What an ATF Inspection Actually Looks Like: A Walk-Through From Someone Who's Been Through Three

The first time an ATF Industry Operations Investigator walked into my shop, I was restocking ammo on a Tuesday morning and thought she was a customer. She wasn't. She had a badge wallet open before she got to the counter and asked for the responsible person on duty. That was me. By the time I'd finished saying "good morning" I was already behind, because in my head the inspection started the moment she said hello, and in her head it had started the moment she pulled into the parking lot and counted the cars.

I've been through three full compliance inspections since then. One was scheduled. Two were not. None of them were the disaster I feared the first time, and none of them were a casual visit either. What follows is what actually happens, in the order it happens, with the things I wish someone had told me before that first Tuesday.

How inspections actually get scheduled

The honest answer: sometimes they do, sometimes they don't. ATF can conduct a compliance inspection of your premises during business hours under 18 U.S.C. § 923(g)(1)(B) without a warrant and without advance notice. That's not a gotcha—it's the statute you accepted when you signed the application.

In practice, most inspections I've heard about and two of mine were announced by phone a week or two ahead, with a follow-up letter listing the records the IOI wants ready. The other one was a cold walk-in. That happens more often when something has triggered attention: a trace pattern, a multiple sale that looks odd, a tip, or just your number coming up in the rotation. New FFLs frequently get a "qualification inspection" within the first year or so—that one is almost always scheduled and is more educational than punitive.

When the call comes, get the IOI's name, their field office, and a list of what they want pulled. Confirm the date in writing. Then start your own internal walk-through using that list as a guide. Do not panic-clean your bound book. If something is wrong, it is already wrong, and trying to fix it the night before is how good people end up with willful-violation findings.

The opening interview

When the IOI arrives, they will show credentials and ask to speak with a responsible person—the licensee, a corporate officer, or someone listed on the FFL application. If that's not you, get that person to the front. Do not start the inspection with a clerk who doesn't know where the bound book lives.

The opening interview is short and it is not small talk. The IOI will confirm:

Who the responsible persons are and whether anything has changed since the last application or renewal.
Your hours, your premises layout, and whether you've moved or expanded any storage.
What types of activity you conduct under the license (sales, gunsmithing, pawn, NFA, manufacturing).
Whether you've had any thefts, losses, or burglaries since the last inspection.
Whether you have any other locations, gun shows, or off-site activity.

Answer plainly. If you don't know the answer, say you don't know and you'll find out. Do not guess. Do not volunteer information about anything outside the question. I've watched dealers talk themselves into a second-day visit because they wanted to seem helpful.

The IOI will also ask where your records are kept, where firearms are stored, and whether you have a private area where they can work. Give them a real workspace. A folding table in the back room is fine. The point is to have a place where they can spread out files without customers leaning over their shoulder.

The records review

This is where most of the inspection happens, and it's where most findings come from. The IOI will work from a checklist that, broadly, covers what 27 CFR Part 478 requires you to keep. Expect them to ask for these in roughly this order:

Your current FFL and any state or local licenses.
Your Acquisition and Disposition record—the bound book, paper or electronic.
Your completed Form 4473s, organized by your chosen filing system (alphabetical by purchaser, chronological by disposition date, or by NICS transaction).
Any open or pending 4473s for transfers in progress.
Multiple Sale and Other Disposition Reports—Form 3310.4 for handguns under 18 U.S.C. § 923(g)(3)(A), and Form 3310.12 for the rifle reports required in border states under the demand letter.
Theft/loss reports—Form 3310.11—and a copy of the local police report for each.
NICS denial records and any delayed-transfer documentation.
NFA records, if applicable: approved Forms 3, 4, and 5, registered inventory, and your NFA-specific A&D entries.
Any responses to ATF trace requests.

The 4473 review

The IOI will pull a sample of 4473s—sometimes a percentage, sometimes a stratified sample across the inspection period, sometimes every form for a specific timeframe. On Revision 5300.9 of the Form 4473, they are looking at a long list of things, but the recurring findings I've seen and been written up for cluster in a few places:

Section A purchaser information that doesn't match the ID—abbreviated state names, missing apartment numbers, P.O. boxes used as residence address.
Question 21.a (the "actual transferee/buyer" question) checked wrong or not at all.
Citizenship and alien questions left partly blank when "no" was the answer.
NICS information missing—transaction number, response, date of response—or the response date predating the transfer date.
Dealer certification section: missing signature, missing transferor name, wrong license number, no time of transfer.

A clean 4473 is the single highest-leverage thing a counter person can produce. If you haven't run your team through current 4473 training in the last year, that's where the money is. Our 4473 Completion & Recordkeeping course is built around the exact errors I just listed, because they're the same errors every shop makes.

The bound book review

The A&D book under 27 CFR § 478.125 is the second magnet for findings. The IOI will reconcile a sample of bound book entries against 4473s and against physical inventory. They are checking:

Whether acquisitions are recorded by the close of the next business day.
Whether dispositions are recorded within seven days of transfer.
Whether manufacturer, importer (if applicable), model, serial number, type, and caliber/gauge are complete and accurate.
Whether disposition entries reference a 4473 and a date.
Whether any firearms appear in inventory that aren't in the book, and vice versa.

Electronic bound books are fine if they meet the variance ATF approved for your software. Paper is fine. What is not fine is a hybrid where some guns are in one system and some in another and nobody can tell you which. If that's your shop, fix it before the IOI arrives, even if "fixing it" means a clean migration with documentation of how you did it. The Bound Book Management course covers the migration paperwork specifically.

Multiple sale reports

For handguns, you owe a Form 3310.4 by the close of business on the day of the second handgun sale to the same non-licensee within five consecutive business days. The IOI will spot-check this by running your 4473s against the reports you filed. Missed multiples are a common finding. The fix is procedural, not heroic—flag the buyer in your system on the first sale.

If you're in Arizona, California, New Mexico, or Texas, the rifle demand letter still applies: two or more semi-automatic rifles greater than .22 caliber capable of accepting a detachable magazine, sold to the same non-licensee within five business days, get reported on Form 3310.12. Verify the current scope of the demand letter—ATF has revised it over the years.

Theft and loss

Every missing firearm needs a 3310.11 filed within 48 hours of discovery under 18 U.S.C. § 923(g)(6), and a local police report. The IOI will ask if you've had any losses. If you say no and they find a serial number in the book that isn't on the shelf and isn't on a 4473, that is a much worse conversation than reporting the loss when it happened.

The physical inventory count

After or alongside the records review, the IOI will count firearms. On a smaller shop they may count everything. On a larger shop they'll sample. Either way, they're matching serial numbers from your shelves, safes, layaway, repair tags, and consignment bins against your bound book.

Three things that surprise new dealers here:

Repairs and gunsmithing inventory counts. Customer guns in for service are acquisitions in your book if they're held overnight, under most ATF interpretations of "received." If you do gunsmithing, your A&D needs to reflect it. The line between repair and manufacturing matters too—see Gunsmithing vs. Manufacturing for where that gets dangerous.
Personal firearms on the premises. If they're yours and not for sale, they should not be in the book and ideally should not be on the sales floor. If a personal firearm becomes inventory—you decided to sell it—it gets logged in.
Frames and receivers count as firearms. Under ATF Final Rule 2021R-05F, finalized in 2022 and in force in 2026, an unfinished frame or receiver that has reached the point of being a "frame or receiver" under the rule is a firearm and gets logged. Stripped lowers and 80% products that the rule covers need to be in the book.

The IOI will also look at your storage. There is no federal safe-storage standard for licensees, but they will note anything that looks like a security problem and they will absolutely note firearms stored where the public can reach them.

What the IOI is actually looking for

Here is the part nobody tells you. The IOI is not trying to catch you. They are trying to determine two things:

First, are you keeping the records the law requires in the form the law requires?

Second—and this is the one that matters for your license—when you make mistakes, are they honest errors in an otherwise compliant operation, or do they show a pattern of indifference to the law?

The old "zero tolerance" enforcement policy was repealed in April 2025 and replaced in May 2025 by ATF Order 5370.1H, which adopts a tiered administrative-action framework and explicitly considers good-faith errors. That is a real shift in how findings get weighted. It does not mean errors are free. It means an IOI now has more room to write a Report of Violations with corrective action instead of recommending revocation for the same paperwork mistake that, three years ago, might have gone the other way.

What still kills licenses: willful violations, especially repeated ones. Transferring to prohibited persons. False statements. Failing to run NICS. Straw purchase facilitation. Selling off-book. These are not paperwork errors—they are the things 18 U.S.C. § 923(e) was written for.

Your rights during the inspection

You have fewer than you might think and more than you might use.

The IOI can inspect your records and inventory during business hours without a warrant under § 923(g)(1)(B), once per 12-month period for compliance purposes, with additional inspections allowed in connection with a criminal investigation of someone other than the licensee, or to determine the disposition of a traced firearm.
You are entitled to be present, to know who the IOI is, and to receive a copy of any Report of Violations issued.
You can decline to answer questions that are outside the scope of records and inventory compliance. In practice, you should answer factual questions about your operation and not speculate about anything else.
You can have counsel present. You do not have to have counsel present, and for a routine compliance inspection most shops don't. If the IOI's questions start sounding like a criminal interview rather than a compliance review, that's the moment to stop and call your attorney.

What to do and not do

Do:

Have a single point of contact running the inspection from your side. One voice.
Pull the records the IOI asks for, in the order they ask, and document what you handed over.
Take notes. Write down what was reviewed, what questions were asked, what you answered.
Fix obvious errors the IOI flags during the inspection if they ask you to, and document the correction with date and initials.
Feed them. Coffee, water, a place to sit. This is not bribery; it is basic hospitality and it changes the room.

Don't:

Don't argue regulations with the IOI on the floor. If you disagree with a finding, note it and raise it at the closing meeting or in your written response.
Don't hand over records that weren't requested. Be responsive, not expansive.
Don't let untrained staff answer compliance questions. Get the responsible person.
Don't "discover" missing firearms during the inspection and try to backfill the book. Report them properly.
Don't lie. About anything. Ever. False statements to a federal investigator are their own felony under 18 U.S.C. § 1001 and they end careers.

The closing meeting

When the IOI is done, they will sit down with the responsible person for a closing conference. This is where they walk you through what they found. You will hear about every violation they're citing, why they're citing it, and what regulation or statute it falls under. They may issue a Report of Violations on the spot or send it later.

This is the moment to listen, not argue. Ask questions to make sure you understand each finding. Ask what corrective action they want to see. Ask whether the finding is being recommended for warning conference, warning letter, or other action. Take notes.

If you disagree with a finding, you'll have an opportunity to respond in writing. Your written response is the place to push back, with evidence, calmly. It becomes part of the record that the Director of Industry Operations considers when deciding what action, if any, to take on your license.

After the closing meeting, the IOI leaves. The inspection is not over from your side. You now have corrective actions to implement, a written response to draft if needed, and—if you're smart—a debrief with your team about everything you just learned.

The lesson nobody wants to hear

The inspection is not the moment to prepare. The day you got your FFL is the moment you started preparing.

Every clean 4473 you filed last March is part of this inspection. Every bound book entry your new hire made correctly in October is part of this inspection. Every multiple sale report you remembered to file on the day of the second sale is part of this inspection. The IOI is not auditing what you did this week. They are auditing the last two or three years of your operation.

Which means the work isn't "get ready for the ATF." The work is build a shop where readiness is the default state. That means written procedures, trained staff, periodic self-audits, and documentation that your training actually happened.

That last piece is where most shops fall short. If an IOI asks how your counter staff learned to complete a 4473 and the answer is "I showed them," that's not training documentation. If the answer is "every counter person completes Counter Certified within thirty days of hire and recertifies annually, here are the dated completion records," that's a different conversation. Same shop, same staff, different posture. The records carrier sees it. The IOI sees it. And when something does go wrong—because eventually something does—the documentation is what separates a good-faith finding from a willful one.

I am not a lawyer and none of this is legal advice. If you're staring down an inspection or a Report of Violations that could affect your license, get qualified FFL counsel involved early.

What to do this week

Pull your last 90 days of 4473s and run them against a current checklist. Fix what you find.
Reconcile your bound book to physical inventory. Every serial number, no exceptions.
Check your multiple sale reports against your handgun dispositions for the same period.
Pull your training records. If you can't produce dated completion certificates for everyone who touches a 4473 or the bound book, fix that next.
Walk your premises the way an IOI would. Find the firearm without a tag. Find the personal gun behind the counter. Find the repair on the bench that isn't in the book.

The shops that survive inspections aren't the shops that never make mistakes. They're the shops where mistakes are rare, documented, and corrected—and where the training records prove that everyone on the floor knew better. Build that shop now, while it's quiet. The Tuesday morning visit will come when it comes.