Cyprus VAT for small companies: registration, rates, and returns under Tax For All

VAT is usually the first tax a Cyprus company owner meets in the wild — not because it’s the biggest, but because it’s the most frequent. Four returns a year, each with a hard deadline, each capable of generating penalties out of all proportion to the amounts involved. And if you run your company from outside Cyprus, VAT is where the “just leave it to the provider” model gets uncomfortable: you can’t sanity-check a return you never see.

This guide covers what a small Cyprus company — especially a services business selling cross-border — actually needs to know: when registration becomes mandatory, which rate applies, how the quarterly return works on the Tax For All portal, and the penalty math when something slips.

When registration becomes mandatory

Three triggers matter for a small company:

• Domestic turnover. Registration is compulsory once taxable turnover in the preceding 12 months exceeds €15,600, or as soon as you expect to cross that figure within the next 30 days. The threshold has been stable for years and didn’t change when Cyprus adopted the EU’s new small-business VAT scheme in June 2025.
• Buying goods from the EU. Acquiring more than €10,251.61 of goods from other member states in a calendar year triggers registration on its own.
• Selling B2B services into the EU — from the first euro. This is the one that catches remote founders. There is no registration threshold for intra-EU supplies: if your Cyprus company invoices a VAT-registered business in another member state, it needs to be VAT-registered (and in the VIES system) before that first invoice goes out, regardless of turnover.

Services you receive from abroad count too: a Cyprus company buying contractor or software services from outside Cyprus self-accounts for VAT under the reverse charge, and on the prevailing interpretation those purchases count toward the €15,600 threshold. Once a threshold is crossed you have 30 days to notify the Tax Department; registration runs through the Tax For All portal. Registering late costs €85 for every month of delay — plus the VAT you should have been accounting for, plus interest.

Voluntary registration below the threshold is allowed and often sensible: it lets you recover input VAT on your costs, and B2B customers don’t care either way.

Which rate applies

Zero-rated is not the same as exempt. Zero-rated sales still count as taxable turnover and preserve your right to reclaim input VAT; exempt activities (certain financial, insurance, medical and education services, most residential lettings) don’t.

The quarterly return under Tax For All

VAT was the first tax to move to the Tax Department’s new portal, Tax For All (TFA) — mandatory for VAT since March 2023, with the old TAXISnet system retired for VAT and VIES. (Direct taxes like the company income tax return still live on TAXISnet; the full migration has been pushed to 2027.)

Returns are quarterly, on staggered cycles assigned at registration — your quarters might end March/June/September/December or run offset by a month. Businesses in a regular refund position can request monthly returns. Two rules founders regularly get wrong:

• The deadline is the 10th day of the second month after the quarter ends — for both filing and payment. A quarter ending 31 March is due by 10 May; 30 June by 10 August; 30 September by 10 November; 31 December by 10 February.
• Nil returns are still returns. A dormant quarter with zero activity still requires a filed return — the €100 late-filing penalty doesn’t care that every box was zero.

The return itself is eleven boxes: output VAT on your sales and on reverse-charge services you self-account (box 1), VAT on your acquisitions of goods from the EU (box 2), input VAT you’re reclaiming (box 4), the payable or refundable balance (box 5), and statistical boxes for total sales and purchases, intra-EU supplies of goods and services (8A/8B), zero-rated and out-of-scope sales (boxes 6–11B). With current bookkeeping it’s twenty minutes of work; without it, it’s the quarterly fire drill you’re paying your provider to fight.

Cross-border services: the part most guides skip

Most small Cyprus companies owned by non-resident founders sell services across borders. The VAT logic is mechanical once it’s laid out:

• B2B services to EU businesses: outside the scope of Cyprus VAT. You invoice with no VAT, show the customer’s VAT number, add a “reverse charge” note, and the customer accounts for VAT in their own country. You report the sale in box 8B and in a monthly VIES statement, due by the 15th of the following month.
• B2B services to non-EU businesses (UK, US, Switzerland…): outside scope. No VAT, no VIES entry.
• Services you buy from abroad (software, contractors, agencies): you self-account 19% Cyprus VAT under the reverse charge — output VAT in box 1 and, normally, the same amount back as input VAT in box 4, so the cash impact is usually nil. It still has to be on the return.
• B2C digital services to EU consumers: once EU-wide B2C sales pass €10,000 a year, you charge each customer’s local VAT rate — via a single quarterly One Stop Shop (OSS) return instead of registering in every country. OSS returns are due by the end of the month after each quarter, and that deadline doesn’t shift for weekends.

What the penalties actually are

The pattern to notice: the fixed penalties are small individually and brutal in aggregate, because they repeat per return, per statement, per month. A company that quietly missed VIES for a year of EU invoicing is looking at €600 in penalties for paperwork on sales that carried no VAT at all.

Recent changes worth knowing

Three things changed in 2025–26 that older guides won’t mention. Cyprus transposed the EU SME scheme in June 2025 — small businesses trading across the EU can apply the VAT exemption in other member states if EU-wide turnover stays under €100,000, using an “EX” identifier and a single quarterly report. The official interest rate on late tax dropped to 3.5% for 2026. And Cyprus still has no e-invoicing mandate — the EU’s ViDA package makes e-invoicing mandatory for intra-EU B2B from July 2030, so nothing changes tomorrow, but the direction of travel is set.