What Is a Statutory Audit in the UAE?
Many UAE business owners use “statutory audit” and “FTA audit” interchangeably, but they are not the same thing. A statutory audit is an independent examination of a company’s financial statements carried out by an external auditor, and it is required by law for reasons that have nothing to do with a tax investigation, most commonly trade license renewal, free zone compliance, or a Corporate Tax filing obligation. An FTA audit, on the other hand, is a compliance check carried out by the Federal Tax Authority to confirm that VAT, Corporate Tax, and Excise Tax have been reported and paid correctly. Preparing for a statutory audit in the UAE means getting your books ready for an external auditor’s opinion, not only for a tax officer’s review, and the two processes call for slightly different preparation.
Under Ministerial Decision No. 84 of 2025, audited financial statements are now mandatory for Qualifying Free Zone Persons (QFZPs), any taxable person with revenue above AED 50,000,000, and all Corporate Tax Groups, for tax periods starting on or after 1 January 2025. Most UAE free zone authorities, including JAFZA, DMCC, and DIFC, have long required an annual statutory audit as a condition of license renewal regardless of revenue size, and mainland companies formed under Federal Law No. 32 of 2021 (the Companies Law) may also need an audit depending on their legal structure and shareholder agreement. If your business falls into any of these categories, a statutory audit is not optional; skipping it can hold up license renewal even if no tax issue exists at all.
| Audit type | Who requires it | Main purpose |
|---|---|---|
| Statutory (external financial) audit | Free zone authorities, the Companies Law, and Ministerial Decision No. 84 of 2025 for QFZPs, Tax Groups, and revenue above AED 50 million | Confirm the financial statements fairly present the company’s position under IFRS |
| FTA tax audit | Federal Tax Authority, under Federal Decree-Law No. 28 of 2021 on Tax Procedures | Verify that VAT, Corporate Tax, and Excise Tax returns are accurate and taxes were paid in full |
Also check: External Audit Services
Why the FTA May Select Your Business for a Tax Audit
If your business has been selected for an FTA audit and the notification letter did not explain why, a pattern in your filing history is usually the trigger. The following are among the most common reasons the FTA flags a business for review:
- Claiming 100% business use of a company vehicle with no supporting mileage or usage log
- Filing or paying VAT late on a repeated basis, which builds a pattern the FTA’s risk system picks up automatically
- Operating a cash-intensive business, such as a car wash, salon, or restaurant, where reported revenue is harder to verify independently
- Claiming unusually large deductions for meals and client or staff entertainment relative to the size of the business
- Paying shareholder-employees salaries that look inflated compared to market rates for the same role
- Reporting large business-expense reimbursements without clear supporting invoices
- Reporting a large charitable contribution relative to the company’s declared income
None of these triggers means your business has done anything wrong. They simply raise a statistical flag in the FTA’s risk-based selection model. If one or more applies to your business, tightening the supporting documentation behind that item, rather than changing the underlying business practice, is usually enough to reduce audit risk going forward.
Need Expert Advice?
Contact the team at Farahat & Co. for professional support and expert insights for businesses operating in the UAE.
Legal Basis and Timeframe for an FTA Audit in the UAE
The FTA’s power to audit a business comes from Federal Decree-Law No. 28 of 2021 on Tax Procedures, as amended by Federal Decree-Law No. 17 of 2025, effective 1 January 2026. The amendment sets a five-year window in which the FTA can open a tax audit, counted from the end of the relevant tax period, and it also updates the conditions under which a business can file a voluntary disclosure to correct an earlier return before the FTA identifies the error itself. Filing a voluntary disclosure before an audit begins generally results in a lower penalty outcome than having the FTA find the same error during its own review.
Cabinet Decision No. 129 of 2025 restructured the penalty framework that applies once an audit uncovers a shortfall: late payment now carries 14% annual interest calculated on the outstanding amount, and late filing penalties start at AED 500 per month and rise to AED 1,000 per month for repeated delays. For VAT specifically, Federal Decree-Law No. 16 of 2025, effective 1 January 2026, also introduces a five-year maximum limit to claim recoverable input tax, which auditors will increasingly check when they review historic VAT positions.
Must check: Tax Audit Services
How to Prepare for a Statutory Audit in the UAE
Once you are notified of an upcoming audit, whether it is the annual statutory audit tied to your license or an FTA review, the preparation steps overlap considerably. A firm that offers audit services in the UAE can walk through your records ahead of time and flag anything that needs correcting before an outside party sees it. Company management should take the following steps regardless of who is conducting the review:
- Keep your financial records current throughout the year. If your bookkeeping follows IFRS and is reconciled monthly rather than left until year-end, there is far less to scramble for when an audit notice arrives. Engaging an accounting and bookkeeping provider to review your books periodically catches small errors before they compound into audit findings.
- Anticipate the questions an auditor is likely to ask. Auditors and the FTA alike focus on the areas where a business’s numbers look inconsistent with its size or sector, not every transaction. Reviewing your own records first lets you identify and explain those areas proactively. Businesses that cooperate and volunteer context around an unusual figure are treated with far less suspicion than those that appear to be withholding information.
- Assemble the required documents before the deadline, not after it. Every day spent gathering paperwork once the audit has started is a day the process runs longer. Having a complete document set ready on day one signals transparency and shortens the overall timeline considerably.
Documents the FTA Commonly Requests During an Audit
The specific document list varies by business, but the FTA typically requests some combination of the following during a tax audit:
| Document type | What it needs to show |
|---|---|
| Bank statements and receipts | Corporate account statements, and in some cases personal account statements, receipts, and cancelled checks tied to business transactions |
| Electronic transaction records | Payee details, payment date, and amount for every e-transaction, in a format the FTA’s systems can verify |
| Journals, ledgers, and account books | Formal bookkeeping records, where maintained; the FTA can request these even though not every business is legally required to keep them in this exact form |
| Dual-use asset records | Documentation for equipment used for both business and personal purposes, such as computers and mobile phones treated as listed property |
Common Mistakes That Delay a UAE Statutory Audit
Most delays during a statutory audit or FTA review come down to a handful of avoidable mistakes:
- Treating the audit notice as a last-minute task. Waiting until the letter arrives to start reconciling accounts almost always extends the timeline, since discrepancies found late require follow-up correspondence rather than a same-day explanation.
- Submitting incomplete supporting documentation. A transaction without an invoice, contract, or bank confirmation attached forces the auditor to request it separately, adding a full review cycle to the process.
- Mixing personal and business expenses without a clear allocation basis. This is one of the fastest ways to draw follow-up questions, particularly for dual-use assets and vehicle expenses.
- Assuming a statutory audit and an FTA audit need the same file. A statutory auditor is testing whether your financial statements comply with IFRS; the FTA is testing whether a specific tax return is accurate. Preparing one combined, well-organized file that covers both angles avoids duplicated work later.
- Not correcting a known error before the audit starts. A voluntary disclosure filed ahead of an audit is treated far more favorably than the same issue being discovered by the auditor or the FTA.
See also: Corporate Tax Audit in UAE
How Farahat & Co. Can Help
Farahat & Co. supports UAE businesses through statutory audits, FTA tax audits, and Corporate Tax audits alike, from pre-audit record reviews and voluntary disclosure filings to representing clients through the full audit process.
Contact Farahat & Co. today to discuss your statutory audit preparation requirements.
Need Expert Advice?
Contact the team at Farahat & Co. for professional support and expert insights for businesses operating in the UAE.
