How an audit confirmation letter works in the UAE
What is an audit confirmation letter in the UAE?
An audit confirmation letter UAE auditors use is a formal request sent to a third party, such as a bank, customer, or supplier, asking them to confirm a balance or transaction directly with the auditor. It provides independent evidence under International Standards on Auditing (ISA) 505 and supports the audit opinion on the financial statements.
UAE auditors rely on these letters because external evidence carries more weight than client-prepared records. The audit confirmation letter UAE companies receive from their auditors is part of a structured fieldwork process that also includes the UAE audit engagement letter, working papers, and management representations. For a broader view of the audit cycle, see our hub on auditing in the UAE.
Why UAE auditors send confirmation letters
Confirmation requests reduce the risk that recorded balances are misstated. They give the auditor evidence that is collected directly from the source, not filtered through the client's accounting system. In the UAE, this matters for several reasons.
- Banking relationships often span multiple jurisdictions and currencies.
- Trade receivables can include related parties and free zone entities.
- Loans and guarantees may sit off the trial balance.
- Inventory held by third parties at ports or warehouses needs independent verification.
For mainland and free zone companies subject to mandatory audit, confirmations form a core part of the evidence file. They also support corporate tax filings under Federal Decree-Law 47 of 2022, where audited financials are expected for many taxable persons.
Standards that govern confirmations
UAE auditors apply International Standards on Auditing as issued by the IAASB. ISA 505 covers external confirmations specifically. ISA 500 sets the general framework for audit evidence. Free zone regulators, including DMCC, JAFZA, and DIFC, require audited financials prepared under these standards, so confirmations are not optional for in-scope entities.
Types of audit confirmation letters used in the UAE
Different confirmations target different account balances. The table below summarises the most common types, who they are sent to, and what they confirm.
| Confirmation type | Sent to | What it confirms |
|---|---|---|
| Bank confirmation | UAE banks and foreign banks | Account balances, loans, guarantees, signatories, restrictions |
| Trade receivable confirmation | Customers | Outstanding invoices, credit notes, disputed amounts |
| Trade payable confirmation | Suppliers | Amounts owed, purchase commitments, retention balances |
| Legal confirmation | Lawyers and legal advisors | Pending litigation, claims, contingent liabilities |
| Inventory confirmation | Warehouses, ports, third-party custodians | Quantity and condition of stock held off-site |
| Loan and finance confirmation | Lenders, finance companies | Principal, interest, covenants, security |
| Related party confirmation | Group companies, shareholders | Intercompany balances, transactions, terms |
Positive versus negative confirmations
A positive confirmation asks the recipient to reply whether they agree or disagree with the stated balance. A negative confirmation asks them to reply only if they disagree. UAE auditors generally prefer positive confirmations for material balances because silence is not evidence. Negative confirmations are used for low-risk, high-volume populations such as small retail receivables.
Who prepares and signs the audit confirmation letter
The auditor drafts the confirmation letter, but the client signs it. This is because the third party owes a duty to the client, not to the auditor, and will only release information with the client's authorisation. The signed letter is then sent by the auditor directly, and the response must come back to the auditor, not to the client.
Standard process flow
- Auditor identifies balances that require confirmation during planning.
- Auditor drafts letters with balance details from the trial balance.
- Client's authorised signatory signs the letters on company letterhead.
- Auditor sends letters directly to third parties by post, courier, or secure email.
- Third parties reply directly to the auditor.
- Auditor reconciles responses to client records and follows up on differences.
- Non-responses trigger second requests and alternative procedures.
Maintaining control of the process is essential. If the client handles the letters at any stage after signing, the evidence loses its independence. This control point is documented in the audit working papers UAE file.
What an audit confirmation letter contains
A well-drafted UAE audit confirmation letter is short, specific, and unambiguous. It includes the following elements.
- Client letterhead and date.
- Recipient name and address.
- Auditor name and return address.
- Reference to the financial year end being audited.
- Specific balance, account number, or transaction details.
- Request for direct reply to the auditor.
- Authorised signatory's name, title, and signature.
- Deadline for response, typically 2 to 3 weeks.
Example wording for a bank confirmation
Dear Sir or Madam, in connection with the audit of our financial statements for the year ended 31 December 2025, please confirm directly to our auditors, [Audit Firm Name], the balances of all accounts, loans, guarantees, and other facilities held in the name of [Company Name], TRN [Tax Registration Number], as at 31 December 2025. Please reply by 15 February 2026.
Timing and the UAE audit calendar
Confirmations are typically sent 2 to 4 weeks after the year-end date. Sending them too early risks confirming pre-year-end balances. Sending too late delays the audit and risks missing filing deadlines. For corporate tax, the return is due within 9 months of the financial year end, so most December year-end audits must complete by September.
Typical confirmation timeline for a 31 December year end
| Activity | Target window |
|---|---|
| Planning and risk assessment | November to early January |
| Confirmation letters drafted | Mid-January |
| Letters signed and dispatched | Late January to early February |
| First responses received | February |
| Second requests issued | Late February |
| Alternative procedures for non-responses | March |
| Confirmation file closed | Before audit report sign-off |
For a fuller view of the schedule, see the audit completion timeline UAE page.
Bank confirmations in the UAE
Bank confirmations are the most common and most important confirmations in UAE audits. UAE banks use standardised forms aligned with the IBF (International Banking Federation) format. The form covers current accounts, fixed deposits, loans, overdrafts, letters of credit, guarantees, derivatives, and authorised signatories.
Practical points for UAE bank confirmations
- Most UAE banks charge a fee per confirmation, often AED 200 to AED 500.
- Banks typically respond within 2 to 4 weeks if the request is complete.
- The signatory on the letter must match the bank's mandate records.
- Some banks require the request to be uploaded through their online portal.
- Foreign currency balances should be confirmed in the original currency.
Errors in account numbers, TRN (Tax Registration Number), or signatory details are the most common reason for bank confirmation delays.
Handling responses and differences
When confirmations come back, the auditor compares each response to the client's records. Three outcomes are possible: agreement, disagreement, or no response.
Agreement
The balance matches. The auditor documents the reconciliation in the audit file and moves on.
Disagreement
The third party reports a different balance. The auditor obtains a reconciliation from the client, traces the differences to invoices, payments, or credit notes, and assesses whether an adjustment is needed. Common causes include timing differences, unrecorded credit notes, and disputed invoices.
No response
The third party does not reply. The auditor sends a second request. If there is still no reply, alternative procedures are performed. For receivables, this means checking subsequent cash receipts or inspecting shipping documents. For payables, it means reviewing post year-end payments and supplier statements.
All of this evidence is cross-referenced in the audit documentation UAE requirements file and supported by the audit trail UAE record keeping system the client maintains.
Common mistakes UAE companies make
- Sending the letter on plain paper instead of company letterhead.
- Using a signatory who is no longer on the bank mandate.
- Quoting the wrong year-end date.
- Letting the client mail the letters instead of the auditor.
- Forgetting to include the TRN, which some banks now require.
- Sending letters in late March for a December year end, then complaining about delays.
- Ignoring second requests and assuming the auditor will accept silence.
Most of these issues are easy to avoid with a short pre-audit checklist agreed with the audit team. The client should also have the management representation letter UAE ready, as it complements the external confirmations.
Confirmation letters and UAE tax compliance
Audited financials support both VAT and corporate tax compliance. VAT, at 5% under Federal Decree-Law 8 of 2017, requires accurate revenue and input tax records. Corporate tax under Federal Decree-Law 47 of 2022 applies 0% up to AED 375,000 of taxable income and 9% above that, with a 15% domestic minimum top-up tax for large multinationals from January 2025.
Confirmations help verify revenue cut-off, receivables ageing for bad debt provisions, and related party balances that affect transfer pricing. They also support the going concern assessment if loan covenants or bank facilities are confirmed.
Returning to our auditing in the UAE hub will give you the full picture of how confirmations fit alongside engagement, fieldwork, completion, and reporting. You can find the legal framework on the UAE Ministry of Finance and Federal Tax Authority websites.
Checklist before signing your audit confirmation letters
- Confirm the year-end date and balance figures match the trial balance.
- Check the authorised signatory is current on bank and supplier records.
- Use company letterhead with the registered address and TRN.
- Verify recipient names, account numbers, and addresses.
- Set a realistic reply deadline aligned with the audit timeline.
- Hand the signed letters back to the auditor, not the recipient.
- Track outstanding responses weekly with the audit team.
If your finance team is preparing for an upcoming audit and wants e-invoicing data that is clean, structured, and easy to confirm, get UAE e-invoicing pricing from EInvoice Direct. Accurate invoice data makes every confirmation faster and reduces the risk of disputed balances at year end.
Questions, answered
What is the purpose of an audit confirmation letter?
An audit confirmation letter gives the auditor independent evidence about a balance or transaction directly from a third party. It supports the audit opinion under ISA 505 by reducing reliance on client-prepared records. UAE auditors use it for bank balances, receivables, payables, loans, legal claims, and inventory held by others. Evidence from outside the company carries more audit weight than internal records.
Who signs the audit confirmation letter, the client or the auditor?
The client signs the audit confirmation letter because the third party, such as a bank or supplier, owes a duty of confidentiality to the client, not to the auditor. After signing, the auditor takes control of the letter, sends it directly to the recipient, and receives the reply directly. The client never handles the letter after signing, which protects the independence of the evidence.
How long do UAE banks take to respond to audit confirmations?
UAE banks typically respond within 2 to 4 weeks when the request is complete and accurate. Delays usually come from missing TRN details, outdated signatories, wrong account numbers, or incomplete letterhead. Most banks charge a fee of AED 200 to AED 500 per confirmation. Some banks now accept requests only through their online audit confirmation portals rather than by post.
What is the difference between positive and negative confirmations?
A positive confirmation asks the third party to reply whether they agree or disagree with the balance. A negative confirmation asks them to reply only if they disagree. UAE auditors prefer positive confirmations for material balances because no response is not evidence of agreement. Negative confirmations are used only for large populations of small, low-risk balances where the response rate would otherwise be very low.
What happens if a confirmation is not returned?
The auditor sends a second request after about two weeks. If there is still no reply, the auditor performs alternative procedures. For receivables, this means examining subsequent cash receipts and shipping documents. For payables, it means reviewing post year-end payments and supplier statements. These alternative procedures must give the same level of assurance as the confirmation would have provided.
Are audit confirmation letters mandatory in the UAE?
Audit confirmation letters are not named in UAE law, but they are required by International Standards on Auditing, which UAE audits follow. ISA 505 requires the auditor to use external confirmations when they provide more persuasive evidence than internal records. For mainland and free zone companies that must file audited financials, confirmations are a standard part of the audit file and are reviewed by regulators.
When should audit confirmation letters be sent?
Confirmation letters are normally sent 2 to 4 weeks after the financial year end. For a 31 December year end, letters typically go out in late January or early February. This allows time for responses, second requests, and alternative procedures before the audit report is signed. Sending too late risks missing the 9-month corporate tax filing deadline under Federal Decree-Law 47 of 2022.
Keep reading
UAE audit engagement letter explained for business owners and finance teams
A UAE audit engagement letter sets scope, fees and responsibilities before fieldwork starts. See clauses, ISA 210 rules and a sample checklist inside.
Read the guide →Auditing in the UAEAudit documentation UAE requirements every finance team should know
Audit documentation UAE requirements explained: what auditors must keep, retention periods, ISA 230 rules, and FTA expectations. Read the full guide.
Read the guide →Auditing in the UAEManagement representation letter UAE: what it is and how to sign it
A management representation letter UAE auditors require confirms key facts before sign-off. See what it covers, who signs, and timing.
Read the guide →This content is informational and does not constitute tax, legal, or financial advice. Consult an FTA-registered tax agent or a licensed UAE audit firm before acting on this information.
Get UAE e-invoicing pricing for your business
Tell us about your setup and we reply with clear pricing within one UAE business day. Accredited ASP included at no extra charge.
Get Pricing →