Import Compliance: What CBP Expects from Mid-Size Importers

CBP completed 348 customs audits in the first 9 months of FY2025 and identified over $310M in unpaid duties in March alone (Holland & Knight, 2025). The agency issued 1,400 trade enforcement penalties in the first half of 2025, on pace to exceed each of the last 5 fiscal years (Holland & Knight, 2025). If your company runs 90–250 shipments monthly and still treats import compliance as a broker's problem, those numbers should make you uncomfortable. CBP has shifted its Focused Assessment program beyond the top 1,000 importers and started working down the list toward mid-size companies. The question for any COO or compliance executive at a 30–500 person operation: do your internal controls survive a Pre-Assessment Survey?

Key Takeaways:

• CBP identified $310M in lapsed duties from a single month of audits in March 2025, with $49M collected from prior fiscal years (Holland & Knight, 2025)
• Penalty structure under 19 U.S.C. §1592 reaches 4x lost revenue for gross negligence and up to 40% of dutiable value for non-revenue violations
• The DOJ designated customs fraud as a "high-impact" enforcement priority in February 2025, creating a new unit specifically for tariff evasion cases (Holland &. Knight, 2025)
• CBP's Focused Assessment program now extends well beyond the top 5,000 U.S. importers, with Informed Compliance Letters targeting mid-size companies based on risk factors (C.H. Robinson, 2025)
• Prior disclosure before a formal investigation caps penalties at interest on unpaid duties for negligence, compared to 2x lost revenue without disclosure (19 U.S.C. §1592(c)(4)

The reasonable care standard and why CBP holds you, not your broker, responsible

Under 19 U.S.C. §1484, every importer of record carries a legal obligation to exercise "reasonable care" when filing entry documentation. CBP does not accept "my broker handles it" as a defense. The obligation sits with your company no matter who physically files the entry. For companies importing from china, the duty stack has shifted significantly in 2026 — see our China tariffs 2026 guide for current rates and compliance actions.

Here's where mid-size importers get tripped up: CBP generally treats mistakes that should have been caught during a post-entry review as gross negligence rather than simple negligence. That distinction matters. Simple negligence caps penalties at 2x the lost revenue or 20% of dutiable value. Gross negligence pushes the ceiling to 4x lost revenue or 40% of dutiable value (19 U.S.C. §1592). For a company importing $5M in goods annually with a 10% duty rate, a gross negligence finding on misclassified entries over 3 years could produce penalty exposure north of $2M before mitigation.

Reasonable care means your company has documented procedures for classification, valuation, origin determination, recordkeeping. Not a binder collecting dust on someone's shelf. Somebody inside your organization actually reviews entries rather than rubber-stamping whatever the broker submits. A 2025 enforcement case saw CBP collect $575,000 from Pure Circle U.S.A. after stevia imports linked to forced labor compliance failures (Food Dive, 2020). That wasn't a Fortune 500 company. Import management at the mid-market level requires the same rigor CBP expects from major importers.

What triggers a CBP focused assessment at your revenue level

CBP's Focused Assessment program used to concentrate almost exclusively on the top 1,000 U.S. importers by volume. The Automated Commercial Environment (ACE) changed the math. ACE gives the agency far better visibility into import patterns, and the scope has widened considerably. CBP now issues Informed Compliance Letters to companies well outside the top 5,000, targeting specific risk factors flagged automatically (C.H. Robinson).

The common triggers look predictable on paper but catch companies off guard in practice. Frequent changes in HTS classification for the same product. Declared values sitting consistently below market benchmarks. Heavy use of Free Trade Agreement exemptions without supporting documentation on file. Sudden spikes in import volume from countries subject to Section 301 or antidumping duties.

One pattern our team sees repeatedly: a mid-size electronics distributor starts sourcing from a new supplier in Vietnam, and the entry values drop 30% compared to the previous Chinese supplier. ACE flags that kind of shift before the third shipment clears. CBP doesn't need a whistleblower or a tip. The data does the work.

The Focused Assessment itself runs in phases. First comes the Pre-Assessment Survey, an auditor reviews your internal controls, interviews staff, walks through selected entries. If concerns surface, Assessment Compliance Testing follows. Auditors pull specific transactions, test your HTS classification accuracy, check valuation against source documents, verify origin determinations. Revenue loss calculations happen during this phase. A Follow-Up Audit may come 12–18 months later to verify corrective actions.

Recordkeeping failures that create audit exposure

CBP requires importers to maintain records related to import activities for 5 years. For goods subject to antidumping or countervailing duties, retention stretches longer because AD/CVD cases often take years to resolve through the Commerce Department.

The $10,000 per entry penalty for recordkeeping infractions under 19 U.S.C. §1509 gets overlooked until an auditor asks for the purchase order, the commercial invoice, customs entry documents, FTA certificates. Then the assist documentation. Then payment records for a shipment filed three years back. Most mid-size importers can produce the customs entry and maybe the commercial invoice. The purchase order showing actual transaction value? Documentation proving the value of tooling assists? Those tend to live in someone's email or a shared drive folder reorganized twice since then.

Digital records bring their own headaches. import filing systems need audit trails showing who changed what and when. A broker correction reclassifying goods from one HTS Code to another without a documented reason becomes evidence of a control failure during an FA. For more context, see our guide on UFLPA Documentation: What CBP Checks at Entry for Importers. Your customs compliance program needs to specify how corrections flow, who approves them, where the approval lives. No software replaces this internal discipline. the tool only works if the process behind it holds up.

We've seen companies pull 3 people off daily operations for 2 weeks straight to locate and organize documents for a single audit request covering 18 months of entries. Peak season makes it worse. That's not a compliance cost anyone budgets for.

Classification and valuation: Where most penalty exposure sits

Misclassification and valuation errors account for the bulk of CBP penalty actions against mid-size importers. Structural problems, not carelessness.

HTS classification requires matching your product's physical characteristics against 99 chapters and over 17,000 individual tariff lines. Material composition matters. Intended use matters. When your product falls between two headings (and plenty of industrial components or multi-material assemblies do), the correct classification requires a binding ruling request or at minimum a documented analysis applying the General Rules of Interpretation. Most mid-size importers rely on their broker's classification without a second opinion or internal verification.

Valuation trips up companies in subtler ways. The transaction value method under 19 U.S.C. §1401a requires including assists, royalties, packing costs, certain commissions in the declared value A company paying its Chinese supplier $50 per unit but also providing $200,000 in tooling molds has an assist requiring apportionment across the imported units. Skip that step and you've understated the dutiable value on every entry using those molds.

The current tariff environment makes these errors far more expensive than before the Section 301 escalations. Tariff rates on certain Chinese goods now run from 7.5% to 100%. A misclassification moving product from a 2.5% column 1 rate to an HTS heading carrying an additional 25% Section 301 duty creates massive retroactive exposure across 5 years of entries.

Building an import controls program that survives scrutiny

A written import compliance manual isn't optional at the mid-market level anymore. CBP auditors look for documented procedures covering classification decisions, valuation methodology, origin determinations, FTA qualification processes, recordkeeping standards, and UFLPA documentation for forced labor compliance They want to see evidence somebody follows those procedures, not just a manual on a shelf.

Self-auditing import entries quarterly catches problems before CBP does. Pull a sample of 20–30 entries per quarter. Verify the HTS classification against the actual product specs. Confirm the declared value includes all required elements. Check FTA claims for supporting certificates on file. When you find errors (and you will), file prior disclosures under 19 U.S.C. §1592(c)(4). A valid prior disclosure before CBP starts a formal investigation limits your penalty to interest on the unpaid duties for negligence cases. Without prior disclosure, the same violation costs 2x the lost revenue. For the parallel concept in export controls, see prior disclosure and penalty mitigation.

The DOJ's February 2025 announcement about "aggressively" enforcing the False Claims Act against customs fraud adds another dimension. Under Island Industries v. Sigma Corp. (9th Circuit, 2025), competitors can now sue importers under the FCA for tariff evasion. Your classification and valuation practices face scrutiny not just from CBP but potentially from competitors who suspect you're underpaying duties to gain a price advantage. Import export compliance has become a competitive issue, not just a regulatory one.

Import compliance automation and import compliance software have gotten significantly more accessible for mid-market companies. Six-figure SAP GTS implementations used to be the only option. Not anymore. Platforms like Lenzo consolidate sanctions screening alongside product classification and import documentation requirements into a single view, running at price points built for companies doing 100–250 entries monthly rather than 10,000.

Our clients who run quarterly self-audits consistently catch classification drift before it compounds. Fixing 15 misclassified entries in Q1 costs a fraction of what CBP collects when those same errors stack up across 5 years. Automated classification cross-checks flag HTS discrepancies against product specs at the point of entry, but even a manual quarterly review beats doing nothing until an auditor shows up.

FAQ

How long does a CBP focused assessment typically take?

The Pre-Assessment Survey phase usually runs 2–4 weeks of active auditor engagement, though the entire process from initial questionnaire to final determination can stretch 6–12 months. Assessment Compliance Testing, if triggered, adds another 3–6 months. Companies producing organized records with documented procedures tend to move through faster.

Can CBP audit entries that have already been liquidated?

Yes. Under 19 U.S.C. §1592, CBP can pursue penalties on entries going back 5 years regardless of liquidation status. Liquidation closes the duty assessment on a specific entry but does not shield the importer from penalty actions for material misstatements or omissions discovered later.

What qualifies as a valid prior disclosure to CBP?

A prior disclosure must identify the specific entries involved, describe the violation, quantify the lost revenue, include tender of the unpaid duties. Filing must happen before you become aware of a formal CBP investigation. If you've already received a CF-28 Request for Information or a CF-29 Notice of Action on the same issue, CBP likely already started looking. Your disclosure may not qualify for mitigation at that point.

Does using a licensed customs broker satisfy the reasonable care standard?

No. CBP holds the importer of record responsible for entry accuracy whether or not a broker filed the documentation. Using a qualified broker demonstrates one element of reasonable care, but the importer must still provide accurate information to the broker, verify entries reflect actual transaction terms, maintain internal controls over the import process.

Are mid-size importers actually being targeted for focused assessments?

CBP has explicitly stated through its Informed Compliance Letters program: companies outside the top 5,000 importers face increased scrutiny based on risk factors. ACE gives CBP automated visibility into classification patterns, valuation anomalies, origin claims across all importers. A company doing $10M in annual imports with a problematic pattern shows up just as clearly as one doing $500M.

Enforcement data from the first half of 2025 tells the story clearly enough. 1,400 trade penalties issued, record-pace audit completions, a DOJ unit built specifically for customs fraud. The math on what a single gross negligence finding costs versus what an import compliance platform subscription runs annually makes the decision pretty clear for any CFO willing to look at it.