What Happens During an FTA Tax Audit? (Step by Step)

The FTA tax audit is the formal verification of your filings against your reality, and its anatomy is consistent: the notification (the scope — which taxes, which periods — the information requirements, the timetable); the information phase (the document requests, your organised responses, the follow-ups); the fieldwork (the auditors’ examination of the records, systems and, where relevant, premises); the findings (the draft account of discrepancies, your response with evidence); and the assessment (the formal determination, with the 40-business-day reconsideration clock).

Each stage has its own logic. The notification defines the battlefield — the scope is what it is, and the preparation targets it precisely (the notified periods’ records perfected, not the entire history reorganised). The information phase rewards the organised: the complete, indexed, timely responses versus the drip-feed of the chaotic — the auditors’ assessment of your credibility is formed here, before the fieldwork begins. The fieldwork tests the reality: the systems as they operate, the records as they exist, the answers as they’re given.

The findings stage is the critical dialogue: the auditor’s draft, your evidenced response — the factual corrections, the quantification challenges, the additional documentation. The assessment that follows reflects the dialogue’s quality. And throughout, the professional representation (the tax agent managing the process, counsel where the line needs watching) is the taxpayer’s voice — the audit is never navigated alone by the unadvised.

The audit is won in the preparation, and the preparation starts at notification — not at the fieldwork, when the auditors are already in the building. The records assembly: the notified periods’ books, supporting documents, tax workings and reconciliations — complete, indexed, cross-referenced to the filings. The gaps identified honestly in advance (the missing invoice, the weak reconciliation) are the findings you prepare the explanation for; the gaps discovered by the auditors are the findings you defend.

The position review: the agent’s pre-audit analysis of the notified periods — the treatments applied, their defensibility, the known errors. The known errors raise the disclosure sequencing question immediately (disclose now under the 20-business-day rule, or manage through the audit — the agent’s and counsel’s call, made at once, not improvised). The position review’s product is the audit strategy: the narrative of the filings, the evidence behind it, the responses prepared.

The human preparation: the staff briefed (who speaks to the auditors — the agent, primarily — what the staff’s role is, the truthfulness discipline), the premises readied (the records accessible, the systems demonstrable), the timetable managed (the agent’s diary control of the information deadlines). The prepared audit — the organised records, the coherent narrative, the professional conduct — is the minimum-findings audit. The preparation is 80% of the outcome; the fieldwork is the confirmation.

The fieldwork — the auditors examining your records, systems and premises — is where conduct becomes evidence. The cooperative, organised, truthful taxpayer: the records produced promptly, the questions answered honestly (through the agent where the framing matters), the systems demonstrated transparently. The auditors’ working assessment — formed long before the findings — reflects this conduct: the credible taxpayer’s explanations are weighed differently from the obstructive one’s.

The specific disciplines: nothing concealed (the hidden file, discovered, is worse than the disclosed gap); nothing altered (the ‘improved’ record is the integrity destruction); nothing volunteered beyond the scope without the agent’s judgment (the cooperative answer to the asked question, not the unguided tour of the entire history); every communication truthful (the inaccurate statement, however well-meant, is the credibility loss).

The premises visit, where it occurs: the professional reception — the agent present, the records accessible, the relevant staff available and briefed. Not the red carpet (the auditors aren’t guests) and not the barricade (they aren’t raiders — the raid is the distinct measure). The fieldwork is the process working: meet it with the preparation, the professionalism, and the truth. The conduct during the fieldwork is the evidence the findings are written from.

The findings — the auditor’s draft account of the discrepancies — arrive as the dialogue’s opening, not its conclusion. The response is the most intellectually demanding stage: each finding examined (the factual accuracy — the ‘error’ that the complete record disproves; the legal characterisation — the treatment the auditor mischaracterised; the quantification — the arithmetic the evidence doesn’t support), each response evidenced (the document, the working, the reasoning).

The response’s quality shapes the assessment: the well-evidenced rebuttal removes or reduces the finding; the bare assertion doesn’t. The agent drafts the response with the technical precision the findings demand; counsel reviews where the line needs watching. The timetable is managed — the response deadlines met, the extensions sought properly where needed, never the silent lapse.

Then the assessment issues: the formal determination of the additional tax and penalties. And the 40-business-day reconsideration clock starts — the challenge window for the genuinely wrong elements, through the proper process, with the evidence. The assessment isn’t the end either: it’s the determined position, challengeable where wrong, payable where right. The dialogue (findings) and the clock (reconsideration) are the taxpayer’s two instruments — use both, professionally, on time.

The audit is the civil process, and for the honest taxpayer with the messy records it remains exactly that — the findings, the assessment, the payment, the remediation. But the audit’s fieldwork can surface the deliberate fraud: the fabricated invoices in the supporting documents, the concealed revenue in the bank analysis, the second set of books in the system. The discovery transforms the matter’s dimension — and the taxpayer’s conduct from that moment is the most consequential conduct of the entire process.

The watch is therefore continuous: the agent and counsel alert to the indicators (the auditor’s questions shifting from the arithmetic to the intent, the information requests broadening to the conduct), and the response protocol ready — counsel engaged (or elevated) immediately, the communications counsel-gated, nothing said or produced about the potentially criminal matter without counsel’s direction. The protocol isn’t the admission of the criminal dimension; it’s the prudent management of the possibility.

The prevention, as ever, is the conduct: the audit entered with honest records and cooperative truthfulness doesn’t generate the criminal dimension — the messy civil findings, yes; the fraud discovery, no. The taxpayer whose records are honest (however imperfect) and whose conduct is clean has the civil audit. The watch exists for the protection; the conduct makes it unnecessary. General information only — counsel on any specific concern, before the critical communications.

On notification (days 1–7): engage the tax agent (and counsel on standby where relevant); assemble the notified periods’ records; the agent’s position review and the disclosure-sequencing decision. Information phase (weeks 2–6): the organised, indexed, timely responses to each request; the gaps honestly identified and explained; the agent managing the timetable and the communications.

Fieldwork (as scheduled): the professional conduct — the agent present, the records accessible, the truthful answers, the cooperation within the scope. Findings (on receipt): the evidenced response — each finding examined, the rebuttals documented, the agent’s technical precision, counsel’s review where needed.

Assessment (on issue): the 40-business-day reconsideration for genuinely wrong elements; payment of the right ones in full; the remediation of the controls the findings exposed. Beyond: the forward compliance strengthened — the audit’s lessons institutionalised, the records maintained to the audit standard permanently. The timeline is the process managed professionally from notification to the strengthened routine — the audit survived well becomes the credential.

Do not conceal, alter or ‘improve’ any record. The hidden file discovered and the altered record detected are the credibility destruction — and, at the extreme, the criminal-dimension trigger. The honest, imperfect records are the defensible position.

Do not obstruct, delay-tactic, or treat the auditors as adversaries. The audit is the formal process; the obstruction is the conduct evidence. Cooperate professionally, through the agent, within the scope.

Do not navigate the rights or the criminal-dimension questions alone — the agent asserts the process rights; counsel gates the sensitive communications. Do not volunteer the unguided tour of the unasked history; answer the asked questions truthfully through the agent’s framing. And do not miss the clocks: the information deadlines, the findings-response timetable, the 40-business-day reconsideration — the process rewards the timely and punishes the silent.

The well-managed audit — the scenario this page has described — follows the lawful path stage by stage: the notification met with the immediate agent engagement and the records assembly; the information phase with the organised, timely responses; the fieldwork with the professional, truthful conduct; the findings with the evidenced dialogue; the assessment with the timely reconsideration where warranted and the payment where right.

The outcome of the well-managed audit is the minimum the facts support: the honest records verified, the genuine errors corrected through the proper mechanics, the disputed points resolved on the evidence. And the byproduct — the strengthened compliance, the audit-standard records, the institutionalised lessons — is the durable value: the company that has survived the audit well is the company whose file is proven.

The alternative — the concealed records, the obstructed fieldwork, the missed clocks — is the maximum the facts permit, plus the conduct findings. The audit is the mirror: it reflects the records and the conduct it’s shown. Show it the honest records, the professional conduct, and the engaged representation — the lawful path through, from notification to the clean report. General information only — engage your agent, and counsel where needed.

Audit readiness is not a reaction — it is a file, maintained in peacetime, that makes the audit a verification exercise instead of an excavation. The readiness kit has six components, each maintained as a matter of routine.

One: the returns-and-workings file. Every filed return — VAT, corporate tax, excise — with the workings that produced it, filed by period, retained for the full retention clocks. The workings are the critical part: the return is the answer, the workings are the proof. An audit that starts from complete workings moves twice as fast as one that starts from returns alone.

Two: the reconciliation pack, updated quarterly. Revenue per the accounts to taxable supplies per the VAT returns to income per the corporate-tax return — the three-way reconciliation with every material difference explained and evidenced. This single document answers the question auditors ask first and expansions are built on: do the numbers agree with each other?

Three: the positions register. Every material tax position — the VAT treatment of retentions, the transfer-pricing method, the free-zone person's qualifying income analysis — documented with the technical analysis, the facts it rests on, and the adviser's sign-off. Positions documented in peacetime are defended in wartime; positions invented during the audit are not positions.

Four: the records map. Where every record lives — which system, which archive, whose custody — mapped to the retention clocks, with the retrieval procedure tested annually. The audit's information requests carry deadlines; the business that knows where everything is meets them, and the business that does not discovers its archive's gaps under time pressure.

Five: the people plan. The named audit contact, the counsel and tax adviser on standby retainer or at least identified, the staff briefing protocol (answer truthfully, answer only what you know, refer technical questions to the contact). The plan is written, the contact knows they are the contact, and the adviser's number is not being searched for on the day the notification arrives.

Six: the prior-audit file. Every past audit's findings, the responses, and the remediation — with evidence the remediation happened. Repeat findings are the fastest route to the authority's harsher posture; the prior-audit file proves the business learns.

Maintain the kit and the audit notification becomes an administrative event: assemble the kit, brief the team, engage the advisers, and work the process the page describes. The 80% of the outcome that preparation determines is not prepared during the audit — it is the kit, built in the quiet quarters when no one was watching.

Tax audits touch records, conduct, findings and remedy at once. The pages below cover the adjacent questions: the 14% compounding, record-keeping failures, and unlicensed subcontractors — all as general information only.