The FTA conducted 93,000 inspection visits in 2024 - a 135% increase on the previous year (FTA 2024 Annual Report, 2025). With over 640,000 companies now registered for corporate tax (Gulf News, 2025), the audit net is widening fast. If your business operates in the UAE, the question is when the FTA reviews your filings, not whether they will.
TL;DR: FTA audits are risk-driven, not random. Common triggers include mismatches between VAT and corporate tax returns, repeated losses, and large refund claims. Keep records for 7 years (corporate tax) or 5 years (VAT). If notified, you have the right to appoint a tax agent and access FTA documents. Penalties for non-cooperation start at AED 10,000. Prepare now - not after the notification lands.
What Triggers an FTA Tax Audit?
FTA audits are risk-driven. The authority holds ISO 31000 certification for risk management, and its Strategy 2023-2026 confirms that enforcement targets are set by risk indicators, not random selection (Alvarez & Marsal, 2026).
In our experience, the patterns most likely to attract attention include:
- Revenue figures that don't reconcile between your corporate tax return and VAT filings
- Year-on-year profit swings without a clear business reason
- Consistent losses when competitors in the same sector are profitable
- Large or frequent VAT refund claims
- Late or amended filings, especially multiple voluntary disclosures
The FTA does not need to explain why it selected your business. If your numbers don't add up across tax types, that alone is enough to trigger a review.
How Does the FTA Audit Process Work?
The FTA notifies you through the EmaraTax portal, by email, or by registered mail. The notification specifies which tax types (VAT, corporate tax, excise) and which periods are under review.
Audits fall into two categories: desk-based reviews, where the FTA analyses your submissions and supporting documents remotely, and on-site inspections, where auditors visit your premises. There is no statutory maximum duration, and the scope can expand if the auditor finds issues that warrant deeper investigation.
What we see most often is that desk-based reviews escalate to on-site visits when the initial documents raise more questions than they answer. The cleaner your records, the shorter the process.
What Records Do You Need to Keep?
Record retention is non-negotiable, and the requirements differ by tax type:
Corporate tax records must be maintained for at least 7 years from the end of the relevant tax period. VAT records carry a minimum 5-year retention period. In cases where a refund claim was submitted before the statute of limitations expired and the FTA has not yet issued a determination, the retention period extends by a further 2 years (FTA Executive Regulations, 2026).
The FTA can request financial statements, tax invoices, bank statements, contracts, payroll data, and customs documentation. In our experience, the businesses that struggle most during audits are those relying on paper-only systems or scattered spreadsheets. A cloud-based accounting platform with proper bookkeeping processes makes a material difference.
Failure to maintain records attracts an AED 10,000 penalty on the first violation and AED 20,000 for a repeat offence within 24 months (Hallmark Auditors, 2026).
What Does the FTA Actually Scrutinise?
The FTA's corporate tax audit focus in 2025-26 centres on five areas (N.R. Doshi & Partners, 2026):
Taxable income adjustments. Auditors check whether non-deductible expenses - entertainment, penalties, fines, personal costs - have been properly added back. A common error is assuming that accounting treatment equals tax treatment. It does not. If you claimed a deduction, you need to justify it under the corporate tax deductions rules.
Related-party transactions. Transfer pricing documentation receives close attention. The FTA verifies arm's length pricing, checks the substance behind intercompany transactions, and challenges arrangements that lack economic rationale.
Exemption claims. Small Business Relief, Qualifying Free Zone Person (QFZP) status, participation exemptions, and loss utilisation claims are all validated against the eligibility criteria. If you claimed QFZP status, read our free zone corporate tax guide to confirm your qualifying activities still meet the threshold.
Revenue recognition. Auditors test whether income is recorded in the correct period, particularly for long-term contracts, deferred income, and group recharges.
Substance over form. The FTA evaluates where decisions are actually made and whether income aligns with real economic activity. Paper structures without operational substance get challenged.
What Are the Penalties If You're Not Ready?
The penalty framework changed on 14 April 2026 under Cabinet Decision No. 129 of 2025. Here are the key numbers:
| Violation | Penalty |
|---|---|
| Late corporate tax registration | AED 10,000 (fixed) |
| Late filing | AED 500/month (first 12 months), AED 1,000/month after |
| Late payment | 14% per annum, non-compounding, calculated monthly |
| FTA-discovered errors | 15% of unpaid tax amount |
| Voluntary disclosure | 1% per month of underpaid amount from original deadline |
| Failure to keep records | AED 10,000 first offence, AED 20,000 repeat |
For a detailed breakdown of how these penalties changed, see our FTA penalty reductions guide.
The gap between FTA-discovered errors (15%) and voluntary disclosure (1% per month) is significant. If you spot an error in a previous filing, correcting it proactively costs far less than waiting for the FTA to find it. Voluntary disclosures must be submitted within 5 years and close the moment an audit begins.
What Should You Do If You Receive an Audit Notification?
First, don't panic. Under Article 21 of the Tax Procedures Law, you have clear rights (Kayrouz & Associates, 2026):
- You can appoint a tax agent or legal representative to act on your behalf
- You have the right to know the exact scope and tax periods under review
- You can view and obtain copies of any FTA documents related to your case
- You may decline to answer questions that could be self-incriminating in criminal cases
One question clients always ask is whether they need to pay anything upfront. During the audit itself, no. But if the FTA issues an assessment you want to dispute, the Tax Disputes Resolution Committee (TDRC) requires payment of the full disputed tax and penalties before it will hear your objection. For disputes under AED 100,000, TDRC decisions are final.
The dispute timeline
You have 40 business days to request a reconsideration of an FTA assessment. The FTA then has 40 business days to respond. If you want to escalate to the TDRC, that's another 40 business days. Each stage has its own clock, so tracking deadlines matters.
How Do You Build an Audit-Ready Position?
Start with your corporate tax return. Reconcile it against your VAT filings. If the revenue figures don't match, investigate and document the reason before the FTA does.
Then work through the common problem areas. Are your deductions properly categorised and supported by contracts or invoices? Do your related-party transactions have transfer pricing documentation? If you claimed an exemption, can you prove eligibility with substance - not just paperwork?
The FTA has made it clear that "audit-ready" means maintaining documented, defensible positions throughout the year, not scrambling when the notification arrives. With 93,000 inspections in 2024 and growing enforcement capacity, the compliance bar is only going up.
Frequently Asked Questions
How long does an FTA audit take?
There is no statutory time limit. Desk-based reviews can close within a few weeks if records are in order. On-site inspections or cases where the scope expands take longer. The single biggest factor is how quickly you can provide clean, organised documentation.
Can the FTA audit tax periods from several years ago?
Yes. The standard audit limitation is 5 years from the end of the tax period. In cases involving tax evasion or failure to register, the FTA can go back 15 years.
What's the difference between a voluntary disclosure and an amended return?
A voluntary disclosure corrects a previous filing where the error resulted in underpaid tax or an incorrect refund. The penalty is 1% per month of the underpaid amount. Amended returns cover other corrections. Voluntary disclosures must be submitted before an audit begins - once you receive the notification, the window closes.
Do free zone companies face FTA audits?
Yes. Free zone entities registered for corporate tax or VAT are subject to audit on the same basis as mainland companies. If you claimed Qualifying Free Zone Person status, the FTA will verify your qualifying activities, substance, and adequate substance requirements as part of any review.
Need help getting your records audit-ready? Talk to our team - we work with UAE businesses on corporate tax and VAT compliance, and can review your filing positions before the FTA does.