01

The Penalty Framework

E-invoicing penalties are applied under the VAT Law framework, with violation classifications and specific penalty amounts determined by ZATCA’s Board of Directors resolutions. The key principle: penalties accumulate across assessment periods. A business that fails to integrate with FATOORA is not facing a single fine — it faces potential exposure for each period of continued non-compliance.

Penalty Amounts — A Note on Sources

The penalty ranges below are drawn from ZATCA’s publicly communicated guidance and industry sources. Exact amounts for specific violation categories are set by ZATCA Board resolutions, which are periodically updated. Where ranges are given, they represent the published spectrum from minor to severe instances of each violation. Confirm current figures at zatca.gov.sa or with a qualified advisor.

02

Violations and Penalty Ranges

ViolationPenalty RangeNotes
Failure to issue invoices through a compliant EGSSAR 5,000 – SAR 50,000Per assessment period; escalates for repeat violations
Using an EGS with prohibited functionalities enabledSAR 5,000 – SAR 50,000All invoices produced by the solution are affected
Failure to integrate with FATOORA by wave deadlineSAR 5,000 – SAR 50,000Ongoing non-compliance compounds across periods
Sharing a Tax Invoice before clearanceSAR 1,000 – SAR 10,000Also creates input tax risk for the buyer
Failure to report Simplified Tax Invoices within 24 hoursSAR 1,000 – SAR 10,000Per period; systematic failure escalates
Failure to maintain e-invoice records as requiredSAR 10,000 – SAR 50,000Archive must be accessible to ZATCA at any time
03

How ZATCA Detects Non-Compliance

ZATCA processed over 8.2 billion e-invoices through FATOORA in 2025 — a 64% increase from 2024. Every cleared Tax Invoice and reported Simplified Tax Invoice flows through the platform. Detection mechanisms include: tracking clearance rates and rejection patterns by taxpayer; cross-referencing buyer VAT return input tax claims against FATOORA-cleared invoices; comparing taxpayer VAT return output tax figures with FATOORA-submitted invoice volumes; and identifying taxpayers above a revenue threshold with zero FATOORA activity.

The “We Haven’t Been Checked” Defence No Longer Exists

Pre-Fatoorah, a business might go years without a tax audit. FATOORA data means audit-style analysis of your compliance can happen at any time through automated data matching, without a field auditor visiting your premises. The question is not whether ZATCA can detect gaps — it is when the authority prioritises acting on what the data is already showing.

04

The 5 Violations Most Likely to Trigger a Penalty

  • Failure to complete FATOORA onboarding by the wave deadline. FATOORA data shows zero or partial activity for these taxpayers. This is the highest-exposure category and one of the most common — often caused by delayed IT projects or the assumption that a vendor notification would arrive before the deadline.
  • Sharing Tax Invoices before clearance confirmation. A workflow that dispatches invoices immediately on generation — before the clearance response is received — is issuing invalid documents on every B2B transaction. Often a system configuration error, but the legal consequence is identical to deliberate non-compliance.
  • Systematic 24-hour reporting failures for Simplified Tax Invoices. Businesses relying on manual batch reporting — or whose automated reporting has silent failure handling — accumulate violations across every transaction during periods when reporting fails. High-volume B2C businesses are particularly exposed.
  • Using a Phase 1-only solution after Phase 2 wave deadline. A system that generates correct Phase 1 invoices but lacks CSID capability, XML generation, or FATOORA API connectivity is non-compliant from the wave deadline forward. Every invoice it produces after that date is technically non-compliant.
  • Incomplete archive — inability to produce historical invoices on request. Businesses that have migrated ERP systems or purged old data cannot meet the record production obligation. This surfaces on audit, and its consequences can be substantial where ZATCA auditors need records to verify input tax claims or VAT return accuracy.
05

The Penalty Waiver Initiative — What It Covers and When It Ends

ZATCA’s “Initiative to Cancel Fines and Exempt Taxpayers from Penalties” has been extended to 30 June 2026. This initiative covers a range of tax compliance areas including e-invoicing violations. It provides a meaningful window for businesses with known historical non-compliance to regularise their position without incurring the full penalty exposure.

The waiver does not apply automatically. The business must take steps to correct the underlying non-compliance: completing FATOORA integration, correcting EGS configuration, addressing archive gaps, and ensuring current compliance. After 30 June 2026, the window closes and normal enforcement applies.

Use the Waiver Window Strategically

The waiver is a time-limited opportunity — not a signal that ZATCA is relaxed about enforcement. Businesses that use the window to identify gaps, implement corrections, and document the remediation are in a materially different position after June 2026 than those that do nothing. If you have known compliance gaps — Phase 1, Phase 2, archive, onboarding — now is the time for an honest internal assessment and a structured remediation plan.

06

Frequently Asked Questions

Failure to integrate with FATOORA by your wave deadline is treated as using a non-compliant invoicing solution, with penalties ranging from SAR 5,000 to SAR 50,000 per assessment period under the VAT Law framework. The exposure compounds across periods — a business 12 months overdue on integration is not facing a single fine but potentially multiple periods of non-compliance. The penalty waiver (open until 30 June 2026) offers a window to correct this without financial penalty.
Yes. ZATCA can examine records within the relevant VAT assessment periods — typically six years from the end of the tax period. Phase 1 invoices from 2022 remain within scope for audit today. Non-compliant Phase 1 invoices are invalid VAT documents, and the audit exposure from that period has not expired.
The legal compliance obligation rests with the taxpayer, not the vendor. If your EGS failed to meet ZATCA’s requirements because the vendor’s software was not Phase 2 compliant, the penalty exposure is yours. You may have a commercial claim against the vendor, but that does not reduce your liability to ZATCA. This is why verifying software compliance before go-live — rather than relying on vendor assurances — is so important.
ZATCA’s waiver covers a broad range of tax violations including e-invoicing failures. The specific application depends on the nature of the violation and the steps taken to correct it. Businesses with complex or large-scale non-compliance should seek professional advice on how to use the waiver window effectively and what documentation ZATCA expects in a remediation context.
ZATCA typically issues an information request or audit notification before formal penalty assessments. However, where non-compliance is identified through data matching and the evidence is clear, ZATCA may assess penalties directly. Treat any ZATCA communication about e-invoicing compliance as a priority and do not wait for a formal penalty notice to begin corrective action.
◆ Key Takeaways
  1. Penalties accumulate across assessment periods — a failure to integrate with FATOORA is not a one-time fine but compounding exposure for each period until compliance is achieved.
  2. ZATCA’s ability to detect non-compliance is now data-driven and near-real-time. FATOORA processes billions of invoices and automatically flags taxpayers with zero activity, high rejection rates, or discrepancies between VAT return claims and cleared invoice records.
  3. The five violations most commonly generating penalties are: failure to complete FATOORA onboarding, sharing Tax Invoices before clearance, systematic 24-hour reporting failures, using a Phase 1-only solution after the Phase 2 deadline, and inability to produce archived invoices on request.
  4. The penalty waiver initiative is open until 30 June 2026. It is a time-limited window to regularise historical non-compliance before enforcement action begins. Businesses with known gaps should use this window actively, not passively.
  5. The compliance obligation rests with the taxpayer. Software vendor failures and IT project delays do not reduce your legal liability to ZATCA. Verify compliance before each invoice is generated.

Penalty figures in this article are drawn from ZATCA’s publicly communicated guidance and industry sources. Exact amounts are set by ZATCA Board resolutions, which are updated periodically. Confirm current figures at zatca.gov.sa or with a qualified Saudi tax advisor. This article is for informational purposes only and does not constitute legal or tax advice. dariba.co is an independent platform.

Also worth reading

E-I Saudi E-Invoicing Phase 2: Integration Requirements and What to Expect E-I Tax Invoice vs. Simplified Tax Invoice in Saudi Arabia: What’s the Difference? E-I Saudi E-Invoicing (Fatoorah): The Complete Business Compliance Guide