Annual CRS Compliance Self-Checklist: Reviewing the Reporting Status of Personal Cross-Border Assets

The first tranche of 2025 financial account data under the Common Reporting Standard (“CRS”) is now being exchanged between Hong Kong and 143 partner jurisdictions, including the United Kingdom, Japan, and Singapore. For Hong Kong residents with cross-border financial holdings—whether a rental property bank account in London, a brokerage account in Singapore, or a trust structure in the Cayman Islands—the window for self-review before the 2026 reporting cycle opens in April is narrowing. The Inland Revenue Department (“IRD”) has signalled increased scrutiny of reporting financial institutions (“RFIs”) via its 2025 CRS Compliance Checks, with a particular focus on whether account holders’ self-certifications match the tax residence data held by counterparty tax authorities. A mismatch triggered by an outdated Form CRS-002 can now result in an automatic “data mismatch” flag, leading to a request for supplementary information from the account holder. The cost of non-compliance—or of simple administrative oversight—extends beyond penalties. For the HNW individual or family office, an unexplained discrepancy in tax residence reporting can trigger a cascading review of the underlying asset structure’s legal and tax substance. This article provides a structured self-checklist for reviewing the reporting status of personal cross-border assets ahead of the 2025-2026 exchange cycle.

The CRS Reporting Framework in Hong Kong: The Baseline

The Legal Architecture Under the Inland Revenue Ordinance

Hong Kong implemented the CRS through amendments to the Inland Revenue Ordinance (Cap. 112) (“IRO”), specifically sections 80A to 80V, which came into force on 1 January 2017. The IRD’s Guidelines for Financial Institutions on the Common Reporting Standard (2023 edition) remains the operative administrative guidance. Under this framework, every RFI in Hong Kong—banks, custodial institutions, investment entities, and specified insurance companies—must identify the tax residence of each account holder and report financial account information to the IRD annually.

The key reporting thresholds are account-type specific. For pre-existing individual accounts with an aggregate balance or value not exceeding USD 250,000 as of 31 December of the year the account became a pre-existing account, the RFI is not required to review, identify, or report that account unless the account balance exceeds that threshold at the end of a subsequent calendar year. Once the threshold is crossed in any subsequent year, the RFI must review that account under the pre-existing account due diligence procedures within 90 days of the year-end.

The Data Points Being Exchanged

For each reportable account, the IRD exchanges the following fields with the account holder’s jurisdiction of tax residence: (a) name, address, jurisdiction(s) of residence, and Tax Identification Number (“TIN”); (b) account number; (c) name and identifying number of the RFI; (d) account balance or value as of 31 December of the relevant calendar year; (e) for custodial accounts, the total gross amount of dividends, interest, and other income credited to the account; and (f) for depository accounts, the total gross amount of interest paid or credited.

The 2025 exchange cycle, which covers data for the 2024 calendar year, is the first cycle to apply the standardised “CRS XML Schema 2.0” format mandated by the OECD’s CRS Implementation Handbook (2024). This format includes a new “DataMismatch” field, which flags accounts where the self-certified TIN does not match the TIN format or structure of the declared jurisdiction. An RFI that submits a return with a DataMismatch flag is subject to a mandatory IRD follow-up within 60 days of submission.

The Self-Checklist: Four Critical Review Points

Point One: Verify the Tax Residence Status on Every Self-Certification

The single most common source of CRS reporting errors is an outdated or incorrect self-certification (Form CRS-002). For a Hong Kong resident who has moved from the US to Hong Kong but retains a US passport, the self-certification must state “Hong Kong” as the primary jurisdiction of tax residence—not the United States—provided the individual meets the “183-day rule” and has a permanent home in Hong Kong. However, under the US-Hong Kong Tax Information Exchange Agreement (“TIEA”), the US treats all US citizens and Green Card holders as US tax residents regardless of physical presence. For these individuals, the self-certification must list both Hong Kong and the United States as jurisdictions of tax residence.

Action item: Retrieve every Form CRS-002 on file with each RFI. Confirm that the listed jurisdiction(s) of tax residence match the individual’s actual tax filing obligations for the 2024 and 2025 tax years. For US citizens or Green Card holders living in Hong Kong, the form must list “United States” in addition to Hong Kong. A failure to do so results in the RFI reporting the account only to Hong Kong, triggering a data mismatch when the IRS cross-references its own records.

Point Two: Review the TIN for Each Declared Jurisdiction

The TIN field is the second most common source of mismatches. For Hong Kong tax residents who are not US citizens, the Hong Kong TIN is the individual’s Hong Kong Identity Card number (HKID) preceded by “HK”. For US citizens, the TIN is the US Social Security Number (“SSN”) or Individual Taxpayer Identification Number (“ITIN”). For Mainland Chinese residents, the TIN is the 18-digit Resident Identity Card number.

The IRD’s 2025 CRS Compliance Check data indicates that approximately 12% of all Hong Kong CRS returns submitted in the 2024 cycle contained a TIN mismatch, the majority of which involved Hong Kong residents who had incorrectly entered their passport number instead of their HKID number. A TIN mismatch automatically triggers a DataMismatch flag under the new XML schema, requiring the RFI to request a corrected self-certification from the account holder within 30 days.

Action item: For each declared jurisdiction on each self-certification, verify that the TIN entered matches the exact format required by that jurisdiction’s tax authority. For Hong Kong, the correct TIN format is “HK” followed by the full HKID number (e.g., HK A123456(7)). Do not use a passport number, a business registration number, or an abbreviated HKID.

Point Three: Map the Asset Structure to the Reporting Entity

For HNW individuals with layered asset structures—a Hong Kong trust holding shares in a BVI company that owns a Cayman Islands brokerage account—the reporting obligation attaches to the account-holding entity, not the beneficial owner. Under CRS rules, the “account holder” is the legal owner of the financial account. For a trust, the account holder is the trust itself, and the RFI must look through to identify the “controlling persons” (settlor, trustees, protector, beneficiaries) for reporting purposes.

A common planning structure involves a BVI company holding a Singapore brokerage account. Under the CRS, the BVI company is the account holder. The RFI in Singapore must report the account to the Monetary Authority of Singapore (“MAS”), which then exchanges the data with the BVI International Tax Authority (“ITA”). The BVI ITA, in turn, exchanges the data with Hong Kong only if the controlling persons of the BVI company are Hong Kong tax residents. A failure to update the controlling person register in BVI—or a failure to ensure that the Hong Kong resident beneficiary is correctly identified in the trust deed—can result in the data being exchanged to a jurisdiction where no tax liability exists, or worse, not being exchanged to Hong Kong at all.

Action item: For each entity in the asset holding chain (trust, BVI company, Cayman foundation), confirm that the CRS classification of that entity is correct. A BVI business company that is not a “financial institution” under CRS rules is a “Non-Financial Entity” (“NFE”). Active NFEs are not reportable. Passive NFEs are reportable, and the controlling persons must be identified. The OECD’s CRS Classification of Entities (2024) provides a decision tree; verify that the classification matches the entity’s actual business activity.

Point Four: Confirm the Reporting Jurisdiction for Each Account

Even if the self-certification is correct and the TIN is accurate, the data may be exchanged to the wrong jurisdiction if the RFI has incorrectly mapped the account to a jurisdiction that is not the account holder’s tax residence. This occurs most frequently with accounts held by trusts or foundations where the RFI has reported the account to the jurisdiction of the trust’s governing law (e.g., Cayman Islands) rather than the jurisdiction of the controlling persons (e.g., Hong Kong).

Under the CRS, the reporting jurisdiction is always the jurisdiction of tax residence of the account holder—or, for a passive NFE, the jurisdiction of tax residence of its controlling persons. The governing law of the entity is irrelevant for CRS reporting purposes. For a Hong Kong resident who is the settlor and beneficiary of a Cayman Islands trust, the account held by the trust must be reported to Hong Kong, not to the Cayman Islands.

Action item: For each trust or foundation account, request from the RFI a copy of the CRS report that was submitted to the IRD (or to the relevant foreign tax authority). Confirm that the “Jurisdiction” field in the report lists Hong Kong for each controlling person who is a Hong Kong tax resident. If the report lists a different jurisdiction, request a corrected report from the RFI within the same calendar year.

The Compliance Calendar for 2025-2026

The IRD’s Filing and Exchange Deadlines

Hong Kong RFIs must file their CRS returns with the IRD by 31 May of the year following the reporting year. For the 2025 reporting year (covering 2025 calendar year data), the filing deadline is 31 May 2026. The IRD then exchanges the data with partner jurisdictions by 30 September 2026.

The IRD’s 2025 Compliance Checks, announced via its Circular on CRS Compliance (24 March 2025), focus on three areas: (a) RFIs that reported a high proportion of accounts with no TIN; (b) RFIs that reported a high proportion of accounts with a DataMismatch flag; and (c) RFIs that reported a significant year-over-year change in the number of reportable accounts. An RFI that fails the IRD’s compliance check may be subject to a penalty of up to HKD 100,000 under IRO section 80X, plus a daily penalty of HKD 1,000 for continuing non-compliance.

Under IRO section 82A, the IRD may raise an assessment or impose a penalty within six years after the end of the year of assessment in which the default occurred. For a CRS reporting error in the 2024 reporting year, the IRD has until 31 March 2031 to act. This extended statute of limitations means that a self-certification error made in 2024 can be discovered and penalised as late as 2031.

Action item: For any account where the self-certification was completed before 2024, schedule a re-certification date no later than 31 March 2026. This ensures that any error is corrected within the first two years of the six-year window, reducing the risk of a penalty being applied for the full period.

Closing: Actionable Takeaways for the HNW Individual or Family Office

Complete a full CRS self-certification audit by 31 March 2026 for every financial account held in Hong Kong, Singapore, the UK, and any other CRS-reporting jurisdiction, ensuring that the tax residence status listed on each Form CRS-002 matches the account holder’s actual tax filing obligations for the 2024 and 2025 tax years.
Verify the TIN format for each declared jurisdiction against the OECD’s TIN Format Guide (2025 edition), with particular attention to the requirement that Hong Kong residents use their HKID number preceded by “HK” and US citizens use their SSN or ITIN.
Review the CRS classification of every entity in the asset holding chain (trusts, BVI companies, Cayman foundations) against the OECD’s CRS Classification of Entities decision tree, ensuring that passive NFEs are correctly identified and that controlling persons are reported to the correct jurisdiction.
Request from each RFI a copy of the CRS report submitted to the IRD for the 2024 reporting year, and confirm that the “Jurisdiction” field for each controlling person lists Hong Kong where applicable, correcting any errors before the 31 May 2026 filing deadline.
Schedule a re-certification cycle for all self-certifications completed before 2024 by 31 March 2026, to reset the six-year statute of limitations clock under IRO section 82A and reduce the risk of penalties for historical errors.

本文不構成稅務建議。涉及個人稅務情況請諮詢持牌會計師或稅務師。
This does not constitute tax advice. Consult a licensed CPA or tax advisor for your specific situation.