How the FTA audit process works in the UAE

What is an FTA audit?

An FTA audit is a formal review by the UAE Federal Tax Authority (FTA) of a registered business's tax records, returns, and supporting documents. The auditor verifies that declared VAT and corporate tax figures match the underlying invoices, contracts, and accounting data. The goal is to confirm compliance, recover under-declared tax, and apply penalties where rules were broken.

Any taxable person in the UAE can be selected for an fta audit, from a small trading company to a large free zone group. The audit is not an accusation of fraud. It is the FTA's main tool for checking that the self-assessment system is working. Understanding how it runs makes the process much less stressful and helps you avoid avoidable penalties. For a wider view of obligations, see our FTA Compliance UAE hub.

The legal basis for an FTA audit

The FTA's power to audit comes from Federal Decree-Law 17 of 2024 on tax procedures, which replaced the earlier 2017 law. The same framework covers VAT (Federal Decree-Law 8 of 2017), corporate tax (Federal Decree-Law 47 of 2022), and excise tax. Cabinet decisions then set the operational rules, including notice periods, record retention, and penalty amounts.

Businesses must keep tax records for at least 5 years, and 7 years for real estate. The FTA can audit any period inside that window. You can read the law text on the Federal Tax Authority website and policy updates on the Ministry of Finance site.

Who can be audited

Every person registered for VAT, excise tax, or corporate tax is in scope. That includes mainland companies, free zone entities (including Qualifying Free Zone Persons, QFZPs), branches of foreign companies, and individuals running a taxable business. Non-registered businesses can also be audited if the FTA suspects they should have registered.

Types of FTA audit

Audits range from a desk review of a single VAT return to a full field audit covering several years. A desk review is handled by email through EmaraTax. A field audit means officers visit your premises, usually after at least 10 business days' notice, and review records on site.

What triggers an FTA audit?

The FTA does not publish its risk model, but practitioner experience and published guidance point to clear patterns. Knowing what triggers fta audit activity helps you decide where to tighten controls before a notice arrives.

• VAT refund claims. Any refund request is reviewed. Larger or recurring refunds attract deeper checks.
• Repeated late filing or late payment. A pattern of missed deadlines flags the file for review.
• Mismatches between VAT and corporate tax returns. Revenue declared in one return must reconcile with the other.
• Customs data mismatches. Import values reported to Customs that do not match VAT returns trigger automatic flags.
• Sector sweeps. The FTA periodically focuses on industries such as gold, real estate, e-commerce, or restaurants.
• Whistleblower reports. The FTA runs a paid informant program for tax evasion tips.
• Sudden changes in turnover or input tax. A sharp jump or drop without a clear business reason gets attention.
• Zero-rated or exempt supply ratios that look unusual for your sector.
• Related-party transactions and transfer pricing positions under corporate tax.

Risk scoring inside EmaraTax

EmaraTax, the FTA's online portal, scores each return as it is submitted. The system compares your numbers against your own history and against sector benchmarks. High-score returns enter a queue for human review. Our EmaraTax walkthrough shows where these signals come from in practice.

The FTA tax audit process step by step

The fta tax audit process follows a defined sequence under the tax procedures law. Each step has a legal timeline, and missing a deadline on your side can itself become a penalty.

Step 1: The FTA audit notice

The FTA must give at least 10 business days' written notice before a field audit, sent through EmaraTax. In urgent cases, such as suspected evasion or where evidence may be destroyed, the FTA can audit without prior notice. The fta audit notice states the tax types covered, the periods, the start date, and the name of the lead auditor.

Step 2: Information request

The auditor issues a list of documents and data. You usually have 5 to 10 business days to respond, though the auditor can grant extensions for valid reasons. Responses are submitted through EmaraTax or handed over on site.

Step 3: Fieldwork or desk review

The auditor examines records, asks follow-up questions, and may interview staff. Audits can be conducted at your premises, at the FTA office, or remotely. Fieldwork typically runs from a few days to several weeks depending on size.

Step 4: Draft findings

The FTA shares preliminary findings. You have the right to respond, provide more evidence, and correct misunderstandings before anything becomes final.

Step 5: Tax assessment and penalty notice

If the auditor concludes that tax was under-declared, the FTA issues a Tax Assessment and an Administrative Penalty Assessment. Both are notified through EmaraTax and become payable within 20 business days unless you object.

Step 6: Objection and appeal

You can request reconsideration within 40 business days, then escalate to the Tax Disputes Resolution Committee, and finally to the Federal Courts. Each stage has strict deadlines.

Audit timeline at a glance

What auditors can request

The FTA can ask for any record that supports your returns. In practice, requests fall into a few buckets. Build a folder structure that maps to this list and you will respond faster.

Sales and revenue documents

• Tax invoices issued, including credit and debit notes
• Sales contracts, purchase orders, and delivery notes
• Point of sale (POS) reports and z-readings
• Export documents and customs declarations
• Bank statements showing receipts

Purchase and input tax documents

• Supplier tax invoices with valid Tax Registration Numbers (TRNs)
• Import declarations and customs entries
• Proof of payment for invoices over AED 10,000
• Apportionment workings for mixed-use input tax

Accounting and tax records

• General ledger, trial balance, and audited financial statements
• VAT return workings reconciled to the ledger
• Corporate tax computations and transfer pricing files
• Fixed asset register and depreciation schedules
• Stock counts and inventory valuations

The FTA Audit File (FAF)

The FTA can request data in the FAF format, a standardised file of every transaction in a period. The FAF lets auditors run automated tests across thousands of invoices in minutes. If your accounting system cannot produce a clean FAF, expect more manual questions and a longer audit.

Document checklist to stay audit ready

The best time to prepare for an audit is before the notice arrives. Use this checklist as a monthly hygiene routine.

1. Reconcile each VAT return to the ledger before filing, not after.
2. Match customs import data to box 6 and box 7 of the VAT return every quarter.
3. Check supplier TRNs on the FTA portal for any invoice over AED 10,000.
4. Store tax invoices in a single searchable archive, not across email inboxes.
5. Keep an audit trail for every credit note, including the reason and approval.
6. Run an internal review of zero-rated and exempt supplies twice a year.
7. Document your QFZP qualifying income test if you claim 0% corporate tax.
8. Back up records for 5 years minimum, 7 for real estate.

Penalties after an FTA audit

Administrative penalties are set by Cabinet decisions. Common ones include:

E-invoicing penalties under Cabinet Decision 106 of 2025 add a further range of AED 2,500 to AED 50,000 per violation once the mandate is live. For the full list, see our Penalty master list.

How e-invoicing changes the audit dynamic

The UAE is moving to a Peppol 5-corner Decentralized Continuous Transaction Control and Exchange (DCTCE) model, using the PINT AE format. Large businesses with revenue of AED 50 million or more must appoint an accredited service provider (ASP) by October 30, 2026, with mandatory go-live on January 1, 2027. Small and medium businesses follow on July 1, 2027, and government entities on October 1, 2027.

Once invoices flow through accredited service providers in structured PINT AE format, the FTA receives transaction data in near real time. Three things change for audits:

• Fewer surprise mismatches. Your sales data, your customer's purchase data, and the FTA's copy are the same file. Reconciliation breaks become rare.
• Shorter document requests. Auditors already hold the structured invoice data, so they ask for context, not for invoice PDFs.
• Faster refund processing. Refund claims backed by structured data clear faster because the matching is automated.

Read What is UAE e-invoicing? for the full picture of the new model. Official details are published on the UAE MoF e-invoicing portal.

Why structured data shortens audits

Auditors spend most of their time matching numbers between systems. PINT AE removes that work. When the same invoice exists in your ERP, your customer's ERP, and the FTA's database with identical fields, an audit becomes a check on edge cases rather than a hunt for evidence.

Practical advice if you receive an audit notice

1. Read the notice in EmaraTax the day it arrives and note every date.
2. Assign one internal owner and one external advisor as the single contact points.
3. Acknowledge the notice in writing within the stated period.
4. Pull the requested records into a shared folder before the deadline, not the night before.
5. Answer questions in writing where possible, so there is a record of what was said.
6. Do not volunteer documents that were not asked for. Answer the question, fully and accurately.
7. If the assessment is wrong, file a reconsideration request inside 40 business days. The right is lost after that.

Detailed procedures and forms are on the FTA website. Cross-check anything you hear against the official source, and revisit our FTA Compliance UAE hub for related topics.

Get audit ready with clean invoice data

EInvoice Direct is UAE e-invoicing software built by Massive FZCO, a Dubai studio. An accredited service provider is included with the software at no extra charge, so your invoices flow in PINT AE format from day one. That means fewer mismatches, faster reconciliations, and shorter audits when the FTA does come knocking. Get UAE e-invoicing pricing and see how clean structured data changes the audit conversation.