Auditing in the UAE

How an audit confirmation letter works in the UAE

What is an audit confirmation letter in the UAE?

An audit confirmation letter UAE auditors use is a formal request sent to a third party, such as a bank, customer, or supplier, asking them to confirm a balance or transaction directly with the auditor. It provides independent evidence under International Standards on Auditing (ISA) 505 and supports the audit opinion on the financial statements.

UAE auditors rely on these letters because external evidence carries more weight than client-prepared records. The audit confirmation letter UAE companies receive from their auditors is part of a structured fieldwork process that also includes the UAE audit engagement letter, working papers, and management representations. For a broader view of the audit cycle, see our hub on auditing in the UAE.

Why UAE auditors send confirmation letters

Confirmation requests reduce the risk that recorded balances are misstated. They give the auditor evidence that is collected directly from the source, not filtered through the client's accounting system. In the UAE, this matters for several reasons.

  • Banking relationships often span multiple jurisdictions and currencies.
  • Trade receivables can include related parties and free zone entities.
  • Loans and guarantees may sit off the trial balance.
  • Inventory held by third parties at ports or warehouses needs independent verification.

For mainland and free zone companies subject to mandatory audit, confirmations form a core part of the evidence file. They also support corporate tax filings under Federal Decree-Law 47 of 2022, where audited financials are expected for many taxable persons.

Standards that govern confirmations

UAE auditors apply International Standards on Auditing as issued by the IAASB. ISA 505 covers external confirmations specifically. ISA 500 sets the general framework for audit evidence. Free zone regulators, including DMCC, JAFZA, and DIFC, require audited financials prepared under these standards, so confirmations are not optional for in-scope entities.

Types of audit confirmation letters used in the UAE

Different confirmations target different account balances. The table below summarises the most common types, who they are sent to, and what they confirm.

Confirmation typeSent toWhat it confirms
Bank confirmationUAE banks and foreign banksAccount balances, loans, guarantees, signatories, restrictions
Trade receivable confirmationCustomersOutstanding invoices, credit notes, disputed amounts
Trade payable confirmationSuppliersAmounts owed, purchase commitments, retention balances
Legal confirmationLawyers and legal advisorsPending litigation, claims, contingent liabilities
Inventory confirmationWarehouses, ports, third-party custodiansQuantity and condition of stock held off-site
Loan and finance confirmationLenders, finance companiesPrincipal, interest, covenants, security
Related party confirmationGroup companies, shareholdersIntercompany balances, transactions, terms

Positive versus negative confirmations

A positive confirmation asks the recipient to reply whether they agree or disagree with the stated balance. A negative confirmation asks them to reply only if they disagree. UAE auditors generally prefer positive confirmations for material balances because silence is not evidence. Negative confirmations are used for low-risk, high-volume populations such as small retail receivables.

Who prepares and signs the audit confirmation letter

The auditor drafts the confirmation letter, but the client signs it. This is because the third party owes a duty to the client, not to the auditor, and will only release information with the client's authorisation. The signed letter is then sent by the auditor directly, and the response must come back to the auditor, not to the client.

Standard process flow

  1. Auditor identifies balances that require confirmation during planning.
  2. Auditor drafts letters with balance details from the trial balance.
  3. Client's authorised signatory signs the letters on company letterhead.
  4. Auditor sends letters directly to third parties by post, courier, or secure email.
  5. Third parties reply directly to the auditor.
  6. Auditor reconciles responses to client records and follows up on differences.
  7. Non-responses trigger second requests and alternative procedures.

Maintaining control of the process is essential. If the client handles the letters at any stage after signing, the evidence loses its independence. This control point is documented in the audit working papers UAE file.

What an audit confirmation letter contains

A well-drafted UAE audit confirmation letter is short, specific, and unambiguous. It includes the following elements.

  • Client letterhead and date.
  • Recipient name and address.
  • Auditor name and return address.
  • Reference to the financial year end being audited.
  • Specific balance, account number, or transaction details.
  • Request for direct reply to the auditor.
  • Authorised signatory's name, title, and signature.
  • Deadline for response, typically 2 to 3 weeks.

Example wording for a bank confirmation

Dear Sir or Madam, in connection with the audit of our financial statements for the year ended 31 December 2025, please confirm directly to our auditors, [Audit Firm Name], the balances of all accounts, loans, guarantees, and other facilities held in the name of [Company Name], TRN [Tax Registration Number], as at 31 December 2025. Please reply by 15 February 2026.

Timing and the UAE audit calendar

Confirmations are typically sent 2 to 4 weeks after the year-end date. Sending them too early risks confirming pre-year-end balances. Sending too late delays the audit and risks missing filing deadlines. For corporate tax, the return is due within 9 months of the financial year end, so most December year-end audits must complete by September.

Typical confirmation timeline for a 31 December year end

ActivityTarget window
Planning and risk assessmentNovember to early January
Confirmation letters draftedMid-January
Letters signed and dispatchedLate January to early February
First responses receivedFebruary
Second requests issuedLate February
Alternative procedures for non-responsesMarch
Confirmation file closedBefore audit report sign-off

For a fuller view of the schedule, see the audit completion timeline UAE page.

Bank confirmations in the UAE

Bank confirmations are the most common and most important confirmations in UAE audits. UAE banks use standardised forms aligned with the IBF (International Banking Federation) format. The form covers current accounts, fixed deposits, loans, overdrafts, letters of credit, guarantees, derivatives, and authorised signatories.

Practical points for UAE bank confirmations

  • Most UAE banks charge a fee per confirmation, often AED 200 to AED 500.
  • Banks typically respond within 2 to 4 weeks if the request is complete.
  • The signatory on the letter must match the bank's mandate records.
  • Some banks require the request to be uploaded through their online portal.
  • Foreign currency balances should be confirmed in the original currency.

Errors in account numbers, TRN (Tax Registration Number), or signatory details are the most common reason for bank confirmation delays.

Handling responses and differences

When confirmations come back, the auditor compares each response to the client's records. Three outcomes are possible: agreement, disagreement, or no response.

Agreement

The balance matches. The auditor documents the reconciliation in the audit file and moves on.

Disagreement

The third party reports a different balance. The auditor obtains a reconciliation from the client, traces the differences to invoices, payments, or credit notes, and assesses whether an adjustment is needed. Common causes include timing differences, unrecorded credit notes, and disputed invoices.

No response

The third party does not reply. The auditor sends a second request. If there is still no reply, alternative procedures are performed. For receivables, this means checking subsequent cash receipts or inspecting shipping documents. For payables, it means reviewing post year-end payments and supplier statements.

All of this evidence is cross-referenced in the audit documentation UAE requirements file and supported by the audit trail UAE record keeping system the client maintains.

Common mistakes UAE companies make

  • Sending the letter on plain paper instead of company letterhead.
  • Using a signatory who is no longer on the bank mandate.
  • Quoting the wrong year-end date.
  • Letting the client mail the letters instead of the auditor.
  • Forgetting to include the TRN, which some banks now require.
  • Sending letters in late March for a December year end, then complaining about delays.
  • Ignoring second requests and assuming the auditor will accept silence.

Most of these issues are easy to avoid with a short pre-audit checklist agreed with the audit team. The client should also have the management representation letter UAE ready, as it complements the external confirmations.

Confirmation letters and UAE tax compliance

Audited financials support both VAT and corporate tax compliance. VAT, at 5% under Federal Decree-Law 8 of 2017, requires accurate revenue and input tax records. Corporate tax under Federal Decree-Law 47 of 2022 applies 0% up to AED 375,000 of taxable income and 9% above that, with a 15% domestic minimum top-up tax for large multinationals from January 2025.

Confirmations help verify revenue cut-off, receivables ageing for bad debt provisions, and related party balances that affect transfer pricing. They also support the going concern assessment if loan covenants or bank facilities are confirmed.

Returning to our auditing in the UAE hub will give you the full picture of how confirmations fit alongside engagement, fieldwork, completion, and reporting. You can find the legal framework on the UAE Ministry of Finance and Federal Tax Authority websites.

Checklist before signing your audit confirmation letters

  1. Confirm the year-end date and balance figures match the trial balance.
  2. Check the authorised signatory is current on bank and supplier records.
  3. Use company letterhead with the registered address and TRN.
  4. Verify recipient names, account numbers, and addresses.
  5. Set a realistic reply deadline aligned with the audit timeline.
  6. Hand the signed letters back to the auditor, not the recipient.
  7. Track outstanding responses weekly with the audit team.

If your finance team is preparing for an upcoming audit and wants e-invoicing data that is clean, structured, and easy to confirm, get UAE e-invoicing pricing from EInvoice Direct. Accurate invoice data makes every confirmation faster and reduces the risk of disputed balances at year end.

Questions, answered

What is the purpose of an audit confirmation letter?

An audit confirmation letter gives the auditor independent evidence about a balance or transaction directly from a third party. It supports the audit opinion under ISA 505 by reducing reliance on client-prepared records. UAE auditors use it for bank balances, receivables, payables, loans, legal claims, and inventory held by others. Evidence from outside the company carries more audit weight than internal records.

Who signs the audit confirmation letter, the client or the auditor?

The client signs the audit confirmation letter because the third party, such as a bank or supplier, owes a duty of confidentiality to the client, not to the auditor. After signing, the auditor takes control of the letter, sends it directly to the recipient, and receives the reply directly. The client never handles the letter after signing, which protects the independence of the evidence.

How long do UAE banks take to respond to audit confirmations?

UAE banks typically respond within 2 to 4 weeks when the request is complete and accurate. Delays usually come from missing TRN details, outdated signatories, wrong account numbers, or incomplete letterhead. Most banks charge a fee of AED 200 to AED 500 per confirmation. Some banks now accept requests only through their online audit confirmation portals rather than by post.

What is the difference between positive and negative confirmations?

A positive confirmation asks the third party to reply whether they agree or disagree with the balance. A negative confirmation asks them to reply only if they disagree. UAE auditors prefer positive confirmations for material balances because no response is not evidence of agreement. Negative confirmations are used only for large populations of small, low-risk balances where the response rate would otherwise be very low.

What happens if a confirmation is not returned?

The auditor sends a second request after about two weeks. If there is still no reply, the auditor performs alternative procedures. For receivables, this means examining subsequent cash receipts and shipping documents. For payables, it means reviewing post year-end payments and supplier statements. These alternative procedures must give the same level of assurance as the confirmation would have provided.

Are audit confirmation letters mandatory in the UAE?

Audit confirmation letters are not named in UAE law, but they are required by International Standards on Auditing, which UAE audits follow. ISA 505 requires the auditor to use external confirmations when they provide more persuasive evidence than internal records. For mainland and free zone companies that must file audited financials, confirmations are a standard part of the audit file and are reviewed by regulators.

When should audit confirmation letters be sent?

Confirmation letters are normally sent 2 to 4 weeks after the financial year end. For a 31 December year end, letters typically go out in late January or early February. This allows time for responses, second requests, and alternative procedures before the audit report is signed. Sending too late risks missing the 9-month corporate tax filing deadline under Federal Decree-Law 47 of 2022.

Keep reading

This content is informational and does not constitute tax, legal, or financial advice. Consult an FTA-registered tax agent or a licensed UAE audit firm before acting on this information.

Get UAE e-invoicing pricing for your business

Tell us about your setup and we reply with clear pricing within one UAE business day. Accredited ASP included at no extra charge.

Get Pricing
Accredited ASP included PEPPOL PINT AE Live in days