HostReady
Back to Italy (EN) blog
Italian Regulations

Alloggiati Web 2026: Register Guests With Police in 24h

Author:
Alloggiati Web 2026: Register Guests With Police in 24h

Italian law requires hosts to notify the Questura (police) of every guest within 24 hours of arrival via Alloggiati Web. Step-by-step setup guide for foreign owners.

READY-MADE CIN DOCUMENTATION

Get CIN-compliant in 2 evenings.

Italian STR without the stress.

Instead of drafting documents from scratch (40+ hours) or paying a consultant (€2,000+), download ready-made templates compliant with DL 145/2023 and the BDSR national registry.

Starter

€55

€89

Basic CIN documentation

Choose
Most popular

Standard

€79

€129

Starter + 30 days support

Choose

Full Compliance

€115

€189

Full pack with consultation

Choose
Templates EN/ITInstant delivery🔒Secure payment
See all packages

Alloggiati Web 2026: The 24-Hour Guest Registration Rule Every Foreign Owner Must Follow

Every guest who checks into your Italian short-term rental must be reported to the State Police through the Alloggiati Web portal within 24 hours of arrival. This is not a formality: under Art. 109 of the TULPS, failing to report a single guest carries fines from EUR 159 to 9,296, and in serious cases criminal liability. If you own an Italian property but live in London, New York or Dublin, this guide explains exactly how the obligation works, how to register with the Questura remotely, and how to stay compliant without ever being physically present at check-in.

Alloggiati Web (alloggiatiweb.poliziadistato.it) is the online system run by the Polizia di Stato that collects the identity details of everyone staying in Italian accommodation - hotels, B&Bs and short-term rentals alike. The legal basis is Art. 109 of the TULPS, a public-security law that predates tourism platforms but applies fully to any Airbnb, Booking.com or Vrbo stay under 30 days. For a foreign owner managing remotely, guest registration is the compliance task that recurs on every booking, and one of the databases the Guardia di Finanza cross-checks against your CIN and platform revenue.

Art. 109 TULPS obliges every accommodation provider to communicate the identity of guests to the State Police. For short-term rentals the technical rules are set out in the Ministry of the Interior decree of 07/01/2013, later modified on 16/09/2021. The core points:

  • Deadline: within 24 hours of the guest's arrival. For stays shorter than 24 hours (a single night arriving and leaving the same day), the report must be filed at the moment of arrival.
  • Who must be reported: every adult guest, plus accompanying minors (the identification of a minor can be simplified by referencing the accompanying parent's document).
  • Scope: the duty applies to every tourist rental under 30 days, including one-night stays. There is no exemption for small hosts or occasional lettings.
  • Record retention: the transmission receipt must be kept for 5 years and produced on inspection.

Crucially, the obligation sits with the person running the rental activity - the owner or the authorised property manager - not with the guest. Living abroad does not remove or soften the duty. The report is filed digitally, so it can be completed from anywhere in the world, but the underlying identity check must be genuine (more on that below).

Registering with the Questura: 5-10 working days

Before you can use Alloggiati Web you must be enrolled by your local Questura (provincial police headquarters). This is a one-time setup per property. As a non-resident owner you can complete it remotely or through your property manager. The typical process:

  • Complete the enrolment form for the Questura that covers the province where the property is located. The form is usually downloadable from the provincial police website.
  • Attach the supporting documents: your Italian codice fiscale, proof of title to the property, your active CIN, and a contact email or PEC (certified email) address.
  • Wait 5-10 working days for the Questura to verify and approve the enrolment.
  • Receive your credentials - a username and initial password - typically by PEC.
  • One enrolment per property: each cadastral unit (subalterno) needs its own Alloggiati Web account.

If you do not hold a codice fiscale yet, obtain one free at any Italian consulate before starting - it is also required for your CIN. The full remote CIN procedure is covered in the CIN BDSR guide for non-resident UK and US owners.

The 8 mandatory data fields

For each guest, Alloggiati Web requires eight fields. You can enter them manually or upload a CSV/XML file (useful if you use a property management system). The fields are:

Field Notes
Surname Exactly as shown on the identity document
First name(s) As on the document
Date of birth Day/month/year
Citizenship Nationality as printed on the passport or ID
Document type ID card, passport or driving licence
Document number Copy carefully - typos trigger errors
Arrival date + number of nights Must match the actual stay
Place of provenance Country of the guest's current residence (can differ from citizenship)

The distinction between citizenship and provenance trips up many hosts. A guest may be a US citizen (citizenship) currently living in Germany (provenance). Both are separate fields and confusing them is one of the most common causes of a rejected or flagged submission.

The step-by-step submission (about 5 minutes per group)

Once you are enrolled, filing a report for a group of guests takes roughly five minutes. The sequence:

  • Log in at alloggiatiweb.poliziadistato.it with your Questura credentials.
  • Select the property if you manage more than one.
  • Enter the guests via the manual form or a CSV upload.
  • Confirm and download the automatic receipt (PDF with a protocol number). This is your proof of compliance.
  • Store the receipt for 5 years as required by Art. 109 TULPS.

If you spot a mistake in a submitted card, you can correct it within 24 hours of transmission through the portal's edit function. After that window, corrections must be communicated by PEC to the territorial Questura - always keep the receipt of the correction.

Self check-in and key boxes: the November 2024 clarification

This is the point that most directly affects owners managing remotely. A Ministry of the Interior circular issued in November 2024 clarified that the guest's document must be checked in person - a photo alone is not sufficient. For a foreign owner who never meets guests, this changes how self check-in must be organised:

  • Personal identification is required before handing over the keys.
  • Key boxes remain allowed only when identification has taken place at a physical point (a partner cafe, a concierge, a local co-host).
  • Certified video-ID (eIDAS-compliant) is accepted as an alternative to physical contact.
  • A WhatsApp photo of the passport is no longer enough on its own.

The practical takeaway for remote owners: either use a certified eIDAS video-identification service, or delegate identification to a local co-host or check-in partner. A key box combined with a proper prior identification step is compliant; a key box with only a photo is not.

Penalties: EUR 159 to 9,296 per guest

The sanctions under Art. 109 TULPS are severe and calculated per unreported guest:

  • EUR 159 to 9,296 per guest not communicated.
  • Criminal liability, including imprisonment of up to 12 months, in the most serious or repeated cases.
  • Suspension of Alloggiati credentials, temporarily blocking your ability to operate.
  • Cumulation with CIN sanctions: Alloggiati fines stack on top of CIN penalties under DL 145/2023 Art. 13-ter, because they are separate obligations.

Because the fine is per guest, a single busy month of unreported stays can generate five-figure exposure. This is not a theoretical risk: the number of nights platforms report to the Agenzia delle Entrate under DAC7 is directly comparable with the number of guest registrations you filed with the police.

The cross-check machine: why gaps get noticed

Alloggiati Web data does not sit in isolation - it is one of the databases authorities compare against each other:

  • DAC7 vs Alloggiati Web: the booked nights Airbnb and Booking.com report to the tax authority are compared with the guest registrations you filed. Revenue with few or no registrations is a red flag.
  • Alloggiati Web vs BDSR: your guest activity is checked for consistency with your CIN and property record.
  • EU Regulation 2024/1028: from 20 May 2026, platforms must verify registration codes and transmit activity data to a single national entry point, tightening the loop.

Alloggiati Web lets you export your data as CSV or XML - the format you want for reconciling your own records against DAC7 reports each spring. The DAC7 guide for foreign owners explains how platform reporting feeds the cross-check.

Five common mistakes that trigger inspections

Most enforcement against foreign owners stems from a handful of avoidable errors:

  • Guest reported late - after the 24-hour window - or forgotten entirely.
  • Document number typos that do not match the physical ID.
  • Confused arrival/departure dates or an incorrect number of nights.
  • Citizenship entered where provenance was required, or vice versa.
  • Receipts not retained for the mandatory 5 years.

Frequently asked questions

Do I have to register children too?

Yes. Every guest must be reported, including minors. For a minor without their own document, reference the accompanying parent's document details with a note indicating the accompanying minor.

What if my guest has no Italian tax code?

Non-resident foreign guests do not need an Italian codice fiscale. The document details - passport number, date of birth, citizenship - are enough. Remember to enter citizenship (from the passport) and provenance (country of current residence) as separate fields.

Can I automate this with a property management system?

Yes. PMS platforms such as Smoobu, Lodgify and Octorate generate CSV/XML files compatible with Alloggiati Web, cutting the time per group to about a minute (budget roughly EUR 20-50 per month for one to three properties). Automation does not remove the in-person identification requirement - it only speeds up the data submission.

I manage the property entirely from abroad. Who files the report?

Either you, remotely, using your Questura credentials, or your local property manager under a mandate. The identity verification must still happen in person or via certified eIDAS video-ID. Practically, most remote owners delegate identification to a local co-host and either file the report themselves or let the co-host do it under the same account.

This article is for informational purposes only and does not constitute legal advice. Sanction ranges and procedural requirements reflect the framework in force in early 2026 and may be updated; provincial Questure and regional authorities may apply additional local rules. Always verify your specific situation with a qualified Italian professional.

Don't want to search for templates and regulations on your own? The HostReady Package includes complete documentation, ready-to-use templates, and checklists - everything you need for CWTON registration and legal short-term rental, ready to use right after purchase.

Newsletter

Regulatory updates and practical tips - now and then.