ZATCA VAT Penalties Saudi: Full 2026 Guide

By Cherie — Business Consultant, Noble Core · Updated June 2026

What ZATCA VAT penalties in Saudi Arabia actually are

Value Added Tax has applied in the Kingdom since 2018 and sits at a standard rate of 15%. The Zakat, Tax and Customs Authority (ZATCA) administers it, and the VAT Law and its Implementing Regulations attach a specific financial consequence to each type of non-compliance. The published schedule of fines lives on ZATCA’s own VAT penalties page, and that page — not a blog, not an accountant’s memory — is the reference point you should check before assuming any number.

The important thing to understand is that Saudi VAT penalties are categorical. They are not a single “fine for doing VAT wrong.” Each obligation — registering, filing, paying, invoicing, keeping records, allowing an inspection — carries its own separate consequence, and several can apply to the same business in the same period. A company that registered late, then filed late, then paid late, is exposed to three distinct amounts, not one.

The second thing to understand is that the two most expensive categories are behavioural, not clerical. Late payment compounds at 5% of the unpaid amount for each 30-day period the money remains outstanding, so a small liability left alone for a year becomes a large one. Tax evasion — deliberately understating output tax, overstating input tax, or issuing invoices for supplies that did not happen — carries a penalty of at least the tax due and up to three times the value of the goods or services involved. Those two categories are where most of the real financial damage sits.

Who needs to worry about VAT penalties in Saudi Arabia

Any person or entity making taxable supplies in the Kingdom above the registration threshold is inside the VAT system, and therefore inside the penalty framework. That includes far more businesses than owners typically expect.

• Mandatory registration: resident businesses with taxable supplies exceeding SAR 375,000 in the past twelve months, or expected to exceed it in the coming twelve months.
• Voluntary registration: available from SAR 187,500 of taxable supplies or expenses — useful for early-stage companies that want to recover input VAT on setup costs.
• Non-resident suppliers: a business with no fixed establishment in Saudi Arabia that makes taxable supplies here must register regardless of value, generally through a ZATCA-approved tax representative.
• Newly incorporated foreign-owned entities: a company formed under a MISA investment licence is treated like any other Saudi taxpayer once it starts trading. There is no grace period for being new.
• Branches and subsidiaries of groups: each registered entity files on its own TIN unless a formal VAT group has been approved.

Filing frequency depends on size. Businesses with annual taxable supplies above SAR 40 million file monthly; everyone else files quarterly. In both cases the return and the payment are due by the last day of the month following the end of the tax period. A quarter ending 31 March is due by 30 April. That single date drives most of the penalty exposure in the system.

The penalty schedule: what each breach costs

The table below summarises the main categories. Figures are drawn from ZATCA’s published schedule and are indicative — the Authority updates amounts, applies caps, and from time to time runs relief initiatives, so confirm current figures on the official portal before you rely on any number for a filing decision.

Breach	Penalty (indicative)	How it accrues
Failure to register for VAT on time	SAR 10,000	Fixed, one-off
Late filing of a VAT return	5%–25% of the tax that should have been declared, minimum SAR 1,000	Scales with length of delay
Late payment of VAT due	5% of the unpaid tax	For each 30 days the amount remains unpaid
Filing an incorrect return / amending after the deadline	50% of the difference between the tax declared and the tax due	On the understated amount
Failure to issue or keep a tax invoice	Up to SAR 50,000 per invoice	Per breach; discretion applied
Failure to keep books and records for the retention period	Up to SAR 50,000	Per breach
Obstructing a ZATCA officer or inspection	Up to SAR 50,000	Per incident
Charging VAT while not registered	Up to SAR 100,000	Per breach, referred under the Law
Tax evasion (deliberate)	Not less than the tax due, up to 3× the value of the goods or services	Determined by the Authority / courts
E-invoicing (Fatoora) non-compliance	Warning first, then escalating fines from SAR 1,000	Per violation, escalating on repetition

Note the pattern ZATCA applies to e-invoicing specifically: the Authority has generally used a graduated approach, issuing a notification or warning for a first violation and escalating only where the same breach repeats within twelve months. That is a meaningful difference from the fixed fines and it rewards businesses that fix problems quickly.

How to check your VAT status and any penalties on the ZATCA portal

Everything is visible in your own ZATCA account. You do not need to phone anyone to find out whether you owe money. Follow these steps.

1. Go to zatca.gov.sa and select Login at the top right, then choose the Taxpayers / e-services entry.
2. Sign in with your TIN (Tax Identification Number) or registered email and password. First-time users register using the entity’s Commercial Register number and the authorised person’s national ID or Iqama number; the one-time password is sent to the mobile number registered in Absher.
3. From the dashboard, open Indirect Tax – Value Added Tax. This shows your registration status, filing frequency and the next due date.
4. Select the Returns tab to see every period, its status (submitted, overdue, amended) and the declared amounts.
5. Select Invoices / Bills (sometimes shown as “Dues” or “Payments”) to see outstanding balances. Any penalty that has been raised appears here as a separate line item with its own SADAD bill number and a reason code.
6. Open the individual line item to view the penalty notice, which states the breach, the period, the calculation and the date from which it accrued. Download the PDF — you will need it if you object.
7. To pay, copy the SADAD bill number and settle it through your bank’s SADAD payment channel under the ZATCA biller code. Payment normally reflects in the portal within one business day.

If you cannot see a VAT tab at all, the entity is not registered for VAT — which, if you are already trading above the threshold, is itself the first thing to fix.

How to file a VAT return correctly, step by step

Most late-filing penalties come from process failures, not from a decision to ignore the deadline. A repeatable monthly routine removes them.

1. Close your books for the period and reconcile output VAT (sales) and input VAT (purchases) to your accounting system before you open the portal.
2. Log in to the ZATCA portal, go to Indirect Tax – VAT, then Returns, and select File Return against the open period.
3. Complete the standard-rated sales, zero-rated sales, exempt supplies, imports subject to reverse charge, and standard-rated purchase fields. The form calculates net VAT due automatically.
4. Review the auto-populated import figures. ZATCA pre-fills customs data for goods imports; if it disagrees with your records, resolve the difference before submitting rather than amending later.
5. Attach supporting schedules where the return prompts for them — typically for large adjustments or bad-debt relief claims.
6. Submit. The portal generates a SADAD bill immediately for any net VAT payable.
7. Pay the SADAD bill through your bank on or before the last day of the month following the period end. Filing without paying still triggers the late-payment penalty.
8. Save the submission acknowledgement and the payment confirmation into your records folder for that period.

One practical detail: a nil return is still a return. Businesses that traded nothing in a quarter regularly assume no filing is needed and collect the minimum SAR 1,000 penalty for a period in which they owed nothing at all.

Documents and IDs you need to stay compliant

Keep the following available to whoever handles your filings. Missing credentials on the deadline day are one of the most common reasons a return goes in late.

• Tax Identification Number (TIN) and ZATCA portal credentials for the entity.
• VAT registration certificate — downloadable from the portal, and required by many customers before they will pay an invoice with VAT on it.
• Unified Commercial Register details. Under the new Commercial Register Law effective 3 April 2026, the Ministry of Commerce issues a single unified national CR with an identifier beginning with “7” and no expiry date — replaced by an annual confirmation obligation, with a five-year grace period for existing registers and English trade names now permitted.
• MISA investment licence for foreign-owned entities, plus the authorised signatory’s Iqama or national ID.
• National Address registered through the Saudi Post / Balady ecosystem — ZATCA correspondence and inspections use it.
• Bank account details and SADAD access for the paying account.
• Compliant e-invoicing solution onboarded to Fatoora, with its cryptographic stamp identity in place.
• Six years of books and records — invoices, credit notes, customs declarations, contracts and ledgers — retained and retrievable.

ZATCA e-invoicing (Fatoora) and where penalties come from

E-invoicing is now the largest source of avoidable VAT trouble for mid-sized businesses in the Kingdom. Phase One (generation) has applied to all resident taxpayers since December 2021: invoices must be generated electronically in a structured format, with a QR code on simplified invoices. Phase Two (integration) is being rolled out in waves, with ZATCA notifying each group of taxpayers by turnover at least six months before its integration date.

What Phase Two actually requires

• Your invoicing solution must connect to ZATCA’s platform via API and be onboarded with a cryptographic stamp identity.
• Standard tax invoices (B2B and B2G) must be cleared by ZATCA in real time before you send them to the customer. An uncleared invoice is not a valid tax invoice.
• Simplified invoices (B2C) must be reported to ZATCA within 24 hours of issue.
• Invoices must carry the required fields — VAT number, QR code, UUID, hash and timestamp — in the mandated XML or PDF/A-3 format.
• Prohibited functions must be disabled in the solution: no editing of issued invoices, no counter tampering, no uncontrolled user access.

The penalties here are usually triggered by a solution that was configured once and never re-checked after a software update, or by a business that received its Wave notification and did not act. Check your wave date against ZATCA’s published notifications, not against what a vendor told you last year.

Objecting to a penalty and requesting relief

A penalty notice is not automatically final. Saudi law provides a structured route to challenge or reduce it, and businesses use it successfully every year.

1. Review the assessment. Open the notice in the portal and check the period, the tax base and the calculation against your own records. Errors in pre-populated import data are a common and winnable ground.
2. File an objection within 60 days of receiving the assessment, through the Objections and Appeals service in the ZATCA portal. Late objections are generally not accepted, so diarise the date the notice was issued.
3. Upload evidence — reconciliations, contracts, customs declarations, correspondence, bank statements. An objection without documents rarely succeeds.
4. Consider the internal settlement route. ZATCA operates a settlement committee mechanism that can resolve disputes without escalation, often faster than a formal appeal.
5. Escalate if needed to the General Secretariat of Tax Committees (GSTC), which handles first-instance and appellate tax disputes.
6. Apply for instalments. Where the liability is genuine but cash flow is the problem, the portal offers an instalment request. Approval requires a justification and, above certain thresholds, security. Approved instalments prevent the situation from worsening while you pay down the balance.

ZATCA has also periodically run fines cancellation and exemption initiatives, waiving late-registration, late-filing, late-payment, and certain e-invoicing and field-detection fines for taxpayers who register, file all outstanding returns, and pay the principal tax within the initiative window. These initiatives are announced with defined start and end dates on the ZATCA website. If one is open when you discover a problem, voluntary disclosure during that window is normally far cheaper than waiting to be found. Confirm the current status on the official portal.

Common mistakes to avoid

• Skipping a nil return. No trading activity does not mean no filing obligation — the minimum SAR 1,000 late-filing penalty still applies.
• Filing on time but paying late. These are two separate obligations with two separate penalties. The 5% per 30 days accrues on the payment, regardless of a clean filing record.
• Assuming the portal will chase you. Notices go to the registered email and mobile in the ZATCA profile. If the ex-employee who registered the account is gone, update the contact details today.
• Claiming input VAT without a compliant tax invoice. If the supplier’s invoice lacks a valid VAT number, QR code or the mandated fields, the deduction is at risk on audit.
• Recovering VAT on blocked items. Entertainment, most passenger vehicles and certain employee-related costs are not recoverable. This is a frequent audit adjustment.
• Ignoring the reverse charge on imported services. Software subscriptions, consultancy and marketing bought from abroad must be self-accounted in the return.
• Treating an export as zero-rated without proof. Zero-rating requires evidence of export — customs documentation and transport records. Without it, ZATCA reclassifies the supply at 15%.
• Missing the 60-day objection window. A defensible penalty becomes undefendable once the deadline passes.
• Letting e-invoicing drift after a system update. Re-test the ZATCA connection after every ERP or POS upgrade.
• Deregistering informally. Ceasing to trade does not end the obligation. You must apply to deregister; until ZATCA approves it, returns remain due.
• Keeping records for too short a period. The retention requirement runs to six years (longer for capital assets and real estate), and inspections can reach back.

Building compliance in from day one of your Saudi entity

The cheapest VAT penalty is the one that never arises, and that is largely decided at incorporation. When a foreign investor sets up in the Kingdom, the sequence runs through the Ministry of Investment (MISA) for the investment licence, the Ministry of Commerce and the Saudi Business Center for the Commercial Register and articles, then ZATCA for tax and VAT registration, then MHRSD and Qiwa for labour file and work permits, GOSI for social insurance registration, Muqeem for residency records, Absher for the authorised signatory’s identity services, Balady for municipal licensing, and Najiz for judicial and notarisation services. Monsha’at supports SMEs through the same journey.

Several 2026 anchors make this easier than it was. MISA licence issuance and renewal fees are suspended in 2026 (they were SAR 12,000 for issuance and SAR 62,000 for renewal), 100% foreign ownership is permitted in most activities, and MISA licensing typically completes in around three to ten business days. Commercial Register fees run roughly SAR 1,200–2,000, and Chamber of Commerce membership around SAR 2,000–3,000 per year. GOSI contributions for a Saudi employee total roughly 21.5% between employer and employee. Iqama issuance and renewal government fees sit at around SAR 650 per year plus applicable levies. All of these are indicative — confirm current figures on the official portal for each authority.

What matters for VAT is the ordering. Register with ZATCA as soon as you are required to, appoint a named person responsible for the filing calendar, and select an e-invoicing solution that is already ZATCA-compliant rather than one you will have to retrofit. Our guide to company formation in Saudi Arabia walks through the full incorporation sequence, and the MISA licence process is covered separately for foreign-owned structures.

How Noble Core helps you stay clear of ZATCA VAT penalties

Noble Core Ventures works with foreign investors and Saudi businesses across the full lifecycle — from the MISA licence and Commercial Register through to the monthly tax calendar that keeps the entity clean afterwards. On the VAT side specifically, our team handles registration and TIN issuance, sets the correct filing frequency, prepares and submits returns, reconciles pre-populated customs data before submission, and reviews e-invoicing setup against the current Fatoora requirements for your wave.

Where a penalty has already been raised, we review the assessment, assemble the supporting evidence, and file the objection inside the 60-day window — or arrange an instalment plan where the liability is correct but the timing is difficult. If a fines relief initiative is open, we assess whether voluntary disclosure during the window is the better commercial route.

Our end-to-end Saudi setup package starts from SAR 36,999 and includes the tax registrations that most new entrants overlook. If VAT compliance is your immediate concern rather than incorporation, Noble Core’s ZATCA VAT service covers registration, filing, e-invoicing readiness and penalty defence as a standalone engagement.

A final word on discipline. The businesses that never pay a VAT penalty in Saudi Arabia are rarely the ones with the biggest finance teams. They are the ones with a named owner for the deadline, a calendar reminder set ten days before month-end, a portal login that works, and a habit of checking the ZATCA dues screen once a month. That routine costs nothing and removes almost the entire penalty schedule from your risk register.

Frequently Asked Questions

What are the ZATCA VAT penalties in Saudi Arabia for filing late?

Late filing of a VAT return attracts a penalty of 5% to 25% of the tax that should have been declared, with a minimum of SAR 1,000 even where nothing was owed. The percentage scales with how long the return remains outstanding. Returns are due by the last day of the month following the tax period, so a quarter ending 31 March is due by 30 April.

How much is the penalty for late VAT payment in Saudi Arabia?

Late payment carries a penalty of 5% of the unpaid VAT for every 30 days the amount remains outstanding. It accrues separately from the late-filing fine, so a business that files on time but pays late is still penalised. Because it compounds monthly, a modest liability left unpaid for a year becomes substantially larger. Settle the SADAD bill on the filing deadline.

What happens if I do not register for VAT on time in Saudi Arabia?

Failure to register for VAT within the required period carries a fixed penalty of SAR 10,000. Registration is mandatory once taxable supplies exceed SAR 375,000 over twelve months, and non-resident suppliers must register regardless of value. Charging VAT while unregistered is treated separately and can reach SAR 100,000, so register through the ZATCA portal before invoicing with VAT.

How do I check my ZATCA VAT penalties online?

Log in at zatca.gov.sa using your TIN or registered email, open Indirect Tax – Value Added Tax, then the Invoices or Dues tab. Any penalty appears as a separate line item with its own SADAD bill number, reason code and downloadable notice showing the breach, period and calculation. Pay through your bank’s SADAD channel using the ZATCA biller code.

Can ZATCA VAT penalties in Saudi Arabia be cancelled or reduced?

Yes. You can file an objection through the Objections and Appeals service in the ZATCA portal within 60 days of the assessment, supported by reconciliations and documents. ZATCA also operates a settlement committee route and has periodically run fines cancellation initiatives waiving late-registration, filing, payment and certain e-invoicing fines for taxpayers who file and pay the principal tax within the window.

What are the e-invoicing penalties under ZATCA Fatoora?

E-invoicing breaches generally begin with a warning or notification, escalating to fines from SAR 1,000 where the same violation repeats within twelve months. Common triggers are missing QR codes on simplified invoices, failure to clear standard B2B invoices in real time, not reporting B2C invoices within 24 hours, and prohibited editing functions left enabled in the invoicing solution.

Do I still need to file a VAT return if I had no sales?

Yes. A nil return is still a return, and skipping it triggers the minimum SAR 1,000 late-filing penalty even though no tax was owed. This is one of the most common avoidable fines for new and dormant entities in Saudi Arabia. If you have genuinely ceased trading, apply formally to deregister through the ZATCA portal, because obligations continue until approval.

What is the penalty for filing an incorrect VAT return in Saudi Arabia?

Submitting an incorrect return, or amending it after the deadline, generally attracts a penalty of 50% of the difference between the tax declared and the tax actually due. Deliberate understatement is treated as tax evasion, carrying not less than the tax due and up to three times the value of the goods or services. Voluntary disclosure before detection is materially cheaper.