By Diosh — Founder, AHAeCommerce | eCommerce decision intelligence for $50K–$5M GMV operators
This is a cost piece for the $500K–$5M GMV DTC operator who installed TaxJar or Avalara two years ago, watched it calculate tax at checkout, and never thought about it again. The plugin you bought is a filing tool. It assumes you are already registered in every state where you owe tax. You are not. Most operators at your stage have triggered economic nexus in 15 to 30 states without registering in any of them, and the unregistered exposure (tax owed + penalty + interest) is usually somewhere between $5,000 and $80,000 depending on revenue mix and how long it has been accruing. The number does not appear on any dashboard. It compounds quietly until a state sends you a letter.
What TaxJar and Avalara Actually Do (And What They Don't)
TaxJar, Avalara, Anrok, Numeral, and every other sales tax automation tool perform three jobs: rate calculation at checkout, return preparation by state, and filing + remittance to states where you already hold a permit. They do this job competently. That is not the failure mode.
The failure mode is what they do not do. None of these tools register you with a state Department of Revenue. None of them monitor your revenue against the 46 different economic nexus thresholds and tell you "you crossed Florida in October — you have 30 days to register." Some have nexus dashboards that estimate exposure, but the dashboards only flag what you tell them to flag. The registration step is yours. The plugin will happily file zero returns to the only states you have registered in, while you accrue uncollected tax liability in twenty others.
A $1.4M GMV skincare brand I reviewed had Avalara running cleanly in three states. Their AvaTax dashboard showed economic nexus thresholds crossed in 19 additional states. They had not registered in any of them. Their accountant had assumed Avalara handled it. Avalara had been showing the warnings in a tab nobody opened for 22 months. Estimated unregistered exposure: $34,000 in tax owed, plus roughly $11,000 in penalty and interest if a state caught them before they self-disclosed.
This is the structural gap. The plugin does the easy part — the math. You own the part that requires action: knowing where you owe, registering before the state finds you, and remitting from the registration date forward. If you are not actively running a nexus audit at least annually, your tool stack is incomplete in a way that the eCommerce tool stack cost analysis tends to ignore — because nobody invoices you for the gap.
The Wayfair Threshold And Why It Hits Every Multi-State Seller
In June 2018, the Supreme Court decided South Dakota v. Wayfair, Inc. and overturned the physical presence rule that had governed remote sales tax since 1992. The 5–4 decision held that a state may require an out-of-state seller to collect and remit sales tax based on economic activity alone — no warehouse, no employees, no physical footprint required (Sales Tax Institute).
The South Dakota statute the Court upheld had two triggers: $100,000 in gross revenue or 200 separate transactions into the state in the prior or current calendar year. Within 24 months of the decision, 45 states plus DC had adopted some version of this framework. The thresholds vary. The obligation does not.
Today, the operationally relevant numbers look like this:
- $100,000 revenue OR 200 transactions — the base Wayfair model, still used in roughly 20 states (e.g., Connecticut, Georgia, Hawaii, Illinois — verify current rules per state)
- $100,000 revenue only — used in states that dropped the transaction count, including Florida, Wisconsin, Massachusetts, and many others
- $250,000 revenue — Alabama, Mississippi
- $500,000 revenue — California, Texas, New York (NY also requires 100+ transactions)
Authoritative current charts: Avalara's state-by-state guide and TaxJar's economic nexus map. Verify before registering — states adjust thresholds and a handful have dropped the transaction trigger in the last 24 months.
The trap is the 200-transaction trigger in states that still use it. A brand selling $35 candles ships 286 orders to Illinois at $9,800 in revenue. The revenue is nowhere near the dollar threshold. The transaction count crosses it. Nexus is established. The operator has no idea, because the dashboard they look at sorts by revenue.
Why this is a permanent operating cost, not a one-time setup
Economic nexus is evergreen. Thresholds shift. Some states fold the 200-transaction count and raise the dollar bar; others tighten. The obligation to monitor does not disappear. Every multi-state DTC seller, indefinitely, has to run this audit annually. Treat it the way you treat your annual lease renewal or your D&O insurance — calendared, owned, not optional.
The Marketplace Insulation Myth
Marketplace facilitator laws — enacted in nearly every state between 2019 and 2021 — require Amazon, Walmart, eBay, Etsy, and similar platforms to collect and remit sales tax on the orders they process. This is real protection. It is also narrower than most operators believe.
The myth: "Amazon handles my sales tax, so I don't have to worry about nexus."
The reality: Amazon handles sales tax on Amazon orders only. If you also sell through your own Shopify store, those sales are direct-to-consumer transactions that you process — and they count toward your economic nexus threshold separately. The marketplace shield protects the marketplace channel. It does not insulate your direct site.
Worse, in several states, marketplace sales still count toward your direct-site threshold calculation even though Amazon collects the tax on them. California is the textbook case: marketplace sales count toward the $500,000 economic nexus threshold for your direct site, even though the marketplace facilitator handles the tax on those specific orders. So you can cross California's threshold on Amazon-driven volume alone, then owe registration and collection on your Shopify orders — which Amazon never touched. Other states (Florida being one) exclude marketplace sales for individual sellers from the threshold. The state-by-state difference is exactly the kind of detail an automated dashboard handles poorly and a quarterly review handles correctly.
A practical example. A $2.1M GMV outdoor gear brand splits roughly 60/40 Amazon and Shopify. They assume Amazon's marketplace facilitator coverage handles "most" of their tax exposure. In reality:
- Their Amazon channel is clean — Amazon collects and remits in every state with a marketplace law.
- Their Shopify channel ($840K) has independently triggered economic nexus in 17 states by revenue and another 4 by transaction count.
- In 5 of those states, Amazon volume also counts toward the threshold calculation for the Shopify channel, accelerating when the registration obligation kicked in by 8–14 months in each case.
Net unregistered exposure on the Shopify side: approximately $19,000 in tax plus $6,000–$8,000 in interest and penalty at current state rates.
If you sell on more than one channel, the marketplace shield is partial coverage, not full coverage. Map it explicitly.
The Real Cost Of Doing Nothing
This is the calculation the dashboard does not run. When you cross an economic nexus threshold and fail to register, three meters start running simultaneously:
1. Uncollected tax owed. You did not collect sales tax at checkout. The state still wants its money. The legal theory is that the seller is liable for the tax whether or not it was passed to the buyer. On $50,000 of unregistered sales into a state with a 6.5% combined rate, that is $3,250 — coming out of your margin, not the customer's wallet. You cannot retroactively bill customers from 14 months ago.
2. Penalty. Most states impose a failure-to-file penalty (often 5–10% per month, capped at 25–50%) and a failure-to-pay penalty (separate, often 0.5–1% per month). On the same $3,250 of tax, a fully accrued penalty stack can add $800–$1,600.
3. Interest. Statutory interest, set annually, typically runs 6–12% per year and is not waivable under most Voluntary Disclosure Agreements (more on those shortly). Interest compounds from the date the tax was originally due.
For a $1M GMV brand with nexus triggered in roughly 20 states, accrued over 18–24 months of unregistered selling, total exposure typically lands in the $15,000 to $45,000 range. For a $3M GMV brand with broader state spread, $40,000 to $80,000 is normal. For brands with heavy Northeast and Midwest direct sales (high tax rates, more 200-transaction states), the upper end gets higher.
This is the cost the brand never books. It does not appear in COGS. It does not appear in your contribution margin worksheet. It sits as a contingent liability until a state DOR notice arrives — at which point it becomes a cash outflow you weren't budgeting for, often at the worst possible moment for working capital.
It also follows you out the door. If you ever sell the business, the buyer's due diligence team will quantify this in week one of QofE. Unregistered sales tax exposure is one of the most reliable purchase-price chips at exit — usually a dollar-for-dollar escrow against estimated liability, sometimes an outright deduction. The exit math operators run rarely accounts for it. The buyer's lawyers always do.
The Voluntary Disclosure Agreement (VDA) Playbook
Every state with a sales tax has some version of a Voluntary Disclosure Agreement program. The deal is straightforward: you come forward before they find you, and in exchange the state caps your historical exposure and waives most or all of the penalty.
What a VDA typically delivers:
- Look-back period capped at 3 or 4 years (some states 3, some 4, occasionally longer if you collected tax but failed to remit). Without a VDA, the state can theoretically go back to the date nexus was established — which in practice often means 7 years.
- Penalty waived in full (commonly 100% of the failure-to-file and failure-to-pay penalties — often 25%–50% of the total tax bill).
- Interest typically not waived. Statutory interest still accrues. This is not negotiable in most states.
- Anonymity during negotiation. Most VDA programs allow your tax counsel to negotiate the terms before disclosing your business name. If terms are unacceptable, you can walk.
The economics are decisive. A $22,000 unregistered tax position with two years of accrued penalties and interest can total roughly $30,000 if a state finds you first. The same position resolved through a VDA might land at $22,000 tax + $3,500 interest + zero penalty = $25,500 — and the look-back ceiling means you do not have to argue about exposure beyond the agreed window. For details on look-back structure, see the Sales Tax Institute Wayfair FAQ.
When VDAs are NOT available: if the state has already sent you a nexus questionnaire, an audit notice, or a tax assessment, the VDA door has closed in most jurisdictions. You are in the audit track. This is why operators who get the letter in February cannot retroactively VDA in March. The disclosure has to be voluntary, and "voluntary" requires that the state didn't ask first.
The order of operations
- Run the audit (next section). Quantify exposure per state.
- Triage: in states where exposure is small (<$2,000 total) and the tax was never collected, some operators register prospectively and accept the historical exposure as a risk allocation. Defensible if the dollar amount is genuinely small. Not defensible if it is just inconvenient.
- In states where exposure is meaningful (>$5,000), engage state tax counsel and pursue VDAs in parallel, typically negotiated under attorney NDA before disclosing the business identity.
- Once VDAs are settled, register prospectively in every state with active nexus. Activate collection in your tax automation tool. File going forward.
The whole process for a $1–3M GMV brand usually takes 90–150 days and costs $8,000–$25,000 in professional fees on top of the tax owed. That sounds expensive until you compare it to the worst-case alternative: a state-initiated audit with full penalty stack, 7-year look-back, and potential officer liability if the state argues the failure was willful.
Running The Nexus Audit Yourself (Or With Whom)
You can do the first pass yourself. The data you need is in your eCommerce platform, your marketplace seller central accounts, and your tax automation tool. The output you want is a single spreadsheet, one row per state, with these columns:
- Direct site revenue, trailing 12 months (shipped destination, exclude returns)
- Direct site transaction count, trailing 12 months
- Marketplace revenue by marketplace (Amazon, Walmart, etc.), trailing 12 months
- State's current economic nexus threshold (revenue and transaction count if applicable)
- Does this state count marketplace sales toward the direct-site threshold? (Yes/No — varies; verify per state)
- Status: registered / nexus crossed but not registered / approaching threshold / below threshold
- If crossed: estimated date threshold was crossed, estimated uncollected tax to date
For the threshold column, use Avalara's state-by-state guide or TaxJar's economic nexus map as your reference. Verify against the state DOR's current published guidance — some thresholds have been adjusted in the last 24 months, and the secondary sources occasionally lag.
For tax owed, multiply the post-threshold revenue by the state's combined rate (state + average local). This is an estimate, not the legal calculation — destination-based sourcing means the real number depends on ship-to ZIP, not state average. But for triage, the estimate gets you within 15% — close enough to decide which states warrant a VDA and which can be handled prospectively.
When to bring in a specialist. If the audit shows nexus crossed in more than 8 states, or exposure exceeds $20,000 total, the right move is to hire a sales tax attorney or a CPA firm with a dedicated SALT (state and local tax) practice for the VDA negotiation phase. Generalist accountants are not equipped for this — the negotiation is technical, the look-back math is jurisdiction-specific, and the cost of getting it wrong is the loss of penalty waiver. Expect $3,000–$8,000 per state for VDA handling depending on complexity. For a brand with 12 states to clean up, that is $40,000–$90,000 in fees on top of the tax — which is why catching this at year two of operation rather than year four is roughly a 3x cost difference.
This obligation is permanent. It compounds quietly. The audit you run this quarter is the cheapest version of this problem you will ever solve — and the difference between handling it as a calendar item and handling it as an emergency is, in most cases, the size of an entire year's marketing budget. The tool stack is not the answer. The discipline of looking at the map four times a year is. And the operators who treat it that way are the ones who never get the letter — or who, when they do, can answer it in a sentence: We voluntarily disclosed in Q3. Here is the agreement number. That is what registered looks like. Anything else is unregistered, and unregistered is a pricing margin problem you are not seeing because the cost is still buried in the contingent column.
