Peppol: Beltug advises members to verify company VAT numbers
With Peppol now mandatory for B2B transactions, organisations are already feeling both the benefits and the risks. 97% of Beltug members in Belgium are now on Peppol. To stay safe, Beltug recommends checking your organisation’s VAT numbers in Peppol to ensure that its identity is not misused.
11 / 03 / 26
During a recent Beltug Security Task Force meeting, members highlighted several risks linked to Peppol. While the network itself is considered robust, potential vulnerabilities mainly arise around APIs, third-party software and the verification of sender identities. Members reported that attackers may attempt to create fake companies using existing VAT numbers.
For this reason, Beltug advises members to proactively check their company and VAT numbers in Peppol and verify what appears under their identity. Organisations should also maintain strict internal controls: always validate incoming invoices and apply the principle ‘no purchase order, no pay’. These checks remain one of the most effective ways to prevent fake or misrouted invoices.