A UAE corporate tax audit is an examination of your filed return by the Federal Tax Authority (FTA), the federal body that administers tax in the Emirates. It is not something you arrange. The FTA opens it, and the law gives you at least ten business days of warning before it starts. By 2026 the FTA holds several full cycles of corporate tax returns, VAT returns and customs data, and it now cross-checks them. That is why a UAE corporate tax audit has stopped being a theoretical risk for small and mid-sized companies.
This guide covers what tends to trigger an examination, which records you must be able to produce, how far back the FTA may look, and what an error costs once the authority finds it before you do.
The short version:
- The FTA must give you at least 10 business days' notice, with narrow exceptions.
- Corporate tax records must be kept for 7 years after the end of the tax period.
- The FTA can normally audit 5 years back, and up to 15 years in evasion or non-registration cases.
- Self-correcting an error costs 1 percent per month. Being caught costs a flat 15 percent on top.
A UAE corporate tax audit is not your annual statutory audit
This is the single most common confusion, so deal with it first. Two very different things share the word "audit".
A statutory audit is something you commission. You appoint a licensed external auditor, they examine your financial statements, and they sign an opinion. Many free zones and larger mainland companies require one as a licence condition. Our guide to the audit requirements that apply to UAE free zone companies explains who has to file one and by when.
A tax audit is something the state initiates. Nobody is hired. The FTA examines whether the numbers you reported match the law and the underlying evidence. It can look at your corporate tax return, your VAT returns, or both.
The practical point: a clean statutory audit does not protect you from a tax audit. Signed financial statements are evidence in your favour, not immunity. The FTA is not bound by your auditor's opinion.
What triggers an FTA tax audit
The FTA does not publish a list of triggers, and anyone who claims to have one is guessing. What is visible from the legislation and from how the authority behaves is that selection is risk-based. Certain patterns raise the odds of an FTA tax audit:
- Numbers that disagree with each other. Revenue on the corporate tax return that does not reconcile to the VAT returns for the same period is the classic flag. The FTA sees both.
- A profit that lands just under a threshold. Taxable income sitting just below AED 375,000, or revenue parked just under AED 3 million to keep a relief election alive, invites a look.
- Repeated losses in a business that keeps trading, paying salaries and renewing its licence.
- Related-party transactions without transfer pricing documentation behind them, particularly management fees and interest paid to a parent abroad.
- A 0 percent free zone claim where the substance behind it is thin.
- Refund claims, which are checked more closely than payments by nature.
- Late, amended or corrected filings, which signal a control problem.
- Third-party data. Customs declarations, bank information and your counterparties' own filings all reach the authority independently of you.
None of these is illegal, and several are completely normal. But each is a reason for a file to be pulled, and the defence is always the same: documentation you can produce quickly.
How a UAE corporate tax audit actually runs
The statutory clock
An FTA corporate tax audit, day by day
Every one of these intervals is fixed in the Tax Procedures Law. None of them is at the auditor's discretion.
The notice arrives
The FTA must notify you at least ten business days before conducting the audit. Art. 16(2)
No notice, up to 72 hours closed
Where evasion is suspected or notice would hinder the audit, an auditor may enter unannounced and close the premises temporarily. Requires the Public Prosecutor. Art. 16(4)
The audit opens
At the FTA's premises, at your place of business, or wherever you store goods or keep records. Art. 16(3)
Four rights you can invoke
See the auditor's ID card. Get a copy of the audit notification. Attend any audit held outside the FTA. Obtain copies of documents taken. Art. 21
The assessment lands
You are notified of the result and may view the documents and data the assessment was built on. Art. 22, 23
Your window to challenge it
Request a review of the assessment, or reconsideration of the decision. The FTA then has 40 business days to answer. Art. 28, 29
Source: Federal Decree-Law No. 28 of 2022 on Tax Procedures (Federal Tax Authority). Article numbers as published.
The process is set out in the Tax Procedures Law, and the timings are not discretionary.
You get notice. The FTA must notify you at least ten business days before conducting the audit, under Article 16 of Federal Decree-Law No. 28 of 2022 on Tax Procedures. There are exceptions, and they are narrow. A tax auditor may enter without prior notice if there are grounds to suspect tax evasion, or if giving notice would hinder the audit, and may temporarily close the premises for up to 72 hours. That requires the Public Prosecutor's permission. In an ordinary compliance review, you will be told in advance.
It happens somewhere specific. The audit may run at the FTA's premises, at your place of business, or anywhere you store goods or keep records.
You have named rights. Article 21 gives a person under audit the right to ask the tax auditor for identification, to obtain a copy of the audit notification, to attend an audit taking place outside the authority's premises, and to obtain copies of the documents the auditor takes.
You are told the result. The FTA notifies you of the outcome, and you may view or obtain the documents and data the assessment was built on. If a tax assessment is issued, you are notified within ten business days of issuance.
You can push back. You have 40 business days from notification to request a review of a tax assessment, and 40 business days to request reconsideration of a decision. The FTA then has 40 business days to decide. After that route is exhausted, the Tax Disputes Resolution Committee is next.
UAE tax record keeping requirements: what you must be able to produce
Here is the rule that catches people out. The UAE tax record keeping requirements for corporate tax are set in the Corporate Tax Law itself, and they override the general rule in the Tax Procedures Law.
Article 56 of Federal Decree-Law No. 47 of 2022 requires a taxable person to keep all records and documents for seven years following the end of the tax period to which they relate. The article opens with the words "notwithstanding the provisions of the Tax Procedures Law", which is what makes it the operative period for corporate tax. Exempt persons are not off the hook either: they must keep, for the same seven years, the records that let the FTA verify their exempt status.
The records have to do two jobs: support the information in your return, and let the FTA work out your taxable income without help from you. In practice that means:
| What the FTA expects | Why it matters in an audit |
|---|---|
| Trial balance, general ledger, audited or management financial statements | The starting point of the tax computation |
| The tax computation itself, with every adjustment traced to a figure | Shows how accounting profit became taxable income |
| Sales and purchase invoices, contracts, bank statements | Substantiates the revenue and the deductions |
| Payroll records and owner remuneration support | Owner salaries are a standard area of challenge |
| Fixed asset register and depreciation schedules | Timing differences are a common adjustment |
| Related-party agreements and transfer pricing support | Arm's-length pricing must be evidenced, not asserted |
| Written evidence of elections made, such as small business relief | An election you cannot evidence is an election you did not make |
| Free zone substance evidence: staff, premises, activity | Underpins any 0 percent claim |
Two more points on the UAE tax record keeping requirements that are easy to miss.
Language. You may keep records in English. But the FTA can request them in Arabic, and if it does, you must provide a translation, bear the cost, and carry responsibility for its accuracy.
Having books is a separate duty from producing them. This article is about what the FTA asks you to hand over. The underlying obligation to maintain proper accounting records in the first place, including when a statutory audit is mandatory, is covered in our guide to the bookkeeping and accounting rules UAE company owners must follow.
How far back can the FTA go?
There is a statutory limit, and it has exceptions worth knowing.
The general rule in Article 46 of the Tax Procedures Law: the FTA may not conduct a tax audit or issue a tax assessment after five years from the end of the relevant tax period.
The exceptions:
- If the FTA notified you that audit procedures had started before those five years ran out, it then has four more years to finish the audit or issue the assessment.
- If you file a voluntary disclosure in the fifth year, the FTA gets one extra year from the date you filed it.
- No voluntary disclosure may be filed at all after five years from the end of the tax period.
- In a case of tax evasion, the window is 15 years from the end of the tax period in which the evasion occurred.
- If you failed to register for tax at all, the window is 15 years from the date you should have registered.
Read the seven-year retention rule and the five-year audit window together and the logic becomes obvious. The record obligation deliberately outlasts the ordinary audit window, because the window can be extended and because you may need the file to defend yourself long after you filed the return.
What it costs when the FTA finds the error first
Same error, two prices
What waiting for the FTA costs you
The penalty schedule does not care how the error happened. It cares who found it, and when.
Voluntary disclosure, no audit notice yet
1% per month of the tax difference, running from the original due date. No fixed surcharge.
No disclosure before the audit notice
The same 1% per month still runs, and a fixed 15% of the tax difference is added on top.
AED 9,000 monthly charge plus AED 13,500 fixed surcharge.
AED 13,500 is the price of saying nothing
Speaking up first costs 2.5 times less on identical facts. And the 1% clock keeps running from the original due date either way, so every month of hesitation adds AED 900 on this example before the surcharge is even counted.
Penalty rates: Cabinet Decision No. 75 of 2023 on administrative penalties under Federal Decree-Law No. 47 of 2022. Illustrative calculation, not tax advice.
Penalties for corporate tax violations are set in Cabinet Decision No. 75 of 2023, published by the Ministry of Finance. The ones that bite in an audit:
| Violation | Penalty |
|---|---|
| Failure to keep the required records | AED 10,000 per violation, rising to AED 20,000 for a repeat within 24 months |
| Failure to submit records in Arabic when requested | AED 5,000 |
| Failure to facilitate the tax auditor | AED 20,000, payable from the person's own funds |
| Payable tax not settled | 14 percent per annum, charged monthly on the unpaid tax, from the day after the due date |
| Voluntary disclosure filed before any audit notice | 1 percent per month of the tax difference |
| No voluntary disclosure filed before the audit notice | A fixed 15 percent of the tax difference, plus 1 percent per month |
Two details matter more than they look. First, the 14 percent annual charge runs on the unpaid tax itself, monthly, from the day after the payment was due. For a voluntary disclosure or a tax assessment, the due date is 20 business days from submission or receipt. Second, the 1 percent monthly charge is counted from the original due date of the return, not from the day you noticed the problem. Waiting is expensive by design.
The comparison is stark. Take an understatement of AED 90,000 in tax, discovered ten months after the return was due. Self-correct, and the penalty is 1 percent per month, so AED 9,000. Wait for the FTA's audit notice, and it is 15 percent flat, AED 13,500, plus the same AED 9,000, so AED 22,500. Same error, two and a half times the cost.
This structure has been in place for corporate tax since 2023. What changed in April 2026 is that VAT and excise were brought onto the same footing, alongside cuts to a number of fixed fines. Our breakdown of the April 2026 changes to UAE tax penalties sets out exactly what moved.
The readiness drill: five things to do this month
- Reconcile. Put the corporate tax return, the VAT returns and the financial statements for the same period side by side. Explain every difference in writing. That memo is the first thing an auditor should be handed.
- Rebuild the file. One folder per tax period, holding the return, the computation, and the supporting schedules. If assembling it takes weeks, you are not audit-ready.
- Evidence your elections. Small business relief, the realisation basis, free zone status. Each one needs a dated written record, not a recollection.
- Test the Arabic path. Know who would translate your records, how long it would take, and what it would cost, before somebody asks.
- Self-review, then disclose. If the review finds something, the clock is charging 1 percent a month and the surcharge for waiting is 15 percent. There is no version of this where delay is cheaper.
If you filed for the first time recently, our walkthrough of registering for UAE corporate tax and filing the first return covers the groundwork, and the guide to this year's corporate tax filing deadline covers the dates.
Contact START for a free consultation if you want your file reviewed before the FTA reviews it for you.
