A tax fine in Saudi Arabia rarely arrives out of nowhere. In almost every category, ZATCA opens with a warning and a correction window, and the fine only appears if the same problem shows up again. That single fact changes how a finance team should read the penalty tables, and it is the fact most published summaries leave out.
This guide sets out the ZATCA violations and penalties that actually apply in 2026: the escalation rule behind every number, the full per-occurrence scale for e-invoicing, the VAT and withholding fines, the waiver initiative running to 31 December 2026, and the wrong figures still circulating in English. Every amount here is taken from ZATCA’s Arabic simplified guide to classifying general VAT violations, second edition 2024, which is the governing source for penalty amounts.
Who issues tax fines in Saudi Arabia, and under what authority
The Zakat, Tax and Customs Authority (ZATCA) administers VAT, Zakat, withholding tax, excise tax, and customs, and it issues the penalties attached to each. For VAT and e-invoicing, the penalties sit in the VAT Law and its Implementing Regulations, and the amounts are set out in a board decision that classifies general violations into a graduated scale.
Two consequences matter for a business. First, the e-invoicing regulation is, in the guide’s own words, an integral part of the VAT Implementing Regulations, so e-invoicing breaches are handled inside the same classification machinery as other VAT breaches rather than under a separate regime. Second, Article 45 of the VAT Law acts as a residual ceiling of up to SAR 50,000 for violating any other provision. It is a statutory maximum, not the amount you should expect. In practice ZATCA applies the graduated classification.
Fines for tax evasion are a different matter entirely. Evasion is treated as a deliberate act, carries far heavier consequences, and is excluded from the relief initiative discussed later in this guide.
The three rules behind every penalty number
Before any table is useful, three rules need to be on the table with it. They come from the same guide as the amounts, and together they explain why two businesses with the same violation can face very different outcomes.
- A warning comes first, always. Every general violation opens with a warning plus a correction window of 30 to 60 days, set per violation type. No fine is issued on first detection. The one documented exception is obstructing ZATCA staff, where the window is 10 days.
- The scale has six tiers plus a seventh. Amounts climb across the second, third, fourth, fifth and sixth occurrence, and then a separate tier applies to anything after the sixth. It is not the four-step ladder that circulates widely.
- Twelve clean months reset it. A repeat only counts if 12 months have not elapsed since the violation was last detected. After twelve clean months the same violation is treated as new and starts again at a warning with no fine.
What actually happens when ZATCA detects a violation
Read together, these rules reframe the whole subject. The expensive outcome is not one mistake. It is the same uncorrected mistake, repeated, inside a twelve-month window. That is a systems problem before it is a tax problem, which is also why tax compliance is better handled by process than by vigilance.
E-invoicing penalties: the full per-occurrence scale
These are the eleven e-invoicing violations and their real amounts. Each row opens with a warning, and the correction window in the last column is the time you have to fix the problem before a repeat can be counted. Amounts are in Saudi riyals.
| E-invoicing violation | First detection | Second occurrence | Ceiling | Correction window |
|---|---|---|---|---|
| Failure to integrate all e-invoicing systems with ZATCA from the mandated date | Warning | SAR 10,000 | SAR 50,000 | 30 days |
| Failure to share invoices and notes with ZATCA in the required format and periods | Warning | SAR 5,000 | SAR 40,000 | 30 days |
| Failure to issue e-invoices or notes within the statutory periods | Warning | SAR 5,000 | SAR 40,000 | 30 days |
| Including a prohibited function in the technical solution | Warning | SAR 5,000 | SAR 40,000 | 30 days |
| Deleting or amending an e-invoice after issuance | Warning | SAR 5,000 | SAR 40,000 | 30 days |
| Failure to store e-invoices per the required format and retention periods | Warning | SAR 1,000 | SAR 40,000 | 60 days |
| Failure to notify ZATCA of technical faults obstructing issuance | Warning | SAR 1,000 | SAR 40,000 | 60 days |
| Missing QR code on the invoice | Warning | SAR 1,000 | SAR 40,000 | 60 days |
| Failure to include all required data fields | Warning | SAR 1,000 | SAR 40,000 | 60 days |
| Failure to share invoices with customers in the required format | Warning | SAR 1,000 | SAR 40,000 | 60 days |
| Violating any other provision of the e-invoicing regulation | Warning | SAR 1,000 | SAR 40,000 | 60 days |
Three details in that table are worth pulling out, because they are where most published summaries go wrong.
- Only the first row reaches SAR 50,000. Failure to integrate all your e-invoicing systems by your mandated date is the single violation with a 50,000 ceiling, and it is reached only after the sixth occurrence. Everything else caps at 40,000.
- The 30-day rows are the structural ones. Integration, sharing, issuing, prohibited functions, and deletion or amendment all carry a 30-day window and a higher floor. The 60-day rows are the data-quality ones: storage, fault notification, QR code, mandatory fields, and customer copies.
- Failure to integrate is waived where the taxpayer can show the failure was caused by a technical fault in ZATCA’s own systems.
If you are not sure which of these you are exposed to, the practical starting point is knowing your own integration date. Your wave decides it, and the notice ZATCA sends you confirms it. Our guides to e-invoicing waves in Saudi Arabia and Phase Two of e-invoicing cover how to place yourself, and the ZATCA readiness check gives you a quick view of whether your setup is ready for it.
VAT penalties
The VAT penalties sit alongside the e-invoicing ones and use a different structure: most are proportional to the tax at stake rather than escalating by occurrence.
| VAT violation | Fine |
|---|---|
| Late registration | SAR 10,000 |
| Late filing of the VAT return | 5 to 25 percent of the VAT due |
| Late payment | 5 percent of the unpaid VAT for each month, or part of a month, delayed |
| Failure to issue a tax invoice | From SAR 1,000 per invoice, rising for repeat offenders |
| Issuing an incorrect invoice or charging the wrong VAT | 50 percent of the VAT amount in error |
| Failure to keep records | SAR 1,000 to SAR 50,000 |
The late-payment fine is the one that compounds quietly, because it accrues at 5 percent for each month or part of a month. A return left unpaid for a quarter is not a single 5 percent charge. Filing on time even when you cannot pay in full is almost always the cheaper mistake, and the VAT return filing deadlines are fixed: the end of the month following the tax period, monthly for taxpayers above SAR 40 million in annual supplies and quarterly for everyone else.
Invoice-level fines deserve attention too. Issuing an incorrect invoice or charging the wrong VAT rate costs 50 percent of the amount in error, which makes a systematic rate misconfiguration far more expensive than an isolated slip. If you calculate rates by hand, the VAT calculator is a useful cross-check, and the requirements for a compliant tax invoice are worth reviewing before a batch goes out.
Withholding tax and other penalties
Withholding tax penalties follow a simpler monthly pattern. Late filing of the monthly return costs 1 percent of the withholding amount per 30 days of delay, up to 25 percent, and late payment costs 1 percent per month or part of a month on the unpaid amount.
Excise tax adds a registration penalty of SAR 5,000 to SAR 50,000 for failing to register as a producer or importer of excise products, with late filing and payment following a pattern similar to VAT. Customs penalties are a separate and much larger body of rules under the Unified Customs Law, covering smuggling, false declarations and prohibited imports, and are outside the scope of a general compliance guide.
The fine-cancellation initiative: what is settled and what is not
ZATCA’s Cancellation of Fines and Exemption of Financial Penalties initiative is active until 31 December 2026. A Minister of Finance decision extended it for a further six months, covering 1 July to 31 December 2026. Any summary telling you the initiative has ended is out of date.
How the fine-cancellation initiative reached 31 December 2026
-
2022The initiative launchesZATCA first opens the Cancellation of Fines and Exemption of Financial Penalties initiative, and re-extends it several times after that.
-
Jan to Jun 2026A round that named e-invoicingThis round explicitly covered e-invoicing field-detection fines, which is why the current silence on them cannot be read as an exclusion.
-
29 Jun 2026The current extension is announcedA Minister of Finance decision extends the initiative for a further six months, running from 1 July 2026.
-
31 Dec 2026The current window closesThe date the initiative currently runs to. Fines tied to any return due after 30 June 2026 fall outside it.
What it confirmedly covers: fines for late registration, late payment, late filing, and the VAT return-correction fine. Eligibility is conditional on being registered, filing all outstanding returns, and paying the principal tax owed or agreeing an instalment plan.
What is excluded: tax-evasion penalties, fines already paid before the initiative took effect, and fines tied to any return due after 30 June 2026.
What is unresolved, and where honest guidance differs from most articles: whether the current extension covers ZATCA e-invoicing fines. You will find confident claims in both directions. Neither is supportable. The January to June 2026 round explicitly did cover e-invoicing field-detection fines; the announcement for the current extension does not mention e-invoicing either way; and secondary sources contradict each other, with some listing e-invoicing field-detection violations as included and others flagging the omission and advising taxpayers to confirm directly. The honest status is ambiguous rather than excluded. If you are carrying an e-invoicing fine, treat this as a question for ZATCA about your specific case, not something to settle from a blog post.
One thing about the initiative is not ambiguous at all, and it is the point most worth getting right: the initiative is not an extension of your integration deadline. It deals with fines that already exist. Your obligation to connect your system to the Fatoora platform is set by your wave and your notice, and 31 December 2026 has nothing to do with it.
Penalty figures that are still wrong in English
This topic has an unusual problem. ZATCA published an English penalties PDF in January 2022 with a five-tier scale, then superseded it with the 2024 Arabic classification guide. The old English document is easier to find and easier to read, so its numbers keep getting republished. If you are working in English, you are more likely to meet the outdated version than the current one.
| What you will read elsewhere | What the current source actually says |
|---|---|
| A four-step scale: warning, then 1,000, then 5,000, then 10,000, then 40,000 | That is the superseded English PDF from January 2022. The scale in force has six occurrence tiers plus a seventh, and the 1,000 floor belongs only to the 60-day violations. |
| Failure to integrate starts at SAR 5,000 | It starts at a warning. Its first fine is SAR 10,000, on the second occurrence. |
| You get three months to correct a violation | The correction window is 30 or 60 days depending on the violation. Never three months. |
| Deleting an issued invoice sits outside the ladder and starts at SAR 10,000 | It is inside the ladder as a listed violation, opens with a warning, and its first fine is SAR 5,000. |
| Any e-invoicing violation can reach SAR 50,000 | Only failure to integrate reaches 50,000, and only past the sixth occurrence. Every other e-invoicing violation is capped at 40,000. |
| There is an amended fines regulation for 2026 | No such instrument exists. The governing reference is the board decision amending the VAT violations classification, explained in the 2024 Arabic guide. |
The practical takeaway is to check the tier count. If a source shows a scale with four steps, it is quoting the superseded document. The scale in force runs across six occurrences with a seventh tier beyond that, and it always begins with a warning.
How to object to a fine you believe is wrong
Assessments are not final on issue. Disputes follow a structured path, and each stage has procedural deadlines that generally forfeit the right to appeal if missed.
- Internal review. Ask ZATCA to reconsider the assessment.
- General Secretariat of Tax Committees. The formal first-instance objection.
- Appellate Tax Committee. The second-instance appeal.
- Board of Grievances. The courts, for tax matters in some cases.
Whatever stage you are at, the documentation decides the outcome. Complete records, a clean invoice sequence, and an audit trail that a reviewer can follow are what turn a disputed assessment into a corrected one. That is also what a tax audit procedure looks for, and it is worth having in place before you need it rather than after.
How Qoyod reduces your exposure
Most of the fines above trace back to something a system could have caught: a rate applied wrongly, an invoice that never reached the authority, a mandatory field left blank, a deadline nobody was watching. Qoyod is a Saudi accounting system certified by ZATCA and compliant with Phase Two, and this is where it acts on the specific violations in this guide.
- VAT calculated on every transaction, with standard, zero-rated and exempt supplies tracked separately, and a VAT return summary showing sales VAT, input VAT and the net payable. This targets the incorrect-invoice fine, which costs 50 percent of the amount in error.
- Invoices signed and submitted automatically, with real-time clearance for standard B2B invoices and 24-hour reporting for simplified B2C invoices. This is the mechanism behind the two highest-floor rows in the e-invoicing table, failure to share and failure to issue.
- The cryptographic stamp identifier managed for you. Qoyod handles the CSID lifecycle, and stores the invoice hash chain that compliance verification depends on. Registering the CSID with ZATCA is still the taxpayer’s own step, and Qoyod guides you through it.
- Ten smart compliance alerts that fire when an invoice is created, saved or approved, before it reaches the Fatoora platform. They cover format and completeness problems such as identifier formats, future dates, the 24-hour simplified-invoice deadline, exemption codes and missing address fields. They are advisory rather than blocking, so they reduce the risk of rejection rather than removing it.
- Invoice status visible in one place, so an invoice that was accepted, rejected or left pending on the platform is something you see rather than discover during an audit.
Two boundaries are worth stating plainly, because overpromising here is its own risk. Qoyod does not file your VAT return and does not pay tax on your behalf: you submit in the ZATCA portal and pay through SADAD or bank transfer. And Qoyod has no role in the waiver initiative and cannot remove a fine you already have. For the technical side of connecting your system, see the guide to technical integration with ZATCA Fatoora, the Fatoora platform overview, and the Phase Two compliance page.
Start your free trial and cut your exposure to fines
If you want to test invoices you have already received, the e-invoice QR code reader decodes the QR on any invoice and returns its five data fields, and our guide to common rejection errors covers what the platform pushes back on most often. Address data is a frequent culprit, and the article on the additional number in the Saudi National Address explains which address fields are actually validated and which are not.
Frequently asked questions
Does ZATCA fine you the first time it finds a violation?
No. Every general violation opens with a warning and a correction window of 30 or 60 days, and no fine is issued on first detection. A fine applies only if the same violation is detected again within 12 months. The single documented exception is obstructing ZATCA staff, where the window is 10 days.
What is the maximum e-invoicing fine in Saudi Arabia?
SAR 50,000, and exactly one violation reaches it: failure to integrate all your e-invoicing systems with ZATCA from your mandated date, and only for occurrences after the sixth. Every other e-invoicing violation is capped at SAR 40,000, including failure to issue invoices, a missing QR code, and missing mandatory fields.
Is the ZATCA penalty waiver initiative still active?
Yes. The Cancellation of Fines and Exemption of Financial Penalties initiative runs to 31 December 2026 under a Minister of Finance decision covering 1 July to 31 December 2026. It confirmedly covers late registration, late filing, late payment, and the VAT return-correction fine, provided you are registered, have filed outstanding returns, and pay the principal tax or agree an instalment plan.
Does the waiver cover e-invoicing fines?
That is genuinely unresolved and you should not rely on either answer. The January to June 2026 round explicitly covered e-invoicing field-detection fines, the current extension announcement does not mention them either way, and secondary sources disagree. If you have an outstanding e-invoicing fine, confirm your own case with ZATCA directly rather than acting on a published summary.
Does the waiver extend my integration deadline?
No, and this is the most costly confusion in the topic. The initiative deals with fines that already exist. Your integration date is set by your wave and by the notice ZATCA sends you at least six months ahead, and it is unaffected by the initiative’s end date.
Can Qoyod remove a fine I already have?
No. Qoyod has no role in the waiver initiative and cannot remove an existing fine. What it does is reduce the chance of earning new ones: VAT is calculated on every transaction, invoices are signed and sent to the Fatoora platform automatically, and compliance alerts flag common problems before you submit. Filing the return and paying the tax remain yours to do in the ZATCA portal.
For a fuller picture of the compliance framework these penalties sit inside, see our guides to e-invoicing, ZATCA e-invoicing compliance, and ZATCA integration. If you have not yet confirmed your tax registration number details against ZATCA’s record, that is a five-minute check worth doing before your next invoice batch.
