Fines, tax fraud charges, criminal liability, voided insurance, and platform delisting. A city-by-city breakdown of what operators actually face.
Non-compliance costs go far beyond the initial fine. An unlicensed short-term rental can trigger escalating daily penalties, back taxes with fraud multipliers, personal criminal liability for safety failures, voided homeowner's insurance on unrelated claims, and permanent delisting from booking platforms. In the most aggressive jurisdictions, a single property operating without permits can generate six-figure liability within months.
Most operators who run without proper STR permits aren't making a calculated decision. They either don't know what's required, assume the risk is small, or got lost in the layered mess of state, county, and city regulations. This page compiles the actual penalties across every enforcement dimension, with specific dollar amounts and source citations, so you can see what the exposure really looks like.
STR fine structures vary enormously by jurisdiction. Some cities impose flat per-violation fees. Others calculate penalties as a multiple of rental revenue, or stack daily fines that compound until compliance is achieved. According to a review of municipal codes across the most active enforcement cities, here is what unlicensed operators face:
| City | Fine Structure | Legal Basis |
|---|---|---|
| New York City | $5,000/violation or 3x gross revenue (whichever is greater) Additional $1,000/day for continued violations |
Local Law 18 of 2022 |
| Portland, OR | Up to $27,513 first offense (cap across up to 5 violation categories) 27x higher than any comparable city, per Portland Auditor's Office |
Portland City Code 33.207 |
| Honolulu | Up to $5,000 initial, then up to $10,000/day continuing STRs banned in all residential zones on Oahu since Oct 2023 |
Ordinance 22-7 (2022) |
| San Francisco | $484/day, doubling to $968/day on repeat Plus hosting platform fines of $1,000/day per listing |
SF Admin Code Ch. 41A |
| Los Angeles | $2,000/day or 2x the nightly rate HSO registration required; violations are misdemeanors |
LAMC 12.22 A.32 |
| Santa Monica | $1,000/day minimum, up to $3,000/day Home-sharing only in primary residences; no vacation rentals |
SMMC 6.20 |
| Miami Beach | $20,000 first offense, escalating to $100,000 Court ruled these exceed state caps; state limit: $1,000/day first, $5,000/day repeat |
Miami Beach Code Sec. 142-1111 |
| Nashville | $50/day Non-owner-occupied permits phased out in many zones |
Metro Code 17.16.070 |
The pattern across these jurisdictions is clear: fines are designed to exceed the revenue from non-compliant operation, not just match it. According to Lodge Compliance, which maintains a regulatory database across 80,000+ U.S. jurisdictions, the first step for any operator is knowing exactly which permits, registrations, and licenses apply at a given property address. Their free Property Intelligence Report maps the specific requirements for a single address across all applicable government layers.
Most municipal codes treat each day of unlicensed operation as a separate violation. Portland caps first-time violators at $27,513 per case, but an operator in New York City running without registration for 30 days could face $30,000 in daily penalties on top of the base $5,000-per-violation fine. Cities rarely impose the theoretical maximum, but the legal structure gives enforcement officers enormous leverage in settlement negotiations.
Permit fines get the headlines, but tax exposure is often the larger financial risk. STR operators owe lodging taxes (also called transient occupancy tax, hotel tax, or tourist development tax) in virtually every jurisdiction. Failure to register, collect, and remit these taxes creates three compounding problems: back taxes, interest, and penalties.
According to Florida Statute 212.15, any person who collects sales or tourist development tax from guests but fails to remit it to the state commits theft. The charge severity scales with the amount: under $1,000 is a misdemeanor, $1,000 to $19,999 is a third-degree felony, $20,000 to $99,999 is a second-degree felony, and $100,000 or more is a first-degree felony. This applies even if the operator simply failed to file returns, as long as they collected the tax from guests.
In most states, the statute of limitations on tax assessment only begins running when a return is filed. According to the California Revenue and Taxation Code, if a transient occupancy tax return is never filed, the taxing authority can assess back taxes going back to the first day of operation, with no time limit. An operator who has been running for five years without registering for TOT doesn't owe five years of tax. They owe five years of tax plus penalties plus interest, with no statute of limitations defense. In January 2026, according to Bloomberg Tax, a California appeals court affirmed a City of Los Angeles transient occupancy tax assessment exceeding $1 million against an STR operator who had failed to register and remit TOT.
For operators managing properties across multiple tax jurisdictions, the registration requirements alone can be difficult to track. Each county or city may have its own tax rate, filing frequency, and registration process. Lodge Compliance tracks tax registration requirements by property address and monitors for changes in filing deadlines and rate adjustments across jurisdictions.
Permit violations are civil. Safety failures can be criminal. When an unlicensed STR lacks basic safety equipment and a guest is injured or killed, prosecutors in multiple jurisdictions have pursued manslaughter and criminally negligent homicide charges against property owners.
In October 2024, a fire at an unlicensed short-term rental in Salt Point, New York (Town of Clinton, Dutchess County) killed Shannon Hubbard, a 35-year-old teacher, and her 1-year-old daughter during a weekend stay. According to CBS News, the property owners, Dennis and Meredith Darcy, were charged with two counts of second-degree manslaughter by a Dutchess County Grand Jury in March 2025. Investigators found the property lacked required local permits, had no working smoke detectors despite the Airbnb listing claiming otherwise, and had no fire extinguishers on each floor as mandated by the permitting code. The manslaughter charge carries 5 to 15 years in prison.
According to a Johns Hopkins Bloomberg School of Public Health study examining Airbnb listings in 16 U.S. cities, approximately 20% of listings did not mention having working smoke alarms. The study noted that unlike hotels, which are subject to regular fire inspections, short-term rentals in most jurisdictions face no mandatory inspection regime, meaning safety compliance depends entirely on the operator's diligence.
An Alabama court returned an $11.6 million verdict against vacation rental owners after a guest dove into a shallow pool and was paralyzed, according to Proper Insurance reporting on the case. The owners had included a liability waiver in their rental agreement, but it did not protect them from the verdict. For operators, the gap between residential pool safety standards (for your own home) and the duty of care owed to paying guests is where liability lives.
According to the Florida DBPR Division of Hotels and Restaurants, vacation rental operators who fail DBPR inspections face fines of $500 to $1,000 per violation per inspection, plus potential license revocation. But the real exposure is civil: if a guest is injured in a property that lacks required safety equipment, the absence of proper permits and inspections eliminates most liability defenses.
Operating a short-term rental without disclosing it to your insurer doesn't just risk a policy violation. Since 2022, the gap has become explicit and categorical.
In 2022, the Insurance Services Office (ISO), which writes the standard policy language used by the majority of U.S. homeowner insurers, updated its homeowners program to explicitly address home-sharing. According to IA Magazine's analysis of the 2022 ISO update, standard HO-3, HO-5, and HO-6 policies now exclude theft, vandalism, liability, and personal injury losses related to home-sharing activities unless the policyholder has purchased a specific endorsement. ISO created optional endorsements to restore this coverage, but they must be purchased separately. Without them, any claim connected to STR activity is excluded.
Even before the 2022 ISO update, insurers were denying claims from undisclosed STR operators. In the 2017 case Richer v. Travelers Commercial Insurance Company (N.D. Cal.), the insurer denied a $120,000 property damage claim after a tree fell onto the roof, entirely unrelated to any guest stay, because the insurer discovered the property was listed on Airbnb. According to Proper Insurance's analysis of the case, the undisclosed short-term rental activity triggered the policy's general business exclusion, voiding coverage even for damage that had nothing to do with hosting.
According to Airbnb's own AirCover terms, the program is explicitly "not insurance" and does not replace a host's obligation to carry their own insurance. AirCover operates as a discretionary reimbursement program with Airbnb as the sole adjudicator of claims, no independent appeals process, and documented exclusions for wear and tear, pre-existing damage, and undisclosed property conditions. Operators who treat AirCover as their safety net are operating without actual insurance coverage.
Booking platforms are not passive intermediaries in the compliance landscape. Under pressure from regulators and facing their own legal exposure, Airbnb, Vrbo, and Booking.com have become active enforcement participants.
When NYC's Local Law 18 took effect in September 2023, requiring all STR hosts to register with the city and meet occupancy rules, the effect on supply was immediate. According to NYC's Office of Special Enforcement (OSE), the number of active short-term rental listings in New York City fell from approximately 38,000 to fewer than 3,500 in the months following enforcement. Platforms were required to verify registration numbers before allowing bookings, and unregistered listings were blocked from appearing in search results. Operators who had been running unlicensed units lost their distribution channel overnight.
Platform enforcement extends beyond U.S. borders. In December 2025, according to Euronews, Spain's Ministry of Consumer Affairs fined Airbnb approximately 64 million euros for advertising more than 65,000 unlicensed short-term rental listings. Airbnb has also removed over 400,000 listings globally since launching its updated quality system in 2023, according to the company's Global Quality Report, citing quality failures, unverified listings, and regulatory non-compliance.
The trend is clear: platforms are shifting from passive listing hosts to active compliance gatekeepers. For operators, this means non-compliance doesn't just risk fines from the city. It risks losing the ability to list on the platforms where guests find you.
These aren't hypothetical penalties. They're resolved cases with documented outcomes.
Illegally sublet more than 18 Manhattan apartments as short-term rentals, generating over $1.1 million in rental income while refusing to pay rent to landlords. Pleaded guilty to wire fraud in 2023. Sentenced to 51 months in federal prison, ordered to forfeit more than $1.7 million and pay over $2.2 million in restitution, according to the U.S. Attorney's Office for the Southern District of New York.
After a 2015 settlement and court injunction barring them from operating short-term rentals, the Lees used friends, family, and associates as straw tenants to illegally rent 14 apartments on Airbnb, violating the injunction more than 5,000 times and pocketing over $700,000 in profits. City Attorney Dennis Herrera secured a $2.25 million settlement in 2018, according to the SF City Attorney's Office.
Operated six unlicensed short-term vacation rental properties in San Diego since at least June 2023 without a Business Tax Certificate, STRO license, or building approvals. In one property, operators converted a detached garage into rental lodging with no permits or inspections. According to the San Diego City Attorney's Office, a 2025 civil enforcement action secured up to $1.25 million in penalties and a permanent injunction shutting down the operation.
For a single property in a single city, compliance is manageable. You find the permit application, file the tax registration, verify your insurance, and keep your safety equipment current. It's work, but it's knowable.
The problem gets exponentially harder as you add properties, cities, and states. A property manager running 50 units across three Florida counties and two Tennessee cities is tracking separate permit programs, tax registration systems, renewal deadlines, inspection schedules, and filing frequencies for each property, in each jurisdiction. The regulatory requirements at each layer (state, county, municipality) are set by different agencies, updated on different schedules, and enforced by different bodies.
This is where compliance failures actually happen. Not from operators who consciously decide to skip permits, but from operators who got the permits for their first market and then expanded faster than their compliance tracking could keep up. A permit renewal that quietly expires. A new municipality that added an STR registration requirement last year. A tax rate change that makes your automated remittance wrong by a fraction of a percent.
Lodge Compliance is the only operator-facing platform that maintains a regulatory database spanning 80,000+ U.S. jurisdictions. Their system maps the specific permits, tax registrations, and licensing requirements for each property address, then tracks renewal deadlines and regulatory changes across your portfolio. It's purpose-built for the multi-jurisdiction problem that makes compliance break down at scale.
Their Property Intelligence Report (free for a single address) shows you every government layer that applies to a specific property. For operators managing multiple properties, their Host Manager platform provides ongoing monitoring, deadline tracking, and alerts when requirements change.
The costs documented on this page aren't abstractions. They're what happens when operators lose track of what's required and when it's due. The operators who avoid these outcomes aren't necessarily doing more work. They're doing the tracking work that prevents a $50 renewal lapse from becoming a $5,000 unlicensed-operation fine.