VAT Supplier Due Diligence UAE 2026: Know Your Supplier or Lose Your Input VAT

VAT supplier due diligence used to be optional in the UAE. If a VAT-registered supplier gave you a tax invoice with a valid TRN and you paid it, the 5% input VAT was yours to recover, and whether the supplier ever paid that VAT to the FTA was the supplier’s problem. Since 1 January 2026 that is no longer true. Federal Decree-Law No. 16 of 2025 amended the VAT Law so that the FTA can deny input tax recovery where a supply is connected to tax evasion and the recipient knew or should have known. The invoice still matters, but it is now the start of the test rather than the end of it. This guide explains what changed, how missing trader fraud turns an honest buyer into the FTA’s recovery target, the red flags you are expected to notice, a six-step supplier check that satisfies the standard, and exactly what to do if you have already claimed input VAT from a supplier that turns out to be non-compliant. Fastlane’s VAT supplier due diligence and filing service runs the checks on every active return from AED 199 a quarter, so the evidence exists before the FTA asks for it.

What changed for input VAT recovery on 1 January 2026?

Federal Decree-Law No. 16 of 2025, in force from 1 January 2026, added an anti-evasion condition to input tax recovery: the FTA can deny recovery where it determines that a supply was part of a chain connected to tax evasion and the recipient knew, or should have known, of that connection. The amendment also expects the recipient to have verified the validity and integrity of the supply before claiming. Under the previous framework a compliant tax invoice from a registered supplier generally settled the matter; now it does not.

The same decree made two other changes that sit alongside the due diligence rule. Excess recoverable input VAT now lapses five years after the end of the tax period in which it arose if it has not been refunded or offset — the credit that used to carry forward indefinitely has an expiry date. And the requirement to issue a tax invoice to yourself for reverse-charge supplies was removed; supporting documents must be retained instead, which shifts the evidential weight onto your records rather than a self-generated invoice. Each change points in the same direction: the FTA wants the buyer’s file to prove the claim, not the supplier’s paperwork.

The FTA’s enforcement model has changed in parallel. Its risk-based audit selection cross-references VAT returns with corporate tax filings, customs declarations and supplier payment patterns, so a supplier that collects VAT and disappears is visible in the data long before anyone opens a physical file. When the FTA finds that supplier, the next question is who claimed the input VAT and what they did to check the supplier first. Businesses that have historically relied on the “invoice equals recovery” assumption are the ones with no answer.

How does missing trader fraud turn a supplier’s evasion into your VAT problem?

Missing trader fraud is the specific problem the 2026 rule targets: a supplier registers for VAT, charges 5% on its sales, collects the VAT from you, and disappears without paying it to the FTA. You have paid the VAT and claimed it as input tax; the FTA has never received it. Before 2026 the FTA carried that loss. Now, if you knew or should have known, it can recover the loss from you by denying the claim.

Step 5 is where the standard bites. If reasonable due diligence would have identified the supplier as suspicious — no physical address, a TRN issued weeks earlier, prices far below market, payment instructions pointing to a different company — the FTA can treat you as someone who should have known, and the input VAT goes with it. The rule is not designed to punish honest businesses; it is designed to make every participant in a supply chain exercise basic vigilance, which is the approach the EU and the UK have enforced for years under their own “knew or should have known” tests. The UAE has now adopted the same logic.

What does “knew or should have known” mean for VAT supplier due diligence?

It is an objective test. The FTA does not have to prove you were part of the fraud; it asks whether a reasonable business, exercising ordinary commercial care, would have noticed the warning signs. Actual knowledge is rare and easy to decide. “Should have known” is where most disputes will sit, and it turns on two things: what signs were visible at the time, and what you did about them.

That second point is the practical one. A business that checked the TRN, matched the trade licence, questioned an unusually low price and either cleared the concern or walked away has a defence, because it can show the diligence it exercised. A business that did nothing has no defence even if it was innocent, because the test is not about intent — it is about care. The evidence therefore has to exist before the claim, not be reconstructed after the audit letter arrives. The know-your-customer discipline that DNFBPs already apply under AML rules is the closest existing analogy: the same file-building habit, pointed at suppliers.

Two corrections to a common belief. First, a denial is not the end of the road: a decision to deny input tax can be challenged through the FTA’s reconsideration procedure within 40 business days of notification under the Tax Procedures Law (Federal Decree-Law 28/2022), and beyond that through the Tax Disputes Resolution Committee. Second, that challenge is only as good as your documentation. Reconsideration reviews what you can prove you did at the time; it does not create diligence that never happened.

What are the seven red flags the FTA expects you to spot?

The FTA does not expect you to be a fraud investigator, but it does expect you to recognise obvious warning signs. Seven situations, drawn from the legislation, FTA guidance and the EU and UK case law the UAE test mirrors, are the ones most likely to trigger the “should have known” standard.

Flags 2 and 3 deserve a note because they are not fraud at all — they are ordinary VAT errors, and they cost you the same way. VAT wrongly charged on an exempt supply, or charged by a foreign supplier where the reverse charge applies, is not recoverable input tax regardless of the supplier’s honesty. The remedy is a credit note from the supplier, not a claim on your return. Under the 2026 standard, claiming it anyway is the kind of error the FTA will say you should have caught. Our guide to the VAT return deadline and the 28-day cycle covers where these checks fit in the quarterly rhythm.

What is the six-step VAT supplier due diligence process?

Verify the TRN, match it to the trade licence, validate the VAT treatment, check that payment goes to the invoicing entity, assess commercial substance, and document all of it in a Know Your Supplier file. Run the full process for every new supplier and refresh it quarterly for existing ones. It takes 15–20 minutes per new supplier and about five minutes per quarter thereafter.

1. Verify the TRN before the first transaction — Enter the supplier’s 15-digit TRN in the FTA’s public TRN verification tool on tax.gov.ae. Confirm it is active, that the legal name matches the invoice, and save a dated screenshot to the supplier file.
2. Match the TRN to the trade licence — Obtain a copy of the trade licence and check that the legal name and licensed activity match the TRN registration and the goods or services being invoiced. A licence for IT services invoicing gold is a red flag.
3. Validate the VAT treatment on every invoice — Confirm the 5% charge is correct for the supply: standard-rated, zero-rated, exempt, out of scope or reverse charge. Never claim VAT that should not have been charged; ask the supplier for a credit note instead.
4. Check payment alignment — Pay only the bank account of the entity that issued the invoice. If payment instructions point to a third party or the account name differs from the supplier, stop and investigate before paying.
5. Assess commercial substance — Look for a physical address, a website, other customers, trading history and market-level pricing. A new supplier with no presence and prices well below market is the profile the FTA associates with evasion.
6. Document everything in a Know Your Supplier file — Store the TRN screenshot, trade licence, correspondence, price benchmarking and your risk conclusion for each supplier, and refresh the file quarterly. This folder is your evidence in an FTA audit.

Prioritise where the exposure is. Three groups of suppliers deserve the full six steps every time: any new supplier, any supplier whose invoices exceed roughly AED 50,000 a year, and any supplier that changes its bank details, legal name or TRN mid-relationship — a changed bank account is the single most common signal in third-party-payment fraud. For the long tail of small, established suppliers, an annual TRN re-check and a glance at the VAT treatment on each invoice is proportionate. The FTA’s test is reasonableness, not perfection: a documented, risk-weighted process that you can show you followed is worth more than an exhaustive one that lapsed after two quarters.

Build the refresh into the return cycle rather than treating it as a separate project. In the week before each VAT 201 is prepared, re-verify the TRNs of every supplier appearing on the input schedule for the first time that quarter, confirm that no payment in the period went to an account that does not match the invoicing entity, and note the conclusion in the Know Your Supplier file. That is a five-minute task per supplier when the bookkeeping is current, and it produces exactly the evidence the FTA’s auditors ask for first.

The arithmetic behind the effort is simple. A supplier you buy AED 500,000 a year from carries AED 25,000 of input VAT. If that supplier is non-compliant and you did no checks, the AED 25,000 is not a penalty you can negotiate — it is money you paid and cannot recover, plus the correction penalties in section 8. Twenty minutes of VAT supplier due diligence on day one, and a five-minute quarterly refresh, is the cheapest insurance in the VAT system. Fastlane performs all six steps on every supplier that appears on an active return.

How much input VAT is actually at risk? Four Dubai scenarios

Every one of the businesses below paid real money including VAT, received what looked like a valid invoice, and still faces a denied or non-recoverable claim — because a basic check would have caught the problem. The exposure runs from AED 15,000 to AED 100,000 per supplier, before penalties.

What makes these cases costly is the nature of the loss. A late-filing penalty is a one-off charge; denied input VAT is money you paid to a supplier, recovered from the FTA, and must now return — with a monthly percentage penalty running from the original due date, and 14% per annum late-payment if the corrected amount is not settled when it falls due. The earlier a problem is found, the smaller every one of those numbers is, which is why the checks belong in the return cycle rather than in the audit response.

Which industries face the highest VAT supplier due diligence risk?

Trading and distribution, construction, gold and precious metals, electronics and staffing carry the highest risk, because they combine long supply chains, high volumes, frequently changing suppliers and complex VAT treatments — the conditions missing trader and carousel fraud need. If your business sits in one of these sectors, the FTA’s risk analytics are already looking at your supply chain.

Free zone businesses have an extra layer to watch. Goods moving between Designated Zones can be outside the scope of VAT, imports into the mainland are accounted for through the customs-VAT link, and a Designated Zone supplier charging 5% on a supply that should be out of scope is a treatment error you are expected to recognise. Fastlane’s free zone audit and compliance work sees this most often in DAFZA and JAFZA trading chains, where the paperwork is complicated enough that nobody questions the invoice.

What should you do if you have already claimed input VAT from a suspect supplier?

Stop claiming on that supplier immediately, quantify what you have already claimed, and correct it before the FTA does. Errors above AED 10,000 in a period must be corrected by voluntary disclosure on Form VAT 211 within 20 business days of discovering the error; errors of AED 10,000 or less can be corrected in the next return. The penalty on a voluntary disclosure is 1% per month of the tax difference; wait for the FTA to find it and a fixed 15% is added.

One nuance for treatment errors rather than fraud. If a supplier wrongly charged VAT on an exempt or reverse-charge supply, the amount was never recoverable input tax, but it was also never the FTA’s money to keep from the supplier’s side — the supplier should issue a tax credit note and refund the 5% to you. Ask for it at the same time as you correct your return; you should not be out of pocket twice.

What does the legal framework for VAT supplier due diligence actually say?

Four instruments matter: Federal Decree-Law 16 of 2025 for the anti-evasion test, the five-year lapse of excess credit and the reverse-charge change; Cabinet Decision 129 of 2025 for the VAT penalties that apply from 14 April 2026; the Tax Procedures Law, Federal Decree-Law 28 of 2022, for voluntary disclosures and reconsideration; and Federal Decree-Law 8 of 2017 as the underlying VAT Law, including the existing condition that input tax is reversed if the supplier is not paid within six months of the agreed payment date.

Note what is not in the table: corporate tax. The corporate tax penalty schedule sits under Cabinet Decision 75/2023 and is a separate regime, even though the FTA’s analytics cross-check the two returns. A supplier that vanishes from your VAT file also vanishes from the cost base on your corporate tax return, and an FTA enquiry into one increasingly triggers a look at the other.

How will e-invoicing change FTA enforcement of the supplier rules?

E-invoicing turns the “should have known” test from a periodic audit question into a real-time data match. Under the Ministry of Finance timeline the UAE e-invoicing system opens with a voluntary pilot from 1 July 2026, becomes mandatory for businesses with revenue of AED 50 million or more from 1 January 2027, and for businesses below that threshold from 1 July 2027. Once invoices flow through accredited service providers to the FTA as they are issued, a supplier charging VAT it never intends to remit is visible at the moment of the transaction.

For buyers the window for quiet correction is closing. Today the FTA finds a phantom supplier during a return review, months after the claim; tomorrow the mismatch between your input claim and the supplier’s reported output is flagged automatically. A treatment error — VAT on an exempt supply, 5% where the reverse charge applies — will surface when the e-invoice is validated, not when an auditor reads it. Businesses that build supplier verification into their process now, and clear historical issues through voluntary disclosure while the 1% route is still the cheaper one, will meet the digital regime with a clean file. The e-invoicing readiness service and our accredited service provider comparison cover the technical side; the supplier checks in this guide are the compliance side.

What does getting it wrong cost versus getting it right?

For a mid-sized Dubai trader with AED 3 million of annual purchases across 20 suppliers, one non-compliant supplier costs between AED 15,000 and AED 75,000 in denied input VAT before penalties; three cost up to AED 225,000. Professional VAT filing with supplier checks costs AED 796 a year (AED 199 × four active returns). The comparison is not close.

Two points make the case stronger than the table. First, denied input VAT is a loss of money you already paid, so the return on AED 796 is measured against cash you would otherwise never see again. Second, the correct file also protects the refund side: businesses with recurring excess credits — exporters and zero-rated suppliers in particular — face the five-year lapse rule on the same credits, and a clean supplier record makes each VAT refund claim faster to approve. Fastlane’s VAT supplier due diligence checks are included in every active return, so the file exists before the refund or the audit question arrives. The businesses handling this well have stopped treating the VAT 201 as data entry and started treating it as a quarterly risk review, with monthly bookkeeping feeding a supplier ledger that is already verified when the return is prepared.

Key terms used in this guide