FTA investigation vs audit: how the two procedures differ in the UAE

What is an FTA investigation vs audit?

An FTA audit is a routine review by the UAE Federal Tax Authority (FTA) to verify that a business has correctly reported VAT, excise tax, or corporate tax. An FTA tax investigation is a more serious procedure used when the authority suspects tax evasion or fraud. Audits focus on accuracy. Investigations focus on intent and may carry criminal consequences.

Understanding the difference between an FTA investigation vs audit matters because each procedure follows a different legal track, gives you different rights, and carries very different penalties. This guide is part of our FTA Compliance UAE cluster and explains both procedures in plain English for UAE business owners and finance teams.

The legal basis for each procedure

Both procedures sit under the Tax Procedures Law, Federal Decree-Law 17 of 2024, and the executive regulations issued by the Ministry of Finance (MoF). The same law gives the FTA the power to audit any taxable person and, separately, to investigate suspected tax crimes.

FTA tax audit

A tax audit is an administrative review. The FTA examines your records, returns, invoices, and supporting documents to confirm that the tax declared matches the tax due. The auditor's job is to identify under-reporting, over-claimed input VAT, or misapplied reliefs, then issue a tax assessment if needed. You can learn more in our guide to the FTA Audit Process.

FTA tax investigation

A tax investigation is a fact-finding procedure used when the FTA has reason to believe an offence has been committed. Offences include tax evasion, submitting false documents, hiding taxable supplies, or obstructing tax officers. Investigations can lead to criminal referral to the UAE Public Prosecution, on top of administrative penalties.

Side by side: FTA investigation vs audit

The table below summarises the main differences UAE businesses should know.

What triggers an FTA audit

Audits are usually risk based. The FTA uses data analytics across VAT returns, customs filings, bank flows, and e-invoicing records to score each taxable person. Common triggers include repeated VAT refund claims, mismatches between input and output tax, sudden drops in declared revenue, and industry-wide reviews.

Random selection is also possible, so a clean record does not guarantee immunity. Our article on What Triggers FTA Audit UAE lists the most common red flags and how to reduce them.

How audit notices work

The FTA must give at least 10 business days notice before starting a tax audit, except in cases where prior notice would compromise the audit. The notice states the period under review, the taxes covered, and the documents you must prepare. From that point you are expected to cooperate, keep records intact, and grant the auditor access during working hours.

What triggers an FTA investigation

Investigations start when the FTA has specific evidence or credible information that an offence may have occurred. Common starting points include:

• An audit that uncovers indicators of evasion, such as fake invoices or hidden cash sales.
• Whistleblower reports, including those filed through the FTA's confidential channels.
• Intelligence shared by Customs, the Central Bank, or foreign tax authorities.
• Discrepancies between e-invoicing data and declared turnover, especially once the Peppol 5-corner DCTCE (Decentralized Continuous Transaction Control and Exchange) model goes live.
• Repeated non-cooperation during a standard audit.

Unlike an audit, an investigation can begin without prior notice. Tax officers may arrive at your premises, secure records, and prevent the removal of evidence. The legal basis is the Tax Procedures Law and its executive regulations.

Timelines and statute of limitations

The FTA can generally audit a tax period within 5 years from the end of that period. In cases of tax evasion, the limitation extends to 15 years. Where a taxable person failed to register, the clock starts running from the date they should have registered.

Audit duration

There is no fixed statutory duration for a tax audit. Simple VAT reviews often close within 60 to 90 days. Complex corporate tax audits covering multiple years can run longer. The auditor may request additional information at any point until the assessment is issued.

Investigation duration

Investigations are open-ended because they depend on the evidence gathered, witness statements, and any referral to the Public Prosecution. During this period the FTA may freeze refunds, restrict TRN (Tax Registration Number) functions, or apply precautionary measures.

Powers of FTA officers

Tax officers carry written authorisations and must show them on request. Their powers vary depending on whether they are conducting an audit or an investigation.

During an audit

• Enter business premises during official working hours.
• Request accounting records, contracts, and tax invoices.
• Interview employees about transactions and processes.
• Take copies of documents and digital files.
• Issue a draft assessment for your response before finalising.

During an investigation

• Enter premises at any time, with judicial authorisation where required.
• Seize original records, devices, and stock samples.
• Place seals on premises, warehouses, or storage areas.
• Question suspects and witnesses formally.
• Refer the case to the Public Prosecution for criminal charges.

Penalties: administrative and criminal

Both procedures can end with administrative penalties under Cabinet decisions issued under the Tax Procedures Law. For e-invoicing breaches specifically, Cabinet Decision 106 of 2025 sets penalties between AED 2,500 and AED 50,000 per violation.

Other common administrative penalties include fixed amounts for late returns, percentage penalties on unpaid tax, and daily penalties for ongoing non-compliance. Investigations can add criminal penalties on top, including fines that are multiples of the evaded tax and, in serious cases, imprisonment for those personally responsible.

Typical penalty categories

Your rights as a taxable person

UAE tax law protects taxable persons during both procedures. You have the right to:

• Be represented by a registered tax agent at every stage.
• Receive clear notices stating the legal basis and scope.
• Respond to draft findings before a final assessment is issued.
• Request reconsideration of an FTA decision within 40 business days.
• Escalate to the Tax Disputes Resolution Committee (TDRC) and then to the federal courts.
• Confidential treatment of your tax information.

During investigations you also have the right to legal counsel during questioning and the right to remain silent on matters that may incriminate you. These rights mirror general UAE criminal procedure.

How to prepare and respond

The best defence against both procedures is the same: clean records, timely returns, and a documented control environment. Our guide on How to Prepare for FTA Audit sets out a full readiness checklist.

Day to day controls

• Reconcile VAT returns to your accounting system every period.
• Match e-invoicing data to revenue and output VAT.
• Keep tax invoices, credit notes, and supporting contracts for at least 5 years, or 15 years for real estate records.
• Document the basis for zero-rated, exempt, and out-of-scope supplies.
• Run an annual internal review against the latest FTA public clarifications.

When a notice arrives

1. Confirm the officer's identity and the legal basis of the visit.
2. Notify your tax agent and senior management immediately.
3. Identify a single point of contact for the FTA.
4. Collect the documents listed in the notice into one secure folder.
5. Keep working copies, never alter originals.

For investigations, add legal counsel from the first moment and avoid informal conversations with officers outside the formal interview record.

Documents the FTA will request

The exact list depends on the taxes under review, but the core set is similar across audits and investigations. Read our detailed FTA Audit Document guide for full templates.

• Trial balance, general ledger, and financial statements for the period.
• VAT and corporate tax returns with workings.
• Sales and purchase listings reconciled to the ledger.
• Tax invoices, credit notes, and import or export declarations.
• Bank statements and reconciliations.
• Contracts, master agreements, and intercompany pricing files.
• E-invoicing transmission logs once Phase 1 starts on January 1, 2027.

From audit to assessment to dispute

An audit typically ends with a tax assessment notice setting out the additional tax, penalties, and interest. The FTA Tax Assessment Process explains how the FTA calculates the assessment and the deadlines that follow.

If you disagree, you can request reconsideration within 40 business days from the date you were notified. If the FTA rejects your reconsideration, you may escalate to the TDRC within 40 business days, then to the federal court of first instance, court of appeal, and Court of Cassation. Investigations follow a parallel criminal track in addition to the administrative dispute route.

After the procedure closes

Closure is not the end of compliance. The FTA can revisit the same period if new information emerges, and any patterns of behaviour identified will shape your future risk score. Our Post Audit Procedures UAE article explains how to settle assessments, pay penalties, and update controls so the same issues do not return.

How UAE e-invoicing changes the picture

The UAE is rolling out a Peppol 5-corner DCTCE e-invoicing model in PINT AE format. Large taxpayers with revenue of AED 50 million or more must appoint an accredited service provider (ASP) by October 30, 2026, with mandatory go-live on January 1, 2027. SMEs follow on July 1, 2027 and government entities on October 1, 2027, after a pilot in Q2 2026.

Once live, the FTA will receive structured invoice data in near real time. This will reduce the need for traditional desk audits on transactional accuracy and increase the focus of investigations on intent, structuring, and missing data. Businesses that invest early in clean e-invoicing data will face fewer surprises during any future FTA compliance UAE review.

For the official legal texts, see the UAE Ministry of Finance, the UAE Federal Tax Authority, and the UAE MoF e-invoicing portal.

Get pricing and reduce your FTA risk

EInvoice Direct, by Massive FZCO, is UAE e-invoicing software that includes an accredited service provider at no extra charge. Clean, Peppol-compliant invoicing data is the single best defence against both audits and investigations. Get UAE e-invoicing pricing and see how to be ready well before the 2027 deadlines.