Anti-Fraud Law and VeriFactu: what they are, how they differ and why your business can't ignore them

Anti-Fraud Law and VeriFactu which are why they are different and why your business should be aware of them.

The Anti-Fraud Law and the VeriFactu regulation form the new framework regulating how invoices are generated, stored and verified in Spain. Both pursue the same objective - to reduce tax fraud and improve traceability - but they they are not the sameThe Anti-Fraud Act sets out the general principles and obligations, and VeriFactu (the regulatory and technical implementation) details how these principles should be translated into invoicing programmes and processes.

Below we explain, in straightforward language and designed for tourism, activities, POS and booking companies, what each one entails, how they differ and what practical steps you should take into account.

Survey

What billing system do you currently use?

We want to better understand how our customers and other professionals in the tourism sector manage invoicing. Knowing the tools they use will allow us to develop more useful integrations adapted to their real needs, and thus offer solutions that really facilitate their daily work. 

It will take you a second

Just answer a short survey about the billing system you use.

Your answer will allow us to:

  • Prioritise the most in-demand integrations.
  • Improve the check-in experience within TuriTop.
  • Anticipate future regulatory needs (such as those related to the Anti-Fraud Law).

What is what?

  • Anti-Fraud Law (legal framework)The set of measures contained in the General Tax Law and associated regulations that require the integrity, conservation, accessibility, legibility, traceability and unalterability of invoicing records. It sets out the general obligations for producers, marketers and users of invoicing software.
  • VeriFactu (regulations and technical specifications)Invoicing systems: this is the technical development that defines how computerised invoicing systems must work in order to comply with the Law (formats, QR code, XML structure, chained hash, immediate sending to the AEAT, etc.). It is regulated by the Royal Decree and developed by the Ministerial Order that sets the specifications.

Why is it important for your business?

If you are not currently using an invoicing software you should consult the different options on the market as the Anti-Fraud Law aims to cover the following objectives:

Anti-Fraud Law and VeriFactu
  • Legal and fiscal certaintyusing compliant software avoids penalties and risks in inspections.
  • Transparency and trustInvoices: customers and the AEAT itself can verify invoices (e.g. via the QR and the matching URL).
  • Operational efficiencyVeriFactu systems can automate tax submissions and reduce administrative burdens, but at the same time reduce the flexibility of error corrections by having to transmit tickets or invoices in real time.
  • VERI*FACTU (immediate referral to AEAT)VERI*FACTU (immediate referral to AEAT): almost immediate referral of records to the Inland Revenue; exempts the user to keep these records.
  • NO VERI*FACTU (local conservation): obligation to keep and submit records (hash + electronic signature) for 4 years; increased responsibility for the user.

Key dates (deadlines)

  • Obligatory for companies (legal persons): 1 January 2026.
  • Compulsory for self-employed and other individuals: 1 July 2026.
    (these dates were subject to regulatory modification and extension of deadlines by the RD updating the regulation).

Risks and penalties (what to avoid)

  • Sanctions for usersFines for possession or use of non-compliant systems or failure to keep required invoice records.
  • There are also penalties for allowing manipulation (“dual-use” software) or for deleting transactions without traceability. It is key that the supplier of your software (e.g. a POS does not allow delete or overwrite records without leaving a record.

Does it affect the tickets (simplified invoice) issued by a POS?

Yes: simplified invoices (tickets) generated by POS fall within the scope of the regulation. If the receipts contain minimum tax data (VAT number, date, amount, description) and serve as proof, the AEAT may consider them as simplified invoices and then the requirements (including QR and registration) will apply. It is therefore important to analyse how your booking/TPV system generates and stores receipts. 

In order not to be considered as a ticket or simplified invoice, they must clearly contain the word "ticket". RECEIPT

Visual comparison (quick)

Anti-Fraud Law vs VeriFactu

Aspect

.

Anti-Fraud Law (principle/obligation)

.

VeriFactu (technical development / how to apply it)

Nature

.

Legal and fiscal policy framework.

.

Regulation and ministerial order with technical specifications.

.

Target

Prevent tax fraud; require integrity, traceability, retention.

.

Define formats (XML), chained hash, QR, sending/query to AEAT.

Who regulates it

Legislation (Ley General Tributaria, BOE).

.

RD 1007/2023 + Order HAC/1177/2024; updates (RD 254/2025).

Application

To producers, traders and users of billing systems.

.

IT systems issuing invoices or simplified invoices; defines VeriFactu / non-VeriFactu modalities.

.

Compliance requirements

.

Principles: inalterability, conservation 4 years, accessibility.

.

Specifications: XML UTF-8, chained hash, event logging, QR with matching URL.

.

AEAT Access

.

Statutory right of inspection and injunction.

.

If VERIFACTU: AEAT already has records; if NO VERIFACTU: may request export or inspection.

Sanctions

It establishes liability and sanctions for non-compliance.

.

Specific penalties to manufacturers and users for non-compliant systems.

.

(Official citations: RD 1007/2023, Order HAC/1177/2024 and amendment RD 254/2025).

What to do now?

Practical checklist for companies using TuriTop

CONSULT AN EXPERT

Confirm with your advisor/specialist how the Anti-Fraud Law affects your specific case (self-employed vs. company; SII (Immediate Provision of Information), exceptions).

FROM TURITOP

We remind you that TuriTop is designed as a booking system, so for now it does not include billing functions. That said, you can connect TuriTop with your billing software in different ways. Before proceeding, please check with your billing software for available integration options.

Many of our users use Holded as their billing system, as it is Verifactu-compliant as they explain here. With Holded, you could automate the creation of invoices for each booking registered in TuriTop, ensuring compliance with the new legal requirements via API. TuriTopHolded connectivity via API will be available in 2026.

If your billing software is different from Holded, you can also connect via Webhooks, as long as your system allows you to receive data from external sources.

For this setup, you may need to use automation tools such as Zapier, Make or n8n, so the person in charge should ideally be familiar with these platforms.

In this case, we recommend that you contact your billing software provider to find out the implementation steps and costs.

  • Option 1: Your bookings are available in TuriTop from the control panel in csv format for downloading and uploading to most billing systems on the market. We are working to improve the format and data filtering operation in the control panel to make it easier for you to decide which information you need to download and transmit to your accounting system. Stay tuned for updates here.
  • Option 2API and Webhooks integration. If your TuriTop subscription plan includes access to the API and Webhooks, you can automate the sending of booking data to your billing system to generate invoices automatically. See our guide to Webhooks for detailed steps.
  • Option 3Integration with Holded and WooCommerce. If you use Holded and your website is developed in WordPress, you can automate billing through WooCommerce with the following requirements:
  • Your website must be developed in WordPress.
  • You must have WooCommerce installed.
  • You must integrate TuriTop using our WooCommerce Widget.
  • Install the corresponding Holded plugins.

With this configuration, every booking made on your website through WooCommerce will automatically generate an invoice in Holded, complying with the new law without the need for manual intervention.

Final message from TuriTop

At TuriTop we are closely following the regulatory and technical evolution of the Anti-Fraud Law to ensure that our platform complies with all applicable requirements and, above all, so that you don't have any surprises. Very soon we will share specific news about the status of our invoicing functionalities and the options available for your company to manage records in a secure and compliant way.

Key sources

  • Royal Decree 1007/2023 (Regulation on invoicing systems). BOE
  • Order HAC/1177/2024 (technical specifications and formats - BOE). BOE+1
  • Royal Decree 254/2025 (modification and extension of implementation deadlines). BOE
  • Technical notes and press releases from the Tax Agency on VeriFactu. Tax Agency

Leave a Reply