The Audit Notice Just Arrived. Now What?
An FTA audit notice is designed to be survivable. The law gives you at least ten business days of warning precisely so that the audit examines an organised taxpayer rather than a panicked one. What you do with those days, and especially with the first three, does more to shape the outcome than anything you do once the auditors are in the room. This is the sequence we run when a client calls with a notice in hand.
What the notice actually means
Under the Tax Procedures Law, the Authority notifies you of a tax audit at least ten business days before conducting it, apart from the exceptional cases the law reserves. Read the notice itself carefully before reacting to it: which tax it covers, which periods, where the audit will take place, and what has been requested. An audit of two VAT periods is a different exercise from an audit of every period since registration, and the scope on the page is the scope you prepare for.
Resist the instinct to read the notice as an accusation. Audits are triggered by risk profiles, refund claims, sector sweeps and data inconsistencies as much as by suspicion, and the FTA does not disclose the trigger. What the notice tells you reliably is only this: from a defined date, your filings for the stated periods will be tested against your records. The question that matters is whether those records support the filings, and you have roughly two working weeks to find out before the FTA does.
Day one: three decisions
- Appoint one owner. A single person, usually the finance lead, through whom every document and answer flows. The most damage we see in audits comes not from bad positions but from three well-meaning people giving three inconsistent answers to the same question.
- Bring in your adviser now, not after the first meeting. The ten days are exactly the window in which professional review still changes things. An adviser who first sees the file after the auditors do can only explain history; one who sees it first can still organise, contextualise and, where needed, correct it.
- Freeze the records. No tidying, no backdating, no helpful corrections to documents for the audited periods. Fixing an invoice date the week after a notice arrives converts an arithmetic error into a credibility problem, and credibility is the currency the entire audit runs on.
Days two and three: read your own file the way the auditor will
The productive work of the notice period is a fast internal review of the audited periods, in the order an auditor reads them: returns first, then the reconciliations behind them, then the source documents behind those. You are looking for three things. Gaps, where a filed number has no working behind it. Inconsistencies, where the VAT returns, the Corporate Tax filings and the audited financial statements tell different stories, because cross-checking those is precisely what the FTA’s systems do well. And known issues, the treatments someone flagged in an email two years ago and nobody resolved.
What you do with a discovered error is the sharpest judgement call of the week. The penalty framework consistently rewards corrections made before the Authority acts: a voluntary disclosure filed before an audit notice attracts materially lower penalties than the same error found by the audit. Once the notice has arrived the window has narrowed but the calculation has not necessarily closed, and this is exactly the conversation to have with an adviser on day two rather than day nine. What is never the right answer is silence in the hope that the auditors miss it: the modern audit is data-led, and from e-invoicing go-live the FTA holds your transaction patterns in structured form before it ever visits.
What the audit itself looks like
Audits are conducted during the Authority’s official working hours, other than in exceptional cases, at the Authority’s premises or your place of business. The auditors are entitled to the records the law already requires you to keep: accounting records, tax invoices, contracts, customs documentation, the working papers behind your returns. You are required to facilitate the audit, and facilitation and advocacy are not in tension: it is normal and sensible to verify the auditors’ identities, confirm scope in writing, keep a log of every document provided, and have your adviser present at meetings.
Answer what is asked, accurately, without volunteering theories about what else might be interesting. Where a question needs checking, say so and come back with a verified answer rather than an instant wrong one. Every statement made in week one is a statement the audit can test in week four.
The mistakes that define bad audits
- Treating the notice period as waiting time. Ten business days of preparation is the single largest advantage the law hands you, and most businesses spend it hoping.
- Document dumps. Handing over everything unsorted reads as either concealment or chaos, and both invite a broader audit. Provide what is requested, organised, logged.
- Improvised answers. The confident guess in the first meeting becomes the inconsistency in the final assessment.
- Amending history. Any alteration to records for audited periods after the notice, however innocent the intent, is the fastest way to convert a tax question into something worse.
- Going in without representation and negotiating positions on the spot. You are entitled to advice, and the FTA deals with represented taxpayers every day.
After the fieldwork
The audit ends with the FTA’s results, and where the Authority assesses additional tax and penalties, the law provides a sequence of remedies, from reconsideration through the dispute resolution framework, each on tight clocks counted in business days. Two things follow. Do not sign or concede positions in the closing meeting that you have not had reviewed, and calendar the deadlines the moment the results arrive, because the remedy you do not exercise in time is a remedy you no longer have. Our audit defence practice covers the full sequence, from notice response through representation to challenge.
Common questions
Should we ask to postpone the audit?
Only with a genuine operational reason, and never as a reflex. A postponement request buys days at the cost of signalling disorder. The better use of energy is compressing your preparation into the window you have; ten business days, used properly, is enough to organise most files.
The notice covers periods where we know there is a problem. Now what?
Quantify it precisely, on day one, with an adviser, and take the disclosure decision deliberately rather than by default. The economics depend on the error, the periods, and how the penalty framework treats corrections at this stage; what is certain is that the option set only shrinks as the audit start date approaches.
Do we have to let auditors take original documents?
The law gives auditors powers to obtain and, where the conditions are met, take records, and it also entitles you to know what was taken. Keep your own log and copies of everything provided or removed, and route the handover through your single point of contact so the record of the audit is as organised as the records under audit.
The positions on this page were last reviewed against published legislation and official guidance on .
- Federal Decree-Law No. 28 of 2022 on Tax Procedures, as amended (consolidated text, PDF)
- Cabinet Decision No. 74 of 2023, Executive Regulation of the Tax Procedures Law (PDF)
- Federal Tax Authority — Legislation index
The Tax Procedures Law was amended with effect from early 2026, and guidance changes between reviews. This page is general information, not advice on your own position, and the official sources above prevail over anything stated here. If a notice has actually arrived, take advice on your specific facts now rather than relying on any general guide, including this one.
Notice in hand?
The first review fits inside your notice period. We read the file the way the auditor will, and you decide what to do with the findings before the FTA makes the decision for you.
Begin the Conversation →