CRS Due Diligence Reporting Process Explained: A Practical KYC Guide for Financial Institutions
Why the Due Diligence Stage Decides the Reporting Outcome
For financial institutions, the Common Reporting Standard is not primarily a filing exercise. The filing is the visible end of a chain that begins with customer due diligence. If the due diligence stage misclassifies an account holder, omits a controlling person, or accepts an incomplete self-certification, the later return to the tax authority carries that defect forward — and correcting a filed return is more disruptive than fixing the record beforehand.
The practical consequence is that CRS work should be organised around evidence: who the account holder is, where that person or entity is tax resident, who ultimately controls a passive entity, and whether the account is reportable. Each of those questions has its own documentation standard.
Step One: Obtaining and Validating the Tax Residency Self-Certification
What the form is actually for
The self-certification is the account holder's own statement of tax residency. It is the starting document for the financial institution's determination, not a substitute for one. Where the form is incomplete — for example, a missing jurisdiction, an unsigned declaration, or a claim of residence that sits awkwardly against other information held on file — the record is not yet in a state that supports a reportable-account determination.
Why inconsistent residency claims need resolving, not filing over
A recurring difficulty for HNW and cross-border account holders is dual or shifting residency. Someone who moves between jurisdictions, holds property in more than one country, or spends parts of the year in different places may genuinely have more than one residence test pointing in different directions. The practical guidance is to document the basis of the claimed residency, retain the supporting facts, and resolve discrepancies before the account is treated as reportable or non-reportable. Filing over an unresolved inconsistency transfers the problem into the reporting cycle.
Step Two: Entity Accounts, Controlling Persons, and Passive NFE Review
Where the account holder is an entity rather than an individual, the due diligence question splits in two: what kind of entity is it, and who stands behind it.
- The entity's own tax residency needs to be established on the same self-certification logic as an individual account.
- Where the entity is a passive non-financial entity (NFE), the financial institution looks through to the controlling persons and treats their tax residency as relevant to the account.
- A controlling person is generally identified by ownership or control thresholds set in the applicable rules, not by who signs instructions.
The look-through step is where nominee arrangements, layered holding structures, and family trusts most often create documentation gaps. The practical fix is to collect controlling-person self-certifications at onboarding rather than to reconstruct them at reporting time.
Step Three: Classifying Accounts as Reportable or Non-Reportable
Classification follows from the previous two steps. An account is assessed against the residency information on file, the entity's status, and — for passive NFEs — the residency of the controlling persons. Non-resident accounts sit in a different position from accounts whose holders are resident in the reporting jurisdiction, and the treatment of each must be recorded so that the decision can be reviewed later.
Institutions benefit from a written classification note per account that records which rule was applied and which document supported it. That note is what makes a later correction defensible.
Where Correction Work Usually Begins
When a return has already been filed and a defect is found, the correction process typically reopens the due diligence file rather than only the return. That means re-verifying the self-certification, re-testing entity status and controlling persons, and re-determining reportability before amending the filing. Treating correction as a documentation exercise — not merely a data-entry fix — is what prevents the same defect recurring in the next cycle.
Even where the financial institution's own procedures are sound, cross-border account holders should expect requests for refreshed self-certifications and supporting information, because the residency picture can change between reporting periods.
FAQ
What is the first document a financial institution needs for CRS due diligence?
The first document is the account holder's tax residency self-certification. It records the account holder's own statement of tax residency, which the institution then validates against other information it holds before determining whether the account is reportable.
How is a passive NFE handled differently from other entity accounts?
For a passive non-financial entity, the institution looks through the entity to its controlling persons and treats the tax residency of those controlling persons as relevant to the account. For entities that are not passive NFEs, that look-through step does not apply in the same way.
Can a self-certification be accepted if the residency claim is unclear?
An incomplete or inconsistent self-certification should be resolved before the account is classified. Filing over an unresolved residency inconsistency carries the defect into the reporting cycle and makes later correction more disruptive.
What does correcting a CRS filing usually involve?
Correction generally reopens the due diligence file: the self-certification is re-verified, entity status and controlling persons are re-tested, and reportability is re-determined before the filing is amended. It is a documentation exercise rather than a data-entry fix.
Do account holders need to provide a new self-certification over time?
Account holders should expect periodic requests for refreshed self-certifications and supporting information, because tax residency can change between reporting periods and the institution's record needs to reflect the position for the period being reported.