FTA’s 2026 Enforcement Phase: What VAT & CT Audits Actually Look Like Now
The UAEβs tax landscape just shifted. Registration is no longer the finish line β itβs the starting point.
For the past two years, the FTAβs focus was onboarding: getting businesses registered, understanding the VAT system, issuing guidance on corporate tax thresholds. That phase is closing. Whatβs opening is the enforcement phase, and itβs very different.
What Changed in 2026?
Last month, we saw the implementation of Federal Decree-Law No. 17 of 2025 β the rewritten Tax Procedures Law. With it came tighter deadlines, expanded FTA audit powers, and a clear message: compliance isnβt optional anymore. The FTA went from βletβs guide you through thisβ to βletβs see if youβre actually doing it.β
Hereβs what that means in practice:
1. Audits Are Now Routine, Not Exceptional
Under the old framework, a VAT or corporate tax audit was reactive β triggered by a specific red flag or voluntary disclosure. Now? The FTA has:
- 5-year lookback rights (previously 3 years) for both VAT and corporate tax
- Automated data matching between bank statements, e-invoices, and tax returns
- Risk profiling software that flags inconsistencies without human intervention
If your filing patterns are inconsistent, if your turnover spikes unexpectedly, or if your input-to-output VAT ratio is outside industry norms, youβll be flagged automatically.
2. E-Invoicing Is Now Enforcement Infrastructure
E-invoicing isnβt just a compliance requirement anymore β itβs the FTAβs audit trail. Every invoice is timestamped, digitally linked to your VAT return, and cross-referenced against your supplierβs filing. If your supplier didnβt report the sale to you but you claimed input VAT? The FTA sees it instantly.
This means: thereβs no ambiguity left. Either the transaction was properly reported by both parties, or the FTA has evidence of a discrepancy.
3. The 9% Corporate Tax Rate Is Not a Shield
Many businesses filed their first CT returns thinking: β9% is low, so Iβm probably fine.β Thatβs a dangerous assumption.
The FTA is now auditing corporate tax returns for:
- Qualifying income misclassification β Are you correctly excluding FZ income, foreign-source income, or capital gains?
- Transfer pricing β Is your intra-group pricing armβs length? The FTA now has 5 years to challenge it.
- Deduction substantiation β Can you prove that expense was actually incurred and relates to business?
Businesses that filed returns claiming excessive deductions or aggressive income categorization are now in the FTAβs audit queue.
4. The 60-Day Voluntary Disclosure Window (Still Open, But Closing Fast)
You remember the April amnesty? The 60-day voluntary disclosure window with a 75% penalty reduction? That ends June 13, 2026 β just 41 days away.
If you havenβt already filed a voluntary disclosure for VAT underpayments or corporate tax errors from prior years, you should act now. After June 13, the FTA reverts to standard penalties: up to 50% of the tax underpaid, plus interest at the Central Bank rate (currently ~3%).
What CFOs & Finance Managers Must Actually Do Right Now
Step 1: Audit Your Own Records (Before the FTA Does)
- Pull your VAT returns for the last 3 years. Compare your input VAT claims to your invoice records. Any discrepancies?
- Review your corporate tax return assumptions. Are you claiming deductions that you canβt substantiate with invoices, receipts, and board minutes?
- Cross-check your e-invoicing data with your general ledger. Do they reconcile?
Step 2: Fix Errors Voluntarily (Within 41 Days)
If you find discrepancies, file a voluntary disclosure now. The 75% penalty reduction is massive β it could cut your exposure from AED 100,000+ down to AED 25,000.
Step 3: Strengthen Your Control Environment
- Implement a quarterly reconciliation process between e-invoicing records, bank statements, and tax filings.
- Document all deduction claims with supporting invoices and business justification.
- Train your team on transaction coding β misclassified transactions are red flags in automated audits.
Step 4: Prepare for Audit Readiness
The FTAβs new procedure law includes new audit protocols. If youβre selected:
- Youβll have 15 days to respond to the initial notice (previously 30).
- The FTA can now request third-party records directly (not just your records).
- Penalties escalate faster for repeat violations.
The Bottom Line
2026 is the year the UAEβs tax system moved from guidance to enforcement. Itβs not malicious β itβs just the natural evolution of a maturing tax system. The FTA is getting smarter, data-driven, and proactive.
The businesses that will sail through 2026 are the ones that got ahead of this shift. Theyβve already audited their own records, fixed errors voluntarily, and built compliance into their monthly processes.
If you havenβt yet, now is the time.