FTA Tax Audit in the UAE: The Process and How to Prepare

What is an FTA tax audit, and what does it actually involve?

An FTA tax audit is a formal examination by the Federal Tax Authority of your records, systems and filed returns to establish whether the tax you reported is correct. It is a procedure under the Tax Procedures Law, Federal Decree-Law No. 28 of 2022 — not a criminal process, and not in itself an allegation of wrongdoing.

In practice it can take two forms. Most audits are conducted remotely: the FTA requests documents through EmaraTax, reviews them, and raises written queries. The Authority can also conduct a field audit at your place of business during working hours, and where it does, it may examine records and inspect goods and systems on site.

A few rights come with the process and are worth knowing. You are entitled to be notified before an audit in the normal case. Where original records or assets are removed, you are entitled to copies of what was taken. And you are entitled to be represented — but only by an appointed Tax Agent, which is the practical reason the distinction between an FTA Tax Agent and a tax consultant matters at this moment rather than at any other.

What triggers an FTA tax audit?

The FTA does not publish its selection criteria, and any firm claiming to know them precisely is guessing. What can be said from experience is which patterns recur in the files that get selected:

• Mismatches between returns — revenue reported on the Corporate Tax return not agreeing with the total of the VAT 201 returns for the same period. This is the single most common flag and the easiest to prevent.
• Late or missed filings — a pattern of late VAT quarters, or a Corporate Tax registration made well after the incorporation date.
• High input VAT recovery relative to output — persistent refund positions attract review, particularly where the business model does not obviously explain them.
• Sector campaigns — the Authority periodically focuses on particular sectors, and real estate, trading and professional services have all featured.
• Third-party information — data from customs, other authorities, counterparties, and reports from former employees or suppliers.
• Deregistration and liquidation — the final period before deregistration is frequently reviewed. If you are closing a company, assume the last return will be looked at, and see our guide on the FTA email after company liquidation.

Note what is not on that list: being small, being new, or being profitable. Selection is driven by data inconsistency far more than by size, which is why the reconciliation between your books, your VAT returns and your Corporate Tax return is the highest-value thing to keep tidy.

How much notice does the FTA give before an audit?

Under the Tax Procedures Law the FTA must generally notify you at least 5 business days before conducting a tax audit. There are exceptions — notification can be dispensed with where the Authority considers that giving notice would obstruct the audit, for example in suspected evasion cases or where goods are being inspected.

That 5 business days is the notice period, not the deadline for producing documents. The document deadline is set in the notice itself and varies with the scope of the review; short windows are common. Treat both dates as immovable. Missing a document deadline does not pause the audit, and it removes your ability to shape the findings before they are drafted.

The notice will identify the tax type under review, the periods covered, and what is required from you. Read the period range carefully — a notice framed as a VAT audit for a single year frequently expands once the reconciliation raises questions about adjacent periods.

How far back can the FTA audit your business?

This is where the original version of this guide, and much of the market, conflated two different rules. Record retention and the audit time limit are separate, and you need both.

The practical implication runs the opposite way to what people assume. Keeping records for seven years does not mean the FTA can reach back seven years in an ordinary audit — but failing to register at all removes the short window entirely and replaces it with a very long one. The businesses most exposed on this point are the ones that never registered because they believed they were exempt.

What documents does the FTA request in a tax audit?

The request is usually broad on the first pass and narrows as the review progresses. Expect to produce:

• Financial statements and trial balance for each period under review, agreeing to the filed returns.
• Sales and purchase invoices — tax invoices meeting the content requirements, not just internal records of the amounts.
• Bank statements for every account, with a reconciliation to reported revenue.
• General ledger and VAT account detail, including the output and input tax accounts by period.
• Contracts and agreements supporting significant transactions, particularly with related parties.
• Import and export documentation, customs declarations and evidence supporting zero-rating.
• Credit notes, adjustments and bad debt relief workings.
• Prior correspondence with the FTA, including any earlier voluntary disclosures.

Where records are requested in Arabic, they must be provided. Failure to supply records in Arabic when specifically requested carries its own penalty, separate from failure to keep them at all. Businesses that maintain proper monthly bookkeeping produce this pack in days; businesses that close their books once a year at filing time typically cannot produce it inside the deadline, which is where audits go badly for reasons unrelated to the underlying tax.

What happens at each stage of an FTA audit?

Five stages, each with its own deadline. The leverage you have declines at every step, which is the argument for engaging properly at stage one rather than stage four.

1. Notification — a formal notice through EmaraTax and email identifying the tax type, the periods under review and what is required. Generally at least 5 business days before the audit.
2. Document submission — you produce the requested records by the stated deadline. An appointed Tax Agent submits and corresponds on your behalf from this point.
3. Review and queries — auditors work through the records and raise written queries, each with a response deadline. This is the stage where explanations change outcomes.
4. Preliminary findings — the FTA sets out the discrepancies it has identified. You can respond with explanations, further documentation, or corrections.
5. Final assessment — the Authority issues its assessment of additional tax and administrative penalties. From notification of that decision, the reconsideration clock starts.

The thing to understand about stage three is that most findings are provisional until they are not. An auditor working from incomplete records will draw the reasonable inference available to them, and a clear written explanation with supporting documents frequently removes an item before it reaches preliminary findings. After the final assessment, the same explanation has to travel through a formal dispute process instead.

What are the most common FTA audit findings and what do they cost?

Two penalty regimes apply and should never be conflated. Corporate Tax penalties sit under Cabinet Decision No. 75 of 2023 as amended by Cabinet Decision No. 10 of 2024. VAT and Excise penalties sit under Cabinet Decision No. 129 of 2025, in force from 14 April 2026.

Note the reverse charge row. The underlying tax is frequently nil once input recovery is taken into account, but the return was still wrong — and administrative penalties attach to the error, not to the revenue loss. This is the most common source of surprise in a VAT audit.

Should you make a voluntary disclosure before or during an audit?

Before, wherever the option still exists. A voluntary disclosure is the mechanism for correcting an error in a submitted return, and it is generally required within 20 business days of becoming aware of the error — a deadline that runs from your knowledge, not from any FTA action.

The penalty structure has a fixed element and a variable one. The fixed element is AED 1,000 for a first disclosure and AED 2,000 for each subsequent one within 24 months. Where tax was underpaid, a percentage-based element applies on top, and that percentage is lower the earlier the disclosure is made relative to the FTA becoming involved. Late payment then runs at 14% per annum charged monthly on the underpaid tax from the original due date.

Three practical points. First, disclose per return, not in aggregate — each affected period is its own disclosure. Second, the AED 20 business-day clock starts when you become aware, so a review that surfaces an error creates an immediate obligation rather than an option to think about it. Third, once an audit is under way, the ability to reduce exposure by disclosing narrows considerably, which is the entire argument for reconciling proactively rather than waiting to be asked.

Can you challenge an FTA assessment, and how long do you have?

Yes, and there is a defined ladder. Each rung has its own deadline and missing one generally ends the route.

Separately from the dispute route, there is a mechanism for requesting instalment payment or waiver of administrative penalties in defined circumstances. That is an application on its own terms, not an appeal, and it does not extend the reconsideration deadline — the two are frequently confused, with the result that a business pursuing a waiver quietly loses its right to challenge the assessment itself.

One point on strategy: a reconsideration request is decided on the documents you submit with it. If the underlying explanation was never put in writing during the audit, this is the last comfortable opportunity to do so, and it is worth having an appointed FTA-registered Tax Agent draft it.

What does an FTA audit cost when things go wrong?

A worked example, using the finding we see most often. A Dubai trading company is audited across four VAT quarters. The auditors identify AED 85,000 of input VAT recovered on ineligible expenses — entertainment costs and vehicles available for private use — spread across the year.

Route one: found on audit. The input tax is disallowed and becomes repayable. The assessment is issued roughly 14 months after the original due dates, so late payment at 14% per annum charged monthly adds approximately AED 13,900. Add the AED 500 incorrect return penalty per affected return — AED 2,000 across four quarters. Add an AED 10,000 record-keeping penalty if the invoice file was incomplete. Total exposure: roughly AED 110,900, of which AED 85,000 was always payable and about AED 25,900 was avoidable.

Route two: found in your own review and disclosed. The same AED 85,000 is repayable, but the disclosures go in within 20 business days of discovery, roughly four months after the due dates. Late payment interest is proportionately smaller, the fixed voluntary disclosure penalties are AED 1,000 for the first and AED 2,000 for each of the next three — AED 7,000 — plus the percentage element, and there is no incorrect-return penalty because the returns were corrected. The gap between the two routes is meaningful and it is entirely a function of who found it first.

Neither route makes the AED 85,000 go away. That is the point worth internalising: an audit does not create tax liabilities, it discovers them. What it creates is penalties and interest, and those are the part you can still influence. Run your numbers through the UAE Corporate Tax calculator if the exposure is on the CT side.

How do you prepare before an audit notice arrives?

The preparation that works is ordinary and continuous. Nothing on this list can be done in the five business days between the notice and the audit.

If you are on the right-hand side, the highest-value single action is the CT-to-VAT revenue reconciliation, because that mismatch is both the most common trigger and the first thing an auditor tests. The second is appointing a Tax Agent before you need one; the appointment itself takes minutes, but doing it under a five-day deadline while also assembling a document pack is how deadlines get missed. Our guide on how to choose a tax consultant in Dubai covers what to check first.

What do the key audit terms mean?

The vocabulary in an FTA notice is precise, and two of these terms are routinely used to mean each other.