FTA audit activity in Dubai increased 135 percent in 2024. Enforcement in 2026 is moving faster still. The Federal Tax Authority now holds two complete years of corporate tax returns alongside six years of VAT history. Its systems cross-reference every filing automatically. Every registered business in the UAE carries a live audit risk score — whether they know it or not.

The businesses receiving FTA inspection notices are not always the ones with the largest tax bills. They are the ones whose filings contain patterns that the FTA’s cross-referencing algorithms detect. Most of those patterns are entirely preventable. Almost all are cheaper to resolve before an audit notice arrives than after one does.

At Risians Accounting & Tax Consultancy, we help Dubai businesses identify and fix exactly these issues before the FTA does. The seven mistakes below are the ones we encounter most consistently. Not in reckless or disorganised companies — but in well-run businesses that simply did not adapt their compliance processes when the UAE tax environment changed. This guide covers what the FTA looks for, the exact penalties at stake, and what to do about each one.

Quick answer The FTA automatically cross-references your VAT returns, corporate tax filings, EmaraTax portal data, customs records, and Wage Protection System data. Any inconsistency generates a risk flag. A voluntary disclosure filed before an audit notice costs around 12 percent of the unpaid tax in penalties. The same error found during an FTA inspection costs 50 percent plus uncapped annual interest. The seven patterns below drive most audit notifications issued to Dubai businesses in 2026.

Why FTA Audit Enforcement Has Intensified in 2026

The UAE introduced corporate tax in June 2023. The first full filing season closed in September 2025. We are now in the first enforcement cycle where the FTA holds a complete cross-referenceable dataset. Two full years of corporate tax returns sit beside six years of VAT history. The technology to compare them in real time is already in use.

Three legislative changes at the start of 2026 are directly relevant to every registered business in Dubai:

• Federal Decree-Law No. 17 of 2025 — rewrites the Tax Procedures Law. It gives the FTA broader information-gathering powers, tighter audit timelines, and extended authority to examine late refund claims beyond the standard limitation period.
• Federal Decree-Law No. 16 of 2025 — amends the VAT Law. It introduces a hard five-year window for claiming input tax credits. Credits from 2018–2020 expire on 31 December 2026 if unclaimed. It also allows the FTA to deny VAT recovery where it suspects evasion.
• Cabinet Decision No. 129 of 2025, effective 14 April 2026 — restructures the entire UAE penalty framework. Most penalties dropped. Voluntary disclosure before an audit now costs substantially less than being discovered during one. The message from the FTA is consistent: self-correct now, or we will find it for you.

The FTA’s 2023–2026 strategy explicitly describes audit selection as risk-based, not random. Every registered business carries a continuous risk score built from data the FTA already holds. An FTA audit notice does not arrive because someone decided to look at your file. It arrives because an algorithm identified a pattern. The seven patterns below are exactly what that algorithm finds.

Mistake 1: Your VAT Turnover and Corporate Tax Revenue Tell Different Stories

This is the most common FTA audit trigger in Dubai in 2026. The FTA’s system automatically compares the total taxable supplies you declared across your quarterly VAT returns against the revenue figure on your annual corporate tax return. Any gap above a materiality threshold triggers an automatic flag before any human reviews your file.

A common example we see: a business declares AED 15 million in taxable supplies across four VAT returns but reports AED 12 million in revenue on the corporate tax filing. That AED 3 million gap may be entirely legitimate. Businesses file VAT quarterly on an invoice basis while corporate tax runs annually on an accrual basis. Some income may be VAT-exempt but still taxable for CT purposes. Overseas income may appear in one return and not the other. The explanation is often completely innocent.

The problem is never the gap itself. It is the absence of a documented VAT-to-CT revenue reconciliation that explains it. When we help clients prepare for an FTA query, the first thing we produce is this document. Without it, you are on the back foot from the first information request. The FTA does not investigate to understand — it investigates to assess. If the explanation is not already written down, it is too late to construct one under audit pressure.

What the FTA specifically requests A formal VAT-to-CT revenue bridge: starting with total output VAT supplies, removing exempt and out-of-scope items, adjusting for timing differences between invoice date and accounting accrual date, and reconciling to the corporate tax revenue figure. If this document does not exist, the FTA constructs its own — and its version will not include the adjustments that reduce your liability.

The structural fix is treating VAT and corporate tax as outputs of the same underlying ledger rather than separate compliance exercises. If your bookkeeping currently makes this reconciliation difficult to produce quickly, close that gap before the next return cycle — not after a query arrives.

Mistake 2: Claiming Expenses That UAE Corporate Tax Law Does Not Permit

UAE Corporate Tax Law permits deductions for expenses incurred wholly and exclusively for business purposes. It also specifies categories it explicitly disallows — regardless of how your accounts record them. We find these items in nearly every pre-filing review we conduct for new clients. The reason is consistent: businesses apply IFRS or home-country rules without checking UAE-specific legislation.

The most common non-deductible items we find in Dubai corporate tax filings:

• Fines and penalties paid to any UAE government authority — never deductible, including FTA penalties, traffic fines processed through company accounts, and regulatory charges.
• Donations and gifts to non-qualifying organisations — only contributions to Cabinet-approved entities qualify. CSR initiatives, informal charity support, and gifts to non-approved bodies are all disallowed.
• Entertainment expenses above the 50 percent limit — UAE law allows a 50 percent deduction on qualifying entertainment costs. Most businesses claim 100 percent without adjustment.
• Personal expenditure of owners passed through the company — personal vehicle costs, school fees, home utility bills, and private travel in company accounts. The FTA disallows all of it.
• Expenses without compliant supporting documentation — any expense unsupported by a valid tax invoice, signed contract, or contemporaneous record is not deductible, regardless of whether the underlying cost was genuine.
• Net interest above 30 percent of EBITDA — or AED 12 million, whichever is higher, under the general interest limitation rule. Excess amounts are disallowed unless a specific exemption applies.

When FTA auditors find disallowed items that businesses claimed, they raise a tax assessment. It covers the full corporate tax payable across every affected year, plus understatement penalties. The pre-filing expense review we carry out for clients consistently identifies these items before any return goes in. That review costs a fraction of the assessment it prevents.

Penalty for understating taxable income 50 percent of the additional tax assessed if no voluntary disclosure was filed before the audit notice. Filing a voluntary disclosure before notification reduces this to 1 percent per month on the unpaid amount, capped at 12 percent over 12 months.

Mistake 3: Related-Party Transactions With No Transfer Pricing Documentation

Transfer pricing — pricing transactions between related parties at arm’s length — is a full legal requirement under UAE Corporate Tax Law. It is not a large-company concern. It applies to any business transacting with a parent, subsidiary, sister entity, or any company where the same person holds an ownership interest. This catches many owner-managed businesses in Dubai that have never heard the term applied to them.

A management fee paid to a related holding company must match what an unrelated third party would charge. If you provide services to an affiliated entity at a discounted rate, document and justify that discount. Related-party loans also require an interest rate comparable to what a bank would charge. Any unexplained deviation from market rates lets the FTA substitute its own arm’s length figure — and the difference between what you charged and what the FTA determines you should have charged becomes suppressed taxable income.

The documentation we prepare for clients under UAE Corporate Tax Law:

• Transfer Pricing disclosure form — filed with every corporate tax return regardless of group revenue. This is not optional, and the penalty for omitting it is AED 100,000.
• Local File — a detailed analysis of related-party transactions and pricing methodology, required for businesses above the materiality thresholds in the Executive Regulation.
• Master File and Country-by-Country Report — for multinational groups with consolidated revenue above AED 3.15 billion.

The failure we see most often is not aggressive mispricing — it is the complete absence of documentation for arrangements the business considers routine. A UAE operating company paying a monthly management fee to its foreign parent views this as an internal accounting entry. The FTA views it as a related-party transaction requiring independent pricing and a filed disclosure form. We routinely identify and document these arrangements during tax health checks — and a voluntary disclosure at that stage costs a fraction of what the FTA’s own assessment would.

Penalty for transfer pricing non-compliance AED 10,000 for inadequate documentation (first offence), AED 50,000 repeat. AED 100,000 for failing to file the Transfer Pricing disclosure form (first offence), AED 250,000 repeat. Where the FTA makes its own pricing adjustment, the resulting underpayment attracts 14 percent annual interest plus the 50 percent understatement penalty.

Mistake 4: Claiming Tax Reliefs Without the Evidence to Support Them

Small Business Relief

Businesses with revenue of AED 3 million or less can elect for Small Business Relief, treating all taxable income as zero for that period. The relief runs through financial years ending on or before 31 December 2026 — the business must actively elect it on the corporate tax return. It is not automatic.

In 2026 we are seeing the FTA challenge two specific patterns in Small Business Relief claims. First, revenue that businesses artificially managed below the AED 3 million threshold — through deferred invoicing, income splitting across related entities, or inter-company transfers. Second, businesses that elected the relief without performing a rigorous revenue calculation under UAE accounting standards and discovered mid-audit that their actual revenue exceeded the threshold.

Disallowance triggers a full 9 percent corporate tax assessment on all taxable income for the affected period, plus the 50 percent understatement penalty. Because the relief is all-or-nothing, a single incorrect election produces a larger tax liability than compliant 9 percent filings would have generated for the entire period.

Qualifying Free Zone Person (QFZP) Status

Free zone companies that meet QFZP conditions benefit from a 0 percent corporate tax rate on qualifying income. We work with a number of free zone businesses on their QFZP compliance, and the substance test is where most invalid claims unravel. The FTA is auditing QFZP elections at scale in 2026.

To maintain valid QFZP status, a free zone business must derive all or substantially all of its income from qualifying activities, maintain genuine economic substance in the free zone with real employees and real premises, file annual corporate tax returns with audited financial statements, and have no mainland permanent establishment generating income.

When we review a QFZP election for a client, we cross-check income classification against free zone authority records and the corporate tax return in exactly the way the FTA does. A company with a single employee, a virtual office, and 85 percent of its revenue from mainland UAE clients does not have adequate substance. Claiming QFZP status in those circumstances invites an audit that can disallow the 0 percent rate retroactively for up to four prior years.

Updated 2026 requirement — all QFZPs Audited financial statements are now mandatory for all Qualifying Free Zone Persons regardless of revenue level — not just those above AED 50 million. This is new for 2026. If your free zone company does not have audited accounts, this gap needs to be resolved before your next filing deadline.

Mistake 5: Recovering Input VAT on Blocked or Ineligible Expenses

Input VAT recovery errors rank among the most frequent findings in VAT audits in Dubai, and we encounter them in most of the client records we review for the first time. Most businesses grasp the basic principle — you can reclaim VAT paid on business costs. The errors arise from misapplying the recovery rules in areas where UAE VAT law differs from what businesses in other markets are used to.

A business can only recover input VAT in the UAE where all of these conditions apply simultaneously:

• The claimant is a VAT-registered business.
• The expense relates to a taxable supply — not an exempt supply or a non-business activity.
• The claimant holds a valid tax invoice from a VAT-registered supplier with all mandatory fields present.
• The business claims the recovery in the correct tax period.
• The supply did not serve a purpose explicitly blocked from recovery under UAE VAT Law.

The blocked categories drive the majority of errors we identify. UAE VAT Law blocks input VAT on motor vehicles used for personal travel entirely. Entertainment and hospitality expenses only attract 50 percent recovery. Purchases from non-VAT-registered suppliers carry no recoverable VAT — but businesses routinely process these as if they were valid tax invoices. Expenses serving both taxable and exempt activities require apportionment, yet businesses frequently claim full recovery instead.

The FTA’s system matches supplier VAT declarations against buyer input tax claims. If a supplier has not declared a transaction on their own return, the system flags your recovery claim automatically. Under Federal Decree-Law No. 16 of 2025, the FTA can now also deny input VAT recovery where it suspects evasion — extending due diligence requirements beyond checking invoice formatting.

Approximately 30 percent of supplier invoices in active circulation in the UAE are missing at least one mandatory field — supplier name, TRN, invoice date, invoice number, description of supply, VAT amount, and total are all required. When we find systematic recovery on non-compliant invoices in a client’s records, we calculate the correct position across all periods — because the FTA audits the full five-year window when it identifies this pattern.

Penalty for incorrect input VAT recovery 50 percent of the incorrectly recovered VAT amount, plus repayment of the VAT itself. If the FTA determines the error is a recurring pattern, it audits all periods within the five-year limitation window simultaneously.

Worried about your VAT or corporate tax position? If any of the mistakes above sound familiar, the cost of addressing them now is almost certainly lower than the cost of addressing them after an FTA audit notice arrives. Get in touch with the Risians Accounting & Tax Consultancy team to arrange a review.

Mistake 6: Records You Cannot Produce Within the FTA Audit Window

When an FTA audit notice arrives, you have five business days to begin producing documents for a VAT audit and ten business days for a corporate tax audit. These are legal deadlines under the Tax Procedures Law. We have supported businesses through this process and seen first-hand what scrambling for records under a five-day deadline looks like — and the FTA notices.

The UAE record-keeping obligations are clear. Businesses must retain VAT records for a minimum of five years from the end of the relevant tax period. They must retain corporate tax records for a minimum of seven years. For real estate transactions, the period extends to fifteen years. These are minimums, not suggestions.

The records most commonly missing when an FTA audit begins:

• Sales invoices with supporting delivery or service completion documentation — the invoice exists in the system but the underlying agreement or evidence of delivery does not.
• Bank statements with a line-by-line reconciliation to the accounting records — auditors request every statement for the audit period, each item mapped to a journal entry. Businesses relying on annual reconciliations cannot produce this within five days.
• Supplier invoices containing all mandatory VAT fields — the FTA disallows every non-compliant invoice used to support an input VAT claim during the audit.
• Employment contracts and Wage Protection System payroll records — the FTA cross-references salary deductions on corporate tax returns against WPS data. Discrepancies are escalated immediately.
• Signed contracts for significant recurring payments — paying a supplier AED 500,000 a year without a signed contract leaves no documentary defence if the FTA questions whether you actually received the services.

If records are not produced within the deadline, the FTA treats them as non-existent and makes its own tax assessment based on the data it holds. That assessment will not include the adjustments and deductions that would have applied if your records were complete — it is almost always a larger number than your actual liability.

For businesses whose records are incomplete or disorganised, our backlog accounting service reconstructs and organises historical financial records into a format that survives an FTA information request. Doing this proactively — before a notice arrives — is always cheaper than doing it under a five-day deadline.

Penalty for failure to maintain required records AED 10,000 for the first offence. AED 20,000 for repeat violations. These apply independently of any tax assessment — you can be penalised for poor record-keeping even if your underlying tax position is entirely correct.

Mistake 7: Waiting for the FTA to Find an Error Instead of Disclosing It First

This is the mistake with the most calculable financial consequence — and the one that surprises business owners most when they see the numbers. The UAE Tax Procedures Law provides a voluntary disclosure mechanism that allows you to notify the FTA of a prior filing error and correct it before any audit notice is issued. The penalty structure under Cabinet Decision No. 129 of 2025 makes self-correction explicitly cheaper at every stage than waiting for the FTA to find the same problem.

Offence / situation	FTA penalty (AED / rate)
Voluntary disclosure — filed before any FTA audit notice	1% per month on unpaid tax, capped at 12% over 12 months
Voluntary disclosure — filed after audit notice, before assessment	30% of unpaid tax
FTA makes own assessment — no voluntary disclosure filed	50% of unpaid tax + 14% p.a. interest (no cap)
Late VAT return — first offence	AED 1,000
Late VAT return — repeat within 24 months	AED 2,000
Late payment of VAT or corporate tax	14% per annum on unpaid amount
Failure to maintain required records	AED 10,000 first / AED 20,000 repeat
Late corporate tax registration	AED 10,000
Failure to file Transfer Pricing disclosure form	AED 100,000 first / AED 250,000 repeat
E-invoicing non-compliance (from mid-2026)	AED 5,000/month + AED 100 per non-compliant invoice

The arithmetic is stark. A business with AED 200,000 of understated corporate tax that files a voluntary disclosure eight months before an audit notice pays AED 16,000 in penalties. The same business that waits for an FTA audit notice and then discloses pays AED 60,000. The business that does nothing until the FTA issues its own assessment pays AED 100,000 plus interest compounding at 14 percent annually from the original due date — with no ceiling.

The voluntary disclosure window closes the moment the FTA’s audit notice arrives. That is not a soft deadline. We strongly recommend reviewing filing positions quarterly, not just at year-end — because the gap between the cost of disclosing proactively and the cost of being found during an FTA inspection only widens over time.

If you are unsure whether your current filings contain positions that warrant a voluntary disclosure, our registered tax agents review the risk, calculate the comparative cost before you make any decision, and manage the full disclosure process if you decide to proceed. Getting the structure of a voluntary disclosure right matters — a poorly prepared application can inadvertently expand the FTA’s interest in other parts of your filing history.

Pre-Audit Readiness Checklist for Dubai Businesses in 2026

Work through this before your next filing. If you have already received an FTA audit notice, use it to prioritise what to prepare and produce first.

1. Reconcile your total VAT return supplies for the year against your corporate tax revenue figure. Prepare a written bridge document explaining every material difference.
2. Review every significant expense in your last corporate tax return against UAE deductibility rules — not IFRS or home-country practice. Identify any disallowed items and assess whether a voluntary disclosure is needed for prior years.
3. List all related-party transactions for the current and prior tax year. Confirm each has documented arm’s length pricing and that the Transfer Pricing disclosure form was filed with the return.
4. If you elected Small Business Relief or claimed QFZP status, document the basis in writing — revenue figures, income classification, substance evidence — and keep it on file with the tax return.
5. Pull five random months of input VAT claims. Check each invoice for all mandatory VAT fields and for deductibility of the underlying expense. If errors appear in the sample, calculate the correct position across all affected periods.
6. Confirm VAT records go back at least five years and corporate tax records at least seven. Confirm all records are retrievable within five business days in a format the FTA accepts.
7. Review prior-year filings for any position where you are not confident the filing would survive FTA scrutiny. Calculate the voluntary disclosure cost now against the potential audit assessment cost later.
8. Have your financial statements independently audited if your business has related-party transactions, a free zone structure, or significant recent changes in revenue or costs. Our audit and assurance team does this for businesses across Dubai — audited accounts limit audit scope when inspectors arrive.

Frequently Asked Questions About FTA Audits in Dubai

Is FTA audit selection random or risk-based?

Risk-based. Every registered business has a live risk score calculated from VAT return history, corporate tax filings, EmaraTax submissions, customs records, and WPS data. Clean, consistent filings with no cross-database discrepancies produce a low risk score. Mismatches, unusual refund patterns, and late submissions raise it. The FTA’s algorithm flags patterns — a human auditor then decides whether to issue a notice.

Can the FTA audit both VAT and corporate tax in the same investigation?

Yes, and it happens routinely in 2026. Both taxes share the same procedural law — Federal Decree-Law No. 28 of 2022 — so the same audit framework applies to both. Once a business is selected for review, the team looks at the full picture. A VAT audit regularly expands into a corporate tax audit when the initial review finds revenue inconsistencies that span both taxes.

What happens after the FTA issues draft audit findings?

You receive the draft findings and have a formal opportunity to respond before the assessment is finalised. If the error is confirmed, a tax assessment is issued for the unpaid amount plus penalties. You then have 40 business days to file a reconsideration request with the FTA, and a further right of appeal to the Tax Disputes Resolution Committee if reconsideration is rejected. Both deadlines are absolute.

How long does an FTA audit typically take?

A straightforward VAT audit can close within a few weeks. A corporate tax audit involving related-party transactions, QFZP elections, or transfer pricing questions can run for six months or longer. The biggest factor is how quickly and completely you respond to information requests. When we represent clients through FTA audits, well-organised responses with a clear narrative for unusual positions consistently produce shorter processes and narrower final assessments.

Are free zone businesses in Dubai exempt from FTA audits?

No. Free zone companies — including those in DMCC, JAFZA, DIFC, and all other zones — are fully subject to UAE Tax Procedures Law. QFZP status provides a 0 percent corporate tax rate on qualifying income. It does not provide exemption from audit, registration, filing, or record-keeping obligations. We are seeing QFZP elections scrutinised more intensively in 2026 than in any prior year.

Do I need a tax agent to handle a voluntary disclosure?

You are not legally required to use a registered tax agent, but we strongly recommend it. The scope and structure of the disclosure application determines how the FTA interprets it. One that is too broad can open additional periods to scrutiny. One that is too narrow may not close the issue. Our team handles voluntary disclosures regularly and knows how to present them correctly to the FTA.

What is the difference between a tax audit and a tax assessment?

A tax audit is the review process. A tax assessment is the formal document the FTA issues when it determines additional tax is owed — the output of an audit that found a discrepancy. Receiving an audit notice does not automatically mean receiving an assessment. Many audits we support clients through close with no assessment because the business can document its positions clearly.

Take Action Before the FTA Does

The seven FTA audit triggers in this guide appear regularly in the records of well-run Dubai businesses — not because those businesses are careless, but because the UAE’s tax environment changed significantly in 2023 and the compliance requirements have not always been easy to track. The businesses that come through FTA inspections without material assessments share three things: consistent records across all systems, documented positions for every significant filing decision, and the discipline to self-correct before being asked to.

At Risians Accounting & Tax Consultancy, we work through exactly this process with our clients — reviewing the seven areas above, calculating where the risk sits, and addressing it through a voluntary disclosure or a records cleanup before the FTA’s systems flag the same issue. The cost of that work is almost always a fraction of what an FTA audit assessment produces.

For more context on the broader compliance framework, our guide to EmaraTax registration, deadlines, and the AED 10,000 penalty covers the registration obligations that sit alongside everything discussed here.

Not sure where your risk sits? We review your VAT returns, corporate tax filings, and records against the same criteria the FTA uses — and tell you exactly what needs to be fixed before an audit notice changes the cost. Book a Free Consultation →