The headlines stopped at “ship it to your door.” The rule keeps going.
The ATF has proposed letting you buy a gun without setting foot in a shop. A dealer in your state verifies your identity online, runs your background check, and ships the firearm to your house. It’s the Non-Over-the-Counter rule — “NOTC,” RIN 1140-AB05 — and it’s still a proposal; comments are open through August 6, 2026.
For some people it’s a real win. If you’re disabled, out in the country, or an hour from the nearest dealer who stocks what you want, it takes a genuine errand off your plate. And the ATF’s own argument is that the law allowed this all along — the agency was just being stricter than it had to be. Fair enough.
So here’s the rest of it. The part that doesn’t fit in a headline.
A copy of your purchase goes to your sheriff
Remote sales run on a 1968 statute, 18 U.S.C. 922(c). It requires the dealer to send a copy of your Form 4473 to your local police chief or sheriff before the gun can ship — and a 4473 lists the gun’s make, model, caliber, and serial number right next to your name, address, and date of birth. So your sheriff doesn’t just find out that you bought a gun. He gets a copy of which gun, by serial number. (That’s the rule on its face — 27 CFR 478.96 and 478.124.)
Buy the same gun at the counter and none of that happens. Which is the genuinely strange part: the convenient way is the one that files paperwork with the police.
Same gun, two ways to buy it
| Buy it remotely (NOTC) | Buy it at the counter | |
|---|---|---|
| Your sheriff gets notified | Yes — with the serial number | No |
| Your ID + face stored by a company | Yes | No — clerk hands your license back |
| Waiting period | 7 days, by law | None (in most states) |
| Must be home to sign for it | Yes — adult signature required | No |
| Hold it before you buy | No | Yes |
Federal basis: 18 U.S.C. § 922(c). Same-state sales only — this rule doesn’t touch interstate buys.
The part nobody’s even looking at: your face
To prove who you are without showing up, the rule sends you through a third-party identity company — the “upload your license and take a selfie” kind, same as the IRS uses. The federal standard it runs on (NIST 800-63A) requires that company to grab an image of your ID and a live scan of your face, and to keep a facial biometric on file for — their words — “non-repudiation.” Which is a fancy way of saying kept, specifically so they can prove later it was you. The opposite of deleted.
Can you get it erased? Sometimes. The standard says the company has to publish a retention period and should honor deletion requests — but if it would rather not, it just has to post a reason. So how long your face lives on a private server is the company’s call, not your right. And companies tend to keep whatever covers them.
Add up one remote purchase: your ID image and a face scan sitting with a verification vendor, possibly a recording of the video call on the dealer’s end (nothing stops a shop from keeping one — there’s your voice, too), the digital 4473, and that 4473 copy in the sheriff’s inbox. At the counter, a clerk glances at your license and hands it back. Same gun. One path makes copies of you; the other doesn’t.
Why the cost is invisible today
Here’s what makes all of this easy to wave off: nothing bad happens when you do it. You verify, the sheriff gets his email, the gun shows up, everybody’s happy. The catch with a permanent record is that the bill doesn’t come due up front — it comes due later, under conditions you can’t see from where you’re standing.
A paper form in a back room and a searchable digital file are not the same animal, even with the same words on them. One takes somebody physically going to fetch it, store by store. The other takes one search box. And whoever controls that data in fifteen years isn’t whoever built it. You don’t have to distrust the cop at your counter to notice that you’re not really consenting to him — you’re consenting to whoever inherits the system, under rules nobody’s written yet.
One more thing, from the same stack of paper
That 34-rule package this came in? It removes the police-notification requirement for NFA items — suppressors, short-barreled rifles. So in one stroke the agency decided the sheriff’s notice was a needless burden worth deleting… for those… while this rule keeps it, and digitizes it, for ordinary guns bought from your couch. I’ll let you sit with that one.
You decide
None of this makes the rule good or bad. For plenty of folks the convenience will be worth a note to the sheriff and a couple copies of their face on a server somewhere. For others it won’t. The only real problem is being handed the “ship it to your door” pitch without the rest of the receipt.
It’s still just a proposal. If you’ve got an opinion either direction, the comment window is open through August 6, 2026 at regulations.gov — search 1140-AB05.
The whole process, in six steps:
