E-invoice QR code generator — ZATCA Phase 1

Seller name

VAT number

15 digits, starting with 3 and ending with 3.

Invoice date and time

Total including VAT

VAT amount

Don't know the VAT amount? Work it out from the total with the VAT calculator.

Fill in the fields to see the code

Encoded output TLV → Base64 chars

This is a Phase 1 code — not a substitute for Phase 2

The five fields above are the Phase 1 requirement. A Phase 2 invoice carries three more in its code: the invoice hash (XML hash) and the digital signature and the public key — and none of them can be produced by an external tool, because they require your business certificate issued by the Authority. Connect your business free and your invoices go out signed and reported automatically.

What is the QR code on an e-invoice?

The QR code on a simplified tax invoice is not decoration — it is a regulated data field. The Zakat, Tax and Customs Authority requires it to carry the invoice's core data encoded in TLV (tag, length, value) and then converted to Base64, so that any inspector or customer can scan it and verify the invoice on the spot.

The five fields and their specification

The tag order is fixed, and changing it makes the code unreadable to the Authority:

Tag	Field	Example
1	Seller name	Al Nukhba Trading Establishment
2	The seller's VAT number	300000000000003
3	Invoice date and time(ISO 8601)	2026-07-25T14:30:00Z
4	Total including VAT	115.00
5	The VAT amount	15.00

Each field is encoded as a byte for the tag, a byte for the value's length, then the value itself encoded in UTF-8. The five fields are packed one after another, then the whole result is converted to Base64 — which is what you see in the output box above.

Diagram of the QR code structure for a Saudi e-invoice: the five Phase 1 fields TLV-encoded with a tag, a length and a value, then converted to Base64 — The structure of the QR code on an e-invoice — from the five fields to the Base64 string the scanner reads.

The difference between the Phase 1 and Phase 2 codes

The Phase 1 code stops at the five fields. A Phase 2 invoice adds three fields that cannot be generated by hand: the hash of the invoice XML, the digital signature (ECDSA), and the certificate's public key. All three are derived from the business certificate issued by the Authority, which is why no tool on the internet — this one or any other — can generate a valid Phase 2 code.

Common mistakes that invalidate the code

Writing the date in a local format instead of ISO 8601 — the most common cause of failed verification.
Putting the total before VAT in tag 4; what is required is the total including VAT.
Adding a currency symbol inside the numeric value — the figures are written bare.
Encoding Arabic text in something other than UTF-8, which makes the seller name come out garbled when scanned.
Changing the tag order — the order is part of the specification, not a matter of judgement.

How to verify the code after generating it

Scan it with the official Fatoora app from the Authority: it decodes the code and shows the five fields in readable form. Any ordinary QR reader will show the Base64 text as it is — which is itself proof that the encoding was done correctly.

Frequently asked questions

It is a QR code carrying the invoice's core data encoded in TLV and then Base64, and it must appear on every simplified tax invoice in Saudi Arabia. When scanned it shows the seller name, their VAT number, the invoice date, its total and the VAT amount.

The seller name (tag 1), the seller's VAT number (tag 2), the invoice date and time in ISO 8601 format (tag 3), the invoice total including VAT (tag 4), and the VAT amount (tag 5). The order is fixed and must not be changed.

No. This tool generates the Phase 1 code with its five fields. The Phase 2 code adds the invoice hash (XML hash), the digital signature and the public key — and those can only be produced with your business certificate issued by the Authority, through a connected invoicing solution.

No. Generation happens entirely inside your browser in JavaScript, and no field you type is sent to any server — not ours, not anyone else's. You can disconnect from the internet after the page loads and the tool keeps working.

ISO 8601 format, for example 2026-07-25T14:30:00Z. The tool builds it for you from the date and time you pick, so there is no need to type it by hand.

Scan it with the official Fatoora app from the Zakat, Tax and Customs Authority, or with any QR reader that shows the raw text. An ordinary reader shows you the Base64 text; the Authority's app decodes it and shows the fields in readable form.

Invoice QR code generator