If you run a business in Spain, you've probably heard about Verifactu by now. Maybe your accountant mentioned it, or you saw something in the news about new invoicing requirements. And if you're like most business owners, you might be feeling a mix of confusion and concern.
Don't worry. This guide will walk you through everything you need to know about Verifactu—what it actually is, whether it applies to your business, what you need to do, and crucially, when you need to do it. No jargon, no unnecessary complexity. Just the practical information you need to make informed decisions.
What Is Verifactu, Really?
At its heart, Verifactu is Spain's answer to a simple question: how do we make sure businesses aren't manipulating their invoices to evade taxes?
The name comes from "VERIficación de FACTUras" (Invoice Verification), and it's a new system managed by AEAT—Spain's tax agency. Starting in 2027, every business using invoicing software will need to use a system that creates tamper-proof invoice records.
Think of it like a digital seal of authenticity. Each invoice your software generates will be cryptographically linked to the previous one (this is called "hash chaining"), digitally signed, and stamped with a QR code. If anyone—including a tax inspector—wants to verify that an invoice is legitimate, they can simply scan the QR code.
The beauty of this system, from AEAT's perspective, is that it makes invoice manipulation virtually impossible. You can't delete an invoice or change one retroactively without breaking the cryptographic chain—which would immediately flag the tampering.
Does This Apply to My Business?
This is the question everyone asks first, and the answer is straightforward: if you use any kind of computerized invoicing system and you're not already in the SII system, then yes, Verifactu applies to you.
That includes:
- Small and medium-sized businesses (the vast majority of Spanish companies)
- Self-employed professionals (autónomos) who use invoicing software
- Freelancers issuing invoices through any digital system
- Businesses using spreadsheets or basic software to create invoices
There's one important exception: if your company is already registered in the SII (Suministro Inmediato de Información) system, you're exempt. SII is Spain's real-time VAT reporting system for larger companies—specifically those with annual revenue over €6 million, VAT groups, and companies in the REDEME monthly refund scheme. These businesses already report invoices to AEAT within four days, so they're covered.
If you're unsure whether you're in SII, you probably aren't—it's something your accountant would have set up, and you'd know about the quarterly reporting requirements.
The Two Compliance Modes: VERI*FACTU vs NO VERIFACTU
Here's something that confuses a lot of people: Verifactu actually offers two different ways to comply, and understanding the difference matters for choosing the right software.
VERI*FACTU mode (real-time reporting): When you issue an invoice, your software automatically sends the record to AEAT in real-time or near-real-time. Your invoices will display "Factura verificable en la sede electrónica de la AEAT" or simply "VERI*FACTU." This is the most transparent option—anyone can verify your invoices instantly through AEAT's website.
NO VERIFACTU mode (local storage): Your software still creates the same tamper-proof records with hash chains, signatures, and QR codes, but it doesn't send them to AEAT automatically. Instead, you keep the records locally and provide them during tax audits or when AEAT requests them.
Which should you choose? For most businesses, VERI*FACTU mode is the simpler option. Yes, it means AEAT sees your invoices in real-time, but if you're running a legitimate business with nothing to hide, this transparency actually works in your favor. It may even reduce your audit risk, since AEAT can already see that your records are in order.
Some businesses prefer NO VERIFACTU mode for privacy reasons or because they work in sensitive industries. Both options are equally compliant—the choice is yours.
Key Deadlines You Can't Miss
Let's be clear about the timeline, because this is where a lot of businesses are going to get caught out:
July 29, 2025: This is the deadline for software vendors. By this date, they must have Verifactu-certified versions of their products available. If your current software provider hasn't announced their certification plans by early 2025, that's a red flag.
January 1, 2027: D-day for companies. All corporate taxpayers (sociedades) must be using Verifactu-compliant software from this date. No exceptions, no grace periods.
July 1, 2027: Deadline for self-employed individuals. Autónomos get an extra six months, but don't let this lull you into complacency—software transitions often take longer than expected.
These deadlines were extended in December 2025 through Real Decreto-ley 15/2025, giving businesses more time to prepare. The original deadlines were tighter, so consider this extension a gift—use it wisely.
What Your Software Actually Needs to Do
You don't need to understand the technical details deeply, but it helps to know what's happening under the hood. Verifactu-certified software must implement:
Hash chaining using SHA-256 or equivalent: Each invoice record contains a unique digital fingerprint (hash) that incorporates data from the previous invoice. This creates an unbreakable chain—if someone changes a single character in any invoice, all subsequent hashes become invalid.
Digital signatures: Every invoice record must be signed using a valid digital certificate from a recognized authority. This proves who issued the invoice and guarantees the data hasn't been modified.
QR code generation: Each invoice gets a QR code containing identification data that links back to AEAT's verification system. Anyone with a smartphone can scan it and confirm the invoice is legitimate.
Complete audit logging: The software must record every action—invoice creation, modifications, cancellations, exports. This audit trail is immutable and available for inspection.
The good news? You don't have to build any of this yourself. Your certified invoicing software handles it automatically. Your job is simply to make sure you're using certified software before the deadline.
The Penalties Are Serious—Don't Ignore Them
Let's talk about what happens if you don't comply, because the consequences are significant:
Using non-certified invoicing software after the deadline can result in fines of up to €50,000 per fiscal year. That's not a typo—fifty thousand euros, every year you remain non-compliant.
And it gets worse. If AEAT suspects you've been manipulating invoices—which they'll assume if you're using uncertified software—you could face additional penalties for tax fraud, plus increased audit scrutiny for years to come.
There's also the Crea y Crece law to consider, which mandates B2B electronic invoice exchange. Non-compliance there can add another €10,000 in fines.
Compare that to the cost of switching to compliant software—typically €20-200 per month for most businesses—and the math is pretty clear.
What You Should Do Right Now
If you're reading this in 2025 or 2026, you still have time to prepare properly. Here's a practical action plan:
First, check your current software. Contact your invoicing software provider and ask directly: "Will your product be AEAT-certified for Verifactu, and when?" Get this in writing. If they're vague or non-committal, start looking at alternatives now.
Second, verify SII status. If there's any chance you might be in the SII system (annual revenue approaching €6 million, or you're part of a VAT group), confirm with your accountant. Being in SII exempts you from Verifactu.
Third, plan your transition. Don't wait until December 2026 to start. Software migrations, data transfers, and staff training all take time. Give yourself at least six months of buffer.
Fourth, get your digital certificate sorted. If you don't already have a digital certificate from FNMT or another recognized authority, apply for one now. You'll need it for signing invoices.
Finally, talk to your accountant. They're navigating Verifactu with all their clients and can give you advice specific to your situation.
The Bottom Line
Verifactu is coming, and it's not optional. But it's also not as scary as it might seem. The core requirement is simple: use certified invoicing software that creates verifiable, tamper-proof records.
If you're already using modern, cloud-based invoicing software from a reputable Spanish or international vendor, there's a good chance they'll handle the Verifactu certification for you. Your workflow probably won't change much—you'll just notice QR codes on your invoices and maybe a new label.
The businesses that will struggle are those using outdated software from vendors who aren't investing in certification, or those who ignore the deadline and find themselves scrambling at the last minute.
Don't be one of them. Start your preparation now, and you'll sail through the transition.