Verify a Saudi VAT Number Free: 4 Ways and What Each Proves

In ruling VJ-2021-1123, the First Circuit of the Committee for Resolution of VAT Violations and Disputes in Jeddah rejected a taxpayer's appeal against a tax assessment. One of the grounds is unsettlingly mundane: the invoices submitted to support an input VAT deduction carried a name and a tax number that did not match the taxpayer's registered details. Under Article 53(5)(e) of the Implementing Regulations of the Saudi VAT Law, exercising the right to deduct requires the invoice to state the name and address of both supplier and customer correctly. The dispute was not about the amount of tax. It was about a number written wrongly on a piece of paper.

That is what makes verifying a VAT number an accounting control rather than administrative curiosity. It is also what makes the common question — "how do I check a VAT number?" — an incomplete one. There are four ways, and each proves something different.

What the number says about itself

A Saudi VAT number is fifteen digits, and they are not arbitrary:

3 | 12345678 | 9 | 012 | 03
^   ^          ^   ^     ^
|   |          |   |     tax type — 03 is VAT
|   |          |   branch code — 000 is the head office
|   |          check digit
|   taxpayer serial
country code — 3 for GCC states

Three facts fall straight out of that structure. A Saudi number begins with 3 and ends with 03, and anything else is not a Saudi VAT registration number. The branch code tells you whether you are dealing with the head office or a subsidiary establishment. And the check digit exists, but its algorithm is unpublished — so any tool claiming to validate it is guessing.

The four methods, and what each one proves

1. A format check — instant, and proves nothing about registration

Paste the number exactly as it appears on the invoice into the VAT number format checker and you know within a second whether the length holds, whether it starts with 3, and what each segment says. The check runs in your browser; the number is never sent anywhere.

What it catches in practice is the overwhelmingly common failure: fourteen digits instead of fifteen, a transposed pair, or a commercial registration number handed over in place of a tax one. What it does not catch — and this has to be said plainly — is whether the number is actually registered, and to whom. A structurally perfect number can be entirely fictitious.

2. ZATCA's own registration lookup — the only official answer

The "Verify VAT registration" service on the Zakat, Tax and Customs Authority website is the only place that knows whether an establishment is registered today. It accepts three search inputs, which is the part most people miss:

• the VAT number itself;
• the VAT certificate number;
• the unified commercial registration number — and that is the answer to "look up a VAT number by CR": you start from the commercial registration and arrive at the registration status, not the other way round.

The service also accepts an xlsx upload to check a batch of numbers in one pass — which is the entry point that matters to a finance team reviewing dozens of suppliers a month rather than one.

3. The QR code on the invoice — it exposes internal contradiction

A compliant Saudi tax invoice carries a QR code encoded in TLV format, and one of its mandatory fields is the seller's VAT number. If you scan the code and find a number that differs from the one printed at the top of the invoice, you have a real problem: either a broken invoicing template or a recycled invoice. The code does not prove registration, but it proves consistency — a check that costs nothing and catches what the eye does not.

If you are on the issuing side, the tax invoice generator builds that code with the mandatory fields ZATCA requires.

4. The registration certificate itself

Ask a new supplier for a copy of the VAT registration certificate and match the number on it against the number printed on their invoices. A primitive step — and precisely the step that would have saved the taxpayer in VJ-2021-1123.

The costliest mistake: a CR number in the VAT field

These are two entirely different numbers, issued by two different bodies:

When a supplier sends one instead of the other — common in small businesses where the owner does the invoicing personally — the invoice reaches your system carrying a number ZATCA will never find in its records. A format check alone stops that before it enters your books.

And if the supplier turns out not to be registered?

Here the question moves from bookkeeping to money. If a supplier charged you 15% while not registered for VAT, two things are true at once:

• You do not hold a valid tax invoice, so no right to deduct that input tax arises. If you already deducted it in a previous return, the reassessment brings the incorrect-return penalty and the late-payment penalty with it, under Articles 42 and 43 of the VAT Law.
• The supplier faces the penalty for issuing a tax invoice while unregistered, which reaches up to SAR 100,000.

The amount you paid as tax never reached the authority, and you will not recover it from them. This is why a VAT number check belongs at supplier onboarding, not at quarterly return preparation. The difference between those two positions is the difference between correcting a field and reopening three months of entries.

Where the check actually belongs

In most companies the problem is not ignorance of the method but the placement of it. The check happens manually, after posting, on a sample. So the error surfaces when the authority asks, not when the invoice arrives.

The right shape is a layer inside the accounts-payable cycle: the number's format validated at the moment a supplier record is created, so a non-conforming number is rejected before it is ever saved; registration verified in a single batch file before each return; and the QR code read automatically on receipt, its fields reconciled against what was scanned. None of this needs a new system. It needs integration above the system you already run.

For the arithmetic once the number is right, how Saudi VAT at 15% is calculated covers both directions including extracting tax from a gross amount, while the ZATCA e-invoicing guide explains what integration with the Fatoora platform actually imposes.

Conclusion

A format check catches copying errors in a second and proves nothing about registration. ZATCA's service alone proves registration. The QR code exposes contradiction inside the invoice. The certificate ties the number to its owner. All four together constitute verification; any one of them alone constitutes the feeling of verification.

Start with the fastest: check the VAT number format now — free, in your browser — then follow it with the official lookup at ZATCA.

If your team reviews supplier numbers one at a time every month, that is not diligence — it is cost. Book a short diagnostic session: we look at your accounts-payable cycle and identify where the check can run automatically — and we will tell you honestly if your current setup needs no intervention at all.