ZATCA's fines waiver is open again, this time until 31 December 2026. The obvious response is to clear the balance and move on. Most finance teams are already doing that arithmetic: file the outstanding returns, pay the principal, watch the penalties come off. That is the right first step, and it is the smaller half of the opportunity.
Here is the part companies skip. A late registration, a missed filing deadline, or a corrected VAT return is rarely a one-off event. It is the visible output of a process that will produce the same result next year, when there is no waiver to absorb it. The waiver pays for your last mistake. It does nothing about the next one.
What the extension covers, and what it quietly does not
The Minister of Finance extended the Cancellation of Fines and Exemption of Financial Penalties initiative for a further 6 months, running from 1 July to 31 December 2026. It reaches across the tax systems ZATCA administers: VAT, withholding tax, excise tax, corporate income tax, and real estate transaction tax. The fines it lifts are the procedural ones. Late registration, late payment, late submission of returns, and penalties tied to correcting a VAT return.
To qualify you need to be registered, to have filed every outstanding return, and to have paid the principal tax due or entered an approved instalment arrangement with ZATCA. The relief is not automatic. It follows the filing.
The exclusions matter more than the inclusions, and they are where we see companies misjudge their position:
- Tax evasion penalties are out. So are fines under Article 45 of the VAT Law.
- Field detection violations are treated as evasion, which puts them outside the waiver entirely. If ZATCA identifies the issue during a field visit rather than you identifying it in a filing, the relief you were counting on may not be there.
- Anything due after 30 June 2026 is out. Returns falling due in the second half of this year are on normal terms, waiver or no waiver.
- Fines already paid before the initiative took effect are not refunded.
Read those together and the incentive is sharper than it first looks. The window rewards companies that go looking for their own problems and disclose them through a return. It offers nothing to the company that waits to be found.
A penalty is a symptom. Treat it that way.
In assurance work, you learn to read a fine as evidence rather than as a cost. The amount tells you very little. The reason tells you where a process broke, who owned it, and whether anyone noticed.
So the useful question is not "what do we owe". It is "what produced this, and is it still running?" A single late VAT return might be a holiday, a resignation, or a portal password. A pattern of corrections to the same return line is a master data problem. Late registration for a new entity is almost never a tax failure at all. It is a handoff failure between the people who set the entity up and the people responsible for filing.
That distinction decides whether you spend this window buying relief or buying information.
Where the breaks usually are
In our experience the tax control environment rarely fails inside the tax function. It fails at the seams, where an event happens somewhere else in the business and reaches finance late or not at all. Five patterns account for most of what we see:
- New entities, branches, and lines of business. Commercial registration happens on one team's timeline and tax enrolment on another's. The gap between them is the late registration fine.
- Withholding tax on cross-border payments. Operations or procurement signs with a non-resident supplier. Finance learns of it at the payment run, which is often after the WHT deadline has passed. Nobody did anything wrong at their own desk.
- Real estate transactions. RETT gets handled as a legal and property matter, with finance brought in to pay rather than to advise. Deadlines here are short and unforgiving.
- Master data and tax coding. A new product, service line, or contract type gets a tax treatment assigned once, by whoever set it up, and then repeats for months. This is what shows up later as a run of VAT corrections.
- A calendar that lives with a person. Filing obligations tracked in someone's own diary work perfectly until that person is on leave, on a project, or gone. There is no evidence trail and no backup.
None of these is exotic. All of them are cheap to test. And each one produces a penalty type the current waiver happens to cover, which is the whole reason to look now.
Using the window properly
A tax controls review at this stage does not need to be a long engagement. Scoped tightly, it answers four questions:
- What obligations do we actually have? Every registration, every return, every deadline, mapped by entity across all 5 tax systems. Companies with growing group structures are often surprised by this list.
- Who owns each one, and who backs them up? Named, not implied. An obligation without a named owner is an obligation waiting to be missed.
- Do the handoffs work? Test them, don't ask about them. Take a new entity, a recent cross-border payment, and a property transfer, then trace how and when finance found out.
- Can we evidence the calendar? If a filing was made on time, the control only counts when you can show it. That distinction becomes real the moment ZATCA asks.
Run that before December and the waiver does double duty. You clear historic penalties on favourable terms, and you disclose on your own initiative rather than risking a field detection that sits outside the relief. You also walk into 2027 knowing which seam broke and having closed it.
The alternative is to file, pay, and take the exemption without ever asking what caused the exposure. That works once. It is not a control, and the next cycle has no waiver in it.
We help finance functions and audit committees turn a compliance clean-up into a durable tax control environment, and we do it on a timeline that fits the December deadline rather than ignoring it. Speak with a Specialist.