ATF Inspection: IOI Review, Records, and Revocation

An ATF FFL inspection is a compliance visit in which an Industry Operations Investigator comes to your licensed premises during business hours, reviews your Acquisition and Disposition record, samples your Forms 4473, and physically reconciles your inventory against your books. Federal law limits routine compliance inspections to once per 12-month period, and the outcome ranges from a clean report to a Notice of Revocation depending on what the IOI finds and whether the violations look willful.

How Often ATF Can Show Up

Under 18 U.S.C. § 923(g)(1)(B), ATF may inspect your inventory and records for routine compliance purposes no more than once in any 12-month period without a warrant or separate reasonable cause.¹ That cap has exceptions. ATF can inspect outside the 12-month window when the visit is part of a reasonable inquiry during a criminal investigation of someone other than you, when a firearm involved in a criminal investigation traces back to your business, or when ATF needs to determine the disposition of specific firearms during a bona fide criminal investigation.

Inspections happen during your business hours at your licensed premises. The IOI shows credentials, identifies themselves, and explains the purpose of the visit. No advance notice is required.² If the inspection is warrant-based on reasonable cause, ATF can examine any records you are required to keep and any firearms or ammunition stored at your premises.¹

What the IOI Reviews

The IOI opens with a conference that sets the scope: they tell you which records they need and outline what they will do.² From there the visit covers several areas, not always in the same order:

Business operations. The IOI verifies your ownership information, responsible persons, and that your license type matches your actual activities.
Internal controls and security. The IOI evaluates how you store firearms and what you have in place to prevent theft.
State and local law. The IOI checks that your operations conform to applicable state and local requirements, not just federal rules.
A&D record. The IOI examines the bound book for timely, accurate entries and confirms every required field is filled in for both acquisitions and dispositions.
Forms 4473. The IOI samples completed forms, checking buyer identification, complete answers, correct NICS transaction numbers, and matching signatures and dates.
Physical inventory. The IOI picks firearms from the A&D record to confirm they are on your shelves, then picks firearms from the shelves to verify their bound book entries.

At the closing conference, the IOI walks through any violations or discrepancies, documents your response and any corrective actions you have already taken, and gives you a signed copy of the report of violations. They also review the relevant regulations and take your questions.²

Reconcile Before They Arrive

The single most useful thing you can do to prepare is reconcile your physical inventory against your bound book. That means two passes. Pull firearms from your A&D record and confirm they are physically present (“book to gun”), then pull firearms off the shelf and trace them back to their acquisition entries (“gun to book”). Every serialized firearm on the premises should appear as an open entry with no matching disposition. Every disposed entry should correspond to a firearm no longer on the premises.

Discrepancies turn up more often than dealers expect. A firearm sold months ago without a timely disposition entry. A consignment item logged under the wrong serial number. A personal firearm mixed into inventory without an acquisition entry. Finding these yourself gives you time to correct the records, and if a firearm is genuinely unaccounted for, to file the required theft or loss report within 48 hours rather than have the IOI discover it.³

Organize your Forms 4473 so the IOI can pull specific forms quickly. Whether you file by date, transaction number, or alphabetically, the system needs to let someone unfamiliar with your shop locate a form on the first try. If you use an approved electronic A&D system, make sure it can produce a printout on demand, your daily backups are current, and you have not modified the system without ATF approval.⁴

Records That Must Be Ready

The Bound Book

Your Acquisition and Disposition record logs every firearm that enters and leaves inventory in chronological order. Each entry must include the manufacturer or importer, type, model, caliber or gauge, and serial number, along with the identity of the person or entity in the transaction.

Timing is what IOIs flag most. For dealers, an acquisition entry must be recorded by the close of the next business day after receiving the firearm, and a disposition entry must be recorded no later than seven days after the transfer.⁵ Importers get 15 days for acquisitions under 27 CFR § 478.122; dispositions still follow the seven-day rule.⁶ Building a daily habit of logging acquisitions is the simplest way to stay clean.

ATF Form 4473

Every transfer to a non-licensee requires a completed Form 4473. Before the transfer, you must verify the buyer’s identity by examining a valid photo ID and note the type of identification on the form.⁷ You must also contact NICS. NICS approves, denies, or delays. If NICS does not respond within three business days, federal law allows you to proceed, though the three-day count excludes the day the check was initiated, weekends, and state holidays. For buyers under 21, the Bipartisan Safer Communities Act extended the waiting period to 10 business days if NICS flags a potentially disqualifying juvenile record.⁸ Proceeding after a delay is legal but carries risk: if NICS later returns a denial, you may need to work with ATF to retrieve the firearm.

After the buyer’s section is complete and the check is resolved, you identify the firearm by manufacturer, importer (if any), type, model, caliber or gauge, and serial number, then sign and date the form.⁷ Missing signatures, unverified ID, and wrong dates are the most common Form 4473 findings. Review each form for completeness before it goes in the file.

Retention and Electronic Systems

Recordkeeping obligations do not expire. You must retain Forms 4473 and A&D records for as long as you remain in business. Paper Forms 4473 older than 20 years may be moved to a separate warehouse, which ATF treats as part of your business premises for inspection. All records must remain readily accessible for inspection at your licensed location.⁹

Using software instead of a paper bound book requires prior written approval from ATF. Submit a variance request to the Director of Industry Operations in your field division. The system must run daily backups, allow queries by serial number and acquisition date, and produce a complete printout on demand, at least semiannually, and when your license terminates. Any change to an approved system requires a new variance before implementation.⁴ ATF does not issue blanket approvals for commercial software, so don’t assume your vendor has handled the approval for you.

Reports the IOI Will Check

Theft or Loss

If any firearm is missing from inventory, you must report the theft or loss within 48 hours to ATF and to your local law enforcement agency. The report goes to ATF by phone at 1-888-930-9275 and in writing on ATF Form 3310.11. The 48-hour clock starts when you discover the discrepancy, not when the loss actually occurred. If a firearm goes missing during transit on a common carrier, the sender is responsible for the report.¹⁰ If a firearm is unaccounted for during an inventory count with no evidence of a crime, ATF guidance says to make that clear when reporting, since the discrepancy may be a recordkeeping error.³ Report within the window and sort out the cause afterward.

Multiple Sales

When you sell or transfer two or more handguns to the same unlicensed buyer at one time or within five consecutive business days, you must file ATF Form 3310.4 no later than close of business on the day the multiple sale occurs. One copy goes to the ATF National Tracing Center, one to your Chief Local Law Enforcement Official, and one stays with the corresponding Form 4473.¹¹ The rule covers pistols, revolvers, or any combination totaling two or more.¹² A separate reporting requirement on Form 3310.12 applies to certain semiautomatic rifle sales by Type 01, 02, 07, or 08 licensees in Arizona, California, New Mexico, and Texas.

After the Inspection

What happens next depends on what the IOI found and whether the violations look willful. ATF uses a graduated enforcement approach with several steps between a clean report and revocation.

Report of Violations. If the IOI identifies any violations, they are documented in a Report of Violations. This is the baseline outcome for a non-compliant inspection. The IOI reviews it with you at the closing conference and records your corrective actions.
Warning letter. For violations that do not warrant more serious action, ATF may send a formal warning letter directing you to correct the problems.
Warning conference. More serious or recurring violations can lead to a warning conference with ATF personnel, where the issues are discussed in detail and future compliance expectations are made explicit.

These intermediate steps exist to guide FFLs toward compliance without pulling the license.² Take the Report of Violations seriously, implement every corrective action immediately, and document what you changed. A second inspection that finds the same problems tells ATF you are not making a good-faith effort.

License Revocation

ATF pursues revocation for willful violations of the Gun Control Act or a pattern of serious non-compliance. “Willful” here means you knew about the legal requirement and disregarded it, or were indifferent to whether you were following the law.¹³

ATF first sends a Notice of Revocation on ATF Form 4500, listing every violation forming the basis of the action. You have 15 days from receiving that notice to request a hearing before the Director of Industry Operations in your ATF field division. That 15-day window is firm. At the hearing, you can present evidence and argue why your license should not be revoked. If the DIO upholds the revocation after the hearing, you have 60 days from receiving the final notice to file a petition for judicial review in the U.S. District Court for the district where you reside or have your principal place of business.¹⁴ Missing either deadline effectively ends your ability to challenge the revocation through that avenue.

1
Office of the Law Revision Counsel. 18 U.S. Code 923 – Licensing
2
Bureau of Alcohol, Tobacco, Firearms and Explosives. Firearms Compliance Inspections
3
Bureau of Alcohol, Tobacco, Firearms and Explosives. Report Firearms Theft or Loss
4
Bureau of Alcohol, Tobacco, Firearms and Explosives. Prescribed Requisites for Computerized A&D Software
5
Bureau of Alcohol, Tobacco, Firearms and Explosives. ATF Procedure 2017-1 – Recordkeeping and Background Check Procedure for Facilitation of Private Party Firearms Transfers
6
eCFR. 27 CFR 478.122 – Records Maintained by Importers
7
ATF eRegulations. 27 CFR 478.124 – Firearms Transaction Record
8
Office of the Law Revision Counsel. 18 U.S. Code 922 – Unlawful Acts
9
eCFR. 27 CFR 478.129 – Record Retention
10
eCFR. 27 CFR 478.39a – Reporting Theft or Loss of Firearms
11
Bureau of Alcohol, Tobacco, Firearms and Explosives. Reporting Multiple Firearms Sales or Other Dispositions
12
eCFR. 27 CFR 478.126a – Reporting Multiple Sales or Other Disposition of Pistols and Revolvers
13
Bureau of Alcohol, Tobacco, Firearms and Explosives. Federal Firearms Licensee Quick Reference and Best Practices Guide
14
Bureau of Alcohol, Tobacco, Firearms and Explosives. Revocation of Firearms Licenses