ZATCA Fatoora Wave 24 Compliance: How Saudi Businesses Must Prepare Before the June 30, 2026 Deadline

The clock is ticking for thousands of small and medium-sized businesses across Saudi Arabia. With the Zakat, Tax and Customs Authority (ZATCA) officially announcing Wave 24 of the Fatoora programme, a new cohort of VAT-registered businesses must now complete full e-invoicing integration with the Fatoora platform by 30 June 2026. This is not a future concern — it is an immediate compliance obligation that demands action now.

Wave 24 marks a significant milestone in the Saudi Arabia e-invoicing mandate. For the first time, the revenue threshold has dropped to SAR 375,000, pulling thousands of SMEs into the mandatory Phase 2 scope that was previously limited to larger enterprises. If your business generated VAT-taxable revenue exceeding SAR 375,000 in 2022, 2023, or 2024, you are very likely within scope.

The scale of the mandate’s expansion is substantial: ZATCA processed over 8.2 billion e-invoices in 2025, marking a 64% surge from the previous year’s 5 billion.  More than 94% of all taxable transactions in the Kingdom were processed through the e-invoicing system by 2025, making digital integration a baseline requirement for business operations.  Wave 24 alone is sweeping tens of thousands of smaller businesses into the clearance model for the first time.

To put the affected businesses in context, the Kingdom is home to over 1.2 million SMEs — up from 429,000 in 2016, contributing 35% to non-oil GDP and employing over 8.4 million people.  The deadline for integration is 30 June 2026, with non-compliance penalties ranging from SAR 5,000 to SAR 50,000 per violation.

What Is ZATCA Fatoora Wave 24? A Quick Overview

Saudi Arabia’s Fatoora programme is ZATCA’s national electronic invoicing system, introduced as part of the Kingdom’s Vision 2030 push towards a transparent, digital economy. Launched in Phase 1 in December 2021, the programme made e-invoice generation mandatory for all VAT-registered businesses. Phase 2 — the integration phase — goes significantly further by requiring businesses to connect their billing systems directly to ZATCA’s Fatoora platform in real time.

Below is a complete summary of the Wave 24 compliance parameters:

Phase 1 vs Phase 2: Understanding the Integration Difference

A common source of confusion among businesses is the difference between Phase 1 (generation) and Phase 2 (integration). If your business is already issuing e-invoices, that does not mean you are Phase 2 compliant. The two phases carry entirely different technical and operational requirements.

ZATCA Phase 2 integration requires your accounting or ERP system to communicate with ZATCA’s infrastructure automatically, without manual uploads or submissions. Every B2B invoice must be cleared by ZATCA before it is delivered to the buyer. Every B2C simplified invoice must be reported within 24 hours. This demands a certified, always-connected e-invoicing solution — not just an export-and-send workflow.

The operational implications are clear: businesses that continue with Phase 1-style workflows after the Wave 24 deadline face invoice rejection, VAT deductibility complications, and exposure to financial penalties — even during the currently active penalty waiver window.

Who Is Affected by the Saudi SME E-Invoicing Mandate?

The Wave 24 scope is defined by revenue, not by industry or company size in terms of headcount. ZATCA applies a simple and objective threshold: if your business had annual VAT-taxable revenue exceeding SAR 375,000 (approximately USD 100,000) in any single year — 2022, 2023, or 2024 — you fall within Wave 24. ZATCA will formally notify affected taxpayers, but the eligibility criteria are already public.

Businesses typically impacted include:

• Independent retail shops and trading companies with annual sales crossing SAR 375,000
• Professional service providers — accountants, lawyers, consultants, and IT firms
• Restaurants, cafes, and hospitality businesses operating at the qualifying revenue level
• Healthcare clinics and medical service providers billing VAT-registered patients or companies
• E-commerce and digital service businesses selling to customers inside Saudi Arabia
• Construction subcontractors and maintenance service companies in the SME bracket
• Logistics, freight, and transportation businesses below the previous Wave 23 threshold of SAR 750,000

Notably, businesses that fall below the SAR 375,000 threshold are not currently mandated under Wave 24, but ZATCA has consistently expanded the programme wave by wave and has signalled that full national coverage is the ultimate goal. Starting preparations now — even if your current revenue is close to the boundary — is strongly advisable.

Key Technical Requirements for Fatoora Wave 24 Integration

ZATCA Phase 2 integration is a technical undertaking with specific standards that must be met precisely. Partial or informal compliance is not acceptable. The following requirements apply to all Wave 24 businesses:

Invoice format and data standards

• All invoices must be generated in XML format compliant with ZATCA’s Universal Business Language (UBL) 2.1 specification
• B2B tax invoices must also be available as PDF/A3 with embedded XML data
• Each invoice must contain ZATCA-mandated data fields, including VAT registration number, invoice type code, cryptographic stamp, and QR code
• Invoices must carry a valid UUID and cryptographic hash for tamper-proof auditability

System integration and connectivity

• Your e-invoicing solution must be certified by ZATCA — uncertified third-party tools do not satisfy the mandate
• Direct API connectivity to the Fatoora portal is required, with your server IPs whitelisted with ZATCA
• B2B invoice clearance must happen in real time before the invoice is sent to the buyer
• B2C simplified invoice reporting must occur within 24 hours of the transaction
• Systems must support ZATCA’s onboarding process, including cryptographic stamp issuance and compliance unit testing

Step-by-Step Preparation Checklist for Saudi Businesses

The compliance window for Wave 24 runs from 1 April 2026, with a hard enforcement deadline of 30 June 2026. With less than three months remaining, businesses must move quickly. The following eight-step checklist outlines every action required to achieve ZATCA Fatoora Wave 24 compliance before the deadline:

Each step carries real business risk if skipped or delayed. The certification and onboarding processes with ZATCA can take weeks, and many certified solution providers are operating at capacity as the deadline approaches. Businesses that wait until May or June 2026 risk missing the window entirely.

The Penalty Waiver: An Opportunity — Not a Safety Net

ZATCA has extended its ‘Initiative to Cancel Fines and Exempt Taxpayers from Penalties’ until 30 June 2026. This waiver is frequently misread as meaning that non-compliance during this period carries no consequences. That interpretation is incorrect and dangerous.

The penalty waiver applies specifically to correcting past procedural errors in VAT and e-invoicing submissions — not to blanket exemption from the Wave 24 integration mandate itself. Businesses that fail to integrate by 30 June 2026 and subsequently attempt to submit non-compliant invoices face:

• Invoice rejection by the Fatoora platform effectively blocks business operations that depend on VAT-cleared invoices
• Inability to claim VAT input deductions on invoices that have not been properly cleared
• Exposure to ZATCA audits and financial penalties once the waiver period expires
• Reputational damage with clients and partners who require compliant B2B invoices for their own VAT submissions

The waiver is an opportunity for businesses to clean up historical errors without penalty — not permission to delay integration.

The Bigger Picture: Saudi Arabia’s E-Invoicing Mandate and Vision 2030

The Fatoora programme is not simply a tax compliance initiative — it is a pillar of Saudi Arabia’s national economic transformation under Vision 2030. By digitising the entire invoicing chain, ZATCA gains real-time visibility into transaction records, enabling it to cross-reference data, identify revenue discrepancies, and reduce VAT leakage at a systemic level.

The phased rollout approach — beginning with the largest businesses in Wave 1 and progressively incorporating smaller ones — has been consistently praised for giving businesses adequate time to adapt. With Wave 24, the programme reaches its most commercially significant stage: the point where the vast majority of Saudi Arabia’s VAT-registered business community is required to participate.

For businesses, the strategic upside of compliance extends beyond avoiding penalties:

• Real-time digital invoicing reduces billing disputes, speeds up payment cycles, and eliminates manual data entry errors
• ZATCA-compliant systems provide an audit-ready digital record trail that simplifies VAT return preparation
• Clients and procurement teams increasingly prefer — and in some sectors require — suppliers with Phase 2-compliant invoicing
• Early compliance positions Saudi SMEs as credible, professionally managed businesses capable of operating in a fully digital economy

Final Word: June 30, 2026, Is Not a Soft Deadline

ZATCA Fatoora Wave 24 compliance is a firm, legally enforced deadline for every qualifying VAT-registered business in Saudi Arabia. The SAR 375,000 revenue threshold brings the Saudi SME e-invoicing mandate into territory that affects the backbone of the Kingdom’s commercial activity — and the June 30, 2026 date leaves little room for delay.

Businesses that begin their integration journey today — by assessing eligibility, selecting a ZATCA-certified solution, and working through the technical onboarding steps — have a clear path to compliance. Those that wait risk operational disruption, invoice rejection, and financial penalties at precisely the moment ZATCA’s enforcement mechanisms come into full effect.

The Fatoora integration phase is not a regulatory checkbox. It is a transformation of how businesses in Saudi Arabia create, verify, and exchange financial records. Treat it as such — and get started now.