VAT audit UAE: what to expect from the FTA process

What is a VAT audit in the UAE?

A VAT audit in the UAE is a formal review by the Federal Tax Authority (FTA) of a business's VAT records, returns, and supporting documents to confirm that the correct tax has been declared and paid. The FTA can check invoices, contracts, accounting systems, and import data, and it can issue assessments and penalties where it finds errors.

If you have received a notice or just want to be ready, this guide on vat audit uae what to expect walks through the process step by step. It covers the legal basis, timelines, documents the FTA usually asks for, common findings, and how to reduce risk. For the wider context, see our UAE VAT hub.

Legal basis for FTA tax audits

UAE VAT audits are governed by Federal Decree-Law 8 of 2017 (the VAT Law), Federal Decree-Law 28 of 2022 on Tax Procedures, and Federal Decree-Law 17 of 2024, which amended the procedures law. Cabinet decisions set the penalty amounts. VAT itself has applied at a 5% standard rate since January 1, 2018.

The FTA has wide powers. It can audit any taxable person, request records going back at least 5 years, enter business premises during working hours, and take copies of documents and digital records. Audits can be desk-based, on-site, or a mix of both.

Who can be audited?

Any business with a Tax Registration Number (TRN) can be selected. The FTA does not need a reason to audit you. Common triggers include:

• Frequent refund claims or large refund amounts.
• Sharp changes in declared sales or input tax.
• Mismatches between customs import data and VAT returns.
• Late filings, late payments, or repeated voluntary disclosures.
• Industry-wide risk reviews, for example real estate, e-commerce, or gold trading.
• Third-party information, including data from customers, suppliers, or whistleblowers.

The VAT audit process step by step

Most UAE VAT audits follow a clear sequence. Knowing each stage helps you respond on time and avoid extra penalties.

1. Audit notification

The FTA must give at least 10 business days' notice before starting an audit, unless there is a risk of evasion or evidence destruction. The notice is sent through the EmaraTax portal and your registered email. It states the tax periods under review, the type of audit, and the documents required.

2. Information request

You will receive an information request listing items the auditor needs. This often includes VAT returns, the VAT account, sales and purchase ledgers, tax invoices, credit notes, import declarations, bank statements, and contracts. You usually have 10 business days to respond, with extensions possible on request.

3. Desk review or field visit

Simple cases are handled by email and EmaraTax uploads. Complex cases involve a field visit. Auditors may interview finance staff, inspect the accounting system, and sample transactions. They can ask for English or Arabic translations of key documents.

4. Draft findings

The auditor shares preliminary findings. You can comment, supply missing documents, and correct misunderstandings. This stage is your best chance to reduce or remove proposed assessments before they become final.

5. Final assessment

The FTA issues a Tax Assessment and, where relevant, an Administrative Penalty Assessment. These set out the additional tax due, penalties, and the deadline to pay, usually 20 business days from notification.

6. Dispute options

If you disagree, you can file a reconsideration within 40 business days. See our guide to the VAT Reconsideration Request UAE process for the steps and evidence rules. Further appeals go to the Tax Disputes Resolution Committee and then the courts.

Audit timeline at a glance

Documents the FTA usually requests

Prepare these records before fieldwork starts. Missing documents are the most common reason for adverse findings.

• VAT returns and the underlying VAT account for the audited periods.
• Trial balance, general ledger, and chart of accounts.
• Sales tax invoices and credit notes, including simplified invoices.
• Purchase invoices supporting input tax claims.
• Customs import declarations and reverse charge calculations.
• Export evidence, such as exit certificates and shipping documents.
• Contracts with customers and suppliers, including intra-group agreements.
• Bank statements reconciled to revenue and VAT payments.
• Free zone designated zone movement records, where relevant.
• Fixed asset registers and capital asset scheme calculations.

Tax invoice content

The FTA frequently disallows input tax where invoices do not meet the legal content rules. A valid full tax invoice must show the words "Tax Invoice", supplier name, address, and TRN, customer name and TRN where required, invoice date and date of supply, a unique sequential number, description and quantity of goods or services, unit price and amount excluding tax, discount, VAT rate and amount in AED, and the total payable in AED.

Common audit findings

Most assessments come from a small set of recurring issues. Review these before the auditor does.

Output tax errors

• Zero-rating exports without proof of physical export within 90 days.
• Treating standard-rated supplies as out of scope, especially for services to non-residents.
• Missing VAT on deemed supplies, staff benefits, or barter transactions.
• Incorrect place of supply for electronic services and real estate.

Input tax errors

• Recovering VAT on blocked items such as entertainment and certain motor vehicles.
• Claiming input tax without a valid tax invoice in the claimant's name.
• Not applying partial exemption where the business makes exempt supplies.
• Reverse charge not declared on imported services.

Procedural errors

• Late filing or late payment, which trigger separate penalties. See the Late VAT Payment Penalty UAE guide.
• Not keeping records for the required period, generally 5 years and up to 15 years for real estate.
• Failure to notify the FTA of changes such as address, activity, or legal form.

Penalties linked to VAT audits

Audit findings often come with administrative penalties under Cabinet Decision 49 of 2021 and later amendments. Amounts depend on the breach. For a full list, see our VAT Administrative Penalties UAE guide and the broader UAE VAT Penalties overview.

Headline penalty types include:

• Fixed penalties for late registration, late filing, and record-keeping failures.
• Percentage-based penalties on unpaid tax, which grow over time.
• Penalties for incorrect tax returns and for failing to submit a voluntary disclosure when required.
• Tax evasion penalties, which can reach up to 5 times the evaded tax and may include criminal liability. See VAT Tax Evasion Penalty UAE.

Where you identify an error before the FTA does, a Voluntary Disclosure VAT UAE often reduces exposure compared with the same error found during audit.

How to prepare before an audit notice

The best preparation is continuous. Treat every month-end like a mini audit.

Records and systems

1. Keep digital and paper records for at least 5 years, in a format the FTA can read.
2. Reconcile VAT returns to the general ledger and to bank receipts every quarter.
3. Match import VAT in box 6 to customs declarations under your TRN.
4. Maintain a register of credit notes, bad debt relief claims, and adjustments.
5. Document the VAT treatment of unusual transactions at the time they happen.

People and process

1. Name a single audit owner in finance with authority to gather records.
2. Train sales and procurement teams on invoice content and TRN checks.
3. Run an internal VAT health check at least once a year.
4. Keep a clean audit file per quarter, ready to share on request.
5. Review FTA public clarifications for your sector and update positions.

What to do when the audit notice arrives

1. Confirm receipt in EmaraTax and diarise every deadline.
2. Read the scope carefully. Limit your response to the periods and taxes listed.
3. Brief management and, if needed, appoint a registered tax agent.
4. Assemble the requested documents in the order listed by the FTA.
5. Prepare a short transaction narrative for any unusual or large items.
6. Keep all communication in writing through EmaraTax or official email.
7. Do not destroy, alter, or backdate any record.

Audit outcomes and next steps

You can verify procedures and download forms from the UAE Federal Tax Authority and review broader tax policy on the UAE Ministry of Finance website. For more on the VAT regime overall, return to the UAE VAT hub.

How e-invoicing changes the audit picture

From 2026 and 2027, the UAE moves to a Peppol 5-corner DCTCE (Decentralized Continuous Transaction Control and Exchange) e-invoicing model in PINT AE format. Large taxpayers with revenue of AED 50,000,000 or more must appoint an accredited service provider (ASP) by October 30, 2026, and go live on January 1, 2027. SMEs follow on July 1, 2027, and government entities on October 1, 2027.

Once e-invoicing is live, the FTA receives invoice data in near real time. Audits will rely less on sampling and more on full population testing. Clean master data, correct TRNs, and consistent product and tax codes will matter more than ever.

Get audit ready with EInvoice Direct

EInvoice Direct is UAE e-invoicing software from Massive FZCO. It includes an accredited service provider at no extra charge, connects to Zoho Books, QuickBooks, Xero, Tally, SAP, Oracle NetSuite, Microsoft Dynamics 365, Microsoft Business Central, and Odoo, and produces PINT AE compliant invoices that stand up to FTA review. To prepare your records and reduce audit risk, get UAE e-invoicing pricing and see how we can help your finance team.