VeriFactu: Guide to Spain's Anti-Fraud Invoicing Law

What VeriFactu Really Changes for Spanish BusinessesIf you run a business in Spain, you have probably heard about VeriFactu and the so-called ley anti...

What VeriFactu Really Changes for Spanish Businesses

If you run a business in Spain, you have probably heard about VeriFactu and the so-called ley antifraude. The noise around it can be confusing, so let us strip it back to the essentials. VeriFactu is not a new type of invoice, and it is not a separate tax return. It is a technical standard that your software de facturación must meet so that every invoice you issue is recorded in a way that cannot be quietly altered or deleted later.

The legal backbone is the Real Decreto 1007/2023, which develops the Ley 11/2021 against tax fraud. Following the official extension introduced by Real Decreto-ley 15/2025, the obligation now applies from 1 January 2027 for companies and from 1 July 2027 for autónomos. That extra window is useful, but it is not an excuse to wait until the last quarter of 2026 to move.

Why the AEAT Is Pushing This Standard

The Agencia Tributaria has a clear agenda: make invoicing records traceable, inalterable and easy to audit. The practical consequences for day-to-day business are worth understanding before you choose a tool:

Fewer double-use systems. Software that allowed two sets of books — one for the tax office, one for the drawer — is being squeezed out.
Faster inspections. When records are structured and chained, checks that used to take weeks can be resolved in days.
Fairer competition. Businesses that declare everything no longer compete against those that hide part of their turnover.
A push towards digitalisation. Small workshops, clinics and retail shops in Lleida, Tarragona or Girona end up adopting proper digital tools, often with grants available to offset the cost.

How the System Works Inside Your Invoicing Software

You do not need to understand the cryptography, but knowing what happens under the bonnet helps you ask the right questions to your provider.

When you issue an invoice or a simplified ticket, the software simultaneously creates a registro de facturación de alta. This is not the invoice itself: it is a structured record containing the NIF, date, amount and a set of security elements. Each new record includes a hash — a digital fingerprint — of the previous one. The records are chained together. If anyone tries to modify or remove an old invoice, the following hash no longer matches and the break becomes visible. That is the mathematical guarantee of inalterability.

On top of that, every invoice and ticket must carry a QR code. The code lets the recipient, or an inspector, verify quickly that the document was generated under a compliant system. It is a small visual element with a large legal weight.

VeriFactu vs Declaración Responsable: Two Valid Paths

One of the most common misunderstandings is that VeriFactu automatically sends every invoice to Hacienda. It does not have to. The regulation allows two modalities, and both are legal:

Systems that submit records to the AEAT. These send the invoicing records to the electronic headquarters of the Agencia Tributaria on a continuous basis. Invoices issued this way can carry the explicit mention VERI*FACTU. It is the most transparent and automated option.
Systems under declaración responsable. These generate records with all the required security elements and keep them locally, without automatic submission. The software provider signs a responsible declaration confirming compliance.

For most autónomos and small companies, the first option removes a lot of manual work. For gestorías handling several clients, the choice often depends on how each client's software integrates with existing accounting workflows.

What Non-Compliance Could Cost You

The ley antifraude contemplates significant penalties for using non-compliant software or for manipulating records. Fines can reach tens of thousands of euros, and in serious cases they can affect the professional who recommended or installed the tool. Beyond the fine itself, there is the reputational cost: clients and partners in Catalonia increasingly ask whether your invoicing is VeriFactu-ready before signing contracts.

A Practical Roadmap for 2026

The deadline is fixed, so the sensible approach is to treat 2026 as a preparation year rather than a waiting period.

Audit your current software. Ask your provider directly whether the tool is certified and which modality it uses.
Check your data. Client NIFs, VAT treatment and invoice series should be clean before migration, because errors get chained too.
Plan the switch outside peak periods. Changing invoicing software in the middle of a busy quarter is a recipe for mistakes.
Train the team. Whoever issues tickets or invoices needs to understand why a record cannot be deleted, even if a customer asks.
Talk to your gestoría early. Accountants in Barcelona, Lleida or Girona are already preparing clients, and aligning with them saves time later.

Where ALMC Fits In

At ALMC we help autónomos, pymes and gestorías across Catalonia adopt VeriFactu without turning it into a project that drags on for months. We set up electronic invoicing that complies with the AEAT requirements, with inalterable records and automatic submission where it makes sense for your workflow. If you are still issuing invoices from a spreadsheet or from software that nobody has updated since 2019, the time to review it is now, not in December 2026.

Put these ideas into practice

Talk to ALMC about a solution for your business. Explore your options or contact our team.

Results without leaving the page.