Who has to use FBR digital invoicing?
Every person registered for sales tax, corporate or not, must issue sales invoices electronically and transmit them to FBR in real time under Chapter XIV of the Sales Tax Rules, 2006. FBR brought businesses in by category, and the last category went live on 31 December 2025.
What is the penalty for not integrating?
Under section 33 of the Sales Tax Act, Rs 500,000 for the first default, then Rs 1 million, Rs 2 million and Rs 3 million at 15-day intervals, after which premises can be sealed. The Finance Act 2026 also lets FBR suspend the registration of a business that has not integrated.
Do I have to pay a licensed integrator?
No. FBR's own technology arm, PRAL, provides the connection, and your invoices are posted using your own FBR sandbox and production credentials. We set these up for you; commercial integrators are an option, not a requirement.
What are sandbox scenarios?
Before FBR issues live (production) credentials, you must post test invoices in its sandbox for each scenario that applies to your business, such as sales to registered or unregistered buyers, reduced-rate or exempt goods. We prepare and pass these tests with you.
What does each invoice need?
Your details, the buyer's NTN or CNIC and registration status, each item's HS code and unit of measure, quantity, value, and the sales tax rate or scenario that applies. Once these are set up, invoicing is quick.
Can I change an invoice after it is posted?
FBR's general order allows a valid e-invoice to be cancelled or corrected for a genuine mistake only within 72 hours of generation. After that, changes need the Commissioner's approval, so the check-before-posting step matters.
Do I need an ERP to use it?
No. The invoicing workspace works on its own in your browser. If you already use ERPNext, your invoices can post to FBR directly from it instead.
Is my data safe, and who owns it?
Your business keeps ownership of its invoices and records, and your FBR credentials are kept out of everyday screens. If you ever leave, your data stays yours.