What Is the PACT Act? A Plain-English Compliance Guide for Online Sellers (2025)

The PACT Act in Plain English

The PACT Act — formally called the Prevent All Cigarette Trafficking Act — is a federal law that governs how cigarettes, smokeless tobacco, and electronic nicotine delivery products can be sold and shipped across the United States when the buyer and seller are not in the same physical location.

Congress first passed the law back in 2009, primarily targeting mail-order cigarette sales that were being used to dodge state tobacco taxes. At that point, vaping barely existed as an industry. Fast forward to late 2020, and Congress updated the law to pull all ENDS products — e-cigarettes, vape devices, pod systems, e-liquids, heated tobacco products — under the same framework. That update became enforceable starting in March 2021.

The practical effect is that any business selling these product categories online now has three distinct legal obligations running in parallel:

Age verification — buyers must be verified as adults before the sale goes through, and the carrier must get an adult signature on delivery.

Tax collection — the applicable state and local excise taxes must be collected from the buyer and paid over to each state's revenue authority.

Monthly sales reporting — a detailed transaction-by-transaction report must be submitted to both the federal ATF and each state's tax department every single month, covering every shipment sent into that jurisdiction during the prior month.

Getting any one of these three wrong — or ignoring them altogether — opens a business up to serious federal and state consequences.

Does the PACT Act Apply to Your Business?

The single most important factor is whether you are selling remotely. If a customer walks into your physical store, picks up a product, and pays at the counter — that transaction falls outside the PACT Act's scope. The moment that same product gets ordered through a website, over the phone, or by email and then shipped anywhere, PACT Act rules kick in.

A few things that often surprise sellers:

Your business address does not matter. A company based in Illinois shipping products to customers in Texas has compliance obligations in Texas, not just Illinois. The law follows the destination of the shipment, not the location of the business.

Business size is not a factor. There is no minimum revenue threshold, no "small seller" carve-out, no minimum number of transactions. A one-person operation selling a handful of vape products per month through a website carries the same legal obligations as a large national distributor.

Selling to other businesses does not exempt you. Whether your customers are end consumers, retailers, or distributors, the reporting requirement applies to the shipments you make.

Products covered by the law include cigarettes of all kinds, smokeless tobacco products (loose tobacco, chewing tobacco, snuff, dip), roll-your-own tobacco, and the full range of ENDS products — disposable vapes, refillable devices, nicotine pod systems, bottled e-liquids, and similar items.

What Goes Into a PACT Act Monthly Report

Every monthly filing is essentially a line-by-line account of every shipment you made into that state during the month. The federal requirements and most state requirements converge on the same core set of data fields, though individual states sometimes add their own extras on top:

A few states layer additional requirements on top of this standard set. Ohio asks you to flag whether each product contains nicotine. Massachusetts wants the SKU for each item and specific shipper account details broken out separately. Indiana does not accept CSV submissions at all — it requires a properly formatted XML file matching the state's own schema definition.

How State Requirements Differ From Each Other

This is where PACT Act compliance gets genuinely complicated for multi-state sellers. The federal law sets the floor, but every state builds its own reporting structure on top of it. The result is that filing correctly in one state tells you almost nothing about what another state wants.

Format differences are the most immediate challenge. Most states accept CSV files, but each state defines its own column order and naming conventions — a CSV built for Minnesota will not pass validation in Connecticut. Alabama, Massachusetts, Michigan, and Ohio use their own proprietary PDF forms that must be filled in precisely according to each form's layout. Indiana mandates XML with a specific schema. Submitting the wrong format is treated the same as not filing at all.

Column structure differences mean that even among states that accept CSV, the fields they require are not identical. Virginia groups transactions by individual buyer and includes separate subtotal rows per buyer before the grand total. Washington requires a tax-paid indicator and an exemption reason code on every row. California requires a column showing whether the product contains nicotine. Building a single universal spreadsheet that satisfies all states simultaneously is essentially impossible.

Tax calculation differences affect how you fill in the price and quantity columns. States that use cost-price excise formulas need your wholesale cost. States that use retail-price formulas need your sale price. States using per-milliliter formulas need accurate volume data. Getting these columns wrong means your embedded tax figures will not match what the state's own system calculates — and that triggers scrutiny.

Distributor vs. retailer logic is handled differently too. Some states apply different tax rates or calculation methods depending on whether the buyer is a licensed distributor or a direct retailer. Other states apply the same calculation regardless of buyer type but still require the classification in the report. A handful of states exclude distributor sales from the PACT report entirely, since those distributors are expected to file their own reports downstream.

Filing Deadlines: What to Know

At the federal level, PACT Act reports to the ATF are generally due within the first ten days of the month following the reporting period — so January's shipments are typically reported by February 10th, February's by March 10th, and so on.

State deadlines follow a similar pattern but do not always land on the same day. Some states have slightly earlier deadlines, a handful have later ones, and certain states tie their PACT Act filing deadline to their broader excise tax payment calendar, which can move it around depending on the month or year.

Two things that catch sellers off guard:

Paying your taxes on time does not mean your filing is on time. Tax remittance and report submission are two separate acts. A state can penalize you for a late or missing report even when the correct tax amount has already been deposited into their account.

Zero-activity months still require a filing in many states. If you shipped products into a state every month for six months and then had a slow month with no sales there, you may still be required to submit a report showing zero transactions for that period. Each state sets its own rules on this — do not assume that no sales means no obligation to file.

What Penalties Actually Look Like

PACT Act penalties are structured to scale with the volume of violations, which means businesses that are significantly non-compliant can accumulate enormous liability very quickly.

On the federal side, each individual shipment that violates the PACT Act can be treated as a separate infraction. Civil penalties for a first-time violation can reach several thousand dollars per incident. Repeat violations carry higher per-incident penalties. A seller who ships several hundred packages per month without filing can find themselves facing a penalty calculation that runs into six figures before a single state penalty is even added.

Beyond monetary penalties, there is a carrier access problem. Federal law bars major shipping carriers from knowingly transporting cigarettes and certain other covered products that are being moved in violation of the PACT Act. Businesses flagged for non-compliance risk losing access to mainstream carrier networks — a consequence that can make the business operationally impossible to run regardless of what fines are assessed.

State-level consequences are entirely separate from federal ones. Each state where you failed to file can assess its own penalties, withhold licenses, or pursue its own enforcement action. These do not offset federal penalties — they add on top of them.

The 7 Mistakes That Get Sellers in Trouble

Mistake 1 — Assuming the law does not apply to small volumes. There is no de minimis threshold in the PACT Act. Shipping ten packages a month to customers in another state carries the same legal obligations as shipping ten thousand. Many first-time violations come from sellers who genuinely believed their volume was too small to matter.

Mistake 2 — Filing federally but not with individual states. Sending a report to the ATF satisfies the federal requirement. It does nothing for your obligations to California, Washington, Massachusetts, or any other state that has its own reporting requirement. These are parallel, independent obligations.

Mistake 3 — Using a generic CSV template across all states. Sending the same spreadsheet to every state will result in rejections from most of them. Each state's column structure, naming conventions, and required fields are specific to that state. A report that works perfectly for Maryland will almost certainly be rejected by Connecticut.

Mistake 4 — Reporting raw unit counts instead of LSU-adjusted quantities. The LSU factor is a standardized unit conversion that normalizes products of different sizes into a common measurement. States that require LSU-adjusted quantities will flag reports where the numbers do not reflect the conversion — and the error compounds across large shipments.

Mistake 5 — Leaving carrier details blank or incomplete. Shipping carrier name, address, and account number are required fields in several states. Filers often leave these columns empty or fill in only partial information. An incomplete report can be treated as a non-filing.

Mistake 6 — Misclassifying buyers as retailers when they are distributors. In states where buyer type affects tax calculation or report structure, getting this classification wrong corrupts the rest of the row's data. This is especially common for businesses that sell to both end consumers and wholesale buyers through the same order management system.

Mistake 7 — Not keeping records long enough. State audit windows for PACT Act compliance typically extend back several years. Sellers who discard transaction records after one or two years can find themselves unable to demonstrate compliance during an audit of a period they considered closed.

A Practical Compliance Checklist

If you are an online seller of covered products shipping into US states, this checklist covers the core requirements:

✅ Map every state you ship into and verify the specific PACT Act requirements for each one — format, deadline, required fields, and filing contact.

✅ Register with each state's revenue authority before your first shipment into that state, not after.

✅ Build age verification into your checkout process and confirm that your carrier agreements include adult signature on delivery.

✅ Capture all required data fields at the transaction level — buyer details, product classification, brand, LSU-adjusted quantity, volume or weight, both retail and wholesale prices, and full carrier information.

✅ Generate state-specific reports in the correct format for each jurisdiction — do not use a one-size-fits-all template.

✅ Submit both the federal ATF report and each state's report separately every month, on time.

✅ Remit all applicable excise taxes — this is a separate obligation from the report filing itself.

✅ Keep full transaction records for a minimum of four years to cover typical audit windows.

✅ Review state requirements at least once a year — state legislatures update PACT Act rules, form formats, and filing procedures regularly.

How PACT Act Reporting and Excise Tax Connect

Many sellers treat reporting and tax payment as a single obligation — submit the report, pay the tax, done. In reality these are two legally distinct requirements that happen to run on the same monthly cycle.

The PACT Act report tells the government what you sold and to whom. The excise tax payment is what you owe the state based on what you sold. Doing one correctly has no bearing on whether you have done the other correctly. A perfectly filed report submitted alongside an incorrect tax calculation still results in a tax deficiency. A correctly calculated and paid tax with a missing or late report still results in a filing violation.

This is why businesses with multi-state PACT Act obligations typically need two separate systems working together — a compliance reporting system that generates the right format for each state, and a tax calculation system that applies the right formula and rate for each product category in each state.

Our free US Business Tax Calculator handles the tax calculation side of this — with pre-loaded official excise rates for all 50 states, six formula types, and CSV export so you can document your calculations for accounting purposes.

Where to Get Authoritative PACT Act Information

For anything compliance-related, always verify against primary government sources rather than third-party summaries — including this one:

The ATF website (atf.gov) publishes the full text of the PACT Act along with official guidance documents and contact information for compliance questions.

Each state's Department of Revenue or Department of Taxation publishes its own PACT Act filing instructions, downloadable form templates, and current deadlines. Searching for the state name alongside "PACT Act tobacco reporting" or "ENDS excise tax filing" will usually surface the right page.

A tobacco compliance attorney is worth consulting if your business ships significant volume into multiple states. The per-violation penalty structure means that getting things wrong at scale is very expensive, and professional guidance upfront is almost always cheaper than fixing problems after the fact.