Most mistakes companies make with withholding tax in Colombia aren’t about applying the wrong percentage on purpose — they come from outdated tables, a mid-year rate reversal almost nobody tracked in real time, and self-withholding calculated on the wrong economic activity code. Retención en la fuente looks like a fixed, mechanical rule, but 2026 has been anything but stable: a decree that raised self-withholding rates was suspended by the Consejo de Estado in May, then reinstated in June, and companies that didn’t catch that reversal are now sitting on months of miscalculated autorretención.
This guide covers the mistakes actually causing problems for companies in 2026 — starting with the regulatory whiplash almost no one saw coming.
Reviewed by Mauricio Naranjo, Director of Tax and Accounting at Nexo Legal. Specialist in Tax Law (Universidad Externado de Colombia), Master’s in Procedural Law.
Table of Contents
- The 2026 Story Nobody Saw Coming: The Decreto 572 Suspension and Reversal
- Mistake 1: Autorretención Calculated on the Wrong CIIU Code
- Mistake 2: Not Updating the UVT Every January
- Mistake 3: Misclassifying the Payment
- Mistake 4: Applying the Wrong Withholding Base
- Mistake 5: Withholding Correctly but Never Declaring It
- Mistake 6: Missing the March 31 Certificate Deadline
- Mistake 7: Withholding Records That Don’t Match Electronic Payroll
- Mistake 8: Withholding on Payments Abroad Without Checking the Treaty
- How Do Withholding Mistakes Turn Into DIAN Penalties?
- Withholding Tax in Colombia: A 2026 Monthly Compliance Checklist
- FAQs
The 2026 Story Nobody Saw Coming: The Decreto 572 Suspension and Reversal
In May 2025, Decreto 572 de 2025 raised the rates most companies use for autorretención especial de renta (special self-withholding on income), the mechanism large taxpayers and companies with responsabilidad 15 use to self-withhold on their own revenue based on their principal CIIU economic activity code.
Then, in 2026, the rule itself became unstable:
- May 7, 2026: The Consejo de Estado provisionally suspended articles 2 to 8 of Decreto 572 (the rate provisions), reverting companies to the prior, lower self-withholding rates (see DIAN’s official notice).
- June 2, 2026: The Consejo de Estado revoked its own suspension.
- July 1, 2026: Decreto 572’s higher rates came back into full force.
Any company that adjusted its self-withholding once in May and didn’t adjust it back in July is currently applying the wrong rate — and if that error ran for multiple months, it means correcting several Formulario 350 filings retroactively, not just the current one. This is the single most consequential withholding tax mistake of 2026, and it’s a compliance problem almost every affected company shares in common, not an isolated error.
| Date | Event | Practical Effect |
|---|---|---|
| May 2025 | Decreto 572 de 2025 issued | Self-withholding rates raised across most CIIU codes |
| May 7, 2026 | Consejo de Estado suspends the decree | Companies should have reverted to prior, lower rates |
| June 2, 2026 | Consejo de Estado revokes the suspension | Higher Decreto 572 rates apply again |
| July 1, 2026 | Decreto 572 rates fully in force | Current applicable rates for autorretención |
If your accounting team made only one of these two adjustments — or neither — the company’s self-withholding for at least part of 2026 is calculated on a rate that was not actually in force during that period. This is worth flagging specifically to whoever prepares your monthly Formulario 350, since it is exactly the kind of change that doesn’t show up unless someone is actively cross-checking the decree’s legal status month by month, rather than assuming a rate that applied in January still applies in July.
Check that your autorretención rate matches what was actually in force each month of 2026.
Mistake 1: Autorretención Calculated on the Wrong CIIU Code
Self-withholding rates under Decreto 572 (modifying Article 1.2.6.6 of Decreto 1625 de 2016) range from 0.55% to 4.5%, depending on the company’s principal CIIU economic activity code — not a flat rate across all companies with responsabilidad 15.
The base for this calculation is each payment or credit received for the company’s activity, excluding VAT when the invoice includes it. Two mistakes compound here: applying an outdated CIIU-to-rate mapping (especially after the Decreto 572 whiplash above), and calculating the autorretención on the gross invoiced amount instead of the VAT-excluded base. A single wrong rate applied consistently for a full year means correcting twelve monthly Formulario 350 filings, not one.
Mistake 2: Not Updating the UVT Every January
Every withholding threshold in Colombia — the minimum base for purchases, services, rentals, and salaries — is expressed in UVT, not in a fixed peso amount. The 2026 UVT is COP $52,374, up from the 2025 value. Companies that keep last year’s peso thresholds hardcoded in their accounting or invoicing system will apply withholding at the wrong point, either withholding on payments that fall below this year’s actual threshold or failing to withhold on ones that now exceed it.
This is a purely mechanical error, but it’s one of the most common because it depends entirely on someone remembering to update a number every January 1st — not on understanding the rule itself. For the current thresholds by concept, see our complete withholding tax procedure guide, which we’re updating annually with the current UVT-based figures.
Mistake 3: Misclassifying the Payment
Honorarios, comisiones, and servicios generales carry different withholding rates, and confusing them is one of the most frequent errors companies make — not because the concepts are obscure, but because a single contractor invoice can plausibly fall into more than one category depending on how the relationship is actually structured.
Fees paid to independent professionals for intellectual or specialized work fall under honorarios; payments tied to a percentage of a transaction fall under comisiones; general contracted services fall under servicios. Getting this wrong doesn’t just mean the wrong withholding rate — it means the withholding certificate issued to the supplier is also wrong, which can create problems for that supplier’s own tax filing.
The distinction matters because these categories carry meaningfully different rates and, in some cases, different minimum bases before withholding even applies. A marketing agency invoicing for a mix of strategic consulting (honorarios) and ad placement management (servicios) in a single invoice, for example, should in principle be withheld at different rates for each component — something most accounting teams skip in practice because it’s simpler to apply one rate to the whole invoice. That simplification is convenient, but it’s also exactly the kind of inconsistency that shows up when DIAN cross-references a company’s withholding filings against the supplier’s own declared income.
Withholding correctly but never filing Formulario 350 is still a violation.
Mistake 4: Applying the Wrong Withholding Base
Even when the classification and the rate are both correct, companies frequently calculate the withholding on the wrong number: the full invoice amount instead of the amount net of VAT, or the total contract value instead of the specific payment being made in that period. For payments in installments, withholding applies to each individual payment against its own applicable minimum base — not to the full contract value evaluated once at signing.
Mistake 5: Withholding Correctly but Never Declaring It
A company can withhold the exact right amount from a supplier and still end up penalized, if that withholding is never declared and paid to DIAN through the monthly Formulario 350. This is functionally treated the same as not withholding at all from an enforcement standpoint: DIAN doesn’t distinguish between an amount that was never retained and one that was retained but never remitted. Filing Formulario 350 late, or not filing it despite having withheld funds during the period, converts a bookkeeping delay into a formal compliance failure.
Mistake 6: Missing the March 31 Certificate Deadline
Companies acting as withholding agents must issue withholding certificates to every supplier and employee for the prior fiscal year no later than the last business day of March — March 31, 2026, for withholdings practiced during 2025. Missing this deadline triggers the penalty under Article 667 of the Estatuto Tributario: 5% of the value of the payments corresponding to the certificates not issued.
This deadline is easy to miss precisely because it falls months after the fiscal year it covers, when attention has already moved to income tax filing season. Suppliers who don’t receive their certificate on time also can’t properly file their own returns, which creates a second layer of friction with the people your company depends on.
The practical fix is treating certificate issuance as its own separate task on the compliance calendar, not as an afterthought of the December withholding filing. Companies that generate certificates directly from their accounting system as each month closes — rather than reconstructing an entire year’s withholdings in March from scratch — rarely miss this deadline, because there’s nothing left to assemble under time pressure once the fiscal year ends.
Classify each supplier payment before applying the rate.
Mistake 7: Withholding Records That Don’t Match Electronic Payroll
For payroll withholding specifically, the Formulario 220 certificate of income and withholdings must reconcile exactly with the electronic payroll (nómina electrónica) transmitted to DIAN throughout the year. When these two records don’t match — a bonus recorded in payroll but not reflected in the withholding certificate, or a withholding adjustment made in accounting but never transmitted electronically — DIAN’s cross-checking systems flag the inconsistency automatically, since both data sets already sit inside DIAN’s own systems. This kind of reconciliation is one piece of a much larger annual cycle; our complete guide to company tax obligations in Colombia covers the full picture beyond withholding alone.
Mistake 8: Withholding on Payments Abroad Without Checking the Treaty
Payments to non-residents are generally subject to withholding at rates that typically range between 10% and 20% depending on the type of payment and the recipient’s country, under Article 408 of the Estatuto Tributario. Companies frequently apply the default domestic rate without checking whether Colombia has a double taxation treaty with the recipient’s country that reduces it — or apply a treaty-reduced rate without the recipient having provided the required certificate of tax residency to support it. Either mistake creates exposure: over-withholding strains the commercial relationship, and under-withholding without proper support creates a DIAN liability for the paying company.
This is a growing exposure point specifically because more Colombian companies now routinely pay foreign contractors, SaaS subscriptions, and cross-border service providers than they did even a few years ago — and many of these payments are processed through the accounts payable team rather than reviewed by whoever handles the company’s tax compliance. A payment to a software vendor abroad, a royalty payment, and a consulting fee paid to a foreign professional can each carry a different withholding treatment under Article 408, and treating them all the same by default is one of the more expensive assumptions a growing company can make.
How Do Withholding Mistakes Turn Into DIAN Penalties?
Every mistake above eventually intersects with Colombia’s formal penalty regime. Withholding the correct amount but never declaring it falls under the failure-to-file penalty; declaring the wrong amount falls under the inaccuracy penalty; missing the certificate deadline has its own dedicated penalty under Article 667. Our complete breakdown of the tax mistakes that lead to DIAN penalties for companies covers exactly how each of these translates into a calculable 2026 fine, article by article.
Withholding errors also tend to surface through DIAN’s cross-checking of información exógena — since the amounts a company reports as withheld must match what its suppliers report as withheld from them. Our guide to the exógena mistakes costing companies millions covers that specific cross-check in detail.
Withholding certificates are due by March 31, separately from your monthly filings.
Withholding Tax in Colombia: A 2026 Monthly Compliance Checklist
- Confirm the current CIIU-based autorretención rate applies — don’t assume May’s or June’s rate is still correct after the Decreto 572 reversal.
- Verify the 2026 UVT ($52,374) is what your accounting system is actually using for every withholding threshold.
- Classify each new supplier payment correctly before the first invoice, not after several have already gone through.
- Reconcile Formulario 350 against your actual bank disbursements every month, not only at income tax filing time.
- Calendar the March 31 certificate deadline separately from income tax season, since it’s easy to lose track of once fiscal year attention shifts.
- Cross-check payroll withholding certificates against transmitted electronic payroll before issuing them.
This routine sits inside a company’s broader annual compliance calendar; our guide to monthly tax and accounting obligations for companies in Colombia covers how withholding fits alongside VAT, ICA, and other recurring filings. Companies that get a formal information request from DIAN about a withholding discrepancy should also see our guide on how to respond to DIAN requirements before replying.
FAQs
What changed with withholding tax in Colombia in 2026?
Decreto 572 de 2025 raised self-withholding (autorretención) rates for companies with responsabilidad 15. In 2026, the Consejo de Estado suspended the decree on May 7, then revoked its own suspension on June 2, restoring the higher rates from July 1 onward. Companies need to confirm they applied the correct rate for each specific month.
What is autorretención especial de renta and who has to apply it?
It’s a self-withholding mechanism under Decreto 1625 de 2016 (as modified by Decreto 572 de 2025) for companies with responsabilidad 15, calculated on each payment or credit received, at a rate between 0.55% and 4.5% depending on the company’s principal CIIU economic activity code.
What happens if I withhold correctly but forget to declare it?
It’s treated the same as not withholding at all for enforcement purposes. DIAN doesn’t distinguish between funds never retained and funds retained but never remitted through Formulario 350 — both trigger the failure-to-file penalty.
When do I have to issue withholding certificates in Colombia?
No later than the last business day of March of the year following the fiscal year in question — March 31, 2026, for withholdings practiced in 2025. Missing this deadline triggers a penalty under Article 667 of the Estatuto Tributario equal to 5% of the payments corresponding to the certificates not issued.
Do I need to check for a tax treaty before withholding on a payment abroad?
Yes. Colombia’s default withholding rates on payments to non-residents range from 10% to 20% depending on the payment type, but a double taxation treaty with the recipient’s country may reduce that rate — provided the recipient supplies a valid certificate of tax residency to support the reduced rate.
Why does the UVT matter for withholding tax thresholds?
Every withholding minimum base is defined in UVT, not in fixed pesos. The UVT increases every January, so a company using last year’s peso figures will withhold at the wrong threshold — either withholding on payments below this year’s real minimum or skipping withholding on ones that now exceed it.
Nexo Legal helps companies audit their withholding tax calculations, correct autorretención errors after the 2026 Decreto 572 reversal, and respond to DIAN before a withholding mistake becomes a formal penalty.