Which Businesses Does the FTA Target for UAE Corporate Tax Audits in 2026?
The Federal Tax Authority does not select businesses for corporate tax audit randomly. Under Federal Decree-Law No. 28 of 2022 on Tax Procedures, as significantly expanded by Federal Decree-Law No. 17 of 2025 effective January 1, 2026, the FTA operates a data-driven, risk-based analytics engine that cross-references VAT returns, corporate tax filings, customs data, and third-party information. Businesses that match one or more of seven specific risk indicators move to the front of the audit queue.
Quick Answer: The FTA identifies corporate tax audit candidates using cross-system data analytics. The 7 most common triggers are: VAT-to-CT revenue mismatches, frequent VAT refund claims, undocumented related party transactions, incorrect QFZP status claims, a pattern of late filings, missing audited financial statements, and profit margins inconsistent with industry peers. The FTA conducted 93,000 inspection visits in 2024, a 135% increase year on year.
In 2026, UAE corporate tax is no longer new. The FTA has moved from registration and education into active enforcement. With the September 30, 2026 deadline for filing FY2025 CT returns approaching fast, understanding what puts your business on the FTA radar is not optional knowledge. It is a compliance survival requirement.
Why Is the FTA Running More Corporate Tax Inspections in 2026?
The FTA’s 2024 Annual Report recorded 93,000 inspection visits, a 135% year-on-year increase. These cover VAT, corporate tax, and excise tax enforcement. As corporate tax returns for the first full financial year become due in 2026, audit capacity is shifting sharply toward CT compliance verification.
The expanded powers under Federal Decree-Law No. 17 of 2025 give the FTA broader reach from January 1, 2026:
- The standard audit lookback period remains five years from the end of the relevant tax period
- For cases involving tax evasion, the lookback period extends to 15 years
- The FTA can conduct unannounced inspections without the 10-business-day notice period where there is reasonable suspicion of evasion
- The FTA’s analytics system links VAT, CT, customs, and banking data in a single cross-verification platform
The FTA Strategy 2023-2026 explicitly states that audit and enforcement programs are driven by risk indicators, not random sampling. If your business profile matches any of the seven red flags below, an FTA risk analyst may have already flagged your file.
Red Flag 1: Revenue in Your VAT Returns Does Not Match Your CT Filing
This is the single most common corporate tax audit trigger in the UAE. When a business’s VAT returns report one total revenue figure and the CT return shows a different number, the FTA’s automated cross-verification system flags the discrepancy immediately. The FTA now holds two complete financial datasets for every registered business, and any gap between them is treated as a potential error or concealment.
Common legitimate causes of this mismatch that still require documentation include:
- VAT returns use tax-point accounting while CT uses accrual basis, creating timing differences that are never reconciled in writing
- VAT-exempt income such as residential rent or bare land sales is included in CT revenue but excluded from VAT output totals
- Out-of-scope supplies recorded in the CT return do not appear in VAT filings
- Intercompany transactions that appear in VAT returns are eliminated at the CT group consolidation level
Fix: Before filing your FY2025 CT return, prepare a formal reconciliation schedule that maps every AED difference between your total VAT output and your CT revenue figure. Document all legitimate reasons for variances in a memo that an FTA auditor can review on request. This single document can shorten an audit from weeks to days.
Red Flag 2: Your Business Makes Frequent or Unusually Large VAT Refund Claims
VAT refund claims are a significant trigger for FTA inspection activity. The FTA flags businesses with unusual claim patterns, particularly exporters, zero-rated suppliers, and construction companies that carry large input VAT balances. A high refund claim is not itself an error, but it will attract scrutiny on the supporting documentation behind it.
Under Article 67 of Federal Decree-Law No. 8 of 2017 on VAT, a business may claim a refund where input tax exceeds output tax in a period. The FTA verifies every claim. For large or frequent claims, verification commonly involves a full audit of the relevant tax period, including a review of supplier invoices, customs export records, and payment evidence.
The introduction of UAE VAT credit expiry rules under Federal Decree-Law No. 16 of 2025 has also added urgency: unclaimed VAT credits expire after five years. Businesses rushing to claim accumulated credits before the December 31, 2026 grace period may attract additional scrutiny if their claims are large and sudden.
Fix: Maintain complete documentation for every input tax claim: original tax invoices with the supplier’s Tax Registration Number (TRN), evidence of business purpose, and proof of payment. For zero-rated export claims, retain export certificates, FTA-validated customs documentation, and matching bank transfer records. Missing invoices are the most common reason refund claims are partially or fully rejected.
Red Flag 3: Related Party Transactions Without Transfer Pricing Documentation
If your business transacts with related parties including subsidiaries, parent companies, sister entities, or shareholder-controlled businesses without proper transfer pricing documentation, you carry a significant audit risk. Under Article 34 of Federal Decree-Law No. 47 of 2022, all transactions between related parties must be conducted at arm’s length. Under Ministerial Decision No. 97 of 2023, businesses meeting the relevance thresholds must maintain both a Master File and a Local File.
The FTA cross-checks related party transaction values against VAT returns from both transacting parties, CT returns filed by related UAE entities, Country-by-Country Reports, and public financial disclosures where available.
Transfer pricing documentation thresholds for FY2025:
| Document Required | Threshold | Who Must Prepare It |
|---|---|---|
| Disclosure Form | Any related party transaction | All taxable persons with related party dealings |
| Local File | Revenue above AED 200 million, or transactions above AED 40 million | Large businesses and UAE MNE entities |
| Master File | MNE group consolidated revenue above AED 3.15 billion | UAE constituent entities of large MNE groups |
| Country-by-Country Report | MNE group revenue above AED 3.15 billion | UAE ultimate parent entities |
Fix: If your business has intercompany loans, management fee arrangements, IP licensing, or intercompany sales, prepare a transfer pricing study now. An undocumented intercompany arrangement discovered during audit will not just generate a penalty. The FTA may revalue the transaction to market rate and raise a tax assessment for the difference, plus applicable late payment penalties at 14% per annum under Cabinet Decision No. 129 of 2025.
Red Flag 4: Claiming QFZP Status Without Meeting All Five Conditions
Free zone companies that claim Qualifying Free Zone Person (QFZP) status and file at the 0% corporate tax rate are a high-priority audit segment. The 0% rate is an exception, not the default, and the FTA verifies each of the five qualifying conditions independently.
Under Article 18 of Federal Decree-Law No. 47 of 2022, a QFZP must simultaneously satisfy all five of the following conditions to maintain the 0% rate:
- Adequate substance in the UAE: the company must have real employees, management decisions made locally, and genuine assets in the UAE
- Qualifying income test: revenue must derive from permitted sources including certain trade, manufacturing, fund management, and intra-group headquarters services
- De minimis non-qualifying income test: non-qualifying income must not exceed the lower of 5% of total revenue or AED 5 million in the tax period
- Audited financial statements: all QFZPs must have audited financials for every tax period regardless of revenue size
- No mainland taxable person election: the company must not have opted out of the free zone tax regime
Failing even one condition means all income is taxed at 9% for that year and the following four years, not just the non-qualifying portion. The FTA specifically scrutinises free zone companies claiming QFZP status with no UAE employees, no physical office, or revenue from mainland UAE customers delivered without a QFZP-permitted structure.
Fix: Before filing your CT return as a QFZP, document all five conditions with evidence. Substance proof should include employee contracts with UAE work permits, payroll records, board meeting minutes held physically in the free zone, and an asset register showing UAE-based fixed assets and inventory.
Red Flag 5: A Pattern of Late Filings or Multiple Voluntary Disclosures
Late filing history and repeated self-corrections via voluntary disclosures are strong risk signals in the FTA’s analytics system. Every late CT return, every late VAT return, and every voluntary disclosure is permanently recorded in your EmaraTax profile and attached to your tax compliance history.
Under Cabinet Decision No. 75 of 2023 on Corporate Tax Administrative Penalties, late CT filing costs:
- AED 500 per month for the first 12 months of delay
- AED 1,000 per month for every month thereafter
Beyond the direct penalty, a business with recurring late submissions is treated as carrying elevated compliance risk. The FTA interprets a pattern of corrections as evidence that internal controls are weak, records may be unreliable, or transactions may not have been fully disclosed. A single voluntary disclosure handled correctly is generally not a problem. Three in three years is a different risk profile entirely.
Fix: Set automated reminders for every UAE tax deadline. For CT returns, the filing deadline is nine calendar months after the end of your financial year. For calendar-year companies, this is September 30, 2026 for FY2025. File on time even if payment is delayed. Late filing and late payment carry separate, cumulative penalties and both are recorded independently in the FTA system.
Red Flag 6: Missing Audited Financial Statements When the FTA Requires Them
A significant number of UAE businesses are unaware that Ministerial Decision No. 84 of 2025, effective for financial years ending on or after June 1, 2025, makes audited financial statements mandatory for any taxable person with revenue exceeding AED 50 million in a tax period. Previously, audited financials were required only for QFZPs and companies specifically directed by the FTA.
If your FY2025 revenue exceeds AED 50 million and you file a CT return without attaching audited financial statements, the FTA system will flag the incomplete submission. A CT return filed with management accounts instead of audited accounts, where the audit is required by law, is treated as a deficient filing and may trigger an immediate review.
Additional audit requirements under current UAE law:
- QFZPs must have audited financial statements for every tax period regardless of revenue
- Companies in a Tax Group must maintain audited statements at the subsidiary level; consolidated group statements must also be audited under FTA Decision No. 7 of 2025
- Natural persons with business income above AED 50 million in a calendar year are also covered by MD 84 of 2025
Fix: If your revenue has crossed or is approaching AED 50 million for FY2025, engage an accredited UAE auditor now. Audit engagements for FY2025 need to be completed before you file your CT return by September 30, 2026. Starting the audit process in August will be too late for most businesses. Audit timelines typically require 6 to 10 weeks for a prepared client.
Red Flag 7: Profit Margins That Are Unusually Low Compared to Industry Benchmarks
The FTA uses sector-level profit benchmarking as part of its risk analytics. If a construction company consistently reports a 1% net margin when comparable businesses in the same sector report 8 to 12%, the analytics engine will flag the deviation. An unusually compressed profit margin is treated as a proxy indicator for hidden revenue, inflated deductions, or aggressive related-party expense allocations designed to shift profit offshore.
The most common causes of audit-triggering margin compression in UAE CT filings include:
- Management fees charged by overseas group entities that exceed what an independent party would pay, without a benchmarking study to support the amount
- Interest charges on shareholder loans at above-market rates, creating a large non-arm’s-length interest expense deduction
- Royalties or license fees paid to foreign affiliates for intellectual property that has never been independently valued
- Inflated purchase prices on goods sourced from related parties in low-tax jurisdictions, reducing the UAE entity’s taxable profit
A business with legitimately thin margins should prepare a written margin analysis and narrative explanation supported by commercial evidence before the FTA asks for one. The FTA may issue a risk review query before escalating to a full audit, and a prepared response can prevent escalation.
Fix: Prepare a margin analysis comparing your FY2025 gross and net margins to FY2024 and to publicly available industry benchmarks. If your margins fall significantly below the sector norm, document the commercial reasons in a memo. For businesses with significant group expense allocations, a transfer pricing benchmarking study is the most defensible protection against recharacterisation of intercompany charges.
Summary: 7 UAE Corporate Tax Audit Red Flags at a Glance
| Red Flag | Risk Level | Likely FTA Action | Primary Fix |
|---|---|---|---|
| VAT-to-CT revenue mismatch | Very High | Automated flag, formal assessment | Revenue reconciliation schedule |
| Frequent or large VAT refund claims | High | Input tax verification audit | Complete invoice documentation |
| Undocumented related party transactions | High | TP adjustment, additional tax | Transfer pricing study and Local File |
| Incorrect QFZP status claim | Very High | 9% tax for 5 years on all income | Five-condition substance review |
| Pattern of late filings | Medium-High | Elevated audit priority, penalties | Automated deadline tracking |
| Missing audited financial statements | High | Incomplete return, review triggered | Engage auditor by June 2026 |
| Unusually low profit margins | Medium | Risk review query, TP inquiry | Margin narrative and benchmarking |
What Happens During an FTA Corporate Tax Audit?
Under Article 26 of Federal Decree-Law No. 28 of 2022, the FTA must notify a taxable person of a tax audit at least 10 business days before the audit begins. The notification specifies the tax period under review and the categories of documents to be provided. For suspected evasion cases, this notice period may be shortened or waived under the expanded powers introduced by FDL 17 of 2025.
The typical FTA corporate tax audit follows these stages:
- Notification: 10-business-day written notice via EmaraTax message or registered mail
- Document request: the FTA requests CT returns, financial statements, the general ledger, VAT records, contracts, bank statements, and any items identified in the risk analysis
- Desktop or on-site review: inspectors may visit business premises or conduct a review of uploaded documents via the EmaraTax portal depending on the audit scope
- Audit results notification: the FTA notifies the business of the audit outcome within the timeframe specified in the Tax Procedures Executive Regulation
- Assessment and penalty notices: if errors are confirmed, the FTA issues a tax assessment and separate administrative penalty notices
- Reconsideration window: the business has 40 business days from the assessment date to file a reconsideration request with the FTA if it disputes the findings
What Penalties Does the FTA Impose If It Finds Errors in Your CT Return?
Under Cabinet Decision No. 75 of 2023 and the revised late-payment penalty structure under Cabinet Decision No. 129 of 2025 effective April 14, 2026, the main penalties applicable to corporate tax non-compliance are:
| Violation | Penalty Amount | Legal Reference |
|---|---|---|
| Late CT registration | AED 10,000 | Cabinet Decision 75/2023 |
| Late CT return filing (months 1-12) | AED 500 per month | Cabinet Decision 75/2023 |
| Late CT return filing (after month 12) | AED 1,000 per month | Cabinet Decision 75/2023 |
| Late CT payment (first 14 days after due date) | 2% of unpaid tax, immediate | Cabinet Decision 129/2025 |
| Late CT payment (annual rate after 14 days) | 14% per annum on outstanding balance | Cabinet Decision 129/2025 |
| Failure to maintain adequate tax records (first offence) | AED 10,000 | Cabinet Decision 75/2023 |
| Failure to maintain records (repeat offence) | AED 50,000 | Cabinet Decision 75/2023 |
| Underpaid tax discovered by FTA audit | 9% CT on underpaid amount plus late payment penalty | FDL 47/2022 and CD 75/2023 |
In cases involving deliberate evasion, the FTA can refer the matter to the Public Prosecution under Article 50 of Federal Decree-Law No. 28 of 2022. Criminal penalties for tax evasion include fines of up to five times the evaded tax amount and imprisonment.
How to Reduce Your UAE Corporate Tax Audit Risk Before September 30, 2026
With the FY2025 CT return deadline of September 30, 2026 approaching, businesses have a limited window to review their positions and correct errors before the FTA finds them. A voluntary disclosure filed before an FTA audit is initiated attracts significantly lower penalties than corrections made after the audit begins.
Qaspro Global recommends the following pre-filing audit readiness checklist for every UAE business with FY2025 revenue above AED 375,000:
- Reconcile your total VAT output revenue against your CT revenue line by line for every quarter of FY2025 and document all variances
- Review every related party transaction for FY2025 and confirm each has a signed contract and a commercially justifiable price supported by evidence
- If your company is a free zone entity claiming QFZP status, work through all five qualifying conditions with documentation before filing
- Check whether your FY2025 revenue exceeded AED 50 million; if it did, engage an accredited UAE auditor immediately
- Pull your EmaraTax filing history and resolve any open penalties, late submissions, or outstanding assessments before adding a new return
- Compare your FY2025 gross and net profit margins to FY2024 and investigate any significant movements before the FTA raises the question
- Ensure every expense deduction above AED 50,000 is supported by a valid tax invoice showing the supplier’s TRN and proof of payment
If your pre-filing review uncovers an error in a previous submission, file a voluntary disclosure on EmaraTax before the FTA contacts you. The penalty reduction for a proactive voluntary disclosure is substantial compared to errors uncovered by an inspector.
Frequently Asked Questions
How long does an FTA corporate tax audit take in the UAE?
Most FTA corporate tax audits take between 30 and 90 days from the initial document request to the final results notification. Complex cases involving transfer pricing, group structures, or multiple tax periods may take longer. Under Federal Decree-Law No. 28 of 2022, the FTA must notify the business of the audit outcome within the timeframe specified in the Tax Procedures Executive Regulation (Cabinet Decision No. 74 of 2023).
Can the FTA audit a UAE business for periods before corporate tax was introduced?
No. Corporate tax applies to financial years starting on or after June 1, 2023. The FTA can only audit CT returns for periods from FY2023 onwards. However, VAT audits can cover periods going back five years from the date of the assessment, or 15 years in confirmed evasion cases under the expanded powers of Federal Decree-Law No. 17 of 2025.
Is my business required to provide all documents the FTA requests during an audit?
Yes. Under Article 27 of Federal Decree-Law No. 28 of 2022, a taxable person must provide all documents, data, and information requested by the FTA within the timeframe stated in the audit notice. Failure to cooperate fully is itself a separate violation subject to additional administrative penalties under Cabinet Decision No. 75 of 2023, regardless of whether any tax error is found.
What is the FTA’s standard lookback period for UAE corporate tax audits?
The standard audit lookback period is five years from the end of the relevant tax period. For cases involving suspected tax evasion, Federal Decree-Law No. 17 of 2025 extends this to 15 years effective January 1, 2026. A tax assessment already issued can be reopened if the FTA later obtains new information indicating fraud or deliberate concealment.
Can a small UAE business be audited for corporate tax even if it elected Small Business Relief?
Yes. Businesses that elect Small Business Relief under Cabinet Decision No. 73 of 2023 still must file a CT return and are fully subject to FTA audit. The SBR election reduces the tax rate to 0% for revenue under AED 3 million but does not exempt the business from audit, record-keeping obligations, or administrative penalties for non-compliance.
What should I do immediately after receiving an FTA corporate tax audit notification?
Do not ignore the notification. You have 10 business days before the audit begins. Use that time to gather all documents specified in the notice, cross-check your VAT and CT figures for the period under review, and engage a qualified UAE tax consultant. Responding promptly and fully to every document request demonstrates compliance intent and reduces the likelihood of adverse findings being treated as deliberate non-compliance.
Does filing a voluntary disclosure protect me from an FTA corporate tax audit?
A voluntary disclosure reduces penalties significantly when filed before the FTA initiates an audit, but it does not prevent an audit. The FTA may still choose to audit the disclosed period to verify the correction. However, a properly documented voluntary disclosure filed in good faith demonstrates compliance intent and results in materially lower penalties than errors discovered by FTA inspectors during an unannounced review.
Which industries face the highest UAE corporate tax audit risk in 2026?
The FTA’s risk-based selection currently prioritises sectors with complex supply chains, significant intercompany transactions, and historically high VAT refund activity. High-risk sectors include construction and real estate, manufacturing, trading companies with overseas parent entities, financial services, and free zone companies claiming QFZP status. Professional services firms with large group expense allocations are also under heightened scrutiny as first CT returns arrive.
Need Expert Help?
Qaspro Global’s team of UAE-based tax consultants can review your FY2025 corporate tax position, identify each red flag in your filing before September 30, 2026, and represent you during any FTA inspection or reconsideration process. Contact us today for a confidential CT audit risk review.