For eight years, the UAE input tax test has been a document test: hold a valid Tax Invoice, use the purchase for taxable supplies, pay within six months, and the credit is yours. That era ends on 1 October 2026. Two Federal Tax Authority Decisions take effect on that date. FTA Decision No. 13 of 2026 prescribes the checks a business must carry out on its suppliers and supplies before it deducts input tax. FTA Decision No. 17 of 2026 sets out an exhaustive list of cases in which input tax on free-of-charge employee costs can be recovered. Alongside them, the FTA has issued VAT Public Clarification VATP046, which explains the amendments made to the VAT Decree-Law by Federal Decree-Law No. 16 of 2024 and Federal Decree-Law No. 16 of 2025.
Read one at a time, each looks like a technical adjustment. Read together, they change what it takes to recover input tax. A credit now has to pass four gates. The supplier must survive a due-diligence file. The purchase, if it benefits staff, must fit one of six narrowly defined cases. From 1 January 2027, the invoice must arrive as a structured Electronic Invoice for businesses within the e-invoicing mandate. And any credit that is not used must be claimed within five years or it lapses. This article analyses the three instruments as a single regime, because that is how the FTA will audit them.
Effective date: FTA Decision No. 13 of 2026 (issued 22 July 2026) and FTA Decision No. 17 of 2026 (issued 9 September 2026) both take effect on 1 October 2026. VATP046 is a Public Clarification: it states the FTA's position on existing law and applies from the effective date of each amendment it explains (30 October 2024 or 1 January 2026). Input tax deducted in the October 2026 return period and later will be tested against all three.
The statutory framework: what changed in the Decree-Law
VATP046 summarises two rounds of amendments. The first round, made by Federal Decree-Law No. 16 of 2024 and effective from 30 October 2024, laid the groundwork for e-invoicing. The second round, made by Federal Decree-Law No. 16 of 2025 and effective from 1 January 2026, added the anti-evasion and time-limit rules. The table below is the map.
| Provision | Change | Effective |
|---|---|---|
| Art 1 – Non-Resident | A Person with a Place of Establishment or Fixed Establishment in the UAE is resident whether or not it owns the premises; employees working regularly from a client's UAE premises with their devices can create a Fixed Establishment | 30 Oct 2024 |
| Art 1 – New definitions | "Electronic Invoicing System", "Electronic Invoice", "Electronic Credit Note" introduced; "Tax Invoice" and "Tax Credit Note" extended to electronic versions meeting Executive Regulation Arts 59 and 60 | 30 Oct 2024 |
| Art 55(1)(c) and (d) | Input tax recovery requires the Tax Invoice to be held as an Electronic Invoice where one is required to be issued (or has been issued); the Cabinet may prescribe further conditions | 30 Oct 2024 |
| Art 65(5) and Art 70(4) | Registrants within the Electronic Invoicing System must issue and transmit Tax Invoices and Tax Credit Notes electronically | 30 Oct 2024 |
| Art 76(4) and (5) | Failure to issue a Tax Invoice, Tax Credit Note or alternative document within the prescribed period, or in electronic form where required, triggers an Administrative Penalty | 30 Oct 2024 |
| Art 48(1) – Reverse charge | No self-invoice required on imports of Concerned Goods and Concerned Services on or after 1 January 2026; supporting documents must still be retained | 1 Jan 2026 |
| Art 74(3) – Excess Recoverable Tax | Refund must be requested within five years from the end of the Tax Period in which the excess arose, failing which the right lapses | 1 Jan 2026 |
| Art 54 (bis) – new | FTA must reject input tax where the recipient knew, and may reject it where the recipient should have known, that the supply was part of a supply chain connected to Tax Evasion | 1 Jan 2026 |
| Art 79 (bis) – repealed | Statute of limitation now governed only by the Tax Procedures Law | 1 Jan 2026 |
Two of these amendments are the legal foundation for the new Decisions. Article 54 (bis) is the one that gives FTA Decision No. 13 of 2026 its force. Its structure is worth spelling out. Under Article 54 (bis)(1), where the FTA establishes that the recipient was aware the supply was connected to Tax Evasion, rejection is mandatory. Under Article 54 (bis)(2), where the FTA establishes that the recipient should have been aware, based on the circumstances of the supply, rejection is discretionary ("may reject"). Article 54 (bis)(3) is a deeming rule: a recipient that did not verify the validity and integrity of the supply before deducting input tax is considered to have been required to be aware. VATP046 also confirms that the "supply chain" is not limited to direct suppliers and customers; it covers any Person involved anywhere in the chain connected to the evasion.
The practical result is that the "should have known" test is not left to argument. If you did not verify, the law assumes you should have known. Decision 13 tells you what verification means.
The second foundation is Article 53(1)(c) of the Executive Regulation (Cabinet Decision No. 52 of 2017). It blocks input tax on goods and services bought for employees free of charge for their personal benefit, subject to specified exceptions. One of those exceptions covers goods and services provided under a contractual obligation or documented policy. Decision 17 now defines the cases and conditions in which that exception works. Costs the employer must bear by law are covered by a separate exception, which Decision 17 does not affect.
FTA Decision No. 13 of 2026: the supplier and supply due-diligence file
Decision 13 applies "for the purposes of applying the provisions of Article 54 (bis)" (Article 2). It works on two levels: the supplier (Article 3) and each individual supply (Article 4). It then sets out how often the checks are made and how they must be documented (Article 5), with a single low-value exception (Article 6).
Article 3: verifying the supplier
Identity (Article 3(1)). For a natural-person supplier, the recipient must obtain a valid proof of identity (Emirates ID or passport) and must meet the supplier, in person or virtually, before the supply is made. For a legal-person supplier, the recipient must verify incorporation through official databases or a copy of the certificate of incorporation, and confirm that the incorporation details are valid and match the entity's name, address, employees and other related information. It must also verify the identity of the director, agent or employee authorised to represent the supplier.
Address and place of business (Article 3(2)). The recipient must confirm that an actual place of business exists, either by appropriate electronic means or by a field visit, and that the premises are compatible with the nature of the supplier's activities. A general trading licence registered at a flexi-desk that supplies AED 20 million of steel a year is exactly the kind of mismatch this clause targets.
Risk indicators (Article 3(3)). The recipient must confirm that none of three red flags applies:
- the supplier has changed its address more than twice in the previous 12 months;
- the supplier has changed its key employees (its managers or the people the recipient deals with) more than twice in the previous 12 months;
- the supplier's transactions are disproportionate or unexpected in volume, value or nature compared with its size and trading history.
A red flag does not automatically disqualify the supplier. The recipient must keep a clear, justified explanation and give it to the FTA on request, and the explanation must not contradict the evidence or information the recipient holds.
Bank account and reputation (Article 3(4)). Where supplies from a supplier exceed AED 375,000 in the previous 12 months, or are expected to exceed that amount in the next 12 months, two further checks apply. First, the recipient must obtain a written confirmation from a UAE-licensed bank that the supplier holds an account, with no reservations or conditions attached. The letter does not need to be addressed to the recipient. Second, the recipient must review public reviews and media coverage from reliable sources and confirm they are consistent with the supplier's business and show no signs of suspected evasion.
The AED 375,000 figure is deliberate: it matches the mandatory VAT registration threshold. In effect, any supplier large enough to be required to register is also large enough to require a bank letter.
Article 4: verifying each supply
Commercial substance (Article 4(1)). The recipient must assess the overall conditions of the transaction and be satisfied that the supplier's involvement has genuine commercial reasons.
Payment (Article 4(2)). Payment terms must be commercially justifiable. Third-party payers or payees, and payments to a bank account outside the supplier's country of incorporation, require a reasonable commercial explanation that is consistent with what the recipient knows. Consideration must be paid electronically. Cash is allowed only for a documented commercial reason, within the thresholds in the tax legislation, and in a form that can be easily verified.
Circumstances of the supply (Article 4(3)). The recipient must check four things. Prices or margins must not be commercially unjustifiable or significantly out of line with the market without a clear reason. The supply must fall within the supplier's ordinary activity and licensed activities. The goods must be authentic, their origin verified, and the supplier's title or right to dispose of them confirmed. Where the supplier is an intermediary, there must be a clear commercial explanation for its role.
Article 5: frequency and documentation
Supplier verification under Article 3 is required at first dealing, and again for recurring suppliers that have not been verified in the previous 12 months. In practice, this means an annual supplier re-verification cycle. Supply verification under Article 4 applies to every Taxable Supply received. Each verification step must be documented, with supporting records kept so the FTA can check that the steps were carried out. The business must also keep a documented policy naming the persons responsible for carrying out, reviewing and supervising the procedures and setting out their powers. The policy must be kept at the location designated for record-keeping.
Article 6: the only exception
A recipient may skip the measures for supplies below AED 10,000 (excluding VAT). The exception falls away where total supplies from that supplier exceed AED 100,000 in the previous 12 months, or are expected to exceed it in the next 12. Because the test is based on supplier totals, splitting invoices does not help. Every regular vendor quickly moves into scope.
FTA Decision No. 17 of 2026: six cases, all conditions cumulative
Decision 17 applies where a Taxable Person buys goods or services for employees free of charge under a contractual obligation or documented policy (Article 1). Article 2 lists six cases. In each case, all of the listed conditions must be met.
| Case | Key conditions (all must be met) |
|---|---|
| 1. Transport | Only home-to-work, to client premises or for other duties directly related to the job; no personal benefit; employee cannot choose a cash allowance or other compensation instead |
| 2. Food and beverages | Employee lives in a remote, distant or isolated area; no food-preparation facilities at home or work and no nearby restaurants; provision is linked to the work or job-required residence period; no cash alternative |
| 3. Accommodation | No cash alternative; required by operations and not part of the employee's ordinary package; the work requires living near the workplace, site or client; for the employee only (no family or personal use unless the employee must live permanently near the workplace and it is their usual residence); commensurate with job needs, with no significant recreational or personal elements |
| 4. New-joiner accommodation | Temporary, for no more than 30 days; commensurate with job requirements and basic needs |
| 5. Mobile phones, airtime, data and home internet | Necessary for the job, including outside hours or remote working; work use only, with personal use incidental and insignificant; a documented internal usage policy with consequences for misuse; reasonable monitoring mechanisms, with records of unauthorised use |
| 6. Parking | Incurred solely for business and directly related to duties or business visits; documented reimbursement policy with an approval mechanism; receipts showing date, time, amount and tax |
Three themes run through the list. The cash-alternative test appears in the transport, food and accommodation cases: if the employee could have taken cash instead, the benefit is treated as remuneration and the input tax is blocked. The policy-and-evidence test (written policy, monitoring and receipts) appears in the mobile and parking cases and mirrors the documentation requirement in Decision 13. The remoteness test makes food and beverages recoverable only in genuinely isolated locations. City-office catering, staff lunches and meal cards do not qualify.
Worked example: Meridian Contracting LLC, October to December 2026
Meridian Contracting LLC is a Dubai-based contractor with a remote project site near Ruwais and annual revenue of AED 85 million. It files quarterly. For the quarter ending 31 December 2026, its finance team prepares an input tax claim in the usual way: every VAT-inclusive invoice in the ledger is claimed.
| Item | Net (AED) | VAT (AED) | Position under the new regime | Defensible VAT (AED) |
|---|---|---|---|---|
| Rebar from Falcon Steel Trading (first-time supplier, onboarded September) | 2,400,000 | 120,000 | No bank letter despite >AED 375,000; supplier moved address three times in 12 months with no explanation on file; paid to a third-party account. Art 54 (bis)(3) deemed knowledge if Falcon's chain is later linked to evasion | 0 at risk* |
| Tools from a local hardware store, 3 invoices of AED 9,000 | 27,000 | 1,350 | Each invoice is below AED 10,000, but 12-month spend with the store is AED 118,000, above AED 100,000, so the Art 6 exception is lost. Not verified | 0 at risk* |
| Staff bus, labour camp to Ruwais site | 180,000 | 9,000 | Case 1 met: home-to-site only, no cash option | 9,000 |
| Site camp catering at Ruwais | 240,000 | 12,000 | Case 2 met: remote location, no facilities or restaurants nearby, no cash option | 12,000 |
| Catered lunches, Dubai head office | 120,000 | 6,000 | Case 2 fails: not remote | 0 |
| Hotel for new engineers, 45-night stays | 36,000 | 1,800 | Case 4 fails: stays exceed 30 days | 0 |
| Mobile and data plans, 80 staff | 96,000 | 4,800 | Case 5 fails: no documented usage policy, no monitoring | 0 |
| Total | 3,099,000 | 154,950 | 21,000 |
*Recovery at risk only if the supply chain is later connected to Tax Evasion, but without a verification file Meridian has no defence under Article 54 (bis)(3).
Only AED 21,000 of the AED 154,950 claimed is safe on the evidence Meridian holds. The difference, AED 133,950, is either blocked by Decision 17 (AED 12,600) or depends on the integrity of suppliers Meridian never verified (AED 121,350). On a single quarter's claim, a disallowance of that size would also attract the penalty for an incorrect return under the Tax Procedures regime.
Now look ahead one quarter. From 1 January 2027, Meridian falls within the e-invoicing mandate because its revenue is at least AED 50 million. If Falcon is also in scope and still sends a PDF, Article 55(1)(c) withholds recovery even if Falcon passes every Decision 13 check, because Meridian must hold the Tax Invoice as an Electronic Invoice. For a business of this size, the gates build on one another: the diligence file protects the credit only if the invoice format is also correct.
Observations and gray areas
The January to September 2026 gap. Article 54 (bis), including the deeming rule in paragraph (3), has applied since 1 January 2026. Decision 13 only prescribes the verification standard from 1 October 2026. For input tax deducted in the first nine months of 2026, the law already penalises a failure to "verify the validity and integrity" of supplies, but there was no binding definition of what that required. The better view is that, for this period, the FTA should assess reasonableness against the circumstances and should not apply Decision 13's checklist retrospectively. Still, the FTA will audit 2026 returns under the five-year Tax Procedures limitation period, possibly after Decision 13 has become the benchmark in everyone's mind. Businesses should reconstruct, now, whatever evidence they held on their largest 2026 suppliers.
Is Decision 13 a safe harbour? Only partly. Full compliance with Decision 13 should rebut the deemed knowledge in Article 54 (bis)(3) and give strong support against "should have known" under paragraph (2). It does not protect against paragraph (1). If the FTA can show actual knowledge, the checklist is irrelevant. There is also a structural mismatch. VATP046 says the relevant chain extends to any Person involved, but Decision 13's measures look only at the direct supplier and the direct supply. It is strongly arguable that a recipient that has fully complied with Decision 13 has done everything the law requires of it for remote links in the chain, and that "should have known" cannot extend to fraud three steps upstream that no permitted check could have revealed. That argument will need to be made, and a well-documented file is what allows a business to make it.
"May reject" is not "must reject". Under paragraph (2), rejection is discretionary. Where the FTA relies on constructive knowledge, the taxpayer's verification file, even if imperfect, becomes the evidence the FTA's discretion should be exercised on. A partial file is much better than none. That is also why the documented policy required by Article 5(4) matters: it shows that the process was systematic, not reconstructed after the event.
The drafting of Article 3 is stricter than business practice. Requiring the recipient to meet an individual supplier "before making the supply" fits poorly with one-off purchases from sole traders. Requiring incorporation details to be "identical to the entity's name, address and employees" asks the recipient to check employee data it cannot normally access. The address-change and staff-change indicators also cover ordinary events such as a relocation followed by a registered-address update. We expect the FTA to apply these provisions sensibly, but the Arabic text prevails and the language is mandatory. Where a step cannot be completed, businesses should record why, just as Article 3(3)(b) already requires for risk indicators.
Decision 17 reads as exhaustive, and the cash-option test will catch many UAE packages. Article 2 lists the recoverable "cases", and nothing in the Decision suggests the list is illustrative. Input tax on free staff benefits outside the six cases, under a contract or policy, is therefore likely blocked unless the separate legal-obligation exception applies. The cash-alternative condition is the sharpest point. Many UAE employment packages let staff choose between company transport or housing and an allowance. Where that choice exists, even if the employee takes the in-kind benefit, the condition fails as drafted. Standard HR offer templates should be reviewed before 1 October.
The new-joiner accommodation cap is binary. Case 4 requires accommodation to be provided for "no longer than 30 days". Read literally, a 45-night stay fails the condition in full, rather than qualifying for the first 30 nights. There is a reasonable argument for apportionment, but until the FTA gives guidance, businesses should book the first 30 nights separately.
Monitoring employee devices has a data-protection side. Case 5 requires "reasonable monitoring mechanisms" over phone and data use. Any monitoring must be designed to comply with the UAE's personal data protection rules and employment contracts. The VAT condition does not override those rules, and a monitoring policy that is too intrusive creates a different kind of risk.
VATP046 is silent on the transitional refund window, and the deadline is close. VATP046's example of the five-year rule uses a January 2026 credit that lapses in January 2031. What it does not mention is the transitional provision reported alongside Federal Decree-Law No. 16 of 2025. Under that provision, businesses whose five-year refund period had already expired, or would expire within one year of 1 January 2026, may still apply for a refund within one year of the amendment taking effect. In practice, this covers credit balances from the 2018 to 2020 tax periods (and those from 2021 as they age), and the window closes at the end of 2026. Businesses carrying old credit balances should act in the fourth quarter of 2026. After that, the five-year rule applies strictly and without exception.
The Fixed Establishment clarification works in both directions. The amended "Non-Resident" definition treats a foreign business as resident where its employees work regularly from a client's UAE premises using their own devices. That affects the reverse charge: a UAE customer that self-accounts for VAT on services from such a supplier may be accounting on the wrong basis if the supplier should have been registered and charging VAT itself. The supplier checks in Decision 13 on identity and place of business are a natural point at which to identify these cases.
What businesses should do now
Adopt, before 1 October 2026, the documented verification policy required by Article 5(4) of Decision 13, naming the owner, reviewer and supervisor of the process; segment your vendor master by 12-month spend into below AED 10,000 per invoice with an aggregate below AED 100,000, AED 100,000 to AED 375,000, and above AED 375,000, because each band carries a different set of checks; collect identity, incorporation, place-of-business and, for the top band, bank-confirmation evidence for every active supplier, and diary annual re-verification; build per-invoice checks on payment route, pricing, licensed activity and title into the accounts-payable workflow so that no input tax is posted until the supply has been verified; review the business's largest 2026 suppliers and assemble whatever evidence already exists to cover the January to September gap; map every free-of-charge staff benefit against the six cases in Decision 17, remove cash-alternative options where you intend to recover input tax, split new-joiner hotel bookings at 30 nights, and put mobile-use and parking-reimbursement policies in place with monitoring and receipt retention; reverse input tax on staff costs that do not qualify from the October 2026 return period onward; confirm your Accredited Service Provider appointment (the deadline for businesses with revenue of AED 50 million or more is 30 October 2026) and make sure your accounts-payable process can reject PDF invoices from suppliers that are within the mandate; and reconcile any credit balance dating from 2018 to 2021, filing refund applications before the transitional window closes at the end of 2026.
How TSAC can help
TSAC's VAT team designs and documents supplier verification policies that meet Decision 13, sets up tiered vendor due-diligence files, and reviews accounts-payable controls so that input tax is only posted once the evidence exists. We carry out Decision 17 reviews of employee benefit structures and offer letters, reconcile and file refund applications for historic credit balances before the transitional window closes, and help businesses get ready for e-invoicing under Articles 55, 65 and 70. From the October 2026 return onward, the FTA's first question on a large input tax claim will not be "where is the invoice?" but "where is your verification file?", so the time to build that file is before you file the return.
This publication is for general information only and does not constitute tax advice. Based on the unofficial English translations of FTA Decision No. 13 of 2026 and FTA Decision No. 17 of 2026, and on VAT Public Clarification VATP046; the Arabic text prevails. Please contact TSAC for advice specific to your circumstances.