FFL Command Center™ Built by Veterans, Built for Dealers
ATF Guide

What to Expect in an ATF Compliance Inspection

How often ATF can inspect, what an Industry Operations Investigator actually looks at, and the findings that show up over and over.

By Dana Fales, licensed FFL dealer and U.S. Army veteran  ·  Published  ·  Updated

Updated July 2026 · Written by an active FFL dealer

This is an educational guide, not legal advice. Inspection procedures and enforcement priorities change. Verify anything here against the current text of 27 CFR Part 478 on eCFR, and talk to your ATF Industry Operations office or a firearms attorney about your specific situation. The ATF does not endorse, certify, or approve any commercial software, and no software makes a dealer compliant on its own.
The short version

For the purpose of ensuring compliance, ATF may inspect a licensed dealer during business hours without a warrant no more than once in any 12-month period. Separate provisions cover criminal investigations of other people and firearm tracing, and those are not subject to the annual limit.

The inspection is overwhelmingly a records exercise. Nearly every common finding is a recordkeeping failure rather than anything to do with how you run the shop.

How often ATF can inspect

The authority sits in 27 CFR 478.23, which sets out several different doors and it is worth knowing which one you are dealing with.

Warrantless compliance inspection. Under 478.23(b), ATF officers may enter the premises of a licensed manufacturer, importer, or dealer during business hours without a warrant to inspect records and firearms inventory for the purpose of ensuring compliance, and that inspection may not happen more than once during any 12-month period. This is the routine inspection most dealers mean when they talk about "getting inspected."

Criminal investigation of someone else. The same paragraph permits entry, in the words of the regulation, "In the course of a reasonable inquiry during the course of a criminal investigation of a person or persons other than the licensee." Note the last five words. This provision is about someone else's case, and it does not count against the annual compliance limit.

Firearm tracing. Entry is also permitted in connection with firearms that have been traced in the course of a criminal investigation. In practice this is often a phone call or a records request rather than a full inspection.

With a warrant. Under 478.23(a), where there is reasonable cause to believe a violation has occurred, ATF may enter with a warrant to inspect records and inventory. This is a different posture from a routine compliance check.

Scope note

Licensed collectors are handled separately under 478.23(c), which includes an option to have an annual inspection conducted at the nearest ATF office rather than at the premises. This guide is written for licensed dealers, not collectors.

Do you get advance notice?

The regulation does not require it for a warrantless compliance inspection during business hours. Many dealers are contacted ahead of time to arrange a date, and that is common practice, but it is a courtesy of scheduling rather than an entitlement you should plan around.

The practical consequence is the whole point of this guide. If your records are only inspection-ready after a week of catching up, then they are not inspection-ready. The dealers who find inspections uneventful are the ones whose books were already current on an ordinary Tuesday.

What actually happens on the day

  • Opening conference. The Industry Operations Investigator introduces themselves, presents credentials, and explains the scope. This is where you find out whether this is a routine compliance inspection or something narrower.
  • Records review. The bulk of the time. The A&D bound book and the Forms 4473 get read, cross-referenced against each other, and checked for completeness and timeliness.
  • Inventory reconciliation. Physical firearms on the premises are matched against the bound book. This runs in both directions, which surprises people.
  • Closing conference. Findings are discussed with you. This is the point to ask questions and to understand exactly what is being cited and why, rather than working it out later from a letter.

The records they will ask for

RecordCitationWhat gets checked
A&D bound book478.125(e)Required fields present, entries made within the deadlines, no gaps
Forms 4473478.124Every field answered, signatures and dates present, transferor information complete
Retention of 4473s478.129(e)Forms retained as required, and producible
Multiple handgun sales478.126aATF Form 3310.4 filed where required
Theft or loss reports478.39aReported within 48 hours, and entered in the A&D record
Trace responses478.25aRequests answered within the required time

The inventory reconciliation, in both directions

Dealers usually anticipate one half of this: does every firearm in the bound book still on the books physically exist on the shelf? A gun in the book with no gun on the shelf and no disposition entry is a serious problem, because on paper a firearm has left the premises without a record of who received it.

The other direction catches more people. A firearm sitting on the shelf that does not appear anywhere in the bound book means an acquisition was never recorded. That is the same violation viewed from the other side, and it is easy to create by accident when a gun comes in on a busy Saturday and gets set down "to enter later."

This is also why consignment firearms, customer guns in for gunsmithing, and firearms sent out for coating need a clean paper trail. They are physically present or physically absent in ways that will not match a naive reading of the book unless the records reflect what actually happened. Our bound book requirements guide covers the required fields and the two recording deadlines in detail.

The findings that come up most

Late entries

27 CFR 478.125(e) sets two different deadlines and they are not the same length. An acquisition must be recorded, except as provided in paragraphs (g) and (i) of that section, not later than the close of the next business day following the purchase or acquisition. A disposition must be recorded not later than seven days following the transaction. Assuming both are seven days is a common and entirely avoidable error.

Incomplete Forms 4473

Blank fields, unanswered questions, missing dates, and missing transferor information are perennial findings. A 4473 is not complete because the transfer happened. It is complete when every field that applies has an answer.

Missing NICS documentation

Dispositions without a recorded NICS transaction number, or without documentation of a valid exception, are difficult to explain after the fact.

Unreported multiple handgun sales

Under 478.126a, selling or otherwise disposing of two or more pistols or revolvers, or any combination of them, to an unlicensed person at one time or during any five consecutive business days triggers a report on ATF Form 3310.4. The report must be forwarded not later than the close of business on the day the multiple sale or other disposition occurs, with copies going to ATF and to the appropriate state or local law enforcement, and one copy retained and attached to the Form 4473. The five-consecutive-business-days window is what catches dealers, because the second handgun may be sold on a different day than the first and the clock is easy to lose track of without a system watching it.

Theft or loss not reported in time

27 CFR 478.39a requires a licensee to report the theft or loss of a firearm to ATF within 48 hours after it is discovered, and also to the appropriate local authorities. The disposition must additionally be entered in the Record of Acquisition and Disposition within seven days of discovery. Forty-eight hours is a short window if a discrepancy is found late on a Friday.

What ATF may and may not do

The inspections and examinations provided by this section do not authorize an ATF officer to seize any records or documents other than those records or documents constituting material evidence of a violation of law.

27 CFR 478.23(d)

Worth reading once before you ever need it. It is a limit on what a routine inspection authorizes, not a general rule about every circumstance, and it is not a substitute for legal advice if a situation escalates.

If you keep electronic records

Electronic recordkeeping is permitted, but on conditions, and the conditions are where dealers get into trouble. ATF Ruling 2016-1 sets out a pathway for keeping the A&D record electronically, including requirements around accessibility and backup. ATF Ruling 2022-01 sets separate conditions for retaining Forms 4473 electronically, including advance written notice to your local ATF Industry Operations office before you begin.

None of that is automatic. Running a piece of software does not by itself satisfy a notice requirement that you personally have to send. Our plain-English summary of the key ATF rulings walks through what each one requires.

How to prepare

  • Reconcile the bound book against physical inventory in both directions, not just one.
  • Pull your Forms 4473 and look for blank or unanswered fields, missing signatures, and missing dates.
  • Confirm every disposition carries a NICS transaction number or documented exception.
  • Check whether any multiple handgun sale in the last several months should have generated a Form 3310.4 and did not.
  • Confirm any theft or loss was reported within 48 hours and entered in the A&D record.
  • Verify you can actually produce your records in the format your recordkeeping method requires, before someone asks you to.
  • Know where everything is. An inspection that stalls while you hunt for a binder is a longer inspection.

The honest version of this list is that it is not a pre-inspection checklist so much as a description of a shop whose records are current. Running it once a quarter is more useful than running it once when a letter arrives.

Common questions

How often can ATF inspect an FFL?
Under 27 CFR 478.23(b), a warrantless compliance inspection during business hours may occur no more than once in any 12-month period. Entry in the course of a criminal investigation of a person other than the licensee, and entry connected to firearm tracing, are separate provisions and are not subject to that annual limit.
Will I get advance notice?
Not necessarily. The regulation does not require advance notice for a warrantless compliance inspection during business hours. Scheduling contact is common in practice but should not be assumed.
Can ATF take my records?
27 CFR 478.23(d) states that the inspections and examinations provided by that section do not authorize an ATF officer to seize records or documents other than those constituting material evidence of a violation of law.
What is the single most common finding?
Recordkeeping, by a wide margin. Late or missing A&D entries and incomplete Forms 4473 account for a large share of what gets cited. Neither has anything to do with how well you run the retail side of the business.
Does using compliance software prevent violations?
No. Software can require fields before it accepts an entry, timestamp what was recorded and when, and make records producible on request, all of which reduce the chance of a deficient record. Compliance remains the licensee's responsibility, and the ATF does not endorse, certify, or approve any commercial software.

How FFL Command Center relates to this

Two things in the software exist specifically because of inspection day. The first is a single audit-readiness report that gathers the bound book, the repair record, 4473 activity, and open compliance flags into one place you can review or print before anyone arrives, instead of assembling it from four screens.

The second is a read-only login for the inspector. It can view records and change nothing, which removes the risk of an accidental edit during a review and removes the reason to stand over someone's shoulder while they work.

Neither of those makes anyone compliant. They make the underlying records easier to keep current and easier to hand over, which is a narrower and more honest claim. See the compliance overview for what the recordkeeping side actually does.

Dana Fales, founder of FFL Command Center
About the author

Dana Fales holds an active Federal Firearms License and operates Fales Guns, a licensed dealership in Coral Springs, Florida. A U.S. Army veteran who served as a Blackhawk crew chief, with more than 30 years of firearm ownership, Dana built FFL Command Center after keeping these records by hand, and tested it in an operating gun shop before selling it to anyone else. More about Dana.

Sources: 27 CFR 478.23, 478.39a, 478.125(e), 478.126a, and 478.129(e), consulted July 2026. Related reading: A&D bound book requirements  ·  How long must an FFL keep Form 4473s?  ·  Key ATF rulings explained  ·  Best FFL software in 2026

See What Inspection-Ready Looks Like

FFL Command Center was built in an operating gun shop by a dealer who keeps these same records. Ask for a walkthrough of the audit report and the inspector login.