept a certificate that has minor questions but passes validation, note why you determined it was acceptable. When you reject one, document what was missing or why it appeared invalid. Auditors evaluate whether your process was reasonable, not whether every certificate was perfect.
Common Validation Mistakes to Avoid
Even companies that understand certificate requirements make validation errors that create audit problems. These are the most common ones.
- Accepting certificates without verifying exemption numbers. This takes less than two minutes using state online tools. Skipping this step means you may be accepting completely fabricated numbers.
- Assuming all certificates are permanent. Some certificates expire. Some require periodic renewal. Build revalidation into your process instead of assuming a certificate accepted once is good forever.
- Not comparing certificate information to account information. The business name on the certificate should match the name on your customer account and invoices. When it does not, it is either a mistake that needs correction or a sign that the certificate belongs to a different entity.
- Accepting incomplete certificates pending missing information. "Later" rarely happens. Get complete documentation before processing exempt sales.
- Treating all states the same. Validation requirements vary significantly by state. What is acceptable in Texas may be invalid in California. Multi-state sellers need to know the specific requirements for each jurisdiction.
- Failing to document validation efforts. If you verify an exemption number online but do not save the confirmation or note when you checked it, you cannot prove due diligence during an audit. Document what you verified and when.
- Not questioning suspicious certificates. If the certificate claims an exemption type that obviously does not apply, or the signature is clearly not a real signature, trust your instincts and investigate before accepting.
When ACTSOLV Handles Validation Automatically
Manual certificate validation works when you are processing a handful of exempt transactions per month. As volume grows, the validation steps above become time-consuming bottlenecks that slow order processing and create opportunities for errors.
ACTSOLV's CertSOLV automates the entire validation process at scale:
🔍 Automatic format checking
When certificates are received, the system checks that all required fields are completed, exemption numbers match expected state formats, and certificates include signatures and dates. Incomplete certificates are flagged immediately for correction rather than accepted and filed.
🏛️ Exemption number verification
When a customer submits a certificate, CertSOLV verifies the exemption or permit number is valid and active against state databases. No manual checking. No need to remember which states offer verification tools.
🗺️ State-specific validation rules
CertSOLV validates certificates against the appropriate state rules based on where the customer is located and where you are making sales. California's requirements differ from Texas's. The system accounts for this automatically.
📋 Audit trail documentation
Every certificate is logged with when it was received, what validation checks were performed, when verification occurred, and what results were obtained. This documentation automatically demonstrates the good faith compliance efforts that auditors expect.
Real-world outcome
A healthcare SaaS company reduced manual processing time by 80% after implementing CertSOLV. During a subsequent audit, they provided all necessary documentation within one hour — resulting in a no-change audit with zero penalties or interest. Read the case study.
Frequently Asked Questions
What makes an exemption certificate invalid?
A certificate is invalid if it is missing required information (business name, address, signature, date, or exemption number), the exemption number does not verify as active in state databases, the certificate form is not accepted by the issuing state, the exemption type does not match the transaction, or the certificate has expired. Any one of these issues is sufficient for an auditor to treat the associated transactions as taxable.
How do you verify an exemption number against a state database?
Most states provide online verification tools through their Department of Revenue or Tax and Fee Administration website. California uses the CDTFA website. Texas uses the Comptroller's Taxpayer Search. New York and Florida offer similar online tools. For states without online verification, check that the number format matches the state's pattern, confirm the business is registered through the Secretary of State, or contact the state's Department of Revenue directly. Always document what you checked and when.
What are the biggest red flags on an exemption certificate?
The most significant red flags are: an exemption number that does not exist or does not match the state's format, a residential address paired with a claim of wholesale business activity, a missing or clearly fake signature, an expired certificate presented as current, a certificate type that does not match the customer's business model, and inconsistencies between the business name on the certificate and the name on your customer account.
What is the "good faith" standard for certificate validation?
Good faith means you took reasonable steps to verify the certificate's validity based on information available to you. This includes checking that required fields are complete, verifying the exemption number where state tools allow, confirming the certificate type matches the transaction, and questioning certificates that contain obvious problems. Auditors evaluate your validation process, not whether every certificate was perfect. Documenting what you checked and when is essential to demonstrating good faith.
Should you accept incomplete certificates pending missing information?
No. Do not accept an incomplete certificate with the intention of collecting missing information later. Later rarely happens, and you end up with invalid certificates in your files. Get complete documentation before processing exempt sales. If a customer provides an incomplete certificate, contact them immediately with a specific list of what is missing and a deadline for providing the corrected version.
Automate Your Certificate Validation Process
CertSOLV validates certificates at submission, verifies exemption numbers automatically, and maintains a documented audit trail for every certificate in your system.
Related Resources
- How to Request Exemption Certificates from New Customers Without Friction
- How to Handle Expired or Invalid Tax Exemption Certificates
- 5 Red Flags Your Exemption Certificate Process Is Putting Your Company at Risk
- How to Build an Audit-Ready Exemption Certificate Database
- Exemption Certificate Management: The Complete 2026 Guide
- CertSOLV: Sales Tax Exemption Certificate Management Software
- Case Study: Streamlining Compliance for Healthcare Technology Provider
