CRS, FATCA & AEOI: a founder's plain-English guide

Three acronyms decide how every cross-border bank account you ever open reports your information to tax authorities. They sound technical, and they are, but the underlying concept is simple: banks automatically share information about non-resident account holders with the tax authorities of the countries where those account holders are tax-resident.

If you're a founder operating across borders, understanding these three frameworks is not optional. The banks will ask. Your structure will be reported. Knowing this in advance — and structuring your disclosure proactively — is the difference between a smooth account opening and one that gets stuck in compliance review for months.

— 01CRS: Common Reporting Standard

What it is: An OECD-developed framework for automatic exchange of financial account information between participating jurisdictions. As of 2026, more than 110 countries participate — including every major banking jurisdiction in Asia, 欧洲, and most of the 美洲.

What banks ask you to do: Complete a CRS Self-Certification form declaring (a) your country of tax residency, (b) your taxpayer identification number (TIN) in that country, and (c) for entities, identify the "controlling persons" — typically beneficial owners holding 25% or more, plus those exercising effective control.

What gets reported: Once a year, the bank reports your account balance, gross interest, gross dividends, and gross sale proceeds to its local tax authority, which then exchanges this information with the tax authority of your declared country of residence.

What banks actually look for: Consistency between your CRS declaration and the rest of your application. If you declare tax residency in Country A but your operating address is in Country B and your beneficial owner lives in Country C, the bank's compliance system flags this for review. Not because it's wrong — but because they need to understand it.

— 02FATCA: Foreign Account Tax Compliance Act

What it is: A US law that requires non-US financial institutions to identify and report account holders who are "US persons" — US citizens, US tax residents, US-controlled entities — to the US Internal Revenue Service.

What banks ask you to do: Complete a Form W-8BEN-E (for entities) or W-8BEN (for individuals), declaring your status as a non-US person. If you are a US person, you complete Form W-9 instead.

Why it matters even if you're not American: If your entity has any US-person beneficial owner above the disclosure threshold (typically 10% direct or indirect ownership), or if the entity itself has US tax characteristics, FATCA applies. Most banks won't open an account for a structure they can't classify cleanly under FATCA, even if every owner is non-US.

— 03AEOI: Automatic Exchange of Information

What it is: The umbrella term covering both CRS and FATCA — plus various bilateral and multilateral information-sharing agreements between specific jurisdictions. "AEOI" appears on bank forms when they want a single declaration that covers all reporting frameworks they participate in.

What banks ask you to do: Usually a single combined form that pulls together CRS Self-Cert + FATCA W-8 information. Some jurisdictions have their own AEOI schedule (e.g., UK's HMRC, 瑞士's Federal Tax Administration, 新加坡's IRAS).

How the three frameworks interact: Think of it as nested: AEOI is the umbrella, CRS handles non-US reporting, FATCA handles US-person reporting. A complete disclosure satisfies all three.

— 04What banks actually look for in your disclosure

From the inside of a KYC review, three things matter:

1. Internal consistency. Your CRS declaration, your FATCA form, your beneficial ownership disclosure, and your address details all need to tell the same story. Inconsistencies are the single biggest red flag.
2. Entity classification accuracy. If you're a holding company, are you a Passive NFFE or an Active NFFE? If you're a trust, are you reportable under CRS? Getting this wrong doesn't just delay approval — it triggers ongoing reporting errors that can take years to unwind.
3. UBO chain completeness. If your entity is owned by another entity, the bank needs to see all the way through to the natural-person beneficial owners. A two-line answer doesn't suffice for a three-layer structure.

— 05Common founder mistakes

1. Declaring tax residency where you have a passport but don't actually live

Tax residency is determined by the tax laws of each jurisdiction — usually based on physical presence, permanent home, and center of vital interests. Your nationality is rarely the test. Banks check this against your actual living situation, and inconsistencies trigger compliance review.

2. Treating CRS Self-Cert as a one-time form

Your CRS information must be updated whenever your tax residency changes. If you moved from 香港 to Dubai last year and your bank still has you down as HK-resident, you're technically out of compliance — and banks now do periodic refresh reviews to catch this.

3. Hiding US-person status

If any beneficial owner is a US citizen or green card holder, declare it. Banks have sophisticated tools for detecting US persons through indirect signals (US phone number, US address history, US-issued passport). Detected non-disclosure is account closure territory.

4. Wrong NFFE classification

This is the most common mistake we audit. Passive NFFE vs Active NFFE matters because the reporting obligations are different. If your entity earns more than 50% of its gross income from passive sources (interest, dividends, royalties, rental), it's a Passive NFFE — and controlling persons must be reported. Misclassification triggers reporting errors and renewal friction.

If your structure involves multiple jurisdictions, holding entities, trusts, or any US-person element, send us a message. The five-minute compliance check often catches issues that would otherwise show up six months later at renewal.