As the FTA increasingly uses AI and machine learning to cross-reference VAT, Excise, and Corporate Tax data to identify compliance risks and select taxpayers for audit, what are the key areas where mismatches or gaps in records are most likely to trigger an audit, and what documentation, reconciliation practices, and voluntary disclosure steps should a business have in place before receiving an audit notification?
Research Question
As the FTA increasingly uses AI and machine learning to cross-reference VAT, Excise, and Corporate Tax data to identify compliance risks and select taxpayers for audit, what are the key areas where mismatches or gaps in records are most likely to trigger an audit, and what documentation, reconciliation practices, and voluntary disclosure steps should a business have in place before receiving an audit notification?
AI Analysis
Cross-Tax Data Analytics: Audit Trigger Points, Documentation Standards, and Pre-Audit Compliance Framework
Direct Answer
The FTA's cross-referencing of VAT, Excise Tax, and Corporate Tax data creates audit exposure at every point where reported figures across these three tax heads should — but do not — reconcile. The highest-risk mismatch areas are: (1) revenue reported in Corporate Tax returns versus output VAT declared; (2) expense deductions claimed for CT versus input VAT recovered; (3) customs import data versus VAT import declarations and CT cost-of-goods-sold; (4) Excise Tax production/import volumes versus VAT output on excise-goods sales; (5) transfer pricing adjustments that alter CT income without corresponding VAT supply-value adjustments; (6) Free Zone income characterisation (QFZP qualifying vs excluded revenue) versus VAT treatment of the same supplies; and (7) related-party transactions where CT arm's-length pricing diverges from VAT market-value rules. A business should maintain a documented multi-tax reconciliation framework, retain records for the statutory periods (5 years general, 7 years for real estate), conduct periodic internal cross-tax audits, and — critically — file voluntary disclosures for any identified errors exceeding AED 10,000 within 20 business days of discovery, before an FTA audit notification forecloses the more favourable penalty treatment.
---
Fact Pattern Interpretation: This analysis assumes the reader is a UAE-resident business (juridical person) registered for VAT and Corporate Tax — and potentially Excise Tax — seeking to understand where the FTA's data-matching algorithms are most likely to detect inconsistencies across tax heads, and what proactive compliance measures to implement before an audit is initiated. If the business is a natural person, a Free Zone entity, or an Excise-only registrant, certain elements of this analysis will differ — use Refine to adjust.
---
Executive Summary
The FTA holds unified taxpayer data across VAT (filed quarterly or monthly since 2018), Excise Tax (filed monthly since 2017), and Corporate Tax (filed annually from 2024/2025 onwards), all linked by a single Tax Registration Number. Cross-referencing these datasets — supplemented by customs import records, e-commerce reporting obligations, and forthcoming electronic invoicing data — enables algorithmic identification of discrepancies that would be invisible within any single tax silo. This memo maps the specific reconciliation points where mismatches arise, identifies the legislative provisions that create the exposure, and sets out the documentation, reconciliation, and voluntary disclosure protocols a business must have in place to manage audit risk proactively.
---
Legal Basis
- [Federal Decree-Law No. 28 of 2022 on Tax Procedures](#LEG:72) — Articles 7 (record-keeping), 10 (tax returns), 11 (voluntary disclosure), 14–17 (tax audit and assessment powers), 25 (tax evasion)
- [Cabinet Decision No. 74 of 2023](#LEG:147) (Executive Regulation of Tax Procedures Law) — Articles on record retention (5/7 years), voluntary disclosure thresholds (AED 10,000), tax audit notice (10 business days), and reconciliation amounts
- [Federal Decree-Law No. 47 of 2022](#LEG:18) on Corporate Tax — Articles 20 (Taxable Income), 28–33 (deductions), 34–35 (non-deductible expenditure and Related Parties), 36 (Connected Person payments), 55 (Transfer Pricing), 56 (record-keeping)
- [Cabinet Decision No. 75 of 2023](#LEG:262) (CT Administrative Penalties) — penalty schedule for record-keeping failures, late returns, incorrect returns, voluntary disclosure violations
- [Federal Decree-Law No. 8 of 2017](#LEG:127) on Value Added Tax — Articles 3–5 (scope/registration), 25–26 (date/place of supply), 36 (related party market value), 45 (zero-rating), 54 (input tax recovery), 65 (record-keeping), 79 bis (statute of limitations)
- [Cabinet Decision No. 52 of 2017](#LEG:129) (VAT Executive Regulation) — Articles on registration thresholds (AED 375,000 mandatory / AED 187,500 voluntary), export evidence, deemed supplies, composite supplies, input tax apportionment
- [Cabinet Decision No. 40 of 2017](#LEG:128) (Administrative Penalties — VAT/Excise/Tax Procedures) — penalty rates for record-keeping, late filing, incorrect returns, voluntary disclosure timing
- [Federal Decree-Law No. 7 of 2017](#LEG:74) on Excise Tax — Articles on registration, designated zones, record-keeping, stockpiling
- [Cabinet Decision No. 37 of 2017](#LEG:105) (Excise Tax Executive Regulation) — monthly filing with payment due by the 15th of each month, stock-level records, designated zone transfers
- [VATP030](#LEG:197) (VAT Public Clarification — FDL 18/2022 Amendments) — statute of limitations (5 years general, 15 years for evasion/non-registration)
- TAXP008 (Tax Procedures Public Clarification — Tax Assessment Reviews) — FTA assessment review procedures
- [Ministerial Decision No. 97 of 2023](#LEG:44) — Transfer Pricing documentation requirements (Master File, Local File)
- [Ministerial Decision No. 134 of 2023](#LEG:16) — General rules for determining Taxable Income
- [Ministerial Decision No. 114 of 2023](#LEG:46) — Accounting standards and methods
- [Cabinet Decision No. 100 of 2023](#LEG:39) — Qualifying Income for QFZPs
- [FTA Decision No. 8 of 2024](#LEG:134) — Mechanism for correction of errors in VAT returns
- [Ministerial Decision No. 26 of 2023](#LEG:117) — E-commerce record-keeping criteria
- [Ministerial Decision No. 244 of 2025](#LEG:62) / [Ministerial Decision No. 243 of 2025](#LEG:63) — Electronic Invoicing System (upcoming implementation)
- [Ministerial Decision No. 64 of 2025](#LEG:146) — Eligibility criteria and accreditation procedure for e-invoicing Service Providers
- [Cabinet Decision No. 106 of 2025](#LEG:79) — Penalties for e-invoicing violations
- [UAE Electronic Invoicing Guidelines Version V 1.0](#LEG:219) — Practical guidance on e-invoicing scope, exclusions, phased implementation, and readiness
- USEGWB1 — Raqeeb Whistleblower Programme User Guide — third-party reporting of tax violations
- [CTP010 — Corporate Tax Public Clarification](#LEG:[CTP010](#LEG:220)) — Clarification of the terms "director" and "officer" for the purpose of payments to Connected Persons under Article 36 of the Corporate Tax Law
- [Cabinet Decision No. 44 of 2020](#LEG:263) — Organising Reports Submitted by Multinational Companies (Country-by-Country Reporting)
- [FTA Decision No. 2 of 2026](#LEG:148) — The Authority's Policy on Issuing Clarifications and Directives (effective 1 March 2026)
- [TPGPC1 — Private Clarifications Tax Procedures Guide](#LEG:222) — Guidance on private clarification requests, eligibility, fees, and process
- [EXTP007 — Excise Tax Public Clarification](#LEG:173) — Excise goods deficiency/shortage and destruction process within a Designated Zone
Analysis
1. Revenue Mismatch: VAT Output Tax vs Corporate Tax Revenue
The most algorithmically detectable mismatch is between total revenue reported in the Corporate Tax return (Taxable Income per Article 20, [Federal Decree-Law No. 47 of 2022](#LEG:18)) and the aggregate of output VAT declared across all VAT return periods falling within the same CT Tax Period.
- CT revenue is determined under applicable accounting standards (IFRS or IFRS for SMEs per [Ministerial Decision No. 114 of 2023](#LEG:46)), adjusted for CT-specific rules under [Ministerial Decision No. 134 of 2023](#LEG:16).
- VAT output is reported on each supply at the time of supply (Articles 25–26, [Federal Decree-Law No. 8 of 2017](#LEG:127)), which may differ from revenue recognition timing under IFRS 15.
- Expected reconciliation items include: timing differences (advance payments triggering VAT before revenue recognition; long-term contracts with different milestones); exempt supplies (financial services, bare land, residential property) that appear in CT revenue but generate no output VAT; zero-rated supplies (exports, international transport) that appear in CT revenue and in VAT returns but at 0%; out-of-scope income (dividends, foreign-source income with no UAE nexus for VAT) that appears in CT but not in VAT returns at all; and deemed supplies (Article 5, Decree-Law No. 8 of 2017) that generate VAT output but may not constitute CT revenue. Note that deemed supply exceptions apply where the value per individual recipient does not exceed AED 500 per 12-month period and the supplier's total output tax on such supplies does not exceed AED 2,000 annually (or AED 250,000 for government entities and charities) [Article on deemed supply exceptions, Cabinet Decision No. 52 of 2017].
> Simply put: The FTA can compare your annual sales figure on your Corporate Tax return with the total sales you reported across all your VAT filings for the same year. If the numbers don't match and you can't explain why, expect questions. Keep a written reconciliation showing exactly where and why the figures differ — timing, exempt income, out-of-scope items — and update it every period.
---
2. Expense Mismatch: CT Deductions vs VAT Input Tax Recovery
The FTA can cross-check whether expenses deducted for CT purposes under Articles 28–33 of the CT Law are consistent with input VAT claimed on those same expenses.
- Blocked input VAT items (entertainment services per [VATP005](#LEG:153); motor vehicles per Article 53 of the VAT Executive Regulation) should not generate input VAT claims but may still be deductible for CT if incurred wholly and exclusively for business purposes [Article 28, CT Law].
- Non-deductible CT items (Article 33 — fines, penalties, donations to non-QPBEs, 50% entertainment cap) may nonetheless have had input VAT correctly recovered if the underlying supply was for a taxable business purpose.
- Related-party and Connected Person payments are deductible for CT only to the extent they correspond to arm's-length market value [Article 36, CT Law], while VAT requires supplies between related parties to be valued at market value when below market value and the recipient cannot recover full input tax [Article 36, Decree-Law No. 8 of 2017; VATP030]. Related parties for VAT purposes are entities where one holds 50% or more of the voting rights or market value interest in the other, or where a common third party holds 50% or more in both [Cabinet Decision No. 52 of 2017]. For CT purposes, "Connected Persons" under Article 36(2) include directors and officers of the Taxable Person; [CTP010](#LEG:[CTP010](#LEG:220)) clarifies that "director" means a person holding a position on the board of directors or equivalent governing body as determined under the applicable law or constitutional documents (not merely someone with "director" in their job title), and "officer" means a person who possesses authority and responsibility for planning, directing, and controlling the Taxable Person's activities (in line with IAS 24), or who has authority to make strategic financial, operational, or commercial decisions, or who can enter into agreements that legally bind the Taxable Person. Payments to such persons are deductible only at market value and must be disclosed if they exceed the threshold set by the FTA under Article 55(1) of the CT Law.
> Simply put: If you deduct a big expense on your Corporate Tax return but never claimed VAT on the same purchase, the FTA will want to know why. Sometimes there's a good reason — the supplier wasn't VAT-registered, or the service was exempt. But you need documentation proving that, not just an explanation after the fact. Also, payments to your company's directors and senior officers are only deductible at market value — and "director" or "officer" is determined by actual authority and board position, not just a job title. If you're paying a board member or a C-suite executive, make sure the amount is arm's-length and properly disclosed.
---
3. Customs Import Data vs VAT Import Declarations vs CT Cost of Goods Sold
Customs declarations (linked to TRN) record the CIF value and duty paid on every import. The FTA can match these against:
- VAT import declarations — import VAT should be declared and either paid at customs or reverse-charged (for designated zone imports). Any import appearing in customs data but absent from VAT returns indicates potential under-declaration.
- CT cost of goods sold — imported inventory should flow through to COGS in the CT return. Significant imports with no corresponding COGS increase (or with COGS materially exceeding imports + local purchases) signals inventory valuation issues or unrecorded sales.
> Simply put: Every container you import is recorded by customs with your tax number. The FTA can check whether you declared the VAT on that import and whether the goods eventually showed up as a cost in your Corporate Tax filing. If goods enter the country but never appear in your tax filings, that's a red flag.
---
4. Excise Tax Volumes vs VAT Output on Excise-Goods Sales
For businesses dealing in excise goods (tobacco, carbonated drinks, energy drinks, sweetened drinks, electronic smoking devices), the FTA can compare:
- Monthly Excise Tax returns — which report production volumes, imports, releases from designated zones, and stockpile changes [Articles 2–8, Decree-Law No. 7 of 2017; [Cabinet Decision No. 37 of 2017](#LEG:105) requiring monthly filing with payment due by the 15th of each month].
- VAT output — which should reflect the sale of those same goods at retail or wholesale, with VAT calculated on the excise-inclusive price.
- CT revenue — which should include the full selling price of excise goods.
Where natural shortage is claimed as an explanation for volume gaps within designated zones, warehouse keepers and taxable persons must hold a valid report from an independent competent entity determining the permissible percentage of natural shortage for each excise good. Such reports must be based on at least 6 months of actual data, are valid for one year, and must be renewed annually. The permissible shortage percentage declared in any tax period must not exceed the percentage in the valid report, and declarations may cover multiple tax periods up to a maximum of 6 months [FTA Decision No. 6 of 2025, effective 1 July 2025]. Additionally, [EXTP007](#LEG:173) clarifies that the warehouse keeper must notify the FTA within 30 days of discovering any deficiency or shortage using the Lost and Damaged Declaration (EX203B) via the e-Services Portal, and the FTA must accept that the deficiency is due to a legitimate cause; destruction of excise goods within a designated zone requires prior FTA approval before the goods are destroyed, as the FTA may wish to inspect them first.
The tiered-volumetric model for sweetened drinks [FTA Decision No. 10 of 2025; [Cabinet Decision No. 197 of 2025](#LEG:87), effective 1 January 2026] introduces sugar-content categories — Low-Sugar Category (less than 5 grams of sugar per 100 millilitres), Artificially Sweetened Category (only artificial sweeteners), and High-Sugar Category (8 grams or more of total sugar per 100 millilitres) — each with different tax treatment. Where manufacturer guidelines are unavailable or proven inaccurate, taxable persons must obtain laboratory reports from accredited laboratories to determine total sugar content, using the formula: volume of final drink = total sugar content in grams × 20 [FTA Decision No. 10 of 2025]. These laboratory reports and product labelling data constitute additional cross-reference points the FTA can match against excise declarations and VAT output figures. A limited correction window also applies: excess tax paid on sweetened drinks initially classified as High-Sugar Category but later proven to fall in a lower category may be deducted, but only for tax periods commencing on or after 1 January 2026 and ending on or before 30 June 2026 [FTA Decision No. 11 of 2025].
> Simply put: If you import or produce excise goods and report those quantities to the FTA monthly, but your VAT sales figures for those same products tell a different story, the system will flag it. Make sure your inventory records bridge the gap between what came in (excise) and what went out (VAT sales). If goods go missing or are damaged in a free zone warehouse, you must notify the FTA within 30 days and get approval before destroying anything — otherwise the FTA treats those goods as released for sale and taxes them. For sweetened drinks, laboratory reports on sugar content are now a mandatory part of that evidential chain.
---
5. Transfer Pricing and Related-Party Transaction Mismatches
Transfer pricing documentation is mandatory for transactions with Related Parties and Connected Persons [Ministerial Decision No. 97 of 2023; Article 55, CT Law]. The FTA can identify:
- CT adjustments where arm's-length pricing differs from book values, but no corresponding VAT adjustment was made (or vice versa). Under Article 36 of the VAT Decree-Law, related-party supplies must be valued at market value when below market value and the recipient cannot fully recover input tax.
- Management fees, royalties, and service charges between group entities — if these appear as CT deductions for one entity but are not reported as VAT output by the recipient entity (or are reported at a different value), the mismatch is detectable.
- Master File and Local File requirements [Ministerial Decision No. 97 of 2023] create a documentary trail that the FTA can compare against VAT invoices and CT return schedules.
- Country-by-Country Reporting (CbCR): Multinational enterprise groups with consolidated group revenue of AED 3.15 billion or more must file CbCR reports with the Ministry of Finance [Cabinet Decision No. 44 of 2020]. The FTA can cross-reference CbCR data — including revenue, profit, tax paid, and employee headcount by jurisdiction — against CT returns and transfer pricing documentation to identify inconsistencies in how income and functions are allocated across group entities.
---
6. Free Zone Entity (QFZP) Income Characterisation
Qualifying Free Zone Persons benefit from 0% CT on Qualifying Income [Article 18, CT Law; Cabinet Decision No. 100 of 2023] but are subject to 9% on Excluded Activities and non-qualifying revenue. The FTA can cross-reference:
- VAT treatment of the same supplies — a QFZP making supplies from a designated zone to mainland UAE customers may need to account for VAT on those supplies, and the VAT-declared values should correspond to the revenue split between qualifying and non-qualifying income in the CT return.
- De minimis thresholds — non-qualifying revenue must not exceed the lower of AED 5,000,000 or 5% of total revenue [Cabinet Decision No. 100 of 2023]. The FTA can verify this against VAT return data showing the nature and destination of supplies.
- Substance requirements under [Ministerial Decision No. 229 of 2025](#LEG:58) (Qualifying Activities and Excluded Activities) — the FTA can check whether the activities generating QFZP income are consistent with the activities reported for VAT purposes. Note that for Wealth and Investment Management Services and Fund Management Services, the Dubai Virtual Assets Regulatory Authority (VARA) has been designated as a competent authority for the purposes of [Ministerial Decision No. 229 of 2025](#LEG:58) [Ministerial Decision No. 336 of 2025, effective 1 June 2023].
---
7. Electronic Invoicing and Future Data Density
The Electronic Invoicing System [Ministerial Decision No. 243 of 2025; [Ministerial Decision No. 244 of 2025](#LEG:62); [Ministerial Decision No. 64 of 2025](#LEG:146), as amended by Ministerial Decision No. 56 of 2026] will provide the FTA with real-time, transaction-level data. While implementation is phased (specific mandatory dates for taxpayer categories are set by [Ministerial Decision No. 244 of 2025](#LEG:62) — confirm the phase schedule and the category applicable to your business directly against that instrument), businesses should prepare now because:
- Every invoice will be transmitted to or validated by the FTA, creating a complete digital audit trail.
- Mismatches between e-invoice data and VAT/CT returns will be immediately detectable.
- Penalties for e-invoicing violations are established under [Cabinet Decision No. 106 of 2025](#LEG:79).
- Scope: Electronic invoicing is mandatory for any Person conducting Business in the UAE, regardless of VAT registration status, unless specifically excluded under Article 4 of Ministerial Decision No. 243 of 2025 [UAE Electronic Invoicing Guidelines V 1.0]. Your Participant Identifier will be your Tax Identification Number (TIN) — the first 10 digits of your TRN (your own TRN, not the Tax Group representative's TRN, even if you are part of a Tax Group). Persons within scope who are not registered for any tax type must register with the FTA to obtain a TIN [UAE Electronic Invoicing Guidelines V 1.0].
- Five-corner model: The UAE e-invoicing framework operates on a five-corner model — Supplier (Corner 1), Supplier's Accredited Service Provider (Corner 2), Recipient's Accredited Service Provider (Corner 3), Recipient (Corner 4), and the FTA (Corner 5) — meaning the FTA receives or validates every invoice as a central clearinghouse [UAE Electronic Invoicing Guidelines V 1.0].
---
8. Record-Keeping Requirements and Retention Periods
The statutory record-keeping framework creates the documentary foundation the FTA will examine during any audit:
- General retention: 5 years from end of the relevant Tax Period [Cabinet Decision No. 74 of 2023].
- Real estate records: 7 years [Cabinet Decision No. 74 of 2023].
- Extension for disputes/audits: Records must be retained for an additional 4 years if a dispute or audit is ongoing at the end of the standard retention period [Cabinet Decision No. 74 of 2023].
- CT-specific: Article 56 of the CT Law requires maintenance of all records and documents supporting the Tax Return for the periods specified in the Tax Procedures Law.
- Transfer Pricing: Master File and Local File must be maintained contemporaneously [Ministerial Decision No. 97 of 2023]. R&D tax credit technical documentation carries a 7-year retention requirement [Ministerial Decision No. 24 of 2026].
- Excise Tax: Comprehensive stock-level, transfer, and designated zone operation records [Cabinet Decision No. 37 of 2017]. Natural shortage reports from independent competent entities must be retained and renewed annually [FTA Decision No. 6 of 2025].
- E-commerce: Specific record-keeping for electronic commerce supplies [Ministerial Decision No. 26 of 2023].
- CT: AED 10,000 first violation, AED 20,000 for repeat within 24 months [Cabinet Decision No. 75 of 2023].
- VAT/Excise/Tax Procedures: AED 10,000 first violation, AED 20,000 repeat within 24 months [Cabinet Decision No. 40 of 2017].
---
9. Voluntary Disclosure: The Critical Pre-Audit Step
The voluntary disclosure regime is the single most important tool for managing audit risk. The rules differ materially depending on timing:
Threshold and timing [Cabinet Decision No. 74 of 2023, as amended by Cabinet Decision No. 17 of 2026]:
- Error exceeding AED 10,000 in net tax liability: Voluntary disclosure must be filed within 20 business days of discovery.
- Error of AED 10,000 or less: May be corrected in the next tax return filed after discovery, without a separate voluntary disclosure.
| Scenario | Penalty |
|---|---|
| Voluntary disclosure filed before FTA audit notification | 1% of tax difference per month from due date of original return to date of voluntary disclosure [Cabinet Decision No. 75 of 2023 for CT; [Cabinet Decision No. 40 of 2017](#LEG:128) for VAT/Excise] |
| Voluntary disclosure filed AFTER FTA audit notification | 1% monthly penalty PLUS additional fixed penalty of 15% of tax difference [Cabinet Decision No. 75 of 2023 for CT; [Cabinet Decision No. 40 of 2017](#LEG:128) for VAT/Excise] |
Numeric example:
A business discovers in March 2026 that it under-reported VAT output tax by AED 200,000 in Q2 2025 (return due 28 July 2025). If it files a voluntary disclosure immediately (say, 15 March 2026 — approximately 8 months after the due date):
- Pre-audit voluntary disclosure penalty: 1% × AED 200,000 × 8 months = AED 16,000
- If instead the FTA notifies of audit first and the error is found during audit: 1% × AED 200,000 × 8 months = AED 16,000 PLUS 15% × AED 200,000 = AED 30,000 = AED 46,000 total
- Plus the unpaid tax of AED 200,000 itself, plus 14% per annum late payment penalty from the day after the original due date [Cabinet Decision No. 40 of 2017 / Cabinet Decision No. 75 of 2023].
Statute of limitations on voluntary disclosure:
- No voluntary disclosure may be submitted after 5 years from the end of the relevant Tax Period [Article 79 bis, Decree-Law No. 8 of 2017 for VAT; Article 25 bis, Decree-Law No. 7 of 2017 for Excise; VATP030].
- If a voluntary disclosure is submitted in the fifth year, the FTA has 1 year from the disclosure date to complete any audit or assessment arising from it [VATP030; Federal Decree-Law No. 19 of 2022].
---
10. VAT Error Correction Mechanism
[FTA Decision No. 8 of 2024](#LEG:134) establishes the mechanism for correcting errors or omissions in VAT returns. This interacts with the voluntary disclosure regime:
- Errors that can be corrected in a subsequent return (AED 10,000 or less) follow the correction mechanism without a separate voluntary disclosure.
- Errors exceeding AED 10,000 require a formal voluntary disclosure filing through the FTA's system.
> Simply put: Small VAT mistakes (AED 10,000 or less) can be fixed in your next VAT return. Bigger ones need a formal voluntary disclosure. Either way, catch them early — run a reconciliation check before every VAT filing.
---
11. Audit Process and Taxpayer Rights
When the FTA does initiate an audit, the procedural framework is:
- Advance notice: Minimum 10 business days before audit commencement [Cabinet Decision No. 74 of 2023]. Exception: no notice required where tax evasion is suspected.
- Audit scope: The FTA may examine all records, documents, and assets; temporarily close premises for up to 72 hours; and seize documents [Federal Decree-Law No. 28 of 2022].
- Audit results: Must be notified within 10 business days from end of audit [Cabinet Decision No. 74 of 2023].
- Document access: Taxpayer may request access to audit documents within 20 business days of results notification; FTA must respond within 10 business days [Cabinet Decision No. 74 of 2023].
- Tax Assessment Review: Request must be submitted within 40 business days from notification [Federal Decree-Law No. 28 of 2022; TAXP008].