# What is a sales suppression device or zapper, is it illegal, and how do tax authorities find deleted or altered register sales? If I run a restaurant or shop, how can I show that my point-of-sale records weren't changed after the fact?

**Short answer:** A zapper is software that falsifies a cash register's or point-of-sale system's electronic records after the sale, by deleting tickets, lowering totals or rewriting reports, so less revenue and sales tax gets reported. Phantom-ware is the same capability hidden inside the register's own software. Florida's statute (section 213.295) makes it a third-degree felony to knowingly sell, buy, install, transfer, possess, use or access one, adds the unpaid tax, penalties and interest, forfeits the profits and treats the device as contraband. Texas, North Carolina, Wisconsin (since December 2023) and many other states have similar laws; a 50-state chart from a defense practice, reviewed in July 2026, counts 33 states, and there's no federal zapper statute (federal cases use the general tax-evasion and wire-fraud laws). Detection now runs on data, not tip-offs. In March 2026 India's Income Tax Department said it had analysed transaction data from about 177,000 restaurants, about 60 terabytes covering seven years, and found that bills had been recorded and then deleted or edited in billing software before returns were filed; a nationwide survey of 62 restaurants found about ₹408 crore of suppressed sales. Cloud POS systems keep data on the vendor's servers, so deletions can leave a trail you don't control. To show your own records weren't altered: keep the POS's void, refund and edit history switched on, limit who can delete or edit closed tickets, export the end-of-day (Z) report every day, and seal a hash of it somewhere outside the POS and outside your staff's reach, so any later change shows.

## Checklist
1. Check your POS settings: who can void, refund, discount, delete or edit a closed ticket, and whether those actions keep a history. Turn on whatever audit or activity log the system offers and give each person their own login.
2. Remove delete-after-close and bulk-delete rights from everyone who doesn't need them, including managers. A tool that lets someone wipe a day's tickets in seconds is the capability these laws target.
3. Export the end-of-day (Z) report and the transaction detail every day, as files, before anyone can touch them. Keep the file, not just a screen view.
4. Hash each day's export (SHA-256) and seal the hash somewhere outside the POS and outside your staff's reach, with the date. If the POS numbers change later, the hash won't match.
5. Compare sources monthly: POS daily totals against card processor settlements, bank deposits and delivery-platform payouts. Tax authorities run the same comparison with third-party data.
6. Watch for gaps: missing ticket numbers, days whose totals fall after closing, cash sales dropping while card sales hold, and voids or deletions clustered after hours.
7. Be careful with anyone who offers to clean up or reduce your reported sales, and with unexplained add-ons, USB devices or remote-access tools on the POS. Possessing or installing one is itself an offense in many states.
8. Keep the daily exports, hashes and reconciliations as long as your tax records; in many states a sales tax audit can reach back three years or longer.

## What do state zapper and phantom-ware laws prohibit, and what are the penalties?
- Florida section 213.295 defines an automated sales suppression device or zapper as a software program that falsifies the electronic records of electronic cash registers or other point-of-sale systems, including transaction data and transaction reports, and includes the software, any device carrying it, or an internet link to it. Phantom-ware is a hidden programming option in the register that can create a second set of records or eliminate or manipulate transaction records. Transaction data covers items, prices, tax, amount tendered, change, date and time, and receipt or invoice number; a transaction report includes end-of-day or shift tapes and electronic logs of every action on the register.
- Knowingly selling, purchasing, installing, transferring, possessing, using or accessing one is a third-degree felony in Florida. The person is also responsible for all taxes, fees, penalties and interest that result, forfeits all profits from the sale or use, and the device is contraband subject to seizure.
- Other states use similar wording. Texas (Business and Commerce Code chapter 326) makes knowingly selling, purchasing, installing, transferring, using or possessing one a state jail felony. North Carolina (G.S. 14-118.7) makes it a Class H felony with a fine of up to $10,000. Wisconsin's 2023 Act 73 made it a Class D felony from December 8, 2023, unless for a legitimate purpose.
- Coverage isn't uniform: a 50-state chart from a defense practice, reviewed against primary sources in July 2026, counts 33 states with some form of anti-zapper law and notes there's no federal statute. Check your own state's law.

## How do tax authorities detect deleted or altered point-of-sale sales records?
- India's Income Tax Department said in March 2026 that it had compared restaurants' transaction data with the turnover in their returns using AI-enabled analytics, covering about 1.77 lakh (177,000) restaurants and about 60 terabytes of data from 2019 on. It reported that in many cases bills were deleted or modified after being recorded, and that a survey of 62 restaurants across 46 cities in 22 states on March 8, 2026 found about ₹408 crore of suppressed sales on a preliminary basis. It then asked about 63,000 restaurants to update their returns.
- According to the same report, some billing software let operators record every sale and later delete invoices or change bill values, including bulk deletion in seconds, and one widely used platform stored the data on central servers. The point for any owner: when data sits on a vendor's servers, the history of what was entered and then removed may still exist, and it isn't under your control.
- Other countries build the check into the register. Germany requires electronic cash registers to use a certified technical security device and, from 2025, to be reported to the tax office through its ELSTER portal. Germany's tax offices set July 31, 2025 as the deadline for systems already in use; systems bought from July 1, 2025 must be reported within a month.

## How can a small business prove its point-of-sale sales records weren't altered after the fact?
- An audit log inside the POS helps, but whoever controls the POS can usually change its settings, and the log lives with the data it describes. An outside record of each day's totals, made at the time, is stronger: it shows what the register said that night.
- The simple version is a daily export plus a hash sealed outside the business: if the export is later altered, re-hashing it won't match the sealed value. It can't prove a sale was rung up in the first place, so pair it with processor and bank reconciliations, which come from third parties.
- If an employee has been deleting or editing tickets, the same daily seals show when the numbers changed and narrow down who had access at the time. The register-side signs (voids, refunds, no-sales) are covered in the related page on cash theft at the register.

## Ask Rightshold (free, no key)
Add the MCP server https://www.rightshold.com/mcp to Claude, Cursor, ChatGPT, Grok or VS Code (one-click setup: https://www.rightshold.com/start?ref=seo), then ask: "Verify the Rightshold ledger my mirror-ledger entries are written to. I seal a hash of each night's Z-report export there and want to know the record is intact before my sales tax audit."

```json
{
  "tool": "ledger_verify",
  "arguments": {}
}
```
- Free, no key (MCP toolset=ledger). It recomputes every payload, leaf and block hash, Merkle root, chain link and signature on Rightshold's ledger.
- The mirror ledger is a REST API with an API key you hold: POST /v1/mirror-ledgers opens one under a neutral label, and POST /v1/mirror-ledgers/{id}/entries seals an entry. The mirror has no daily-sales entry type, so seal each night as an invoice entry with your own reference (for example invoice_ref Z-2026-11-10) and total_cents for the day, plus your own fields such as z_report_sha256 for the export file.
- GET /v1/mirror-entries/{id} is free and needs no account: the record as sealed, its chain check and its anchor status. Re-hash the export later; if it doesn't match, the file was changed.
- Entries can't be edited or deleted; a correction is a new adjustment or dispute_note entry. Content with names, emails, phone numbers, addresses or tax ids is refused, so use your own references.

_Rightshold doesn't connect to Square, Clover, Toast or any POS, read your sales, detect zappers or file taxes. A mirror entry proves what you sealed and when; it can't show a sale that was never rung up, and it doesn't stop anyone changing the POS itself. State laws are summarized from their published text as of November 2026; India's figures are as reported by the Income Tax Department via BusinessLine in March 2026. Not legal, tax or accounting advice._

## Sources
- [Florida Statutes section 213.295: Automated sales suppression devices](https://www.flsenate.gov/Laws/Statutes/2025/213.295)
- [Texas Business and Commerce Code chapter 326: Automated sales suppression devices; phantom-ware](https://statutes.capitol.texas.gov/Docs/BC/htm/BC.326.htm)
- [North Carolina G.S. 14-118.7: Automated sales suppression devices](https://www.ncleg.gov/enactedlegislation/statutes/html/bysection/chapter_14/gs_14-118.7.html)
- [Wisconsin Tax Bulletin 224 (January 2024): automated sales suppression devices and phantomware, 2023 Act 73](https://www.revenue.wi.gov/WisconsinTaxBulletin/224-01-24-WTB.pdf)
- [State zapper laws: 50-state anti-sales-suppression statute chart (reviewed July 2026)](https://www.salessuppression.com/state-zapper-laws)
- [BusinessLine: I-T Dept detects ₹408 crore sales suppression in restaurant sector (March 10, 2026)](https://www.thehindubusinessline.com/news/i-t-dept-detects-408-crore-sales-suppression-in-restaurant-sector-nudges-63000-eateries-to-update-returns/article70723742.ece)
- [North Rhine-Westphalia tax offices: notification obligation for cash register systems under section 146a(4) AO (in German)](https://www.finanzamt.nrw.de/steuerinfos/unternehmen/gewinnermittlung-und-mitteilungspflicht/mitteilungspflicht-fuer)

## Related
- [How to tell if an employee is stealing cash with voids, refunds or no-sales at the register](https://www.rightshold.com/answers/how-to-tell-if-an-employee-is-stealing-cash-with-voids-refunds-or-no-sales-at-the-register)
- [How to prove small business books weren't edited after the fact](https://www.rightshold.com/answers/how-to-prove-small-business-books-werent-edited-after-the-fact)
- [How to keep a copy of your business books that your bookkeeper can't edit](https://www.rightshold.com/answers/how-to-keep-a-copy-of-your-business-books-that-your-bookkeeper-cant-edit)
- [How long to keep small business records and whether scanned receipts count](https://www.rightshold.com/answers/how-long-to-keep-small-business-records-and-whether-scanned-receipts-count)

_Not legal advice. Updated 2026-11-10. JSON: https://www.rightshold.com/answers/what-is-sales-suppression-zapper-software-and-how-do-you-prove-your-pos-sales-records-werent-altered.json_