Corporate Tax Audit in the UAE: How the FTA Picks Who to Audit - and How to Be Ready

Home Corporate Tax Corporate Tax Audit in the UAE: How the FTA Picks Who to Audit – and How to Be Ready
Hafiz Waqas Shehzad
Written by Hafiz Waqas Shehzad
Contributors
Senior Auditor
Senior Auditor
Reviewed by Muhammad Aaliyan Ibrahim Founder & Managing Partner
Home Corporate Tax Corporate Tax Audit in the UAE: How the FTA Picks Who to Audit – and How to Be Ready

In 2024, the Federal Tax Authority conducted ninety-three thousand field inspection visits across the UAE, a 135% increase compared to the previous year. These inspections resulted in the seizure of AED 348 million in tax dues and associated fines. The scale of this increase reflects a broader shift in enforcement activity: corporate tax audits in the UAE are no longer occasional exercises. They have become a routine and expanding part of the Federal Tax Authority’s compliance program. 

 

If you’ve already filed your corporate tax return, you might assume the hard part is over. It isn’t. Your return is sitting inside EmaraTax right now, being cross-checked against your VAT filings, your customs data, and your audited financials, automatically, and mostly without you ever seeing it happen. Registration was phase one. This is phase two.

 

So how does an FTA corporate tax audit actually work? Audits are risk-based, not random. The FTA scores every taxable person against data inconsistencies, refund patterns, and VAT-to-CT mismatches. If your profile trips enough flags, you’ll get a written notice – at least 10 business days before anyone shows up. Selection isn’t luck. Preparation is what decides what happens next.

What an FTA Corporate Tax Audit Actually Is?

An FTA corporate tax audit is an official examination of your records, returns, and supporting documents, carried out by the Federal Tax Authority to verify that what you reported is what actually happened. It isn’t a courtesy check. It’s a legal power, granted under Federal Decree-Law No. 28 of 2022 on Tax Procedures, and it applies to every taxable person in the country.

 

Here’s where most businesses get confused. An FTA tax audit is not the same as the statutory financial audit your accountant runs every year. Your statutory auditor checks whether your financial statements fairly represent your business, for shareholders and regulators. The FTA checks whether you’ve paid the right tax and can assess penalties directly. Different purpose. Different authority. Different outcome.

 

This applies across all seven emirates, Dubai, Abu Dhabi, Sharjah, and beyond, and it applies to free-zone entities too, including those claiming Qualifying Free Zone Person (QFZP) status. In a single audit exercise, the FTA can review corporate tax, VAT, and excise tax together, because increasingly, it’s looking at all three at once.

How the FTA Decides Who Gets Audited

The FTA spent 2023 and most of 2024 onboarding new registrants. That phase is over now. The dataset is now comparative, not standalone – the Authority has two or three filing cycles to check against each other, and that changes how audits get triggered.

 

Selection follows risk management principles built into the FTA’s Strategy 2023–2026, referencing ISO 31000 – audits are risk-driven, not random. In practice, the FTA is watching for:

  • Data inconsistencies across your VAT and CT filings

  • Frequent or unusual refund claims

  • VAT-to-CT turnover mismatches – the number-one trigger
  • Related-party transactions without supporting documentation

  • Sudden margin swings year over year

  • Industry risk profile – certain sectors get closer scrutiny

  • First-time filers with unusual positions, especially on their second cycle

Most of these, you can control. A documented reason for a margin change, a paper trail for a related-party loan – that’s the difference between a flag that clears itself and one that becomes a notification.

The VAT vs Corporate Tax Data Match: Where Mismatches Come From

The VAT vs Corporate Tax Data Match: Where Mismatches Come From

The FTA cross-references your corporate tax return against your VAT filings, customs records, and audited financials – at scale, and automatically. If the numbers don’t line up, that mismatch becomes the starting point of a risk score.

Why a Legitimate Business Still Shows a Gap

Not every mismatch is a mistake. Plenty of businesses show a real, defensible gap between their VAT turnover and their CT taxable income for reasons the FTA already understands.

Reason for the Difference Why It’s Legitimate What Documentation Defends It
Out-of-scope or exempt supplies VAT excludes certain supplies that still count for CT purposes Sales ledger reconciled by supply type
Timing or cut-off differences VAT is invoice-based; CT often follows accrual accounting periods Period-end reconciliation schedule
Disposal of fixed assets Capital gains treatment differs between VAT and CT Asset register and disposal invoices
Intercompany recharges VAT and CT treat intra-group charges differently depending on structure Intercompany agreements and recharge schedules
Free-zone income treatment Qualifying income at 0% CT can still carry standard VAT treatment QFZP qualifying-income workpaper

What Happens After the Notification Lands

If your business gets selected, here’s the sequence:

  1. Notification received – written notice, at least 10 business days before the audit begins, under Federal Decree-Law No. 28 of 2022.

  2. Document request – the notice specifies which records, returns, and periods are in scope.

  3. Where it happens – your premises, the FTA’s office, or a documents-only review.

  4. Review and questions – the auditor examines your records and may meet your finance team.

  5. Assessment issued – the FTA notifies you of the result and any Due Tax or penalties, within the Executive Regulation’s timeframe.

  6. Your response window – view the documents behind the assessment, and respond, reconsider, or escalate through objection and appeal.

Your rights throughout: notice, response, visibility into the basis for the assessment, and the right to object.

 

One warning worth repeating: missing or ignoring an FTA notification does not make it go away. It removes your window to respond, and it moves you straight toward an estimated assessment, the FTA calculating your liability for you, on its terms, not yours.

The Documents You Must Be Able to Produce

When the request lands, you need these ready and retrievable, not scattered across email threads and an old laptop:

  • Financial statements – profit and loss, balance sheet, cash flow

  • CT return and tax computation working papers

  • VAT returns and reconciliations against CT turnover

  • Transfer pricing documentation for related-party dealings

  • Related-party agreements and contracts

  • Invoices and supporting contracts

  • Bank records tied to the relevant tax period

  • Fixed-asset register

Under Article 56 of Federal Decree-Law No. 47 of 2022 (the Corporate Tax Law), you must keep these records for 7 years from the end of the relevant tax period and that applies even if you owe zero tax, including businesses claiming Small Business Relief or QFZP status. 

 

Separately, the FTA’s power to audit or assess a tax period is capped at 5 years under the Tax Procedures Law, extended to 15 years in cases involving suspected evasion or failure to register, under Federal Decree-Law No. 17 of 2025, effective 1 January 2026.

 

One point most businesses don’t expect: the FTA can request documents in Arabic. If your records exist only in English, budget time, and a certified translator, into your response plan, not after the notice arrives.

What It Costs When the FTA Finds It First

Corporate tax penalties sit under Cabinet Decision No. 75 of 2023, as amended by Cabinet Decision No. 10 of 2024 – verified directly against the current framework, not carried over from an older article.

Situation Penalty Basis What It Means in Practice
Late registration AED 10,000 flat Applies even if you owe zero tax
Late filing of the return AED 500/month (first 12 months), then AED 1,000/month Even a single day late counts as a full month
Late payment 14% per annum, applied monthly on the unpaid tax Keeps accruing from the day after the due date
Voluntary disclosure before FTA contact 1% per month on the tax difference, from the original due date The cheapest way to correct an error
Error discovered by the FTA during audit 15% fixed, plus 1% per month on the tax difference The most expensive path — and the one that shows up on your compliance record

Voluntary Disclosure vs. Waiting to Be Caught

Here’s what that gap looks like in real numbers. Say your business underreported AED 100,000 in taxable profit, and it takes six months to correct it either way.

  • File a voluntary disclosure yourself: 1% × 6 months = AED 6,000.

  • The FTA finds it during an audit: 15% fixed + (1% × 6 months) = AED 21,000.

That’s a AED 15,000 difference – on a single, moderate error. The moment a voluntary disclosure stops being available is the moment the FTA notifies you of an audit or assessment. After that, self-correction is off the table.

Penalty Waiver and Relief: When It's Actually Possible

The FTA has, in limited circumstances, granted penalty waivers or reductions – generally where a business can demonstrate a genuine error, a reasonable excuse, or proactive cooperation before the FTA initiated contact. It isn’t automatic, and it isn’t guaranteed. It’s a request you make, with evidence, not a box you tick.

Pre-Audit Readiness: What to Do Before a Notification Arrives

You don’t need a notice to start acting like one is coming:

  1. Reconcile VAT and CT turnover — document every difference as you find it, not months later.

  2. Complete transfer pricing documentation for every related-party dealing above threshold.

  3. Formalize intercompany agreements and loan terms in writing, not verbally.

  4. Confirm your free-zone or QFZP qualifying-income position is evidenced, not assumed.

  5. Run a pre-filing review before your next submission, not after.

  6. Confirm record retention is complete and retrievable — findable within days, not weeks.

Each of these has a clear finish line: if you can’t point to the document that proves it, it isn’t done yet.

How ADEPTS Handles a Corporate Tax Audit

Whether a notification has already arrived or you already know your filings have gaps, the priority is the same: close the exposure before it becomes a penalty. ADEPTS supports UAE businesses through every stage:

  • FTA-approved tax agent representation before the Authority

  • Pre-audit reconciliation of your VAT and CT positions

  • Audit notice and query response handling, on your timeline, not last-minute

  • Voluntary disclosure preparation and submission

  • Transfer pricing documentation built to hold up under scrutiny

  • Penalty waiver and reconsideration applications

  • Arabic documentation support during the audit process

As an FTA-approved tax agent, ADEPTS represents your business directly with the Authority as your registered point of contact. We don’t just respond to audits – we build the reconciliation trail before you need it.

The Bottom Line

Audit selection is systematic and data-driven – not chance, and not something you can outguess. The gap between correcting an error yourself and having the FTA find it first is a measurable cost, not a philosophical one. And readiness, in the end, is documentation. Nothing more mysterious than that.

 

This enforcement shift isn’t something to fear. It’s something a prepared business can be entirely comfortable with. If your VAT and CT positions haven’t been reconciled recently, a pre-audit readiness review closes that gap before the FTA opens it for you.

FAQs:

Yes. Timely filing and payment reduce your risk score, but they don’t exempt you. The FTA can still select any taxable person for audit under Federal Decree-Law No. 28 of 2022, regardless of compliance history.

Standard cases run 5 years from the end of the relevant tax period. Where the FTA suspects evasion or failure to register, that window extends to 15 years under Federal Decree-Law No. 17 of 2025, effective 1 January 2026.

Yes. The FTA must give at least 10 business days’ written notice before beginning a tax audit, except in specific circumstances involving suspected evasion.

Not differently in process, but they face closer scrutiny. QFZP status depends on evidenced qualifying income and substance, so free-zone entities should expect their documentation to be tested more closely than a standard mainland filer’s.

No. Your statutory financial audit checks whether your financial statements are fairly presented. An FTA tax audit checks whether you’ve paid the correct tax, and it can assess penalties directly — the two serve entirely different purposes.

Only an FTA-approved tax agent can formally represent you before the Authority during an audit. Your accountant can prepare records, but representation itself requires registered tax agent status.

That doesn’t relieve your obligation to produce them. The responsibility to maintain and retrieve records for the full 7-year retention period sits with the taxable person, not the accountant who prepared them — so recovering access early, before a notification arrives, matters.

References

Related Articles

Hafiz Waqas Shehzad
Written by Hafiz Waqas Shehzad
Contributors
Senior Auditor
Senior Auditor
Reviewed by Muhammad Aaliyan Ibrahim Founder & Managing Partner