The Traffic-Light System: VAT Risk Control in Daily Trading

Green trades. Amber checks. Red goes to management.

VAT risk is not created in the tax department. It is created on a sales call, in a procurement inbox, at the loading dock — wherever someone has minutes, not weeks, to decide whether a deal goes ahead. A traffic-light system translates the European Court of Justice’s “knew or should have known” case law into the only three answers a busy trading team can actually use: proceed, check, stop. Nothing more. But also nothing less.

Why a traffic light — and not a manual

Most businesses do not fail for lack of knowledge. They fail at translation. An 80-page compliance manual does not answer the question that lands on a Tuesday afternoon: a new supplier, a price that looks slightly too good, a delivery address that does not match the invoice — does the order go out?

Since the Kittel judgment of the European Court of Justice (2006), the rule across the EU has been blunt: a trader who knew, or should have known, that a transaction was connected with VAT fraud somewhere in the chain loses the right to deduct input VAT. Germany has codified and sharpened this in Section 25f of the German VAT Act (UStG) — the provision under which German tax offices deny input VAT deduction and zero-rating in supply-chain cases. At the same time, the Court drew the opposite boundary in Mahagében/Dávid (2012): tax authorities may not require traders to run general, suspicion-free investigations into every counterparty. Germany’s Federal Fiscal Court has confirmed the same line: a duty to make further enquiries arises only where there are concrete indications of irregularities.

That legal architecture has one operational consequence. There is a normal mode and a triggered mode, and they must not be confused. A business that checks everything paralyses its trading desk. A business that checks nothing has no answer two years later. The traffic light is simply that distinction, made visible.

The mechanics: three colours, three duties

Green: the baseline check — normal mode

Every counterparty passes a baseline check: identity and registry data, a valid VAT identification number with a qualified confirmation, a plausible bank account, consistent contact and delivery details. Result and date are recorded. The normal case requires nothing more — and under the Mahagében line, authorities may not demand more without cause. Green means: checked, documented, no anomaly, trade proceeds.

Amber: the triggered check — enhanced due diligence

The system turns amber when a defined trigger fires. The triggers are not a consultant’s invention; they mirror the risk factors the German Federal Ministry of Finance itself has published for Section 25f cases: prices noticeably below market, unusual payment routes, a new or changed bank account, a delivery address that deviates from the contract chain, a high-volume first transaction, a supplier with no track record in the sector, an intermediary nobody can explain. Amber means: enhanced review with a documented memo — the signal, its source, the assessment, the additional checks, the decision, the person responsible. Approval moves one level up, from the desk to the tax or compliance function.

Red: stop or hold — a management decision

Red does not automatically mean “never”. Red means: this transaction does not move until tax or legal counsel — and, where red is confirmed, the managing director — has decided. Stop means rejection; hold means suspension pending clarification. The principle follows from the Court’s Italmoda line: a trader who recognises a fraud risk and trades through it anyway risks losing every VAT right attached to the transaction. The higher the risk, the higher the approval level — up to board level for red cases. That is not bureaucracy. It is directors’-liability hygiene: the decision sits where the responsibility already sits.

The sentence that decides cases

Years of defence work compress into one sentence: a warning signal without a documented escalation becomes evidence against you. If, in an audit or investigation, your buyer admits he saw the unusual margin but nobody assessed it, you have handed the authority its “should have known” finding. If, instead, you can show the signal was spotted, reviewed, assessed and the decision reasoned — even where that decision was “proceed” — your position changes fundamentally. Red flags are a reason to check, not proof of involvement. But unanswered red flags are the most dangerous exhibit in the file, because they are your own.

The traffic light protects in both directions: it escalates when a warning signal fires — and it documents that, absent a signal, no deeper investigation was owed. Even EU law knows no automatic block based on registry data alone: striking a trader off the VAT register without assessing the nature of the breaches and the trader’s conduct is contrary to EU law, as the Court of Justice held in Cityland in April 2025 — a deregistered partner is a reason to check, not a verdict.

Add the evidential reality. Formally, the tax authority must prove knowledge or constructive knowledge. In practice, it assembles indications — and the trader must explain why nothing was recognisable. German tax literature is candid about this: that counter-proof normally succeeds only where control systems existed beforehand and the diligence was documented. The traffic light is that control system in its simplest defensible form.

What the system does not promise — and why that is its strength

Here we are deliberately restrained, for legal reasons: a traffic-light system is not a safe harbour, not a certificate and not an exemption from liability. It will not prevent every fraud in every chain — no system can, and a system that claims to can actively harm you.

Compliance scholarship warns explicitly against zero-tolerance promises: a business that declares its system excludes any involvement in fraud sets itself an impossible standard of care — and in litigation it will be measured against that self-imposed standard, not the statutory one. Every deviation from your own promise is then reframed as an organisational fault. So we state the limit openly, including here: the traffic light delivers risk-based checking, reasonable enquiry upon cause, documented decisions and fast escalation. Nothing more. In court, that honest “nothing more” is worth more than any promise of completeness.

Compliance scholarship also warns of a dynamic standard of care: the easier and cheaper data checks become, the harder it is to justify not using them (Teichmann). The traffic light’s answer: calibration by cause instead of maximum screening — what is owed is the reasonable check of a prudent merchant, not the investigative work of an authority.

One further honest limit: a traffic light does not replace judgement. It forces a decision. Assessing an individual warning signal remains human work — the system merely ensures that the work happens, reaches the right level and leaves a trail.

A high-leverage use case: chain transactions

Nowhere does a traffic-light matrix earn its keep faster than in EU chain transactions: several traders, one physical movement of goods, and the zero-rating depends on which supply the transport is ascribed to. Ex-works collection by the buyer, shifting Incoterms, an intermediary inserted at short notice, a transport route that contradicts the invoice chain — each of these is a classic amber trigger. A chain-transaction matrix defines in advance which constellation is green (standard case, documented transport allocation), which is amber (self-collection or a new freight chain — additional evidence required) and which is red (transport route contradicts the contractual chain — hold until resolved). One of the most dispute-prone areas of EU VAT becomes an orderly daily routine.

From signal to evidence architecture

The traffic light is the operational core, but it does not stand alone. Every amber and red case produces a memo — and those memos are the raw material of the VAT Evidence Pack: one readable proof package, not 80 folders. The checks themselves follow the method described in Proof of Check: seven building blocks of demonstrable diligence. Which signals belong in your amber definition is the subject of supplier due diligence without blanket suspicion; whether you would spot those signals in your own supplier data is tested by the free red-flag self-check. Whether your escalation rules would hold today is answered in ten questions by the VAT CMS Quick Scan. The full picture — why VAT compliance is defence architecture — is on our VAT compliance overview.

German administrative practice rewards systems, too: under the official guidance to Section 153 of the German Fiscal Code, an implemented internal control system can be an indication against intent and recklessness. Not a free pass — an indication. But tax criminal proceedings are decided in the currency of indications.

What VSK delivers

We do not build corporate manuals. In a compact workshop format we build the traffic light that fits your size: a risk inventory of your goods, countries and channels; amber and red triggers aligned with the published risk factors of the German tax administration and your sector reality; an approval matrix with clear levels up to the managing director; red-flag memo templates; a training module for procurement and sales; and the link into the Evidence Pack and crisis processes. Fixed fee per module on request. Mid-sized businesses need systems that fit their size — and a traffic light your sales team actually uses protects more than a binder nobody opens.

FAQ