Key Takeaways
- Cyprus operates under a Model 1 intergovernmental agreement, so local financial institutions report to the Cyprus Tax Department rather than directly to the IRS.
- Determining who qualifies as a US person drives the due diligence and account identification steps that institutions must follow.
- Financial institutions must complete GIIN registration and follow a fixed reporting cycle, with withholding exposure facing non-compliant entities.
- Foreign owners incorporating in Cyprus should assess how FATCA reporting and penalties apply before opening accounts or structuring ownership.
FATCA and Cyprus: How the US Reporting Regime Reaches the Island
The Foreign Account Tax Compliance Act is a US law that reaches well beyond US borders, and FATCA in Cyprus operates through a bilateral agreement that routes account information from local banks to the Internal Revenue Service. Cyprus signed a Model 1 Intergovernmental Agreement with the United States, so financial institutions on the island report to the Cyprus Tax Department, which then passes the data to the IRS. The framework rests on US statutory authority under the Internal Revenue Code and on a signed IGA brought into domestic effect by FATCA Decree 281/2015.
This article explains how the agreement works, who is treated as a US person, which entities carry reporting duties, and what the regime means in practice for a company you own from abroad. It matters most to US citizens and Green Card holders with Cypriot accounts or companies, and to non-US owners who will be asked to prove they fall outside the net.
The Cyprus-US Intergovernmental Agreement: Model 1 Status and Legal Basis
The two governments signed a Model 1 Intergovernmental Agreement on 2 December 2014, establishing automatic exchange of FATCA information with the IRS. Under the Model 1 design, local financial institutions report to their own competent authority rather than directly to the IRS, and that authority handles the onward transmission.
FATCA itself took effect on 1 July 2014. The underlying US statutory basis sits in IRC sections 1471 to 1474, enacted as Chapter 4 of the Internal Revenue Code under the HIRE Act of March 2010.
Two features of the agreement are worth knowing. It is reciprocal, so the IRS also supplies the Cyprus Tax Department with information on US accounts held by Cypriot residents. It also contains a most-favoured-nation clause, meaning any more favourable term negotiated in another jurisdiction's IGA flows through to Cyprus automatically.
The agreement was given domestic force by FATCA Decree 281/2015. That instrument is what obliges local financial institutions to identify, maintain, and report data on accounts held by US citizens and entities. Certain Cyprus retirement plans listed in Annex II of the agreement are treated as deemed-compliant or exempt beneficial owners.
Cyprus Company Incorporation in Cyprus
Set up your company in Cyprus with Expanship handling registration end to end.
Who Counts as a US Person Under FATCA in Cyprus
US citizenship is the clearest trigger, but it is not the only one. Green Card holders and corporations meeting defined criteria can also qualify as US persons for tax purposes.
For entities, the test turns on connection to the United States. A partnership or corporation organised or located in the US, or operating under US law, is a US person; separate rules apply to trusts and to estates of deceased US persons.
Local banks must identify accounts held by US citizens, by entities organised in the US, or by entities controlled by certain US persons. Where a passive non-financial entity has one or more controlling persons who are US citizens or residents, its account is treated as a US Reportable Account.
In practice, a bank determines your status from a self-certification form you complete, supported by documentary evidence such as a US passport, a US taxpayer identification number, or a US address on file. FATCA reaches an estimated 5.7 to 9 million US citizens living outside the United States, so the question is routine at account opening.
Every account holder, US or not, will be asked to certify FATCA status. A non-US owner simply confirms non-US status; the form is how the bank documents that you fall outside reporting.
Cyprus Financial Institutions Caught by FATCA Obligations
FATCA and the Common Reporting Standard apply to all banks and financial institutions on the island. Whether your own company is caught depends entirely on how it is classified.
The agreement recognises four categories of financial institution:
- Investment Entities such as fund vehicles
- Depository Institutions such as banks and credit institutions
- Custodial Institutions that hold financial assets for others
- Specified Insurance Companies
A Custodial Institution is one where holding financial assets and providing related services accounts for at least 20% of gross income. Banks, custodians, brokers, investment funds, and insurance companies all fall within the FFI definition under the Model 1 agreement.
A standard holding company is a different matter. It is generally classified as a Non-Financial Foreign Entity rather than a financial institution, and so is not materially affected, though it must still disclose ownership information to any financial institution it deals with.
Non-Reporting institutions listed in Annex II are treated as deemed-compliant FFIs or exempt beneficial owners. For trusts, residence depends on the trustees: a trust is treated as resident where most or all trustees are tax-resident locally, and also where some trustees are resident and the settlor is both resident and domiciled there.
Cyprus Ongoing Compliance in Cyprus
Keep your Cyprus entity compliant with filings, returns, and statutory obligations.
GIIN Registration and the Role of the Cyprus Tax Department
A financial institution that must register with the IRS obtains a Global Intermediary Identification Number, or GIIN, and then files annual returns with the Cyprus Tax Department. A Certified Deemed-Compliant FFI, by contrast, neither registers with the IRS nor obtains a GIIN.
Institutions within scope were required to register with the IRS by the end of 2014, with 22 December 2014 recommended for inclusion on that year's registered-companies list. Domestically, registration runs through the government's registration portal, part of the CY Login digital identity platform formerly branded Ariadni. Representatives acting for an institution register through the same channel.
From there, the institution reports reportable-account data to the Cyprus Tax Department, which exchanges it with the IRS. The IRS in turn publishes a monthly list of registered FFIs holding GIINs, searchable through its FFI List Search and Download Tool.
Registration status is not set-and-forget. If a required certification is missed, the institution ceases to be compliant, and consequences can include loss of FATCA status and removal of the GIIN from the published list.
Due Diligence and Account Identification Requirements
Account identification follows the due diligence rules in Annex I of the agreement. Institutions must collect information on depository and custodial accounts held by US persons, certain interests in investment entities, and cash-value insurance or annuity contracts held by US persons.
New accounts and pre-existing accounts run on separate tracks. Onboarding systems apply enhanced checks to new customers, while a parallel review examines accounts already on the books.
For each account, an institution determines whether it is a US reportable account, an account held by a recalcitrant holder who failed to confirm status, or an account held by a non-participating FFI. Entity classification drives the entire outcome, which is why getting it right at the outset matters.
Some timing reliefs apply to taxpayer identification numbers. For pre-existing accounts, the TIN or date of birth need not be reported for calendar years before 2017 where the institution did not already hold it. For reporting years 2022, 2023, and 2024, an institution that meets the conditions of IRS Notice 2023-11 is not treated as significantly non-compliant solely for failing to obtain and report a US TIN on a pre-existing account.
Cyprus Cyprus Incorporation Pricing
See transparent pricing to incorporate and maintain a company in Cyprus.
The Reporting Cycle: What Gets Sent to the IRS and When
The flow is fixed: local institutions report US account data to the Cyprus Tax Department, which then exchanges it automatically with the IRS. Data must reach the Tax Department by the last working day before 30 September of the relevant year so it can be processed for exchange by that date.
| Data field | What it covers |
|---|---|
| Account holder name | Individual or entity identity |
| Address | Account holder's address on file |
| US TIN | US taxpayer identification number |
| Account number | Identifier for the account |
| Account balance or value | End-of-period figure |
| Income credited | Interest, dividends, and other income |
For calendar years 2015 and 2016, a reporting institution also had to disclose the name of each non-participating financial institution it paid, together with the aggregate amount. The obligation to report payments to non-participating institutions is a feature of the regime in its own right.
At the US end, institutions file Form 8966, the FATCA Report, while individual US taxpayers report specified foreign financial assets on Form 8938. Because the agreement is reciprocal, the IRS likewise feeds back data on Cypriot residents' US accounts.
Withholding Exposure for Non-Compliant Entities
The enforcement mechanism behind FATCA is a 30% withholding tax. It applies to certain US-source payments made to a non-compliant FFI, regardless of whether that institution has any US owners or clients.
Withholdable payments include US-source dividends, interest, and other fixed or determinable annual or periodical income, as well as gross proceeds from the sale of US securities. The charge bites unless verification, due diligence, registration, and reporting requirements are all satisfied. Institutions must also withhold 30% on US-source payments made to recalcitrant account holders and to non-participating FFIs.
Provided a local institution complies with FATCA Decree 281/2015, it avoids the 30% withholding entirely. Failure carries a second cost beyond the tax: practical exclusion from the US market.
Penalties and Consequences of FATCA Non-Compliance
Consequences split between the institution and the account holder. An institution that misses its certification deadline is treated as non-compliant, which can mean revocation of FATCA status, removal of its GIIN from the IRS list, the 30% withholding charge, and exclusion from the US market.
For a US person holding the account, the penalties sit at the individual level. Failure to report specified foreign financial assets on Form 8938 starts at $10,000 per violation, rises to $50,000 for continued failure after IRS notice, and adds a 40% penalty on any understatement of tax attributable to undisclosed assets.
For the local institution itself, failing to file with the Cyprus Tax Department under Decree 281/2015 exposes it to domestic regulatory sanctions. The precise penalty schedule is not published here, so confirm exact figures with a qualified adviser before relying on any number.
What FATCA Means for a Foreign Owner Incorporating in Cyprus
Everything turns on classification. The impact on your company depends on whether it is a financial institution or a non-financial entity under the agreement.
A standard holding or trading company is an NFFE, not an FFI, and so carries no direct FATCA filing duty. It must still disclose ownership details to any financial institution it banks with.
Your own status as owner then decides the rest:
- Non-US owner, standard company: no US citizenship, Green Card, or US indicia means no direct FATCA obligation. Expect to complete a bank self-certification confirming non-US status.
- US person owner or controller: the company's bank will report account details, balances, and income flows to the Cyprus Tax Department for annual onward transmission to the IRS.
- Passive NFFE with a US controlling person: the account is treated as a US Reportable Account and reported, even where the company itself is not a financial institution.
One structure to flag: a company that qualifies as an Investment Entity, such as a fund vehicle, carries full FFI obligations including GIIN registration and annual reporting. Take professional advice before settling the structure, because classification, not intention, determines what you owe.
Conclusion
For most foreign owners of an ordinary Cypriot company, FATCA is a documentation step rather than a filing burden: you certify non-US status to the bank and carry on. The picture changes sharply if you are a US person or if your vehicle is a fund or other financial institution, in which case reporting, and potentially GIIN registration, follow. Classification is the hinge on which all of it turns, so confirm how your entity and your own status are treated before you open accounts. Settling that early avoids both unexpected reporting and the withholding and penalty exposure that attaches to getting it wrong.
How Expanship Can Help Your Business in Cyprus
Expanship helps you determine your entity's FATCA classification, complete bank self-certifications correctly, and, where your structure is an Investment Entity or other financial institution, handle GIIN registration and annual returns to the Cyprus Tax Department. The same team supports the wider needs of a foreign-owned company on the island.
- Company formation and structuring advice
- Registered agent and registered office
- Tax registration and annual filings
- Ongoing compliance and reporting management
- Accounting and bookkeeping
- Introductions to local banks
To discuss your structure and FATCA position, contact Expanship Cyprus.
Frequently Asked Questions
A straightforward holding company is generally classified as a Non-Financial Foreign Entity, not a financial institution, so it carries no direct FATCA reporting duty. It must, however, disclose ownership information to any bank or financial institution it does business with.
If you have no US citizenship, Green Card, or other US indicia, your account is not reportable, but the bank will ask you to complete a self-certification form confirming non-US status. That certification is how the institution documents that you fall outside the reporting net.
No. Under the Model 1 agreement signed on 2 December 2014, local financial institutions report to the Cyprus Tax Department, which then exchanges the information with the IRS. The exchange is also reciprocal, so the IRS supplies data on Cypriot residents' US accounts in return.
Local institutions must submit reportable-account data to the Cyprus Tax Department by the last working day before 30 September of the relevant year. This allows the data to be processed and exchanged with the IRS by that date.
A non-compliant institution risks a 30% withholding tax on certain US-source payments, removal of its GIIN from the IRS FFI list, and effective exclusion from the US market. Compliance with FATCA Decree 281/2015 keeps the institution clear of the 30% charge.
Expect the company's local bank to report account details, balances, and income flows to the Cyprus Tax Department for annual onward transmission to the IRS. You should also be aware of your personal Form 8938 obligations, where failure to report specified foreign financial assets carries penalties starting at $10,000 per violation.
Legal Disclaimer
The information provided in this article is for general informational purposes only and does not constitute legal, tax, or professional advice. While we strive to ensure the accuracy and timeliness of the content, laws and regulations are subject to change, and the application of laws can vary widely based on specific facts and circumstances.
Readers should not act upon this information without seeking professional counsel tailored to their individual situation. Expanship and its authors disclaim any liability for actions taken or not taken based on the content of this article.
For specific advice regarding your business setup, compliance requirements, or any legal matters, please consult with qualified legal and tax professionals in the relevant jurisdiction.
