Know Your Supplier: The VAT Rule That Can Kill Your Refund

A few weeks ago, the finance manager of a Dubai trading company sent us a message no finance manager ever wants to receive. The FTA was questioning their VAT refund — not because of an error in their own books, but because of a supplier. A supplier they had paid on time, every single month, for two years. The tax invoices were proper. The VAT was charged at the right rate. And suddenly, none of that was enough.

That is the new reality of VAT in the UAE. Since 1 October 2026, a valid tax invoice is no longer sufficient on its own to support your input VAT claim. Under the FTA's Know Your Supplier framework, you are expected to have verified the supplier behind every invoice — and if that supplier turns out to be linked to tax evasion, the FTA can reject your input VAT recovery even though you did nothing wrong yourself. It is the single biggest shift in UAE VAT compliance since the tax was introduced, and most businesses we speak to still haven't grasped what it demands of them.

Here's the Know Your Supplier UAE rule in plain language: where it came from, the three thresholds that decide how deep your checks must go, the AED 100,000 trap quietly catching businesses that think they're exempt — and a practical checklist to get compliant this week.

What changed on 1 October 2026

The framework comes from FTA Decision No. 13 of 2026, procedural guidance issued under Article 54 bis of the UAE VAT Law (Federal Decree-Law No. 8 of 2017). The timeline tells you how seriously the FTA takes it: approved by the FTA Board on 23 June 2026, issued on 22 July, published on the FTA's website (tax.gov.ae) on 20 August — and live from 1 October 2026.

The core shift is simple to state and demanding to implement. Previously, your input VAT claim rested on the tax invoice: right TRN, right rate, right amount. Now the FTA expects due diligence on the supplier behind the invoice too — who they are, whether the business is genuine, and whether each individual supply makes commercial sense. A perfect invoice from a supplier you never checked is now a vulnerability, not a defence.

Why the FTA is doing this now

Tax authorities around the world have spent years tightening supplier due-diligence rules, and the UAE is now moving in the same direction. The logic is straightforward: VAT fraud rarely lives inside a single business. It lives in supply chains — chains of invoices where tax is charged, claimed, and never paid to the authority. By making the buyer responsible for knowing the supplier, the FTA turns every VAT-registered business into a checkpoint. If your supplier is part of a fraudulent chain and you never asked a single question about them, the FTA's position is that the chain ran through you with your eyes closed.

That's the philosophical shift worth absorbing before we get to the mechanics. This isn't paperwork for paperwork's sake. The FTA is deputising you.

What the Know Your Supplier rule requires in the UAE

The Decision demands checks on two levels: the supplier, and each individual supply. Here's what each one means in practice.

Checking the supplier

You need to establish that the business you're paying is real, legitimate, and operating as it claims. That means verifying identity documents and the authorised representative you're actually dealing with — not just a name on an invoice. It means confirming a genuine business address that is consistent with the licensed activity. A trading company operating from an address that has never seen its staff is exactly the kind of mismatch the FTA expects you to notice. And it means satisfying yourself that the supplier genuinely operates the business the invoice describes.

Checking each supply

This is the part most businesses miss. It's not enough that the supplier is legitimate in general — each transaction has to make commercial sense on its own terms. The Decision points at four things: a genuine commercial purpose for the purchase, reasonable pricing and margins (is this wildly off-market, in either direction?), goods or services that fall within the supplier's licensed activity (your cleaning company suddenly invoicing for "consulting services" should stop you cold), and verifiable origin and ownership of what's being supplied.

And this isn't a one-time exercise. The checks must be refreshed at least every 12 months — sooner if any risk indicator appears. A supplier who was clean last year isn't automatically clean this year.

The three thresholds that decide how deep you go

The Decision scales the burden to the size of the relationship. Three numbers matter:

• Under AED 10,000 per supply (excluding VAT): generally exempt from the detailed checks. Small, one-off purchases don't each need a dossier.
• AED 100,000 rolling 12-month aggregate per supplier: once your spend with one supplier crosses this line, the AED 10,000 exemption falls away — and full checks apply to all supplies from that supplier, including the small ones.
• AED 375,000 rolling 12-month aggregate per supplier: enhanced checks kick in. That includes written confirmation from a UAE-licensed bank that the supplier actually holds an account with them, plus a review of the supplier's public reputation — reviews, media coverage — for any indication of tax-evasion links.

The AED 100,000 trap most businesses will walk into

This is the part that should make every finance manager pull up a spreadsheet tonight. The AED 10,000 exemption sounds generous until you do the arithmetic the way the FTA does it. The exemption is per supply — but the AED 100,000 test is aggregate, rolling, per supplier, over twelve months.

Your office cleaning contract at AED 8,500 a month? That's AED 102,000 a year — over the line. The IT support retainer, the logistics company, the packaging supplier, the maintenance firm: the unglamorous monthly invoices nobody scrutinises are exactly the ones that silently cross the threshold. One advisory analysis put it bluntly — the small-value exemption offers less protection than it first appears, because most recurring suppliers cross AED 100,000 within a year. That's roughly AED 8,300 a month. Once they do, every invoice from that supplier falls under the full checking regime — including the small ones you assumed were exempt.

Think about what that means for a typical SME with forty or fifty regular suppliers. Almost every standing relationship you have probably crosses the line. The "exemption" that felt like a safe harbour turns out to cover almost nobody you actually do business with.

"Should have been aware" — the four words that should worry you

Here is where the Decision shows its teeth. If a supply chain is linked to tax evasion, the FTA can reject your input VAT recovery where you knew — or "should have been aware" — of the link. And the FTA has made the standard brutally clear: failing to perform the required checks can itself be treated as evidence that you should have been aware.

Read that again, because it inverts the defence most businesses would instinctively reach for. "We didn't know" is not a defence if you never looked. The absence of checks isn't neutral — in the FTA's eyes, it's the thing that proves you should have known.

In serious cases, the denial of input VAT recovery can be permanent. And where a business actually knew of the evasion link, the denial isn't discretionary — it's mandatory. So the audit question is no longer just "is the invoice valid?" It's "what did you do to verify the person who issued it?" If your answer is "nothing, the invoice looked fine," you have already lost the argument.

The red flags the FTA expects you to spot

The Decision doesn't just ask you to tick boxes — it expects commercial judgement. Two specific risk indicators are called out, and both should feel uncomfortably familiar:

• A supplier whose address or key personnel change more than twice in 12 months. Businesses don't normally reinvent themselves three times a year. When they do, the FTA wants a documented commercial explanation sitting in your file — not a shrug discovered during an audit.
• Transactions that look disproportionate to the supplier's size or history. The two-person trading outfit suddenly invoicing seven-figure monthly volumes. The brand-new company winning your biggest contract. If the scale doesn't match the supplier, you need to be able to explain why — in writing, at the time.

Cash payments sit in the same zone. They're allowed, but discouraged. Pay a supplier in cash and you'd better have a documented commercial reason and a verifiable trail. The FTA's clear preference is electronic payment with clean references — bank transfers that leave a story an auditor can follow.

What a compliant KYS file actually looks like

So what does "doing this properly" look like in practice? Three components, none of them exotic:

1. A written KYS policy. Not a vibe — a document. One that names who performs the checks, who reviews them, and who supervises the process. When the FTA asks how you comply with Decision No. 13, this is the first thing they will want to see. If it doesn't exist, everything else you claim becomes very hard to evidence.

2. A supplier file for everyone over the thresholds. Verification evidence gathered before or alongside the commercial relationship — TRN verification, trade licence copies, address confirmation, bank confirmations for the big relationships — refreshed at least annually. This is the same discipline as monthly bookkeeping: the businesses that already reconcile their input VAT every month will find KYS far less painful than the ones scrambling at year-end.

3. Contemporaneous documentation. Evidence created at the time, not reconstructed for the audit. Dated screenshots of TRN verifications, notes on pricing sense-checks, records of the bank confirmations — filed and retrievable. An auditor can tell the difference between a file built over twelve months and a file built over a weekend. So can the FTA.

One advisory estimate put the workload in stark terms: checking 100 suppliers at two hours each is 25 working days of effort. That's not a side-of-desk job for whoever handles invoices between other tasks. It's a process that needs an owner, a calendar, and a budget. Businesses that treat it as admin will discover — expensively — that the FTA treats it as governance.

If you're reviewing your broader position at the same time, our 2026 VAT compliance guide and our walkthrough of FTA compliance expectations cover how KYS fits alongside your filing and record-keeping obligations — and our VAT refund guide explains the refund process these checks now gatekeep.

Your KYS action list for this week

Enough theory. Here's the sequence we'd run with a client starting from zero:

• Rank your suppliers by rolling 12-month spend. Flag everyone at or approaching AED 100,000 — and everyone already past AED 375,000 for enhanced checks. This single spreadsheet tells you the true size of your obligation.
• Verify the basics on your top 20 suppliers. TRN validity, trade licence, and confirmation that the business address matches the licensed activity. Two hours per supplier is the realistic budget — diarise it.
• Write the one-page KYS policy. Who checks, who reviews, how often, where the evidence lives. One page, signed, dated. It is the cheapest insurance in this entire framework.
• Move large supplier payments to bank transfer with clear references — and document a commercial reason for anything still paid in cash.
• Diarise the 12-month refresh now, before the first cycle sneaks up on you. The Decision requires it; your future self will thank you.

The bottom line

The invoice in your drawer is no longer the end of the story — it's the beginning of the paperwork. The FTA has moved the compliance burden one step up the supply chain, and businesses that treat supplier verification as someone else's problem are carrying an unpriced risk inside every VAT return they file.

The good news: this is a solvable problem. A ranked supplier list, a written policy, and a documentation habit turn Know Your Supplier from a threat into a routine. Start this week — because the FTA started on 1 October.

Not sure your supplier files would survive FTA scrutiny? Our free VAT compliance health check reviews your position against Decision No. 13 of 2026 and maps exactly what to fix — before the FTA does it for you. Book it on our website.