Hong Kong CRS and AEOI 2027 Guide: Registration, Records and Cross-border Risk

Direct answer

Hong Kong's 2026 AEOI amendment bill is aimed at strengthening the CRS administrative framework. It does not, by itself, create a new tax on individuals or automatically make every Hong Kong company a reporting financial institution.

The practical risk is evidence consistency: whether a trust, fund, family office vehicle, investment entity or offshore company is classified correctly, whether CRS self-certifications match the facts, and whether records can be produced when reviewed.

Legal requirement vs best practice

Legal requirement: CRS and AEOI obligations should be checked against the Inland Revenue Ordinance, IRD's AEOI guidance, the 2026 amendment bills and OECD CRS materials. Entity classification should be based on facts, not labels.

Best practice: prepare an AEOI control file before 2027 covering entity classification, RFI registration status, BIR80 filing, nil reporting where relevant, self-certification, controlling persons and record retention.

What changes from 1 January 2027

IRD's AEOI page states that the Inland Revenue (Amendment) (Automatic Exchange of Information) Bill 2026 was gazetted on 27 March 2026 and aims to strengthen the existing administrative framework for CRS from 1 January 2027, subject to passage.

The key changes described by IRD are mandatory registration for all Hong Kong reporting financial institutions, enhanced record keeping requirements and enhanced sanctions for non-compliance.

Mandatory RFI registration

IRD states that all reporting financial institutions in Hong Kong are required to register in the AEOI Portal for CRS reporting purposes, irrespective of whether they have information to report.

Existing RFIs that remain unregistered are required to register by 31 March 2027. Financial institutions becoming RFIs since 1 January 2027 are generally required to register by 31 January of the year following the calendar year in which they first become RFIs.

Six-year record keeping

IRD states that RFIs are required to keep sufficient records for six years after the due date of the Financial Account Information Return, BIR80, regardless of whether the RFI has ceased to be an RFI or has been dissolved.

For a dissolved RFI, the persons who were directors immediately before dissolution, or trustees or responsible managers where there was no director, must ensure records are kept until the retention period ends.

Enhanced sanctions are about process failures

IRD states that the amendment bill introduces new sanctions for RFI non-compliance without reasonable excuse, including failure to register and provision of incorrect or incomplete information.

It also introduces penalties calculated by reference to the number of financial accounts involved for certain offences, including failure to carry out due diligence procedures, and an administrative penalty mechanism as an alternative to prosecution.

Entity classification: FI, active NFE or passive NFE

A company, trust, fund or family office vehicle should not be classified by name alone. The analysis should consider whether it is a custodial institution, depository institution, investment entity, specified insurance company, active non-financial entity or passive non-financial entity.

If an entity is not an RFI, it may still be reviewed by a bank or other RFI as an account holder. Passive non-financial entities can require look-through to controlling persons and their tax residence.

Personal account risk: CRS is not a tax charge

CRS is an information exchange and reporting framework. It does not decide whether a person owes tax on a bank balance, securities account, dividend, interest or share gain.

However, exchanged information can create a review trail. If tax residence, address, TIN, controlling-person information and account activity do not match the underlying facts, tax authorities or financial institutions may ask further questions.

CARF and amended CRS timeline

IRD separately states that the Inland Revenue (Amendment) (Crypto-Asset Reporting Framework and Amended Common Reporting Standard) Bill 2026 was gazetted on 22 May 2026.

Subject to passage, legislative amendments concerning CARF and amended CRS are expected to be implemented from 1 January 2027 and 1 January 2028 respectively. The amended CRS materials refer to new digital financial products, additional reporting requirements and refined due diligence requirements.

Common mistakes

A common mistake is assuming every Hong Kong company must register. The registration requirement targets reporting financial institutions, so entity classification comes first.

Another mistake is assuming a non-RFI has no CRS exposure. Passive NFEs and controlling-person reporting can still bring the entity into a bank's due diligence workflow.

A third mistake is treating CRS exchange as automatic tax liability. CRS provides information; the tax result still depends on the relevant jurisdiction's tax law and facts.

Professional insight

For families or groups with Hong Kong entities, offshore companies, trusts, funds or Malta residence planning, create a cross-border AEOI matrix before 2027.

The matrix should include entity classification, account holders, controlling persons, tax residences, TINs, addresses, RFI registration status, BIR80 filing position, nil reporting logic and record-retention owner.

Frequently Asked Questions

Official References and Sources

Legal conclusions should be checked against official sources. Source-intake WeChat articles are drafting inputs only until reviewed.

• Primary sourceHong Kong IRD - Automatic Exchange of Financial Account Information
• Primary sourceHong Kong IRD - Inland Revenue (Amendment) (Automatic Exchange of Information) Bill 2026
• Primary sourceHong Kong IRD - Crypto-Asset Reporting Framework and Amended Common Reporting Standard Bill 2026
• Primary sourceHong Kong Inland Revenue Ordinance, Cap. 112
• Primary sourceOECD - Common Reporting Standard
• Source intakeSource intake: 香港CRS修例落地：2027年3类合规风险升级