UAE FTA Tax Audit 2026: How to Be Ready When the FTA Comes Knocking

• 10 July, 2026
• By Safvan, Managing Partner
• Tax Compliance

Last reviewed 2 August 2026 by the Exiloz tax team against the UAE legislation in force on that date. Tax law moves, confirm any figure against tax.gov.ae before you act on it.

The FTA is auditing on data now, be ready before the notice

Two full tax cycles into VAT and corporate tax, the Federal Tax Authority has shifted to risk-based, data-driven audits. It compares your filings against the underlying records and, where something looks off, issues an audit notice, with at least 10 business days' warning. An audit is not a penalty in itself, but a weak or disorganised response can turn a routine review into an assessment. This guide covers how audits work, what triggers them, the documents to keep ready, and how to respond. If you would rather not handle this in house, this is what our FTA corporate tax audit support covers.

The businesses that come through audits cleanly are rarely the ones with nothing to hide; they are the ones whose records are organised and whose filings reconcile. Audit-readiness is a habit, not a fire drill.

How an FTA Audit Actually Works

Most audits follow a predictable path. The FTA issues a notice, requests records and explanations, reviews your VAT or corporate tax filings against invoices, ledgers and contracts, and closes with findings, and an assessment if adjustments are made. It can be conducted on-site or as a desk review. You have rights throughout, including to be present and to request the audit results.

What Triggers an Audit

The Audit Document Checklist

Responding to an Audit Notice: The First 48 Hours

1. Read the scope: tax type, periods and exactly what is requested.
2. Appoint one point of contact so responses are consistent.
3. Gather precisely what is asked — no more, no less — and check for gaps.
4. Answer in writing, to the point, and never speculate or over-share.
5. Challenge if needed: if the assessment is wrong, request reconsideration in time.

How Long Records Must Be Kept

An audit can reach back across earlier tax periods, so the archive has to survive longer than the filing cycle. UAE law sets minimum retention periods by tax type, and they apply to exempt persons as well as taxable ones, so "we did not owe anything" is not a reason to bin the file.

Retention is not just existence, the records must be retrievable in a form that lets the FTA readily verify the figures. A backup nobody can restore, or a former accountant's laptop, does not count.

Build the Audit File Before the Notice Arrives

Ten business days is not long enough to build an archive; it is only long enough to open one. The practical answer is to maintain a standing audit file as part of the monthly close, so the notice changes nothing except who reads the folder.

Mistakes That Turn a Routine Review Into an Assessment

Most audit damage is self-inflicted, and it happens in the response rather than in the books. The recurring failures we see:

1. Over-sharing. Sending whole folders instead of the requested documents widens the review and invites questions nobody asked.
2. Uncoordinated answers. Two staff members giving two versions of the same transaction reads as inconsistency, even when both are honest.
3. Reconstructing records after the notice. Freshly created schedules that do not tie to contemporaneous documents undermine everything else you submit.
4. Missing response deadlines. Silence is read as absence of evidence, and the FTA will assess on what it has.
5. Treating a desk review casually. A written information request carries the same weight as officers at your door, the standard of response should be identical.

Desk Review or Site Visit: What Each Looks Like

A desk review runs on paper: the FTA requests records and written explanations, you submit them, and follow-up queries arrive in writing. It feels lower-stakes, but the file you submit is the audit: there is no meeting in which to add context later, so every schedule should be complete and every explanation self-contained.

An on-site audit brings FTA officials to your premises to examine records and ask questions directly, normally with the notice period described above. Your rights do not change (you can be present, route questions through your appointed contact, and request the audit results) but preparation matters more: brief the team on who answers what, have the period files physically ready, and keep a log of every document handed over.

What are your rights during an FTA audit?

An audit runs both ways, the Tax Procedures Law gives the FTA its powers and gives you protections. Under Article 17 of Federal Decree-Law No. 28 of 2022 you are entitled to at least 10 business days’ notice of a field audit (no notice is required where tax evasion is suspected). Watch for the older five-day figure still circulating online: that came from Federal Law No. 7 of 2017, which was repealed. The audit must normally take place during official working hours, and you may ask the auditors to show their professional identification before granting access.

You also have the right to copies of any documents the auditors take, to be informed of the audit results, and to challenge them: a reconsideration request within 40 business days of an assessment, then the Tax Disputes Resolution Committee, then the courts. Time limits protect you too, in general the FTA cannot open an audit of a tax period more than five years after it ended (extended where a voluntary disclosure arrives late in that window or evasion is involved). Knowing these boundaries keeps an audit professional: cooperate fully within them, and put every request and response in writing through EmaraTax so the file speaks for itself later.

Frequently Asked Questions

Where this comes from

Every figure above traces to a named instrument. Check them yourself before you act, and check the date, because UAE tax law has moved twice in the last year.