FTA Tax Audit UAE 2026: Triggers & How to Prepare

An FTA tax audit in the UAE is an examination by the Federal Tax Authority (FTA) of a business's records, returns, and systems to confirm that VAT, corporate tax, or excise has been correctly reported and paid. In most cases the FTA gives at least 10 business days' notice, and the outcome depends heavily on how well your records stand up to scrutiny — which is why keeping them for the required five to seven years, and keeping them reconciled, is the heart of audit readiness.

An audit is not an accusation. The FTA selects businesses for many reasons, from routine risk profiling to specific data mismatches, and a well-prepared company with clean, reconciled books usually passes without drama. The businesses that suffer are those caught with gaps: missing invoices, unexplained differences between their VAT and corporate tax figures, or records that were never kept in the first place. This 2026 guide explains what triggers an audit, what the FTA looks at, how to prepare, and what happens afterward.

What is an FTA tax audit and how does it work?

An FTA tax audit is the Federal Tax Authority's examination of your records to verify your VAT and corporate tax returns are correct. The FTA usually gives at least 10 business days' notice, and you must keep records for at least 5 years (7 for corporate tax). Preparation means reconciled books, a clear audit trail, and prompt, documented responses.

Tax audits are governed by the Tax Procedures Law (Federal Decree-Law No. 28 of 2022) and its executive regulation, which set out the FTA's powers and your rights as a taxable person. An audit can be conducted at the FTA's own offices, based on records you submit, or on-site at your place of business, where officers may inspect premises, stock, and accounting systems. The key parameters every business should have in mind are set out below.

What triggers an FTA tax audit?

The FTA does not audit at random alone; it increasingly uses data analytics to identify risk, cross-referencing your filings against each other and against third-party information. Understanding the common triggers helps you avoid inadvertently raising a flag. Late or irregular filing is one of the most basic: a pattern of missed deadlines, corrected returns, or last-minute submissions signals a business that may not have its compliance under control.

Inconsistencies are another major trigger. Because the FTA administers both VAT and corporate tax, it can compare the revenue you declare for VAT against the turnover in your corporate tax return and financial statements. A material mismatch between the two invites questions. Similarly, large or frequent VAT refund claims, unusually high input tax relative to output tax, persistent nil returns while the business is clearly trading, and round-number filings that look estimated rather than calculated all attract attention.

Sector risk also plays a part. Businesses in cash-intensive industries, those with complex cross-border supplies, and sectors historically associated with higher non-compliance are more likely to be reviewed. Third-party data — from customs, other government bodies, or even whistle-blower reports — can prompt an audit too. None of these triggers means wrongdoing has occurred; they simply raise the statistical likelihood that a review will be worthwhile. The defence against all of them is the same: accurate, consistent, well-documented filings.

How much notice does the FTA give before an audit?

For a standard tax audit, the FTA generally provides at least 10 business days' notice before the audit is conducted. The notification typically identifies the tax type and periods under review and outlines what will be examined, giving you a defined window to assemble records and prepare. Business days exclude weekends and public holidays, so the practical preparation window is around two weeks.

There is an important exception. Where the FTA suspects tax evasion or believes that giving notice would prejudice the audit — for example, by allowing records to be altered or destroyed — it may conduct an audit without prior notice. In those circumstances, officers can arrive at your premises and require access to records and systems on the spot. This underlines why audit readiness cannot be a last-minute exercise assembled only after a notice arrives; genuinely prepared businesses are ready at all times.

The notice period is a window, not a grace period to fix problems retrospectively. Attempting to reconstruct or alter records after receiving an audit notice is precisely the kind of behaviour that turns a routine review into a serious matter. The correct use of the 10 business days is to organise and present records that already exist, prepare clear explanations for anything unusual, and, where helpful, arrange for a tax agent to represent you. Preparation done honestly within the window builds credibility with the auditors.

What the FTA examines during an audit

During an audit, the FTA's focus is on verifying that the figures in your returns are supported by underlying records. For VAT, this means tracing declared output tax to sales invoices and declared input tax to valid purchase invoices, checking that the correct rate — standard 5%, zero-rated, or exempt — was applied to each supply, and confirming that reverse-charge and import VAT were handled properly. Officers commonly sample transactions and follow them from the return back to the source document.

For corporate tax, the examination extends to your financial statements, the calculation of taxable income, adjustments made to accounting profit, related-party and transfer-pricing arrangements, and any reliefs or exemptions claimed, such as small business relief or qualifying free zone status. The FTA will test whether the basis for any relief is genuinely met and properly documented. Because VAT and corporate tax draw on the same accounting records, inconsistencies between them are a natural focus.

Beyond the numbers, auditors assess the integrity of your systems and controls: how invoices are raised and stored, how the accounting software calculates tax, and whether there is a clear, unbroken audit trail from transaction to return. A business that can produce a requested invoice in seconds, and explain exactly how each figure was derived, projects control and reduces the scope for dispute. One that shuffles through disorganised files invites deeper probing. The quality of your record-keeping is, in practice, the quality of your audit outcome.

Record-keeping: the foundation of audit readiness

Record-keeping is where audits are won or lost. The Tax Procedures Law requires a taxable person to keep books and records that support their tax filings for at least five years from the end of the relevant tax period for VAT purposes. For corporate tax, the retention period extends to seven years, and for real estate records it can reach fifteen years, reflecting the long life of property transactions. These are minimums, and keeping records longer does no harm.

The records the FTA expects include tax invoices and credit notes issued and received, import and export documentation, accounting books and ledgers, records of goods and services purchased for which input tax was not deducted, and the workings behind each tax return. For corporate tax, financial statements, the tax computation, and supporting schedules for any adjustments or reliefs are essential. Records should be available in a form the FTA can access, and increasingly that means well-organised digital records exported from your accounting system.

Crucially, records must be contemporaneous — created at the time of the transaction, not reconstructed afterward. A common failing is a business that has the sales but not the matching invoices, or that recovered input tax without retaining the supplier invoices to prove it. In an audit, an unsupported figure is treated as if it cannot be substantiated, which can lead to disallowed input tax and additional assessments. Building disciplined, real-time record-keeping into daily operations is the single most valuable investment in audit readiness a founder can make.

How to prepare for an FTA tax audit: a practical checklist

Preparation should begin long before any notice arrives, but if you have received one, a structured approach makes the window count. First, confirm the scope from the notice — the tax type and periods — and gather every return, payment confirmation, and supporting schedule for those periods. Second, reconcile your VAT returns to your accounting records and to your corporate tax figures, and identify and explain any differences before the auditors do.

Third, assemble source documents in an organised, retrievable format: sales and purchase invoices, import and export records, contracts, bank statements, and any correspondence relevant to the transactions under review. Fourth, prepare clear, factual explanations for anything unusual — a large refund, a sharp change in turnover, a significant one-off transaction, or a relief claimed. Anticipating the auditor's questions and having the answers ready, with documents attached, is the mark of a well-run business.

Fifth, decide who will manage the audit internally and whether to appoint a registered tax agent to represent you. A single, informed point of contact prevents mixed messages and keeps the process controlled. Finally, never alter or fabricate records; correct any genuine error you discover through the proper voluntary disclosure route rather than by amending history. The FTA's own portal and guidance are available at https://tax.gov.ae/, and the Ministry of Finance publishes the wider policy framework that underpins how audits are conducted. Approaching the audit as an exercise in demonstrating good order, rather than defending against attack, produces the best outcomes.

During the audit: your rights and obligations

An audit is a two-way process with defined rights on both sides. You are obliged to cooperate: to provide access to records, systems, and premises as required, to answer the auditors' questions truthfully, and to facilitate their work. Officers may inspect your premises, examine and copy records, and, where necessary, take original documents against a receipt so they can be examined further. Obstructing an audit is itself a breach.

You also have rights. You are entitled to see the identification and authorisation of the FTA officers conducting the audit, to receive notice in the standard course, and to obtain a receipt for any original documents removed. You may have your tax agent or legal representative present, and you are entitled to be informed of the audit's results and to receive copies of relevant documents. Knowing these rights lets you engage confidently rather than defensively.

The tone you set during the audit matters. Professional cooperation — producing requested documents promptly, giving clear factual answers, and avoiding speculation or defensiveness — builds trust with the auditors and tends to keep the review focused and efficient. If a question touches on a complex or uncertain area, it is entirely legitimate to say you will provide a considered, documented response rather than guessing on the spot. Managing the audit calmly and transparently is often as important to the outcome as the underlying records themselves.

After the audit: assessments, penalties and reconsideration

When the audit concludes, the FTA issues its findings. If everything reconciles, the matter closes. Where the FTA concludes that tax was underpaid, it issues a tax assessment for the additional tax, and it may issue an administrative penalties assessment for related breaches such as late filing, late payment, incorrect returns, or inadequate record-keeping. The penalties depend on what is found, as summarised below.

If you disagree with the FTA's decision, there is a structured dispute process. You may first submit a request for reconsideration to the FTA within 40 business days of being notified of the decision, setting out your grounds with supporting evidence; the FTA reviews and responds within its own defined period. If you remain dissatisfied, you can escalate to the Tax Disputes Resolution Committee, and ultimately to the Federal Courts. Each stage has its own deadlines, so acting promptly and with proper documentation is essential. The existence of this process is a reassurance: an audit finding is not the final word, provided you engage through the correct channels and on time.

Desk audits versus field audits: what to expect

Not every audit looks the same. In broad terms, the FTA may conduct a desk audit or a field audit, and knowing which you face shapes how you prepare. A desk audit is carried out from the FTA's own offices, based on returns and records you submit electronically or on request. It is typically used for more routine checks — verifying specific figures, testing a refund claim, or reconciling a mismatch — and much of the interaction happens through the portal and correspondence rather than in person.

A field audit takes place at your premises, where officers can examine records in situ, inspect stock and assets, observe your systems, and interview staff about how transactions are processed. Field audits are generally reserved for more complex or higher-risk cases, or where a desk review has raised questions that can only be resolved on-site. Because they are more intrusive, the standard of organisation they demand is higher: an auditor who asks to trace a particular sale from order to invoice to return should be able to do so quickly with your help.

In practice, the preparation for both is the same — reconciled records, a clear audit trail, and considered explanations — but a field audit adds a physical dimension. Ensure the workspace is ready, the right people are available, and someone who understands the numbers is present throughout. If you use a registered tax agent, a field audit is exactly the kind of situation where their presence pays off, keeping the interaction focused and ensuring questions are answered accurately rather than off the cuff. Whichever form the audit takes, treating it as a professional, well-managed exercise sets the tone for a fair outcome.

How far back can the FTA audit your business?

A frequent question is how many years the FTA can reach back. As a general rule, the Authority may not conduct a tax audit after five years from the end of the relevant tax period — the same horizon as the standard record-keeping requirement, which is no coincidence. This is why keeping five years of complete, reconciled records is the baseline of audit readiness: it matches the window in which the FTA can normally look.

There are important exceptions that extend the reach considerably. Where tax evasion is involved, the FTA can audit up to fifteen years from the end of the relevant tax period. Where a person failed to register when they were required to, the look-back can also extend to fifteen years from the date they should have registered. In addition, if the FTA notifies you of an audit before the five-year period expires, it may complete that audit within an additional period, and a voluntary disclosure made late in the fifth year can extend the window too. The headline for founders is simple: honest, registered businesses face a five-year horizon, but evasion or non-registration exposes many more years to review.

These time limits reinforce two habits. First, register on time for every tax you are liable to — VAT and corporate tax alike — because non-registration does not avoid scrutiny; it lengthens it. Second, retain records for at least the full statutory period, and longer where corporate tax or real estate rules apply. A business that assumes an old period is "closed" because a year or two has passed may be unpleasantly surprised, particularly if an issue touches the longer windows. Treat your compliance history as something you can always be asked to stand behind.

Building a permanent audit file

The most audit-ready businesses do not scramble when a notice arrives, because they maintain a permanent, standing audit file that is always current. This is a simple discipline with a large payoff: a single, organised repository — digital and backed up — containing everything an auditor would reasonably ask for, updated as each tax period closes rather than assembled in a panic.

A strong permanent file includes your filed VAT and corporate tax returns with proof of submission and payment; period-by-period reconciliations linking the returns to your accounting records and financial statements; the source documents behind significant transactions; and short position papers explaining any judgement calls, such as why a supply was zero-rated, why a relief was claimed, or how a related-party price was set. It should also hold your registration certificates, key contracts, and any prior correspondence with the FTA. The aim is that any figure in any return can be traced to its support within minutes.

Maintaining this file does more than speed up an audit; it improves the quality of your filings in the first place, because the act of reconciling and documenting each period surfaces errors while they are still small and correctable through voluntary disclosure. It also protects institutional knowledge — if a finance staff member leaves, the reasoning behind past positions does not leave with them. For a modest ongoing effort, a permanent audit file converts the FTA audit from a feared event into a routine one you are always ready to meet.

Common Mistakes to Avoid with FTA Tax Audits

• Treating the 10-day notice as time to fix records — the window is for organising existing records, not reconstructing or altering history, which can escalate the matter seriously.
• Letting VAT and corporate tax figures diverge — unexplained mismatches between the two are a leading audit trigger and a hard question to answer on the spot.
• Failing to keep source invoices — recovering input VAT without retaining supplier invoices leads to disallowed claims and additional assessments.
• Discarding records too early — the minimum retention is five years for VAT and seven for corporate tax, and destroying them early leaves you unable to defend your figures.
• Facing the audit without a clear point of contact — mixed messages from multiple staff create confusion and risk; appoint one informed lead or a tax agent.
• Guessing answers under pressure — it is better to provide a documented response later than to speculate and create an inconsistency.
• Missing the 40-business-day reconsideration deadline — a valid challenge can be lost simply by failing to act within the window.

Staying Audit-Ready with Noble Core

The best audit is the one that ends quietly because everything reconciles. Noble Core keeps your business in that position year-round — maintaining reconciled VAT and corporate tax records, building a clear audit trail from transaction to return, and flagging the mismatches that trigger reviews before the FTA ever sees them. If an audit notice does arrive, we manage the response end to end and can represent you before the Federal Tax Authority as your registered agent.

Because audits test your whole tax position, we keep the wider picture aligned. Our UAE corporate tax guide explains the obligations an audit will test, while our detailed resource on corporate tax in the UAE helps you document reliefs and adjustments so they withstand scrutiny. To keep filings accurate from the start, our walkthrough of the corporate tax filing process on the FTA portal ensures each return is right the first time.

From incorporation onward, we build compliance into how your business runs, aligned to Federal Tax Authority rules and the Ministry of Finance framework. If you are establishing a new entity, our business setup in Dubai team sets up your accounting and tax registrations correctly so audit readiness is baked in from day one. Book a free 20-minute consultation to assess your audit exposure and close the gaps.

Frequently Asked Questions