Listen to this article
0:00 / 18:55

Key Takeaways

  • FATCA reaches Gibraltar through an intergovernmental agreement that channels reporting from local financial institutions to the IRS.
  • Gibraltar foreign financial institutions must register for a GIIN, identify US persons and apply due diligence to in-scope accounts.
  • Non-compliance can trigger 30 percent withholding on certain US-source payments alongside other penalties for the institutions involved.
  • Owners with US-person connections should confirm how their Gibraltar accounts and entities are classified before reporting deadlines arise.

The Foreign Account Tax Compliance Act is a United States law that requires financial institutions outside the US to identify accounts held by US taxpayers and report them. FATCA in Gibraltar operates through an intergovernmental agreement signed with the US Treasury, under which local financial institutions report account data to the Gibraltar tax authority rather than directly to Washington. The framework that gives FATCA its global reach is explained on the US Treasury site.

This affects any US person holding a financial account through a Gibraltar bank, fund, or trust, and any non-US owner whose entity must certify its status to avoid being treated as reportable. The article covers how the agreement works, who falls within scope, what local institutions must do, and what the regime means for a foreign owner or adviser. It is most relevant to non-resident investors and their advisers weighing a Gibraltar structure with any US connection.

The US Department of the Treasury and the Government of Gibraltar signed a FATCA Intergovernmental Agreement on 8 May 2014. Gibraltar sits on the IRS Effective IGA List as a Model 1 jurisdiction, the classification under which local institutions report to their own tax authority instead of directly to the IRS.

The exchange runs on a reciprocal basis, meaning the Model 1A variant applies. Information about US accounts held by local financial institutions flows to the territory's competent authority, which then transmits it to the IRS automatically.

The agreement builds on an earlier Tax Information Exchange Agreement signed in London on 31 March 2009, amended by a Protocol on 8 May 2014. A related Competent Authority Agreement was signed in two stages, on 17 and 28 September 2015.

Domestic effect comes from the International Co-operation (Improvement of International Tax Compliance) (United States) Regulations 2015, enacted under the Taxation (Mutual Administrative Assistance) Act 2014. No removal of the territory from the Effective IGA List has been publicly documented, so the regime remains in force.

Company Incorporation in Gibraltar

Set up your company in Gibraltar with Expanship handling registration end to end.

A "Specified US Person" means a US citizen, a US resident alien, or another person subject to US tax jurisdiction, tracking the standard FATCA definitions in the Internal Revenue Code. Reporting captures financial accounts held by US taxpayers, and also accounts held by foreign entities in which US taxpayers hold a substantial ownership interest.

When a local institution finds indicia of US status on an account, it must treat the account as a US Reportable Account unless it obtains a self-certification or reasonably determines the holder is not a Specified US Person. The signals used in due diligence are practical and familiar.

  • US place of birth
  • A US residential or correspondence address
  • A US telephone number
  • US-resident status
  • Standing instructions to transfer funds to a US account
  • A US "care-of" or "hold mail" address as the sole address on file

Local retirement plans listed in Annex II of the agreement are treated by the US as deemed-compliant or exempt, provided they are established, regulated, and operated to provide pension benefits under local law.

A Foreign Financial Institution, in FATCA terms, is any entity in the four in-scope categories: Depository Institutions, Custodial Institutions, Investment Entities, and Specified Insurance Companies. Banks, investment managers, insurers, trust companies, and fund administrators regulated by the Financial Services Commission Gibraltar fall within scope as Reporting Gibraltar Financial Institutions.

Each reporting institution must identify US accounts under the due diligence rules in Annex I and report the prescribed details to the territory's competent authority. That authority is the Commissioner of Income Tax, acting through the Gibraltar Tax Office.

Not every institution reports. Annex II of the agreement lists non-reporting categories, including certain government entities, central banks, international organisations, broad-participation pension funds, and local institutions with a local client base that meet specific criteria.

Ongoing Compliance in Gibraltar

Keep your Gibraltar entity compliant with filings, returns, and statutory obligations.

A reporting institution registers with the IRS to obtain a Global Intermediary Identification Number, or GIIN. Registration runs through the IRS FATCA Online Registration System, which creates an account where the institution registers, renews, and submits certifications; approved bodies receive a GIIN for themselves and any branches.

The number is 19 characters, formatted as XXXXXX.XXXXX.XX.XXX, and identifies the institution to withholding agents and tax administrators. The IRS charges no fee for registration.

GIIN registration essentials for a Gibraltar FFI
Item Detail
Portal IRS FATCA Online Registration System (sa.www4.irs.gov/fatca-ides/)
Cost No fee
Number format 19 characters, XXXXXX.XXXXX.XX.XXX
FFI list publication Compiled monthly, published on the first day of each month
Separate FFI agreement Not required for Reporting Model 1 FFIs

Because these institutions report under a Model 1 agreement, they do not enter a separate FFI agreement with the IRS; compliance rests on the agreement and the local regulations. Withholding agents check the published FFI list search tool to verify a GIIN and avoid withholding on payments to that institution.

Reporting is indirect and government-to-government. Local institutions send their data to the Gibraltar Tax Office, and the Tax Office exchanges it automatically with the IRS.

No local institution reports straight to the IRS. The chain runs from the institution, to the Commissioner of Income Tax, and on to Washington.

Submissions use an XML schema transmitted through the OECD Common Transmission System or an equivalent channel via the Tax Office portal, as set out in OECD guidance. The local cut-off date for annual returns is set by the Tax Office and aligned with the calendar-year data cycle; confirm the precise deadline with the Tax Office, since it is not stated in retrieved guidance.

Each US Reportable Account return carries the account holder's name and address, US taxpayer identification number, account number, year-end balance or value, and the gross income or proceeds credited to the account.

Gibraltar Incorporation Pricing

See transparent pricing to incorporate and maintain a company in Gibraltar.

The Annex I rules split accounts into pre-existing ones, held as of the effective date, and new ones opened afterward, with separate treatment for individuals and entities. Threshold tests reduce the review burden on smaller balances.

  • Pre-existing individual accounts at or below USD 50,000 are exempt from review.
  • Pre-existing entity accounts at or below USD 250,000 as of 31 December 2015 need not be reviewed until that figure is exceeded at the end of any later calendar year.

Where US indicia appear, the institution must obtain a self-certification, typically an IRS Form W-8 or W-9, or reasonably establish from its records that the holder is not a Specified US Person. If the holder does not respond within 90 days, the account should be suspended until a valid certification arrives.

Passive Non-Financial Foreign Entities must be looked through to find any Controlling Persons who are US persons. For a trust treated as a Passive NFE, the competent authority allows the scope of reported beneficiaries to align with the scope used for a trust that is itself a financial institution.

FATCA's enforcement tool is a 30% withholding tax on "withholdable payments" to non-compliant institutions. These payments include US-source dividends, interest, rents, salaries, and gross proceeds from the sale of US securities.

Because Gibraltar has a Model 1 agreement in force, a properly enrolled and compliant local institution is treated as deemed-compliant and faces no withholding. The risk turns live only in narrow circumstances.

  • Its GIIN has been removed from the IRS FFI list.
  • It never registered.
  • It has been identified as a non-participating FFI.

A local entity that is a non-financial entity with US-person owners does not itself attract the 30% charge, but the institution holding its accounts must document it correctly to keep payments flowing without withholding. For payments made after 30 June 2014, a withholding agent must confirm the institution's GIIN appears on the IRS FFI List before releasing funds gross.

Failure to meet certification deadlines can cost an institution its FATCA status and, ultimately, its place on the IRS FFI list. Removal re-classifies the institution as a non-participating FFI, obliging US counterparties and correspondent banks to withhold 30% on all US-source payments to it.

On the local side, a penalty under the territory's regulations is a debt due to the Government and recoverable as such. It must be paid within 30 days of notification, or within 30 days of an appeal being finally determined or withdrawn.

The Financial Services Commission Gibraltar may also act against regulated entities that persistently breach their obligations, through licence conditions or censure. Exact penalty amounts under the 2015 Regulations are set out in the authoritative text on the Gibraltar Laws portal; they were not reproduced in retrieved documents.

If you are a US person owning a local company or trust, the institution will report your account data to the Tax Office, which forwards it to the IRS automatically, regardless of what you disclose on your US returns. A non-US owner is not a reportable subject, but the entity may still need to certify its status, often via a Form W-8BEN-E, to avoid administrative friction.

FATCA also reaches foreign entities in which US taxpayers hold a substantial interest, generally 10% for passive NFEs. That catches holding companies, funds, and trusts with US beneficial owners above the threshold, and it triggers documentation duties on the institution when a US-person adviser or fund manager operates through the structure.

The regime is operating in practice, not in theory; the competent authority has received peer review feedback from partner jurisdictions on the data its institutions submit. Before accepting US-source payments, confirm your bank, fund administrator, or trustee holds a current valid GIIN, which you can check on the IRS FFI list tool at no charge.

Verify before payment

Advisers structuring passive holding entities should confirm correct FI or NFE classification and ensure Controlling Person data for any US-person owners is captured, since misclassification is the common cause of unexpected withholding.

Advisers should also confirm their fiduciary uses the current XML reporting schema and files on time each year, in line with the technical framework set by the 2015 Competent Authority Agreement.

For a foreign owner with no US connection, FATCA in Gibraltar is mostly a documentation step: certify the entity's status correctly and the regime passes you by. For a US person, the reporting is automatic and unavoidable, which makes accurate US tax filing the only sensible posture. The practical work falls on your local institution, so the single most useful check is confirming it holds a valid GIIN and submits on time. Get the classification and certification right at the outset, and ongoing FATCA exposure stays minimal.

Expanship supports foreign-owned entities on FATCA matters in Gibraltar, from confirming whether your structure is a Financial Institution or an NFE to handling the self-certifications and GIIN checks that keep payments free of withholding. The same team manages the wider lifecycle of a foreign-owned company on the Rock.

  • Company formation and structuring
  • Registered agent and registered office
  • Tax registration and annual filing
  • Ongoing compliance and FATCA status management
  • Accounting and bookkeeping
  • Introductions to local banks

To discuss your structure and its FATCA position, contact Expanship Gibraltar.

Yes. A Model 1 intergovernmental agreement signed on 8 May 2014 is in force, and the territory remains on the IRS Effective IGA List with no documented removal. Local financial institutions report US accounts to the Gibraltar Tax Office, which exchanges the data with the IRS automatically.

No. Under the Model 1 arrangement, institutions report to the Commissioner of Income Tax through the Gibraltar Tax Office, which then transmits the data to the IRS. The reporting flow is government-to-government, not institution-to-IRS.

A properly registered and compliant local financial institution is treated as deemed-compliant and is not subject to the 30% withholding. The risk arises only if an institution never registered, lost its GIIN, or is treated as a non-participating FFI, so confirming a valid GIIN before accepting US-source payments is the key safeguard.

You are not a reportable subject if you hold no US-person status, but your entity may still need to certify its position to the institution, often via a Form W-8BEN-E. Correct classification avoids the entity being defaulted into reportable or non-compliant treatment.

No. The IRS charges nothing for registration through its FATCA Online Registration System, which issues the 19-character GIIN once an application is approved. Reporting Model 1 institutions also avoid the need for a separate FFI agreement with the IRS.

Pre-existing individual accounts at or below USD 50,000 are exempt from review, and pre-existing entity accounts at or below USD 250,000 as of 31 December 2015 need not be reviewed until that figure is exceeded at the end of any later year. New accounts and higher balances follow the full Annex I due diligence rules.