From 1 October 2026, holding a valid tax invoice that features a correct Tax Registration Number (TRN) is no longer enough to guarantee input VAT recovery in the United Arab Emirates. Under new regulatory mandates, free zone entities must actively audit and verify their suppliers before claiming input tax on their periodic VAT returns. If the Federal Tax Authority (FTA) determines that a transaction was connected to tax evasion somewhere in the supply chain, input tax recovery will be denied unless the purchasing business can demonstrate strict compliance with statutory due-diligence procedures.
This operational shift alters how procurement, vendor onboarding, and tax compliance interact across free zone jurisdictions. Finance managers and directors can no longer treat vendor verification as a passive administrative task. To safeguard cash flow and avoid severe tax adjustments during audits, companies operating in free zones must institute formal verification procedures to assess supplier identity, physical presence, commercial legitimacy, and transaction structure before any input tax is deducted.
By The Freezone RA Editorial Team | September 2026
FTA Decision No. 13 of 2026 shifts the legal burden of proof onto the buyer
The regulatory foundation for this heightened due-diligence standard rests on FTA Decision No. 13 of 2026, issued on 22 July 2026 and coming into full effect on 1 October 2026. Titled “Measures, Procedures and Conditions required by Taxable Persons for the Verification of the Validity and Integrity of the Supplies before Deduction of Input Tax,” this decision establishes the specific operational criteria businesses must meet to protect their tax recovery positions. Free zone finance teams working through the uae vat supplier verification rules free zone businesses now face need to understand how this decision connects directly to the core VAT legislation.
Decision No. 13 of 2026 derives its legal authority from Article 54(bis) of the VAT Law (Federal Decree-Law No. 8 of 2017 and its amendments). Article 54(bis) was introduced into the primary law via Federal Decree-Law No. 16 of 2025, effective from 1 January 2026. Under Article 54(bis), the FTA is mandated to deny a taxable person the right to recover input VAT if the underlying supply—or any supply within the broader chain of transactions—was connected to tax evasion, provided the taxable person knew or should have known of that connection. Decision No. 13 of 2026 acts as the definitive legal framework establishing what constitutes acceptable due diligence; following its provisions allows a business to prove it neither knew nor had reason to suspect illicit activity.
Article 54(bis) enforces the “knew or should have known” legal standard
Prior to the introduction of Article 54(bis), taxable persons generally presumed that possessing a valid tax invoice compliant with Article 59 of Cabinet Decision No. 52 of 2017 (Executive Regulation of the VAT Law) was sufficient evidence to claim input tax under Article 55 of the VAT Law. The statutory landscape now penalizes passive reliance on surface-level documentation. If an upstream supplier defaults on its output VAT obligations or participates in a fraudulent transaction chain, the downstream buyer faces input tax disallowance if it failed to execute mandatory due diligence prior to claiming the deduction.
By defining the explicit steps required to prove lack of knowledge, Decision No. 13 of 2026 establishes a legal safe harbor. If a free zone business thoroughly executes the checks prescribed in the decision, maintains organized verification files, and identifies no unresolved red flags, it creates a defensible audit trail. Conversely, failing to perform these checks removes the safe harbor protection, exposing the company to input VAT recovery denials under Article 54(bis).
Public TRN verification tools are necessary but no longer sufficient on their own
For several years, free zone finance teams relied on the FTA’s free public TRN Verification tool—accessible without login on tax.gov.ae under the portal’s Services section—to confirm that a supplier’s Tax Registration Number was active and aligned with the legal entity name printed on an invoice. While performing a TRN lookup remains an essential initial step, the tax authority has made it clear that verifying active tax registration alone does not satisfy the statutory due-diligence standard.
The public TRN tool confirms that an entity holds an active registration with the FTA, but it cannot confirm whether the supplier operates a physical place of business compatible with its trade activities, whether its management structure has experienced suspicious turnover, or whether a transaction’s commercial terms reflect true market dynamics. Under the new uae vat supplier verification rules free zone businesses must now follow, a public portal check is only the starting point of a much broader compliance protocol.
Free zone companies face heightened exposure under vendor due-diligence requirements
Although Decision No. 13 of 2026 applies universally to all taxable persons across the UAE mainland and free zones alike, free zone entities face distinct operational realities that increase their compliance exposure. Free zone business models routinely center around international trade, cross-border logistics, re-exporting, contract manufacturing, and complex service delivery chains. These commercial models rely heavily on third-party service providers, import agents, freight forwarders, and specialized corporate intermediaries.
Because free zone companies frequently onboard non-resident vendors, foreign suppliers establishing local branches, or regional distribution agents, the legal triggers for vendor verification fire far more frequently in free zone environments than in standard domestic retail operations. Understanding how these rules intersect with general free-zone operating structures is vital to mitigating input tax risks.
High vendor turnover and international supply chains trigger mandatory checks frequently
Article 5(1) of Decision No. 13 of 2026 dictates that a taxable person must perform comprehensive supplier verification procedures upon first dealing with any vendor, as well as on any recurring transaction where the supplier has not undergone verification within the preceding 12 months. In high-volume trading hubs such as Dubai Multi Commodities Centre (DMCC), Jebel Ali Free Zone (JAFZA), or Dubai CommerCity, companies routinely engage new logistics providers, customs brokers, and equipment suppliers on short-notice contracts.
Every newly onboarded vendor triggers the full mandatory verification process under Article 3 of the Decision prior to the processing of their initial tax invoice. Furthermore, because trading relationships in free zones frequently pause and resume based on seasonal demand or supply chain availability, any vendor that has gone unverified for 12 months must be completely re-screened before input tax can be claimed on new transactions. Operating without an automated system to track the 12-month re-verification clock creates immediate compliance gaps.
Verification files directly support Qualifying Free Zone Person compliance reporting
For businesses structured as a Qualifying Free Zone Person (QFZP) seeking to maintain the 0% corporate tax rate on qualifying income, supplier verification under VAT rules ties directly into broader tax compliance obligations. Under FTA Decision No. 6 of 2026, QFZPs conducting the Qualifying Activity of distribution of goods or materials in or from a Designated Zone must commission an annual agreed-upon-procedures (AUP) engagement under International Standard on Related Services (ISRS) 4400, conducted by an independent auditor.
An ISRS 4400 audit engagement requires auditors to sample commercial transactions, verify trade substance, and confirm adherence to regulatory requirements across the entity’s supply chain. The detailed documentation a business compiles to satisfy the uae vat supplier verification rules free zone operators are now bound by—bank account confirmations, verified physical address records, trade licence copies—provides the baseline evidence required during those annual corporate tax audits. Mismanaging VAT vendor files can consequently create collateral exposure during corporate tax reviews, particularly when evaluating compliance with qualifying free zone person de minimis rules.
Monetary thresholds dictate when free zone entities can simplify or must expand supplier checks
Decision No. 13 of 2026 incorporates a tiered framework based on monetary transaction values. This structure provides administrative relief for minor, isolated purchases while imposing enhanced, mandatory verification protocols for high-value procurement relationships. Free zone finance teams must monitor cumulative transaction values per vendor to ensure they apply the correct verification depth at all times.
| Monetary Threshold | Regulatory Category | Mandatory Due Diligence Required | Exceptions / Special Conditions |
|---|---|---|---|
| Below AED 10,000 (excl. VAT) | De Minimis Single Supply (Article 6(1)) | Exempt from formal Article 3 & Article 4 supplier verification steps. Standard Article 59 tax invoice rules apply. | Exemption is completely revoked if cumulative transactions with the supplier hit the AED 100,000 threshold. |
| Reaches or Exceeds AED 100,000 | 12-Month Cumulative Ceiling (Article 6(2)) | Full Article 3 (Identity, Address, Risk Indicators) and Article 4 (Supply Integrity) verification required for ALL invoices. | Applies if actual historic supplies over past 12 months OR expected supplies over next 12 months exceed AED 100,000. Reinstates checks on invoices under AED 10,000. |
| Reaches or Exceeds AED 375,000 | High-Value Vendor Tier (Article 3(4)) | All baseline checks PLUS mandatory UAE Bank Account Confirmation Letter and public media/reputation review. | Applies based on 12-month historic volume or 12-month forward-looking expectation. Bank letter must be unconditional. |
De minimis exceptions under AED 10,000 disappear once cumulative trading hits AED 100,000
Under Article 6(1) of Decision No. 13 of 2026, a taxable person is permitted to skip the formal supplier and supply verification measures for an individual taxable supply if the consideration for that supply (excluding VAT) is less than AED 10,000. This exception is designed to prevent administrative overload when staff make routine, low-value operational purchases, such as purchasing minor office supplies or one-off local repairs.
However, Article 6(2) introduces a crucial statutory claw-back. The de minimis exemption immediately ceases to apply if total taxable supplies received from that specific supplier have exceeded AED 100,000 over the previous 12 months, or are reasonably expected to exceed AED 100,000 over the subsequent 12 months. Once this AED 100,000 threshold is breached, the purchasing entity must perform full Article 3 and Article 4 due diligence on that vendor. Furthermore, from that point forward, every single invoice received from that vendor—including individual invoices under AED 10,000—must undergo full verification before input tax can be recovered.
Finance departments in free zones must ensure their ERP or accounting software tracks cumulative 12-month rolling spend by vendor TRN. Allowing automated systems to process small invoices from an established vendor without verifying that the cumulative AED 100,000 threshold has been crossed will lead to systemic input tax recovery errors during FTA audits.
The AED 375,000 ceiling introduces mandatory bank confirmation letters and media checks
When procurement from a single vendor reaches significant scale, the regulatory standard elevates further. Article 3(4) of Decision No. 13 of 2026 mandates enhanced due-diligence measures whenever supplies received from a vendor exceed AED 375,000 over the preceding 12 months, or are projected to exceed AED 375,000 over the upcoming 12 months. This AED 375,000 threshold mirrors the mandatory VAT registration limit established in Article 13 of the VAT Law.
For any vendor meeting or expected to meet this financial ceiling, the buyer must satisfy two enhanced statutory requirements before claiming input VAT recovery. First, under Article 3(4)(a), the buyer must obtain written confirmation from a bank licensed and authorised in the UAE that the supplier holds an active bank account with that institution — the letter must carry no reservations or conditions, though it need not be addressed to the purchasing entity itself. Second, under Article 3(4)(b), the buyer must review publicly available information, media coverage and reviews about the supplier from reliable sources, confirming that its reputation and observed scale of operations match the nature and volume of the business being conducted, with no indicators of suspected tax evasion. Both the bank letter and the dated results of the media search belong in the vendor’s master verification file.
Execution of supplier identity and address checks requires specific documentary evidence
To comply with Article 3 of Decision No. 13 of 2026, free zone companies must systematically gather, inspect, and archive specific documentary evidence before processing input tax deductions. Standard corporate onboarding questionnaires are insufficient unless they incorporate the mandatory verification elements set out in the regulation. Meeting the uae vat supplier verification rules free zone operators must now observe means building a structured verification file for every active vendor.
| Verification Area | Regulatory Requirement (Article 3) | Required Mandatory Evidence / Records to Retain |
|---|---|---|
| Natural Person Identity | Verify identity and conduct meeting prior to supply (Art 3(1)(a)) | Copy of valid Emirates ID or Passport; documented proof of in-person or virtual meeting (calendar invite, meeting minutes, video call log). |
| Legal Person Incorporation | Verify legal status, entity details, and authorized representative identity (Art 3(1)(b)) | Official database extract or Certificate of Incorporation/Trade Licence; details matched against entity name, address, and workforce; copy of valid Emirates ID/Passport for director, manager, or authorized agent. |
| Physical Business Location | Confirm existence of actual place of business compatible with activity (Art 3(2)) | Electronic verification (geotagged photos, utility bills, official registry location data) OR physical site visit report; documented assessment of activity compatibility. |
| Operational Risk Profile | Screen for rapid address changes, management turnover, or abnormal volumes (Art 3(3)) | 12-month history check on address and management changes; clear written commercial justification file if any of the three statutory risk indicators are triggered. |
| Financial & Reputation Integrity | Required for vendor spend exceeding AED 375,000 (Art 3(4)) | Unconditional written bank confirmation letter from a UAE-authorized bank; documented public media search report showing no tax evasion red flags. |
Natural persons versus legal entities demand distinct identification procedures
Article 3(1) establishes separate verification pathways depending on whether the supplier is a natural person operating as a sole establishment or a legal entity such as a Limited Liability Company (LLC) or Free Zone Company (FZ-LLC/FZC). For natural persons — including the freelancers and sole establishments covered in our guide to natural person corporate tax registration — the purchasing business must collect a valid copy of the individual’s Emirates ID or passport. Additionally, Article 3(1)(a) requires that an authorized representative of the buyer meet the natural person supplier either in person or through a virtual video meeting before the supply takes place. The date, attendance, and confirmation of this meeting must be documented in the compliance log.
For corporate legal entities, Article 3(1)(b) requires the buyer to verify the supplier’s incorporation through official government databases (such as free zone authority registries or the UAE Unified Economic Register) or by obtaining a certified copy of the Certificate of Incorporation or Trade Licence. The buyer must cross-check the details on these documents to ensure the legal name, physical address, licensed business activities, and operational scale match the supplier’s representation. Furthermore, the identity of the specific director, general manager, or authorized employee representing the corporate supplier must be verified by securing a copy of their valid Emirates ID or passport.
Confirming physical presence prevents reliance on shell address registrations
Under Article 3(2), taxable persons must independently confirm that the supplier maintains a genuine physical place of business and that this location is commercially compatible with the nature and scale of the services or goods being provided. In free zone environments where virtual desks, flexi-desks, and shared office arrangements are common, verifying physical substance is critical.
Physical location verification can be executed via electronic means—such as validating official free zone lease registry entries, reviewing recent utility bills, or examining geotagged operational site photographs—or by conducting an on-site physical field visit. If a supplier purports to supply massive volumes of physical commodities, heavy industrial machinery, or extensive warehousing services, but operates solely from a shared flexi-desk without storage facilities or logistics infrastructure, the buyer must investigate further. Procuring physical goods from an entity whose registered address cannot support such operations creates a severe audit vulnerability under Article 3(2).
Red flag monitoring mandates written justifications for sudden supplier operational shifts
Article 3(3) introduces three explicit operational risk indicators that businesses must continuously evaluate when auditing their suppliers. If any of these risk indicators are detected during vendor screening or ongoing monitoring, the buyer cannot simply ignore them; it must compile a formal, documented explanation justifying why the transaction remains valid and legitimate.
The three statutory risk indicators set out in Article 3(3) are:
1. The supplier changed its registered business address more than twice within the preceding 12 months.
2. The supplier replaced its key employees, managing directors, or executive officers more than twice within the preceding 12 months.
3. The supplier undertook commercial transactions that were highly disproportionate or unexpected in volume, monetary value, or operational nature when compared against the established size, history, or licensed capacity of its business.
If a supplier triggers any of these three conditions, the buyer must retain a clear, documented justification within its verification file and be prepared to present this documentation to the FTA upon request. Article 3(3) explicitly notes that the retained explanation must be commercially logical and must not contradict other factual evidence available to the authority. If a rational commercial explanation cannot be documented, input tax recovery on supplies from that vendor must be withheld.
To understand how this operates in practice, consider a hypothetical scenario: A Dubai free zone trading company sources high-end electronic components from a newly registered local distributor. During vendor onboarding, the finance team notes that the distributor changed its legal address three times over the past nine months and replaced its general manager twice. Furthermore, the distributor offers to supply AED 2 million worth of specialized microchips despite having a trade licence issued only four weeks prior with a nominal paid-up capital.
Under Article 3(3), this vendor triggers all three statutory risk indicators. To protect its input VAT recovery, the free zone trading company cannot rely on a standard invoice. It must perform enhanced due diligence, obtain written evidence explaining the corporate restructuring and address moves, confirm the source and ownership of the electronic inventory, and archive a detailed commercial justification signed by the Head of Compliance before authorizing input VAT deduction on the transaction.
Transactional verification under Article 4 requires scrutinizing supply terms and pricing logic
While Article 3 focuses on vetting the identity and profile of the vendor, Article 4 of Decision No. 13 of 2026 focuses on the integrity of the specific supply itself. Even if a vendor passes all identity checks, input VAT recovery can still be denied under Article 54(bis) if the specific transaction exhibits uncommercial terms or artificial structural arrangements. Finance teams applying the uae vat supplier verification rules free zone operators are bound by must evaluate the mechanics of every transaction, not just the vendor’s credentials, before approving an input tax claim.
Off-market pricing and sudden profit margin shifts trigger immediate scrutiny
Article 4(1) requires taxable persons to assess the overall conditions of every transaction to confirm that the supplier’s engagement is based on genuine commercial reasons. Under Article 4(3), the purchasing business must specifically analyze transaction pricing and profit margins. Prices or profit margins that are commercially unjustifiable or significantly off market—whether abnormally high or unusually low—without a clear, documented economic rationale present immediate tax evasion red flags.
In addition, Article 4(3) mandates that the goods or services being supplied must fall squarely within the supplier’s ordinary or licensed business activities. The buyer is required to verify the authenticity and origin of the goods, as well as confirm that the supplier holds valid ownership or the legal right to dispose of those goods. Where a supplier operates as an intermediary or broker rather than the direct owner of the assets, Article 4(3) mandates that there must be a clear, commercially justifiable reason for including that intermediary in the supply chain.
Cash settlement and non-resident bank transfers demand strict commercial rationales
Payment flows represent a central focus of Article 4(2). The general regulatory standard requires that consideration for taxable supplies be settled through traceable, electronic banking channels. While cash payments are not entirely prohibited, any cash transaction must possess a fully documented commercial justification, remain strictly within legislated cash limits, and be easily verifiable through secondary documentation.
This VAT cash-documentation mandate sits alongside existing UAE anti-money-laundering rules: Federal Decree-Law No. 20 of 2018 and Cabinet Decision No. 10 of 2019 already require Designated Non-Financial Businesses and Professions to apply customer due diligence and report large cash transactions. Decision 13/2026 reinforces that framework within the tax sphere by treating an undocumented cash settlement as a primary risk factor for input VAT disallowance.
Furthermore, Article 4(2) establishes strict rules regarding third-party payments and international transfers. If payment for a supply is directed to a bank account held by a third party, or to a bank account located outside the supplier’s country of incorporation, the purchasing entity must secure and archive a reasonable, documented commercial explanation for this arrangement. If a supplier incorporated in a Dubai free zone requests payment to be remitted to an unrelated third-party entity in an offshore jurisdiction without verified commercial justification, claiming input VAT on that transaction exposes the business to immediate recovery denial under Article 54(bis).
Building a compliant internal verification framework is a legal mandate under Article 5
Compliance with the new verification standards cannot be managed through ad-hoc checks or informal verbal approvals. Article 5 of Decision No. 13 of 2026 establishes mandatory administrative procedures that every taxable person must implement within their operational structure. Creating a defensible compliance posture requires formalizing internal policies, assigning explicit operational roles, and maintaining audit-ready documentation archives.
Organizations must establish a written internal policy designating compliance roles
Article 5(4) requires all taxable persons to maintain a formal, documented internal policy detailing their verification procedures. This written policy must explicitly name the specific officers or employees responsible for implementing, reviewing, and supervising supplier verification checks. It must outline clear operational powers, approval hierarchies, and escalation paths for handling flagged vendors.
The policy document must be maintained at the official location designated for keeping tax records, making it immediately available for inspection by FTA auditors during a compliance review. Operating without a formal, written verification policy constitutes a direct breach of Article 5(4), undermining the company’s ability to claim safe-harbor protection under Article 54(bis).
Synchronizing 5-year VAT record retention with 7-year corporate tax rules
Under Article 5(3), businesses must document every verification step taken and systematically preserve all collected supporting records. This documentation enables the FTA to audit the correct implementation of due-diligence protocols. Finance directors must ensure that verification records—including trade licences, Emirates IDs, meeting logs, physical address checks, bank confirmation letters, and pricing justifications—are archived in a secure, easily accessible digital repository.
General tax baseline rules under the Tax Procedures Law (Federal Decree-Law No. 28 of 2022 and Cabinet Decision No. 74 of 2023) require keeping VAT records for a minimum of 5 years. But because vendor verification records also support expense deductibility under Corporate Tax rules, free zone businesses should align their archiving policy with the longer 7-year retention period the UAE Corporate Tax Law (Federal Decree-Law No. 47 of 2022) enforces — one archive, sized to the longer clock, covers both tax heads, which matters when evaluating structures like free zone corporate tax group relief strategies.
Frequently Asked Questions
What is the effective date of FTA Decision No. 13 of 2026, and does it apply retroactively?
FTA Decision No. 13 of 2026 was issued on 22 July 2026 and officially comes into effect on 1 October 2026. It applies to input VAT deductions claimed on taxable supplies received on or after 1 October 2026. While it does not explicitly enforce retroactive checks on past tax periods, any ongoing or recurring supplier relationship active on or after 1 October 2026 must meet the decision’s due-diligence standards before input tax can be recovered on new invoices.
Does FTA Decision No. 13 of 2026 apply specifically to free zone companies or all UAE businesses?
The decision applies universally to all Taxable Persons registered for VAT in the UAE, across both mainland jurisdictions and free zones. However, free zone businesses face higher practical risk due to their heavy reliance on cross-border supply chains, international vendor networks, freight intermediaries, and Designated Zone distribution arrangements. These operational structures trigger mandatory first-dealing and threshold verification rules more frequently.
Can the FTA deny input VAT recovery if a free zone company holds a valid tax invoice?
Yes, under Article 54(bis) of the VAT Law and Decision No. 13 of 2026, holding an invoice that meets Article 59 requirements is no longer sufficient on its own. If the supply was connected to tax evasion and the buyer failed to execute the mandatory supplier and supply verification checks prescribed in Decision No. 13 of 2026, the FTA is required to deny input VAT recovery on that transaction.
How often must a free zone business re-verify an existing, recurring supplier?
Under Article 5(1), a taxable person must verify a supplier upon initial onboarding and re-verify them on any recurring transaction if the supplier has not undergone verification within the preceding 12 months. Additionally, if the cumulative transaction value with a supplier crosses the AED 100,000 or AED 375,000 monetary thresholds within a rolling 12-month window, enhanced verification procedures must be executed immediately regardless of when the previous check occurred.
What specific document is required for suppliers whose spend exceeds AED 375,000?
Under Article 3(4)(a), for suppliers where spend exceeds or is expected to exceed AED 375,000 over a 12-month period, the buyer must obtain written confirmation from a bank authorised in the UAE confirming that the supplier holds an active bank account. This letter must contain no disclaimers or reservations, though it does not need to be addressed directly to the purchasing entity. The buyer must also retain documented media/reputation checks from reliable public sources under Article 3(4)(b).
Establishing compliant supplier verification frameworks is essential to protecting input VAT recovery, maintaining audit readiness, and safeguarding your free zone entity’s financial standing under evolving UAE tax regulations.
Explore UAE Freezone options today →