UAE Tax & Compliance FAQ

The UAE levies corporate tax at 0% on the first AED 375,000 of taxable income and 9% on income above that amount. A third rate of 15% applies under the Domestic Minimum Top-Up Tax (DMTT) for multinational enterprise groups with consolidated global revenue of EUR 750 million or more, effective from January 2025 under Cabinet Decision 142 of 2024.

One common misconception: the AED 375,000 figure is a tax band, not an exemption. If your taxable income is AED 500,000, you pay 9% on AED 125,000, not on the full amount. But you still need to register with the FTA and file a return regardless of whether you owe anything.

See also: Who needs to register for corporate tax in the UAE?

All businesses operating in the UAE must register for corporate tax through the FTA's EmaraTax portal, regardless of whether they expect to pay tax.

This includes mainland LLCs, free zone entities (even those eligible for Qualifying Free Zone Person status), branches of foreign companies, and natural persons conducting business or professional activities above the relevant thresholds. Registration is required even if your taxable income falls within the 0% band.

A limited set of entities can apply for exemption, including government bodies, qualifying investment funds, and businesses in the extractive industries, but they still need to submit an exemption application to the FTA rather than simply not registering.

If you operate from a free zone and assume you are automatically excluded, that assumption is wrong. Free zone entities are taxable persons under the CT law and must register.

Your corporate tax return is due within nine months after the end of your financial year, and payment is due on the same date.

Two examples: if your financial year ends on 31 December 2025, your filing and payment deadline is 30 September 2026. If it ends on 30 June 2025, the deadline is 31 March 2026.

There is no instalment or estimated payment system for corporate tax in the UAE at this point. You file and pay in a single action. Missing either deadline triggers administrative penalties from the FTA, so plan to have your financial statements and tax calculations completed well before the nine-month window closes.

Small Business Relief (SBR) allows UAE resident businesses with revenue of AED 3 million or less to treat their taxable income as zero for that period.

To qualify, your revenue must stay at or below AED 3 million in the current period and every previous period ending on or before 31 December 2026. You also cannot be part of a multinational enterprise group (consolidated revenue above AED 3.15 billion) or a Qualifying Free Zone Person.

The trade-off most sources skip: electing SBR means you forfeit the ability to carry forward tax losses from that period. If your business is currently loss-making and you expect to grow past the AED 3 million threshold soon, preserving those losses for offset against future taxable income may be worth more than the short-term simplification SBR provides.

SBR is temporary. It applies to tax periods starting on or after 1 June 2023 and ending on or before 31 December 2026. No extension has been announced. You need to make a conscious decision each year about whether to elect it, factoring in your growth trajectory and loss position.

See also: What is the UAE corporate tax rate?

A Qualifying Free Zone Person is a free zone entity that meets four conditions under the UAE Corporate Tax Law and benefits from a 0% rate on qualifying income.

The four conditions: (1) you are a juridical person incorporated or registered in a UAE free zone; (2) you maintain adequate substance in the free zone, meaning your core income-generating activities, qualified employees, assets, and operating expenditure are physically in the zone; (3) you derive qualifying income as defined in the relevant Ministerial Decisions; and (4) you have not elected to be taxed under the standard 9% regime.

The consequence of losing QFZP status is severe: you pay 9% on your full income for the current year and the next four years before you can retest eligibility. This is not a one-time qualification. You need to meet all four conditions continuously, every tax period, and document your compliance.

See also: Does my company need an annual audit in the UAE?

The FTA imposes administrative penalties for corporate tax violations under Cabinet Decision 75 of 2023, with a broader penalty harmonisation taking effect on 14 April 2026 under Cabinet Decision 129 of 2025.

Late registration carries a fixed penalty. Filing an incorrect return costs AED 500 for the first instance and AED 2,000 for repeated violations, though the penalty may be waived if you correct the return by the due date or submit a voluntary disclosure with no change in tax due. Late payment incurs percentage-based monthly charges that compound.

The enforcement posture has tightened since the first year of CT. If you are still sorting out prior-period registrations or returns, address them now. Voluntary disclosures filed before an FTA audit carry significantly lower risk than corrections discovered during one.

See also: What are the penalties for VAT non-compliance?

You must register for VAT if your taxable supplies and imports exceeded AED 375,000 in the past 12 months, or if you expect to exceed that amount in the next 30 days. Once you cross the threshold, you have 30 days to submit your registration application through the FTA portal.

If your taxable supplies or expenses exceed AED 187,500 but fall below AED 375,000, you can register voluntarily. This is particularly relevant for startups with significant upfront costs: voluntary registration lets you recover the input VAT on those expenses even before you generate revenue.

Non-resident businesses making taxable supplies in the UAE must register regardless of turnover, unless a UAE-based buyer accounts for the VAT through the reverse charge mechanism.

Zero-rated supplies carry VAT at 0% and allow you to recover the input tax on related business expenses. Exempt supplies have no VAT charged, but you cannot recover the input VAT you paid on expenses connected to making those supplies.

The cash flow difference matters. If most of your revenue comes from zero-rated supplies (for example, exports outside the GCC or international transport), you will regularly be in a VAT refund position. If your revenue is from exempt supplies (certain financial services, subsequent sales of residential property), the VAT on your business costs becomes a genuine expense that you absorb.

Misclassifying supplies between these two categories is one of the more common findings in FTA audits, so getting the classification right from the start saves trouble later.

Most UAE businesses file VAT returns quarterly. If your revenue exceeds AED 150 million, the FTA will assign you a monthly filing period instead. You do not get to choose your own period; the FTA assigns it when you register.

Returns and payment are due by the 28th of the month following the end of your tax period. For a quarterly filer whose period ends on 31 March, the deadline is 28 April. Late filing carries a penalty of AED 1,000 for the first offence, increasing to AED 2,000 for repeat violations within 24 months. Late payment accrues at 14% per annum, calculated monthly on the outstanding balance.

Late VAT filing in the UAE carries a penalty of AED 1,000 for the first violation, with escalating fines for repeat offences. The penalty framework was updated under Cabinet Decision 129 of 2025, effective 14 April 2026. Key penalties under the revised framework:

Late filing: AED 1,000 for the first violation, AED 2,000 for repeat violations within 24 months. Late payment: 14% per annum, calculated monthly on the outstanding balance (replacing the previous compounding structure under the old framework). Failure to issue a tax invoice within the required timeframe: AED 2,500 per instance. Failure to maintain required records: AED 10,000 for the first violation, AED 20,000 on repeat.

Some penalty amounts have been reduced from the prior framework (for instance, the penalty for failure to keep records in Arabic dropped from AED 20,000 to AED 5,000), but the enforcement posture has tightened. Voluntary disclosures filed before an FTA audit still carry the lightest consequences.

UAE e-invoicing requires businesses to issue structured XML invoices via the Peppol network through an Accredited Service Provider (ASP), with mandatory go-live from January 2027 for large businesses and July 2027 for SMEs. This is structured data exchange, not digitised PDFs.

The timeline:

• Pilot programme: July 2026 (voluntary participation for selected businesses)
• Phase 1 (revenue ≥ AED 50 million): appoint an ASP by 31 July 2026, go live by 1 January 2027
• Phase 2 (revenue < AED 50 million): appoint an ASP by 31 March 2027, go live by 1 July 2027
• Phase 3 (UAE government entities): go live by 1 October 2027

The revenue threshold is based on standalone IFRS financial statements for each entity or trade licence, not consolidated figures. B2C transactions are excluded from the mandate until further notice.

The legal basis is Ministerial Decision 243 and Ministerial Decision 244 of 2025, with detailed guidelines published by the FTA in February 2026.

See also: Does e-invoicing apply to my business?

E-invoicing applies to all businesses conducting B2B or B2G transactions in the UAE, regardless of VAT registration status. The mandate covers mainland companies, free zone entities, and branches of foreign companies with a registered UAE presence.

The revenue threshold (AED 50 million) only determines which phase you fall into, not whether you are in scope. A business with AED 2 million in revenue is still required to comply; it simply gets a later deadline (July 2027 instead of January 2027).

Exclusions: businesses with purely B2C transactions (until further notice), sovereign government activities not competing with the private sector, and entities without any UAE presence. If you are unsure whether your transactions qualify as B2B or B2C, review your customer base now rather than discovering the answer at deadline.

An Accredited Service Provider is a certified intermediary that validates, formats, and transmits your e-invoices to trading partners and the FTA through the UAE's Peppol-based network. In the five-corner model the UAE has adopted, your ASP sits between your business and your buyer's ASP, with both ASPs simultaneously reporting invoice data to the FTA.

You must appoint an ASP before your go-live date (31 July 2026 for Phase 1 businesses, 31 March 2027 for Phase 2). The FTA will publish a certified list of ASPs.

When evaluating providers, consider: Peppol certification status, compatibility with your ERP or accounting software, pricing model (per-document fees versus flat subscription), support for the PINT AE schema, and the quality of their onboarding and testing process. ASP selection is a technical and commercial decision, so treat it with the same rigour you would apply to selecting any compliance-critical vendor.

See also: How should my business prepare for e-invoicing?

E-invoicing does not eliminate PDF invoices. You can continue sending commercial copies of invoices to your customers in whatever format they prefer. What changes is the official tax invoice: that becomes a structured XML file in the PINT AE format, transmitted through your ASP.

Think of it as an additional data layer rather than a replacement. Your accounting software or ERP generates the structured data, your ASP validates and transmits it, and the FTA receives it in near-real time. The PDF or printed version your customer receives for their records is a commercial document, not the legally valid tax invoice.

Your ERP or accounting software will need to produce this structured data. Most major platforms (Zoho Books, QuickBooks, Xero, SAP) are building or have built integrations, and your ASP can handle format conversion from common ERP outputs.

Start now. Implementation typically takes three to six months, and the deadlines are closer than they appear.

Confirm your phase and deadline. Check your standalone revenue against the AED 50 million threshold to determine whether you fall into Phase 1 (January 2027) or Phase 2 (July 2027).

Assess your accounting software. Can your current system generate structured invoice data in the PINT AE format, or will it need an upgrade or integration layer? Talk to your software provider about their e-invoicing roadmap.

Clean up your master data. Your Tax Identification Number (TIN), customer identifiers, and product classifications need to be accurate and consistent. Bad master data is the most common cause of failed e-invoice transmissions.

Shortlist and appoint an ASP. Evaluate providers against your ERP compatibility, transaction volume, and support needs. Onboarding takes time, so do not wait until the appointment deadline.

Run test invoices. Before your go-live date, transmit test invoices through your ASP to identify and resolve integration issues.

Most UAE mainland LLCs are required to have an annual audit under the Commercial Companies Law (Federal Decree-Law 32 of 2021). Beyond that baseline, audit requirements depend on your entity type, jurisdiction, and revenue.

Free zone entities: requirements vary by free zone authority. DMCC, JAFZA, DAFZA, RAKEZ, and DSO all require annual audited financial statements as a condition of licence renewal. Check your free zone's specific rules.

Corporate tax trigger: businesses with revenue exceeding AED 50 million (when not part of a tax group) and all Qualifying Free Zone Persons must prepare and maintain audited financial statements under the relevant Ministerial Decision.

Branches of foreign companies: typically required to file audited financial statements with their licensing authority.

See also: What accounting standards apply to UAE businesses?

UAE businesses must prepare financial statements under International Financial Reporting Standards (IFRS) or IFRS for SMEs. The corporate tax law uses these financial statements as the starting point for calculating taxable income, so your choice of standard directly affects your tax position.

IFRS applies to regulated entities, listed companies, and larger businesses. IFRS for SMEs is available for smaller entities with less complex operations. Islamic financial institutions follow AAOIFI standards alongside IFRS.

The connection between your accounting standards and your tax return is direct: your audited financial statements feed into the taxable income calculation, with specific adjustments for non-deductible expenses, exempt income, and timing differences. If your financial statements are not prepared under an accepted standard, your tax return has a structural problem at the foundation.

For corporate tax purposes, you must retain financial records and supporting documents for a minimum of seven years from the end of the relevant tax period. For VAT, the retention period is five years from the end of the tax period to which the records relate.

Records include financial statements, general ledgers, invoices (both issued and received), contracts, bank statements, payroll records, and any supporting documents used to prepare your tax returns. The FTA expects these records to be digitally accessible; relying on paper-only records is insufficient for a modern compliance environment.

As e-invoicing rolls out, structured invoice records will become a natural by-product of the system. Businesses that are well-organised on record-keeping today will find the transition to e-invoicing significantly smoother than those scrambling to digitise.

Several significant legislative changes took effect or were announced across 2025 and 2026:

Federal Decree-Law 17 of 2025 amended the Tax Procedures Law, standardising limitation periods (five-year window for refund claims, five-year general audit limitation extendable to fifteen years for fraud) and clarifying voluntary disclosure rules.

Cabinet Decision 129 of 2025, effective 14 April 2026, harmonised the penalty framework across VAT, excise tax, and tax procedures, reducing some fixed penalties while tightening enforcement consistency.

Federal Decree-Law 16 of 2025 amended the VAT Law with changes effective 1 January 2026, refining procedural rules and credit sequencing.

Cabinet Decision 142 of 2024 introduced the 15% Domestic Minimum Top-Up Tax (DMTT) for multinational groups with EUR 750 million or more in consolidated revenue, effective from January 2025.

Ministerial Decisions 243 and 244 of 2025 established the e-invoicing mandate and phased timeline.

Federal Decree-Law 10 of 2025 replaced the previous AML legislation with an updated framework, accompanied by Cabinet Resolution 134 of 2025.

Each of these changes has practical implications for how you file, pay, and document your compliance.

AML obligations in the UAE extend well beyond banks and financial institutions. If your business falls into one of the designated non-financial business and profession (DNFBP) categories, you have the same core obligations: risk assessment, customer due diligence, suspicious transaction reporting, and appointment of a compliance officer.

DNFBP categories include: real estate agents and brokers, dealers in precious metals and stones, legal professionals, corporate service providers (including company formation agents), and independent accountants and auditors.

The supervisory authority for most DNFBPs is the Ministry of Economy and Tourism (MoET). The obligations are set out under Federal Decree-Law 10 of 2025 and Cabinet Resolution 134 of 2025, which replaced the previous AML framework.

If you are in a DNFBP category and have not conducted an enterprise-wide risk assessment, established CDD procedures, or registered on the goAML platform, you are exposed. Penalties for AML non-compliance range from AED 10,000 to AED 1,000,000, and serious violations can result in licence revocation.

See also: What is goAML and do I need to register?

UAE companies must identify, record, and report their Ultimate Beneficial Owners to their licensing authority as part of ongoing AML compliance. A beneficial owner is any individual who holds 25% or more of ownership or exercises effective control over the entity.

The obligation is not a one-time filing. You must maintain a UBO register at the entity level and update it whenever there is a change in beneficial ownership. Failure to maintain or update the register carries administrative penalties, and it is a common inspection point during AML compliance reviews.

For mainland companies, the register is maintained with the relevant licensing authority (Department of Economy). For free zone entities, it is filed with the free zone authority. DIFC and ADGM have their own beneficial ownership frameworks that align with but are administered separately from the federal requirements.

Economic Substance Regulations require UAE entities conducting specified "relevant activities" to demonstrate adequate economic substance through employees, expenditure, and decision-making physically within the UAE.

The relevant activities are: banking, insurance, fund management, lease-finance, headquarters, shipping, holding company, intellectual property, and distribution or service centre activities.

If your entity conducts any of these activities, you have two obligations: submit an annual notification to your regulatory authority confirming whether you conducted a relevant activity, and if you did, file a substance report demonstrating you meet the adequacy test (appropriate number of employees, sufficient operating expenditure, core income-generating activities directed and managed in the UAE).

A point of confusion since corporate tax was introduced: ESR has not been replaced by the CT substance requirements. They operate in parallel. A free zone entity maintaining QFZP status needs to satisfy both the CT adequate substance test and any applicable ESR obligations.

goAML is the UAE Financial Intelligence Unit's online platform where reporting entities file Suspicious Transaction Reports (STRs) and Suspicious Activity Reports (SARs). If your business is a financial institution, DNFBP, or virtual asset service provider under the UAE's AML framework, you must register on the platform.

Registration is a compliance prerequisite, not something you do only when you spot suspicious activity. Inspectors from the MoET or your relevant supervisory authority will check whether you have an active goAML account as part of routine AML compliance reviews.

The core obligation: when you encounter a transaction or activity that gives rise to reasonable suspicion of money laundering, terrorism financing, or proliferation financing, you must file an STR through goAML without tipping off the customer. The threshold for filing is reasonable suspicion, not certainty. If a transaction raises questions, consult your compliance officer or AML advisor before deciding not to file.

Outsourcing your finance function makes sense when your compliance obligations outgrow your internal capability. Some specific signals: your obligations now span multiple regimes (corporate tax, VAT, e-invoicing, AML) and no single person on your team can manage all of them. Your filings are consistently rushed or completed at the last minute. You cannot produce financial statements on demand when a bank, investor, or auditor asks for them. Or the cost of hiring a qualified full-time finance professional exceeds the scope of work you actually need done.

For many UAE SMEs, the tipping point comes when the founder realises they are spending more time on compliance administration than on running the business. Outsourcing does not mean giving up control. It means putting structured processes behind the work so that deadlines, filings, and reporting happen reliably without the founder managing them personally.

See also: What is the difference between a bookkeeper, an accountant, and a CFO?

A bookkeeper maintains ground-level financial integrity. Every transaction is recorded accurately and on time, including the 14-day rule for issuing tax invoices and credit notes, with mandatory documentation kept in Arabic to avoid administrative penalties.

An accountant converts those records into regulatory output. They produce IFRS-compliant financial statements, manage tax filings under the penalty framework introduced by Cabinet Decision 129/2025, and handle technical constraints such as the five-year cap on carrying forward excess recoverable input tax.

A CFO provides strategic oversight across all three. They connect your financial data to business decisions, ensure exposures such as the 15% Domestic Minimum Top-up Tax are properly provisioned for qualifying multinational groups, and move the organisation from reactive compliance to a control-based model where e-invoicing and data quality issues are caught before they reach an auditor.

The difference is scope. A bookkeeper records. An accountant reports. A CFO decides what the numbers mean for the business.

The right software depends on your business size, complexity, and compliance needs. Rather than recommending a single product, here are the criteria that matter for UAE compliance:

FTA VAT accreditation: your software must generate compliant tax invoices and produce the FAF (FTA Audit File) format for VAT returns. Corporate tax reporting: can the software produce the financial statements and schedules you need for your CT return? E-invoicing readiness: will the software integrate with an ASP to generate PINT AE XML invoices when the mandate takes effect? Arabic invoice support: the software must handle right-to-left text and bilingual formatting. UAE bank integration: direct bank feeds from local banks (Emirates NBD, ADCB, Mashreq, FAB) save significant reconciliation time.

Zoho Books, QuickBooks Online, Xero, and Wafeq are commonly used by UAE SMEs. Each has trade-offs on pricing, features, and local support. The software records the data; the expertise to configure it for UAE compliance is what determines whether your filings are correct.

See also: How should my business prepare for e-invoicing?

Start with qualifications. The firm's team should include certified professionals — CA, CPA, or ACCA — with direct experience across UAE tax and compliance regimes.

Beyond that, six criteria worth evaluating:

Scope: do they cover accounting, VAT, corporate tax, e-invoicing, and AML as an integrated service, or are they a single-service provider who will refer you elsewhere for the rest?

Technology: are they running cloud accounting with automated reconciliation and structured data pipelines, or are they still working from spreadsheets?

Oversight level: is a CFO-level professional reviewing your compliance, or is the work delegated to junior staff without senior sign-off?

Proactive model: do they manage a compliance calendar and flag upcoming deadlines and regulatory changes, or do they only respond when you ask?

E-invoicing readiness: have they assessed ASP options and built implementation plans across their client base?

Pricing: is the fee structure transparent, or do add-ons appear after you sign?

Finline's model is built around each of these principles. If you are evaluating partners, these criteria give you a framework for comparison.

See also: How does Finline work with its clients?

Every Finline engagement is led by a CFO-level professional who owns the compliance outcome for your business. Your CFO lead coordinates accounting, tax compliance, and regulatory reporting as a single integrated function.

The service spans end to end: accounting and bookkeeping, VAT registration and filing, corporate tax returns and planning, e-invoicing readiness and ASP coordination, AML compliance support, and audit coordination. You get one team managing all of it, so nothing falls between providers.

Technology is the delivery layer. Cloud-native accounting, automated bank reconciliation, structured data pipelines, and a compliance calendar that tracks every deadline across every regime you are subject to. Your CFO lead uses this infrastructure to identify issues before they become problems, not after.

On e-invoicing specifically, Finline evaluates ASP options, assesses ERP integration requirements, and builds implementation plans for clients ahead of their mandatory go-live dates. Compliance planning is built into the service model, not sold as a separate engagement.

The approach is proactive. Regulatory changes are monitored, deadlines are managed, and risk is identified early. You focus on running your business; Finline manages the compliance infrastructure behind it.

Get in touch to discuss how this works for your business.