The VAT audit UAE process explained for business owners

What is the VAT audit UAE process?

The VAT audit UAE process is the Federal Tax Authority (FTA) review of a business's VAT records, returns, and supporting documents to confirm tax has been correctly calculated, collected, and paid. The FTA issues a notice, requests records, examines transactions, and then issues findings or an assessment. Audits can be desk based or on site.

Every VAT registered business in the UAE can be selected for audit. The 5% VAT regime has been live since January 1, 2018 under Federal Decree-Law 8 of 2017, and the FTA has wide powers to inspect any taxable person. This guide walks through the full vat audit uae process, the records you need, and how to respond at each step. For broader context, see our hub on Auditing in the UAE.

Who can be audited and why

Any business registered for VAT, and some that should be registered but are not, falls within scope. The mandatory VAT registration threshold is AED 375,000 of taxable supplies in a 12 month period. The voluntary threshold is AED 187,500.

The FTA selects taxpayers using risk based criteria. Common triggers include:

• Repeated late filing or late payment of VAT returns.
• Large or recurring refund claims.
• Mismatches between VAT returns and customs data.
• Industry wide reviews, for example real estate, gold, or e-commerce.
• Tip offs, whistleblowers, or third party data analytics.
• Significant changes in turnover, input tax, or zero rated supplies.

Statutory financial audits and tax audits are different exercises. If you are unsure which applies to your entity, read What Is Statutory Audit UAE and Audit Requirements UAE by Entity Type.

The legal basis for FTA tax audits

The FTA's audit power sits in Federal Decree-Law 28 of 2022 on Tax Procedures, updated by Federal Decree-Law 17 of 2024. The VAT specific rules come from Federal Decree-Law 8 of 2017 and its executive regulations.

Key points from the law:

• The FTA may audit a taxable person at its office or at the business premises.
• Records must be kept for at least 5 years, and 15 years for real estate related records.
• The standard time limit for the FTA to conduct an audit is 5 years from the end of the relevant tax period, extended in cases of tax evasion.
• The taxable person must cooperate, provide records in Arabic on request, and grant access during business hours.

The VAT audit UAE process step by step

Step 1: FTA selection and notification

The FTA notifies the taxable person at least 10 business days before the audit, unless there is suspected evasion or a risk that evidence will be destroyed. The notice is sent through the EmaraTax portal and the registered email.

The notice usually states the tax periods under review, the type of audit, the location, and a contact officer. Read it carefully and log the deadlines the same day.

Step 2: Information and document request

The auditor requests records. Typical items include:

• VAT returns and payment confirmations for the periods under review.
• Sales and purchase ledgers with tax codes.
• Tax invoices issued and received, including credit notes.
• Import and export documents, customs declarations, and bills of lading.
• Bank statements, trial balances, and the general ledger.
• Contracts with major customers and suppliers.
• Reconciliations between accounting records and VAT returns.

Step 3: Fieldwork or desk review

For a desk audit, you upload documents through EmaraTax. For an on site visit, the auditor attends your premises during business hours. Fieldwork covers transaction testing, sample selection, interviews with finance staff, and walkthroughs of your invoicing and accounting systems.

Expect questions on input tax recovery, the place of supply, zero rating, exempt supplies, the reverse charge mechanism, and the treatment of free zones and designated zones.

Step 4: Preliminary findings and right to respond

The auditor shares preliminary findings. You have a window to respond, provide more evidence, and correct misunderstandings. This stage is critical. Many proposed adjustments are resolved here before they crystallise into an assessment.

Step 5: Audit results notice and assessment

The FTA issues an audit results notice within 10 business days of completion. If there is additional tax due, the FTA issues a tax assessment and any administrative penalty assessment.

Step 6: Reconsideration, objection, and appeal

If you disagree with the assessment, the dispute path is:

1. Request for Reconsideration to the FTA within 40 business days of notification.
2. Objection to the Tax Disputes Resolution Committee (TDRC) within 40 business days of the FTA decision, after paying the tax in dispute.
3. Appeal to the Federal Court within 40 business days of the TDRC decision, for amounts above the TDRC final limit.

Typical timeline at a glance

Records you must keep ready

Core VAT records

• Tax invoices issued, in compliant format, with the supplier's Tax Registration Number (TRN).
• Tax invoices received from suppliers.
• Credit notes and debit notes.
• VAT account showing output tax, input tax, and net VAT payable.
• Records of goods and services supplied, including those for personal use.

Supporting business records

• General ledger, trial balance, and audited financial statements.
• Bank statements and reconciliations.
• Customs entries, delivery notes, and shipping documents.
• Contracts, purchase orders, and price lists.
• Records justifying zero rating, exemption, or out of scope treatment.

Retention rules

Keep VAT records for 5 years after the end of the tax period. For real estate, keep records for 15 years. Records must be available in the UAE and produced in Arabic on request.

Common findings the FTA looks for

• Output VAT not charged on standard rated supplies misclassified as zero rated or exempt.
• Input VAT recovered on blocked items, for example entertainment or personal motor vehicles.
• Reverse charge not applied on imported services.
• Errors in the place of supply for cross border services.
• Wrong VAT treatment of free zone and designated zone transactions.
• Missing or non compliant tax invoices.
• Bad debt relief claimed without meeting all conditions.
• Disclosed output tax not matching the trial balance revenue.

Penalties linked to VAT audits

Administrative penalties are set by Cabinet Decisions and applied during or after an audit. Common penalties include:

• Failure to keep required records: AED 10,000 for the first offence, AED 20,000 for repetition.
• Failure to submit a VAT return on time: AED 1,000 for the first time, AED 2,000 if repeated within 24 months.
• Late payment penalty: 2% of unpaid tax immediately, then 4% monthly up to 300%.
• Submitting an incorrect return: a fixed penalty plus a percentage of the tax difference.
• Tax evasion penalties are up to 3 times the evaded tax, with possible criminal referral.

Separately, e-invoicing violations under Cabinet Decision 106 of 2025 range from AED 2,500 to AED 50,000 per violation, and will sit alongside VAT penalties once the e-invoicing mandate is live.

How e-invoicing changes the audit landscape

The UAE is moving to a Peppol 5-corner DCTCE (Decentralized Continuous Transaction Control and Exchange) model using the PINT AE format. Phase 1 mandatory go-live is January 1, 2027 for businesses with AED 50 million or more in revenue. Smaller businesses follow on July 1, 2027, and government entities on October 1, 2027. The Ministry of Finance (MoF) requires Phase 1 taxpayers to appoint an Accredited Service Provider (ASP) by October 30, 2026.

Once e-invoicing is live, the FTA receives near real time data on B2B (business to business) and B2G (business to government) invoices. Future VAT audits will start from this data, so reconciling your accounting system to the invoices reported through your ASP becomes part of the audit trail.

How to prepare your finance team

Build a year round audit file

Do not wait for the notice. Maintain a single folder, physical or digital, with each quarter's VAT return, the working file, reconciliations, and a sample of tax invoices. Tie every VAT return line to the trial balance.

Run an internal VAT health check

Every 6 to 12 months, sample at least 30 sales and 30 purchase transactions. Check invoice format, TRN validity, VAT treatment, and input tax recovery rules. Document fixes and voluntary disclosures.

Train your invoicing staff

Most errors start at invoice creation. Train sales, billing, and accounts payable teams on tax codes, zero rating evidence, and reverse charge. Free zone businesses face extra rules covered in Free Zone Audit Requirements, DMCC Audit Requirements, DIFC Audit Requirements, and JAFZA Audit Requirements.

Use voluntary disclosure when needed

If you find an error above AED 10,000 in a past VAT return, file a Voluntary Disclosure (Form 211) within 20 business days of discovery. Acting before the FTA finds the error usually reduces penalties.

Pre audit checklist

• VAT returns for the last 5 years reconciled to the general ledger.
• TRN and trade licence details current on EmaraTax.
• Sample tax invoices reviewed for format and TRN.
• Import VAT and customs data reconciled to box 6 of the return.
• Input tax apportionment workings for mixed supplies.
• Bad debt relief evidence on file.
• Designated zone movements documented with proof of supply.
• Voluntary disclosures filed for known errors.
• A single point of contact appointed for the auditor.

For a wider view of how tax audits sit alongside statutory and free zone audits, return to the Auditing in the UAE hub.

Official sources

• UAE Federal Tax Authority: tax.gov.ae
• UAE Ministry of Finance: mof.gov.ae
• UAE e-invoicing portal: einvoicing.mof.gov.ae

EInvoice Direct helps UAE finance teams and tax firms keep VAT records, invoices, and e-invoicing data audit ready in one place, with an accredited service provider included at no extra charge. To talk to our team about your audit readiness, get UAE e-invoicing pricing.