Electronic sales suppression and vape tills: the 25 August HMRC POS-tool factsheet retailers should file

HMRC's 25 August 2026 electronic sales suppression factsheet is not a vape-shop accusation. It is still worth filing in every legitimate adult-only vape retailer's compliance folder.

The practical takeaway is simple: know exactly what your till can do, who can change sales records, how audit logs are preserved, and how POS totals reconcile to VAT records, card settlements, cash-up sheets and vape stock movements. HMRC's new CC/FS68A factsheet focuses on possession of electronic sales suppression tools, including POS-related software, scripts, hardware and configurations HMRC, CC/FS68A publication. For vape retailers, the timely angle is records discipline before Vaping Products Duty adds more duty-stamp and stock-evidence files from 1 October 2026 HMRC, handling wholesale or retail vaping products.

If you run an EPOS system, a back-office module, online order feed, accounting integration or remote-support login, this is a good week to check the permissions and exports with your software provider, accountant or tax adviser.

HMRC describes electronic sales suppression, usually shortened to ESS, as activity that hides or reduces the value of individual transactions in electronic sales records at or after the point of sale, so the records appear correct and complete HMRC, CC/FS68A factsheet. In plain English, the concern is not an ordinary refund button or a legitimate void with a proper reason. The concern is a tool or configuration that can make real sales disappear, reduce them, or alter the record trail.

HMRC says an ESS tool can be software, a computer-code script or hardware. The factsheet also says using or configuring a till or POS system in a way that suppresses sales can fall within the concern HMRC, CC/FS68A factsheet.

The statutory definition is in Finance Act 2022 Schedule 14. Paragraph 1 defines an ESS tool by capability and main function: it must be capable of suppressing relevant electronic sales records, and it must be reasonable to assume that one of its main functions is suppression Finance Act 2022 Schedule 14 paragraph 1. The same paragraph defines an electronic point of sale system broadly as any tool or combination of tools used to record electronic transaction information about sales of goods or services Finance Act 2022 Schedule 14 paragraph 1.

That broad wording is why this matters to ordinary retail operations. A vape shop may have a counter till, stock-control system, website integration, accounting feed, card terminal reports and supplier import files. Most of that is routine retail infrastructure. The audit question is whether any part of the setup can delete, hide, re-sequence or understate individual sales without leaving a clear, legitimate correction trail.

The sharp point in CC/FS68A is possession. HMRC says a penalty may be charged for possession of an ESS tool even if it has not been used HMRC, CC/FS68A factsheet.

Schedule 14 paragraph 6 provides for a penalty where the statutory possession or access conditions are met. It also makes clear that possession can include remote access and does not require ownership Finance Act 2022 Schedule 14 paragraph 6. That matters in a modern shop where a software supplier, installer, group administrator or external support account may have access to POS settings.

The initial fixed penalty under paragraph 6 can be up to £1,000 where the statutory conditions are met Finance Act 2022 Schedule 14 paragraph 6. Schedule 14 paragraph 7 also provides for daily default penalties of up to £75 per day where possession or access continues after assessment, with a total cap of £50,000 for those daily penalties Finance Act 2022 Schedule 14 paragraph 7.

HMRC also has information powers for relevant ESS purposes. Schedule 14 paragraph 17 applies information and inspection powers for purposes that include deciding liability, understanding how a suspected tool operates, and identifying others whose activity may create liability Finance Act 2022 Schedule 14 paragraph 17.

The practical conclusion is not panic. It is control. If a retailer cannot explain an EPOS add-on, cannot export an audit trail, or does not know which users can alter sales records, that uncertainty should be resolved before it becomes a tax-record problem.

The first audit is not about vape products. It is about the sales record itself. A compliant adult-only vape retailer should be able to map the path from a customer transaction to the till journal, Z report, VAT records, bank or card settlement and stock movement.

1. List every EPOS terminal, back-office login, website order feed, accounting integration, remote-support account and third-party module that can create or change sales records.
2. Review permissions for refunds, voids, no-sales, discounts, open-price items, cash corrections, training-mode transactions and end-of-day adjustments.
3. Confirm whether any function can delete, hide, re-sequence or understate individual vape sales after the transaction has happened.
4. Document legitimate correction reasons and keep manager approval trails for adjustments, especially repeated voids, refunds, cash differences and stock write-offs.
5. Ask the EPOS supplier, accountant or tax adviser to confirm how audit logs, journals, Z reports and exports are preserved and retrieved.

The highest-risk configuration is not usually the obvious refund button on the counter. It is the forgotten plugin, administrator-only report setting, remote-support account, legacy script, undocumented training mode or back-office adjustment function that no one has reviewed since installation.

Permissions should be role-based, narrow and reviewable. A cashier may need to process a return. A manager may need to approve a correction. Very few people should have the ability to alter sales records after close of business, and any such change should leave a timestamped reason and user trail.

ESS sits alongside the normal record-keeping duties a VAT-registered retailer already has. HMRC's VAT record-keeping notice says VAT records must be complete, up to date and sufficient to calculate VAT correctly; business records include daily takings such as till rolls HMRC VAT Notice 700/21. GOV.UK's VAT records page says businesses must keep records including sales, purchases, invoices and digital records, generally for at least six years GOV.UK, keeping VAT records.

HMRC's Compliance Handbook section on electronic cash registers and EPOS says audit and journal records show transactions and corrections, that full till rolls should be retained for six years unless a concession applies, and that Z reports should be consecutively numbered, dated and timed HMRC Compliance Handbook CH15600.

Making Tax Digital can add another layer where POS and accounting software exchange data. VAT Notice 700/22 sets out digital record and digital-link expectations for VAT HMRC VAT Notice 700/22. The retailer's evidence file should therefore show not only that the till recorded the sale, but also how that sale moved into the VAT return backing records.

This is where the adjacent HMRC context matters. The Vapour Hut has already covered HMRC's wider high-street fraud reporting and intervention messaging. The new point here is narrower: CC/FS68A gives retailers a fresh reason to check the POS records themselves, not just the broader compliance file.

Vaping Products Duty does not create new ESS rules by itself. The practical link is evidence. From 1 October 2026, HMRC's vape-specific duty regime adds another set of records that legitimate retailers will need to reconcile against sales and stock.

HMRC's retailer guidance says Vaping Products Duty is £2.20 per 10ml of vaping liquid, applies whether or not the liquid contains nicotine, and starts on 1 October 2026 for liable products released onto the UK market HMRC, handling wholesale or retail vaping products. HMRC also says retailers can sell qualifying unstamped stock acquired before 1 October 2026 until 31 March 2027 if they keep evidence, with restrictions on unstamped stock from 1 April 2027 HMRC, handling wholesale or retail vaping products.

That makes POS discipline more important. If the till says one thing, card settlements say another, and stock movement says something else, the retailer has a harder explanation job. The same is true if duty-stamp checks, supplier invoices and delivery notes are not linked clearly to the stock sold through the till.

For wider context, see our guide to Vaping Products Duty and duty stamps for UK vape retailers and our explainer on vape duty stamp activation data. Those articles cover the duty-stamp and product-data trail. This article is about the till and sales-record trail.

A useful compliance folder does not need to be theatrical. It needs to be complete, current and easy to retrieve. A retailer should be able to show how ordinary sales are recorded, how corrections are controlled, and how the resulting totals flow into tax and stock records.

A practical folder would include:

• An EPOS access map showing terminals, back-office users, online feeds, remote-support accounts and accounting integrations.
• A permissions matrix for refunds, voids, discounts, no-sales, open-price entries, cash corrections, training mode and end-of-day adjustments.
• Sample exports of audit logs, journals, Z reports and till rolls or equivalent electronic journals.
• VAT-return backing packs, including sales summaries, purchase records, invoices and digital-link notes where systems exchange VAT data.
• Card settlement reports, cash-up sheets and bank reconciliation notes.
• Supplier invoices, delivery notes, stock adjustments, duty-stamp checks and exception notes for vape products.
• Correspondence from the EPOS provider, accountant or tax adviser explaining how records are preserved and retrieved.

The test is simple: could someone who did not configure the till follow the trail from sale to tax record to stock movement? If the answer is no, the file probably needs work.

Retailers should escalate internally or to advisers when the system cannot answer basic questions. Examples include an EPOS add-on no one understands, an administrator account that can alter historical sales without a visible audit trail, unexplained gaps in journal exports, missing Z report sequences, repeated training-mode use, or stock movement that does not reconcile to sales.

The same applies where remote access is unclear. Schedule 14's possession and access wording can include remote access where the statutory conditions are met Finance Act 2022 Schedule 14 paragraph 6. A retailer should know who can access the POS environment, why they have that access, and what controls apply.

For business-specific questions, the right conversation is with the EPOS supplier, accountant or tax adviser. This article is a record-control prompt, not legal advice. The retailer's job is to ask clear questions, preserve records, restrict unnecessary access and document legitimate corrections before HMRC has to ask for the explanation.

For legitimate vape retailers, CC/FS68A is a prompt to tighten the evidence trail. Know what your till can do. Restrict adjustment rights. Preserve journals and Z reports. Reconcile sales to money received and stock movement. Keep VAT records and VPD evidence in a form that can be retrieved without drama.

The point is not to assume wrongdoing. It is to remove avoidable uncertainty from a tax-record area that is becoming more visible as Vaping Products Duty approaches. A clean POS file will not answer every compliance question, but it gives retailers a stronger place to start.

• HMRC: Compliance checks, Electronic sales suppression possession of tools, CC/FS68A
• HMRC: Electronic sales suppression, possession of tools, CC/FS68A
• Finance Act 2022 Schedule 14
• Finance Act 2022 Schedule 14 paragraph 1
• Finance Act 2022 Schedule 14 paragraph 6
• Finance Act 2022 Schedule 14 paragraph 7
• Finance Act 2022 Schedule 14 paragraph 17
• HMRC: Record keeping for VAT, Notice 700/21
• GOV.UK: Charge, reclaim and record VAT, keeping VAT records
• HMRC Compliance Handbook CH15600
• HMRC: VAT Notice 700/22, Making Tax Digital for VAT
• HMRC: Handling wholesale or retail vaping products in the UK