FTA’s 2026 Enforcement Phase: What VAT & CT Audits Actually Look Like Now

The UAE’s tax landscape just shifted. Registration is no longer the finish line — it’s the starting point.

For the past two years, the FTA’s focus was onboarding: getting businesses registered, understanding the VAT system, issuing guidance on corporate tax thresholds. That phase is closing. What’s opening is the enforcement phase, and it’s very different.

What Changed in 2026?

Last month, we saw the implementation of Federal Decree-Law No. 17 of 2025 — the rewritten Tax Procedures Law. With it came tighter deadlines, expanded FTA audit powers, and a clear message: compliance isn’t optional anymore. The FTA went from “let’s guide you through this” to “let’s see if you’re actually doing it.”

Here’s what that means in practice:

1. Audits Are Now Routine, Not Exceptional

Under the old framework, a VAT or corporate tax audit was reactive — triggered by a specific red flag or voluntary disclosure. Now? The FTA has:

  • 5-year lookback rights (previously 3 years) for both VAT and corporate tax
  • Automated data matching between bank statements, e-invoices, and tax returns
  • Risk profiling software that flags inconsistencies without human intervention

If your filing patterns are inconsistent, if your turnover spikes unexpectedly, or if your input-to-output VAT ratio is outside industry norms, you’ll be flagged automatically.

2. E-Invoicing Is Now Enforcement Infrastructure

E-invoicing isn’t just a compliance requirement anymore — it’s the FTA’s audit trail. Every invoice is timestamped, digitally linked to your VAT return, and cross-referenced against your supplier’s filing. If your supplier didn’t report the sale to you but you claimed input VAT? The FTA sees it instantly.

This means: there’s no ambiguity left. Either the transaction was properly reported by both parties, or the FTA has evidence of a discrepancy.

3. The 9% Corporate Tax Rate Is Not a Shield

Many businesses filed their first CT returns thinking: “9% is low, so I’m probably fine.” That’s a dangerous assumption.

The FTA is now auditing corporate tax returns for:

  • Qualifying income misclassification — Are you correctly excluding FZ income, foreign-source income, or capital gains?
  • Transfer pricing — Is your intra-group pricing arm’s length? The FTA now has 5 years to challenge it.
  • Deduction substantiation — Can you prove that expense was actually incurred and relates to business?

Businesses that filed returns claiming excessive deductions or aggressive income categorization are now in the FTA’s audit queue.

4. The 60-Day Voluntary Disclosure Window (Still Open, But Closing Fast)

You remember the April amnesty? The 60-day voluntary disclosure window with a 75% penalty reduction? That ends June 13, 2026 — just 41 days away.

If you haven’t already filed a voluntary disclosure for VAT underpayments or corporate tax errors from prior years, you should act now. After June 13, the FTA reverts to standard penalties: up to 50% of the tax underpaid, plus interest at the Central Bank rate (currently ~3%).

What CFOs & Finance Managers Must Actually Do Right Now

Step 1: Audit Your Own Records (Before the FTA Does)

  • Pull your VAT returns for the last 3 years. Compare your input VAT claims to your invoice records. Any discrepancies?
  • Review your corporate tax return assumptions. Are you claiming deductions that you can’t substantiate with invoices, receipts, and board minutes?
  • Cross-check your e-invoicing data with your general ledger. Do they reconcile?

Step 2: Fix Errors Voluntarily (Within 41 Days)

If you find discrepancies, file a voluntary disclosure now. The 75% penalty reduction is massive — it could cut your exposure from AED 100,000+ down to AED 25,000.

Step 3: Strengthen Your Control Environment

  • Implement a quarterly reconciliation process between e-invoicing records, bank statements, and tax filings.
  • Document all deduction claims with supporting invoices and business justification.
  • Train your team on transaction coding — misclassified transactions are red flags in automated audits.

Step 4: Prepare for Audit Readiness

The FTA’s new procedure law includes new audit protocols. If you’re selected:

  • You’ll have 15 days to respond to the initial notice (previously 30).
  • The FTA can now request third-party records directly (not just your records).
  • Penalties escalate faster for repeat violations.

The Bottom Line

2026 is the year the UAE’s tax system moved from guidance to enforcement. It’s not malicious — it’s just the natural evolution of a maturing tax system. The FTA is getting smarter, data-driven, and proactive.

The businesses that will sail through 2026 are the ones that got ahead of this shift. They’ve already audited their own records, fixed errors voluntarily, and built compliance into their monthly processes.

If you haven’t yet, now is the time.

Author

Cipher

Lottie — FSH Assistant
Lottie

Hi! I'm Lottie 👋

FSH CLIENT ADVISOR

Online now — ready to assist you

Welcome to FSH Financial Consultants!
Share your details and I'll connect you with our expert team on WhatsApp right away. 🚀

🔒 Your details are 100% confidential — used only to assist you

🎉

Lottie has got you!

Our team has received your details. Lottie will personally connect you with our expert right away!

Open WhatsApp Now