Cal. Rev. & Tax. Code § 32556

Any prosecution for violation of any of the penal provisions of this part shall be instituted within three years after the commission of the offense, or within two years after the violation is discovered, whichever is later.