UAE FTA Audit Guide 2026: VAT and CT Audit Preparation | Paci
Home Library Audit UAE FTA Audit Guide 2026: How VAT and CT Audits Work and How
Audit & Compliance · 2026 Guide

UAE FTA audit guide 2026: how VAT and CT audits work and how to prepare.

An FTA audit in UAE can cover up to 5 years of VAT and CT history. Knowing what triggers an audit, what the FTA requests, and how to respond can mean the difference between a clean close and a seven-figure penalty.

KM
Senior Audit & Assurance Manager · Paci Finance
Updated 9 min read Verified to 2026 sources
UAE tax advisor preparing response to FTA audit request
UAE FTA audit: a tax audit can cover 5 years of VAT history and 9 years for CT. Document preparation and timely response are the keys to a clean outcome
Quick answer

UAE FTA audits cover up to 5 years for VAT and 9 years for CT (fraud: no limit). FTA audit triggers: large VAT refund claims, VAT reconciliation anomalies, related party transactions, industry risk profiling. File a Voluntary Disclosure before the audit is announced — penalty is 5% of underpaid VAT. After announcement: 50%+ of underpaid amount.

5 years
FTA limitation period for standard VAT assessment
9 years
FTA limitation period for CT (or longer for fraud)
5%
Voluntary disclosure penalty before audit announcement
50%+
Penalty for errors discovered during FTA audit

What triggers an FTA audit in UAE

  • Large VAT refund claims: Any refund claim above AED 10,000 is subject to additional FTA scrutiny. Large refund requests from exporters and businesses with high input VAT are frequent audit triggers.
  • VAT return anomalies: Revenue on the VAT return significantly lower than expected for the industry. Output VAT declining while input VAT claims are growing. Inconsistent treatment of zero-rated and exempt supplies.
  • Industry risk profiling: The FTA profiles industries for VAT risk. Real estate, precious metals, healthcare, and financial services are consistently high-attention sectors.
  • Related party transactions: Large intercompany transactions, especially to low-tax jurisdictions, may trigger transfer pricing and CT review.
  • Voluntary disclosure by a third party: If a supplier or customer has been audited and their records reference your transactions, the FTA may audit you to verify the other side of the transaction.
  • Random selection: The FTA also conducts random audits independent of risk signals.

How a UAE FTA audit works

FTA audit process
1

Audit notification

The FTA issues a written audit notification (by letter or EmaraTax) with the audit start date and the scope (VAT, CT, or both). The business must be given at least 5 business days notice (except for unannounced inspections which are authorised in certain circumstances).

2

Document request

The FTA issues an Information Request specifying exactly what documents are required — typically: VAT returns and workings, bank statements, tax invoices (input and output), payroll records, fixed asset register, intercompany agreements, and audited financial statements.

3

Fieldwork

FTA auditors (or appointed third-party audit firms) review the documents, reconcile returns to records, and may visit the business premises. They may interview the finance team or directors.

4

Preliminary findings

The FTA issues preliminary findings — a statement of discrepancies identified. The business has 20 business days to respond with explanations and additional documentation.

5

Final assessment

If the FTA is not satisfied with the response, it issues a Tax Assessment with the additional tax due plus penalties. The business can appeal to the FTA (within 20 business days), then to the Tax Disputes Resolution Committee (TDRC), and then to court.

Voluntary disclosure — before and after audit

  • Before audit announcement: File a Voluntary Disclosure on EmaraTax. Penalty: 5% of the underpaid VAT per month (minimum AED 500, maximum AED 20,000 per period) — significantly less than a post-audit assessment.
  • After audit is announced: Voluntary disclosure is still possible but the penalty framework changes. The FTA may apply the full scale of administrative penalties (50%–200% of evaded tax for deliberate errors).
  • Spontaneous VD best practice: If you identify a material VAT error in a prior period return — even without FTA prompting — file a VD promptly. The longer you wait, the higher the late payment penalty component.

Received an FTA audit notification?

We manage UAE FTA audit responses — document preparation, FTA liaison, and penalty mitigation. Urgent appointments available.

See audit services →

Frequently asked questions

How long does a UAE FTA audit take?

A straightforward VAT audit for a well-organised business: 4–8 weeks from fieldwork to final assessment. A complex multi-period audit with related party issues or large refund claims: 3–9 months. Delays are almost always caused by slow document provision from the business.

Can UAE businesses refuse to provide documents in an FTA audit?

No. The FTA has statutory powers to request documents, inspect premises, and access records. Failure to cooperate is itself a tax administrative penalty. If documents have been lost or destroyed, document the situation and provide as much as possible — unexplained gaps are treated as concealment.

What is the FTA limitation period for UAE VAT assessment?

5 years from the end of the relevant tax period for standard assessments. If the FTA has reasonable grounds to believe there has been fraud or deliberate evasion, the limitation period does not apply — the FTA can assess any period.

Does a UAE CT audit work the same as a VAT audit?

Similar process — notification, document request, fieldwork, preliminary findings, final assessment, and appeals. CT audits are newer (CT only started for financial years beginning on or after June 1, 2023) but follow the same framework as VAT audits under the Tax Procedures Law (Federal Decree-Law 28/2021).

What should UAE businesses do immediately when they receive an FTA audit notice?

(1) Do not panic. (2) Appoint a UAE tax advisor immediately — the 5-day response window is short. (3) Preserve all documents referenced in the audit scope — do not delete emails, bank statements, or accounting records. (4) Brief your finance team on the audit scope and document request. (5) Assess whether any Voluntary Disclosure opportunities exist before the audit meeting.

KM

Karim Al-Mahdi, ACCA

Senior Audit & Assurance Manager · Paci Finance

Karim is an ACCA-qualified senior audit professional with 9 years across Crowe, BDO and a Big-4 audit affiliate in the UAE. He has signed off on 80+ year-end engagements for SME and mid-market clients, and now leads Paci's external-audit-prep and internal-audit advisory practice.

Being audit-ready means never being caught unprepared.

We prepare UAE businesses for FTA audits — document reviews, voluntary disclosure assessments, and audit response management. Fixed fee.

Official UAE Government Sources