ZATCA Phase 2 Penalties: What Saudi Small Business Must Know

Raj Roy Toksabam

March 5, 2026

30 second summary | Under ZATCA Phase 2 (Integration Phase), Saudi businesses must connect their e-invoicing systems directly to the Fatoora platform for real-time invoice validation, including XML format invoices, cryptographic stamps, and QR codes. Failure to comply can result in penalties ranging from SAR 5,000 to over SAR 50,000, depending on the violation. Common penalties include fines for late system integration, issuing non-compliant invoices, missing QR codes, data tampering, or failing to issue and retain e-invoices. ZATCA also applies progressive penalties, where repeated violations within 12 months lead to higher fines. To avoid these penalties, businesses should upgrade their invoicing systems, confirm their ZATCA integration wave deadline, and implement compliant solutions through authorised service providers.

According to the mandates of ZATCA Phase 2 (Integration Phase), Saudi businesses have to link their e-invoicing systems directly with the FATOORAH (www.zatca.gov.sa ) platform for real-time validation of invoices, adding cryptographic stamping as well as QR codes. For non-compliance, the government has introduced Saudi e-invoicing fines from SAR 5,000 to over SAR 50,000 for non-compliance, including failure to integrate on time, data tampering or improper invoice format.

Some of the key ZATCA phase 2 penalties and violations

The violation of not integrating on time: In some cases, it has been indicated that complete non-compliance with Phase 2 integration requirements can subject the business to a fine that could total SAR 50,000, specially in those cases where the business fails to submit or retain data in the specified format.
Violation of non-compliant invoices: Invoices that do not have the proper elements that are required, or those that have improper formatting, incur fines starting at SAR 5,000.
Violation of tampering/data-deletion: The fine for this offense starts at SAR 10,000 and can go higher with each successive violation.
Violation of missing QR codes: Failing to include mandatory QR codes in simplified invoices, especially in B2C, can cause penalties. This may start with a warning and then increase upon repetition.
Violation of non-issuance and non-retention of e-invoices: This may begin with a financial fine of SAR 5,000, which later increases with repeat offences.
Progressive penalties: Typically, ZATCA applies fines that increase with repeat violations. The penalties may start with a warning and then escalate to SAR 1000, SAR 5000, SAR 10,000 for repeat offenses within a 12-month period. The fines may reach up to SAR 40,000.

Essential actions for small businesses to avoid fines

System upgrades: Ensure that your accounting software or POS allows for real-time clearance in XML format, digital certificates and integration with the ZATCA API.

Check your wave: Note the exact deadline that has been set by ZATCA for your business based on the annual revenue that it has

Secure Implementation: Always use the authorised service providers to avoid the risks that are typically associated with, for example, manual invoice generation or improper storage of invoices.

ZATCA Phase 2 compliance is essential for businesses operating in Saudi Arabia to avoid costly penalties and operational disruptions. By ensuring timely system integration with the Fatoora platform, issuing fully compliant e-invoices, and working with authorised solution providers, businesses can meet regulatory requirements smoothly. Taking proactive steps toward compliance not only helps avoid fines but also strengthens transparency, efficiency, and trust in digital tax reporting.