FTA VAT audit: what actually happens, and how to prepare your records

The audit notice

An FTA tax audit begins with formal notification: a letter identifying the taxable person, the tax type (VAT, excise or Corporate Tax), and the periods under review. The FTA may audit any period within the statutory limitation — five years from the end of the relevant tax period, extended to fifteen years for fraud, tax evasion or failure to file. Most first-time audits cover two to four VAT periods.

You are required to cooperate and provide the records the FTA requests within the timeframes stated. Obstruction — refusing access, withholding records, delaying unreasonably — is itself a penalisable offence and changes the tone of everything that follows.

What they ask for

• VAT returns filed for the audit periods, with the working papers that produced the numbers in each box
• The general ledger and trial balance for the same periods — they will reconcile your return to your books
• Bank statements for all business accounts — they will reconcile your books to your bank
• Sales invoices (output tax): a sample or full set, tested for correct VAT rate, invoice validity under Article 59, and completeness against the ledger
• Purchase invoices (input tax): every invoice behind an input VAT claim, tested against the tax invoice checklist — TRN validity, correct rate, arithmetic, no duplicates
• Import and export documents: customs declarations, shipping evidence for zero-rated exports, reverse charge workings for imported services
• Contracts, agreements and supporting documents for transactions the auditor selects — especially related-party transactions, large one-off items, and supplies with unusual VAT treatment
• Credit notes and adjustments: what changed after the original invoice, and the paper behind each change

The reconciliation they build

The core of every VAT audit is a three-way reconciliation: the VAT return, the ledger, and the bank. Revenue declared in the return should match output tax in the ledger, which should reconcile to cash received plus outstanding receivables. Purchases and input VAT should follow the same logic. Every gap is a question — and the FTA will ask it.

The second layer is transactional testing. The auditor samples invoices and traces each one from document to ledger to return. A tax invoice that fails Article 59 — missing TRN, wrong rate, no "Tax Invoice" heading — means the input VAT claimed on it is disallowed. A reverse charge that was never accounted for is undeclared output tax. A zero-rated export with no customs evidence is reclassified to 5%.

The findings that come up most

• Input VAT claimed on invoices that fail the Article 59 checklist — the single most frequent finding
• Reverse charge never applied to foreign digital services — SaaS, cloud and advertising spend from non-resident suppliers
• Zero-rated exports without adequate shipping or customs evidence
• Blocked input VAT claimed — entertainment, personal-use vehicles, employee benefits
• Duplicate invoices claimed — the same document arriving via email and a supplier portal, booked twice
• Output VAT understated on deemed supplies — goods given away, assets taken out of the business
• Timing errors — invoices posted in the wrong period, shifting VAT between returns

The timeline

There is no fixed statutory duration for an FTA audit. Simple audits can conclude in weeks; complex ones with multiple entities, large transaction volumes, or uncooperative records run for months. The FTA issues a draft assessment with its findings, and you have the opportunity to respond — with evidence, not arguments — before the final assessment. If you disagree with the final assessment, the formal route is a reconsideration request to the FTA, then the Tax Disputes Resolution Committee, then the courts.

The most important thing to know about timing: cooperating early and providing clean, reconciled records shortens everything. An audit that takes six months because records are scattered is the same audit that takes six weeks when the documents are organised.

The penalties

Audit findings that result in additional tax carry a penalty — typically a percentage of the underpaid tax, which escalates with the number of offences within a 24-month window. Voluntary disclosure before the audit notice arrives carries materially lower penalties than the same correction discovered by the auditor. This is the single biggest lever you have: review your own returns now, and disclose anything you find before the audit starts.

What changes the outcome

One thing matters more than everything else: the state of your records on the day the notice arrives. An audit against a business with matched bank lines, valid tax invoices on every claim, reverse charges accounted, and a ledger that reconciles to the return is a review, not an investigation. An audit against a shoebox of invoices and a return built from estimates is an exercise in reconstruction — and reconstruction always finds more than the actual errors, because the auditor must treat the unknowable as adverse.

The time to prepare for an FTA audit is every month, not the week after the letter arrives.

How Hysaab applies this

Hysaab keeps the books audit-ready by construction: every input VAT claim is tested against Article 59 on arrival, reverse charges are applied automatically, bank reconciliation runs monthly, and the three-way reconciliation — return, ledger, bank — exists as a standing report. When the audit letter arrives, the evidence is already organised by period — the preparation happened in real time, not in a rush.

Questions people actually ask

Keep reading

• Guide: What makes a valid UAE tax invoice — the Article 59 checklist
• Guide: Input VAT you cannot recover in the UAE
• Guide: The reverse charge in UAE VAT: when you are your own supplier
• Guide: VAT voluntary disclosure in the UAE: when Form 211 is mandatory, and what it costs by year
• Guide: VAT on Google Ads, AWS, Microsoft 365 and every SaaS subscription in the UAE