November 20, 2025 — The Common Reporting Standard, the multilateral framework for automatic exchange of financial account information that the OECD developed in 2014 and that began operational reporting in 2017, has now produced eight complete reporting cycles. The number of participating jurisdictions has grown from approximately fifty in the first cycle to more than one hundred and twenty in the most recent. The volume of financial account information exchanged annually now exceeds one hundred million records. The system that began as a successor to the United States' Foreign Account Tax Compliance Act has matured into the principal infrastructure for cross-border banking transparency.

The mechanics of CRS are reasonably well-documented at the level of model rules and bilateral arrangements, but the operational reality of how the data is collected, exchanged, processed, and used is less widely understood. This article describes the CRS information loop as it operates in 2025, the audit programmes that the data has enabled, the gaps that remain, and the implications for individuals and entities operating across borders.

The CRS architecture: from FATCA to multilateral standard

The Common Reporting Standard was developed in response to the United States' Foreign Account Tax Compliance Act of 2010, which required foreign financial institutions to report on US account holders to the Internal Revenue Service or face withholding penalties. FATCA produced bilateral information flows between the US and other jurisdictions but created administrative complexity for foreign financial institutions that had to comply with US-specific reporting standards.

The OECD's response, developed through 2013 and 2014, was the Common Reporting Standard: a multilateral framework that would produce automatic information exchange between all participating jurisdictions on a reciprocal basis, using standardised reporting fields and exchange protocols. The CRS was endorsed by the G20 in 2014 and entered operational reporting in 2017 with approximately fifty early-adopting jurisdictions. Subsequent waves of accession have expanded the framework to its current scope.

The architecture rests on three components. First, the model competent authority agreement, which provides the legal framework for bilateral exchange between participating jurisdictions. Second, the Common Reporting Standard itself, which defines the reporting fields and the procedures for financial institutions. Third, the Multilateral Convention on Mutual Administrative Assistance in Tax Matters, which provides the underlying multilateral basis for information exchange.

Each participating jurisdiction implements the CRS through domestic legislation that imposes reporting obligations on its financial institutions. The financial institutions report annually to their domestic tax authority, which then exchanges the data with the tax authorities of the jurisdictions where the account holders are resident. The exchange occurs by September 30 of each year for the prior year's data.

What gets reported and when

The CRS reportable information falls into three categories. The first is account holder identification: full legal name, address, jurisdiction of tax residence, tax identification number, and date of birth for natural persons. The second is account information: the account number, the financial institution's name, and the account type. The third is financial information: account balance at year-end, gross interest paid during the year, gross dividends paid during the year, gross other income paid during the year, and gross proceeds from the sale or redemption of financial assets during the year.

The reporting applies to financial accounts held by reportable persons — individuals or entities resident in a jurisdiction other than the financial institution's jurisdiction of operation. The reporting also extends to financial accounts held by passive non-financial entities where the controlling persons are residents of reportable jurisdictions. The lookthrough to controlling persons of passive entities was a significant element of the CRS design, intended to prevent the use of opaque entity structures to defeat the framework's purpose.

The reporting threshold is generally low. Pre-existing entity accounts with balances below 250,000 US dollars equivalent may be exempted from reporting at the financial institution's election; new accounts are generally reported regardless of balance. The intention was to capture the full range of financial activity rather than only the largest accounts.

The reporting is annual, with the calendar year being the standard reporting period for most jurisdictions. The reporting deadline for financial institutions is typically May or June following the reporting year, and the inter-jurisdictional exchange occurs by September 30. The receipt-state authority then has the data available for use in the assessment of the relevant tax year.

The participating jurisdictions: who is in

The participating jurisdictions of the CRS now include essentially every major OECD country, every European Union Member State (which is also bound by the Directive on Administrative Cooperation), substantially all of the offshore financial centres of historical significance, and a growing number of emerging-market jurisdictions.

The notable absences and partial participations are worth identifying. The United States is not a participating jurisdiction in CRS in the conventional sense; it operates under the FATCA framework and provides limited reciprocity to non-US jurisdictions. The reciprocity is meaningful but more limited than the standard CRS exchange, with the consequence that information about US-held accounts of foreign residents flows less freely to foreign tax authorities than information about foreign-held accounts flows from the foreign jurisdictions.

The jurisdictions that have joined CRS later than the original cohort include several that historically operated as offshore financial centres. The British Virgin Islands, the Cayman Islands, Bermuda, Jersey, Guernsey, the Isle of Man, and the Bahamas are now full participants and have been exchanging data for several years. The participation has reduced the historical role of these jurisdictions as opaque holding locations for cross-border assets.

The jurisdictions that have joined more recently include Egypt, Jordan, Kuwait, Bahrain, Saudi Arabia, the United Arab Emirates, Qatar, and several others in the Middle East and North Africa region. The accession of these jurisdictions has materially expanded the CRS coverage of cross-border financial activity involving residents of these regions.

The jurisdictions that remain outside the CRS include several that the OECD and Global Forum continue to engage with, with the trajectory pointing toward broader participation over the medium term. The framework's coverage is incomplete but is converging on completeness for jurisdictions of significant cross-border financial activity.

How the data is used: national tax authority practice

The CRS data, once received by a national tax authority, is used in several distinct ways. The principal uses are described below.

The first use is cross-checking against domestic tax returns. A national authority that receives CRS data on the foreign accounts of a resident taxpayer can compare the reported balances and income against the taxpayer's domestic tax return. A discrepancy — a foreign account balance not declared on a wealth tax return, foreign interest income not declared on an income tax return, foreign capital gains not reported — produces an audit prompt. The cross-check is mechanical, scaling well to the volume of CRS data, and is now run routinely by the major participating tax authorities.

The second use is the identification of undeclared accounts. A national authority that receives CRS data on a resident taxpayer's foreign accounts that have never been declared on a domestic tax return has, at minimum, an inquiry prompt and, depending on the magnitude, an investigation prompt. The CRS data has been the principal source of information for many of the high-profile cross-border tax investigations of the past five years, and continues to be a primary input.

The third use is the cross-border identification of dual residents. A taxpayer reported by two different jurisdictions' financial institutions as a resident of two different countries presents an inconsistency that prompts review. The reviews are typically resolved by reference to bilateral tax treaty tie-breakers, but the data identifies cases that would not otherwise be identified.

The fourth use is the construction of risk profiles. National tax authorities have, in the post-2017 period, built analytical capabilities that use CRS data to construct risk profiles of taxpayers with cross-border financial activity. The profiles take into account the volume and pattern of foreign financial activity, the jurisdictions involved, the entity structures used, and other factors. Taxpayers identified as high-risk receive additional scrutiny.

The fifth use, less developed but growing, is the proactive identification of tax planning structures that may merit policy or administrative response. The CRS data, in aggregate, provides information about the patterns of cross-border financial activity that allows tax authorities to identify emerging structures and to develop response strategies.

The gaps in the CRS framework

The CRS framework is comprehensive but not complete. Several categories of cross-border financial activity fall outside its scope or are imperfectly captured.

The first gap is real estate. Real estate held directly by a foreign resident is not a financial account and is not reported under the CRS. Real estate held through entity structures may be captured if the entity is a passive non-financial entity reportable through the look-through to controlling persons, but real estate held directly is invisible to CRS. The gap has produced a partial substitution: cross-border individuals seeking opacity have, in some cases, shifted from financial assets to direct real estate holding. National tax authorities have begun to address the gap through other instruments, including bilateral exchange of information on real estate transactions and domestic registration requirements, but the gap is not fully closed.

The second gap is non-financial assets generally. Art, jewellery, vehicles, and other non-financial assets held directly are outside the CRS framework. The amounts involved are typically smaller than financial account holdings, but for high-net-worth individuals these assets can be material.

The third gap is crypto-assets. The CRS framework as originally designed did not contemplate crypto-asset exchanges, custodial wallets, or decentralised financial protocols. The OECD's Crypto-Asset Reporting Framework, finalised in 2022 and being implemented in EU law through DAC8 with reporting beginning in January 2027, will close this gap. As of the date of this article, the gap is real but converging on closure.

The fourth gap is the United States. The asymmetry between FATCA's outbound information flow and CRS's lack of US reciprocity has produced a category of cross-border financial activity — foreign-resident-held US accounts — that is partially visible to foreign tax authorities but materially less visible than would be the case under full CRS participation. The asymmetry has been the subject of ongoing diplomatic engagement but is not currently resolving.

The CRS-CARF transition

The OECD's Crypto-Asset Reporting Framework extends CRS-style reporting to crypto-asset service providers. The framework was endorsed by the G20 in 2023 and is being implemented through bilateral agreements and through EU law in DAC8. The first reporting under CARF is scheduled for January 2027, covering 2026 activity.

The CARF design closely follows the CRS architecture. Crypto-asset service providers in participating jurisdictions report annually to their domestic tax authority, which exchanges the data with the tax authorities of the jurisdictions where the account holders are resident. The reportable information includes identification of the account holder, balances, and transactional information.

The transition from CRS to CRS-plus-CARF will materially expand the visibility of cross-border financial activity. Crypto-assets, which have been a partial substitute for traditional financial assets in arrangements seeking opacity, will be brought into the same reporting framework. The cross-border individual or entity holding crypto-assets across multiple jurisdictions will, from 2027 onward, face reporting comparable to what applies to traditional financial accounts.

The CARF implementation is not without complications. Crypto-asset service providers operate across jurisdictions in ways that traditional financial institutions do not, and the determination of which provider has the reporting obligation can be technically complex. The framework's drafters have addressed these complications through detailed implementation guidance, but the operational reality of CARF reporting is expected to develop through the first reporting cycles.

The implications for cross-border individuals

For an individual operating across borders, the CRS framework has several practical implications.

The first is that financial accounts in the individual's jurisdiction of physical presence are reported to their jurisdiction of tax residence as declared at account opening. An individual who opens a Swiss bank account while declaring Swiss tax residence is reported by the Swiss bank to Switzerland (no exchange) and is not reported elsewhere. An individual who opens a Swiss bank account while declaring French tax residence is reported by the Swiss bank to Switzerland, which exchanges with the French DGFiP. The accuracy of the residence declaration at account opening is therefore a primary determinant of where the data flows.

The second is that changes in residence must be communicated to financial institutions. An individual who relocates from France to the UAE without notifying their banks of the change continues to be reported to the French DGFiP. The omission can produce CRS data that contradicts the new residency claim and that prompts French audit. Practitioners now routinely advise clients to update residence information at all financial institutions promptly upon relocation, with documented evidence of the new residence.

The third is that the volume of CRS data has reached a level at which national tax authorities can run systematic cross-checks against domestic tax returns. The historical assumption that small-balance foreign accounts would not attract attention is no longer reliable. Authorities have automated their cross-checks and are using even modest-balance information as audit prompts.

The fourth is that the CRS data is supplemented by other information flows — DAC7 platform reporting, the upcoming CARF crypto-asset reporting, bilateral exchange of information on real estate, and the increasingly active competent authority procedures. The combined picture of cross-border financial activity that national tax authorities now have access to is more complete than at any prior point.

The implications for cross-border entities

For an entity operating across borders, the CRS framework operates principally through the look-through to controlling persons of passive non-financial entities. An entity that is a passive non-financial entity — broadly, an entity whose income is principally passive and which does not engage in active business — has its controlling persons identified for CRS reporting purposes. The controlling persons are typically the beneficial owners of the entity above a percentage threshold, with the threshold set at twenty-five percent in most jurisdictions.

The look-through has reduced the historical use of holding entities in low-tax jurisdictions to maintain opacity over cross-border financial holdings. An individual who holds financial assets through a Cayman entity is, for CRS purposes, reported through to as the controlling person of the entity, with the entity's financial accounts reported to the individual's jurisdiction of tax residence rather than to the Cayman authorities only.

The look-through is not perfect. The classification of an entity as active or passive depends on the activity test, which has been interpreted variably by financial institutions and authorities. Entities that conduct any meaningful active business may be classified as active and not subject to look-through. The boundary between active and passive has been the source of substantial administrative interpretation.

The trajectory through the second half of the 2020s

The CRS framework will continue to expand and to deepen through the second half of the 2020s. Additional jurisdictions will accede. The CARF will operationalise from 2027. Bilateral exchange of information on additional categories will continue to develop. The integration with national tax authority analytical capabilities will continue to advance.

The cumulative effect is the construction of an information infrastructure that, while not perfect, has fundamentally changed the position of cross-border individuals and entities. Opacity, in respect of financial accounts within the participating jurisdictions, has been substantially eliminated. The architecture of cross-border financial planning has had to adjust to the assumption of reporting, and that adjustment is now substantially complete for sophisticated practitioners and is increasingly absorbed into ordinary cross-border practice.

The remaining areas of incomplete coverage — the United States, certain non-CRS jurisdictions, real estate, certain non-financial assets — are visible to practitioners and are being addressed through other instruments at varying speeds. The trajectory is unambiguously toward more comprehensive coverage, more sophisticated analytical use, and more aggressive audit application of the resulting information. The cross-border practitioner who works with assumptions calibrated to a less comprehensive information environment is operating with assumptions that have been overtaken.