If your Singapore company is a bank, insurance company, fund manager, family office, securities firm or licensed financial institution, you almost certainly have a Common Reporting Standard (CRS) obligation. In 2026, with more than 110 jurisdictions exchanging financial account information, CRS compliance is a non-trivial standing obligation administered by the Inland Revenue Authority of Singapore (IRAS).
This guide explains who is a Singapore Reporting Financial Institution (RFI), what they must report, the 2026 deadline, the penalties, and the practical workflow to stay compliant.
What CRS Is — and Why Singapore Implements It
The Common Reporting Standard is the OECD’s framework for automatic exchange of financial account information between participating jurisdictions. Singapore implements CRS via Part XXB of the Income Tax Act 1947 and the Income Tax (International Tax Compliance Agreements) (CRS) Regulations 2016.
Under CRS, Singapore RFIs identify and report financial accounts held by tax residents of CRS-participating jurisdictions to IRAS, which then exchanges the data with foreign tax authorities. Reciprocally, IRAS receives Singapore-resident account data from other jurisdictions.
Note: Singapore is on the CRS, not on FATCA per se. FATCA is the US-specific equivalent — Singapore also implements FATCA via an IGA. Most Singapore RFIs comply with both regimes in parallel.
Who Is a Singapore RFI?
Four categories of entities fall within scope:
- Custodial Institution — holds financial assets for the account of others as a substantial portion of its business.
- Depository Institution — accepts deposits in the ordinary course of a banking or similar business.
- Investment Entity — managed by another financial institution or whose gross income is primarily attributable to investing, reinvesting or trading in financial assets.
- Specified Insurance Company — issues or makes payments with respect to a cash value insurance contract or annuity contract.
Special note for family offices: many single family offices (SFOs) and external asset managers will fall within the Investment Entity definition.
What Must Be Reported?
For each Reportable Account (i.e., a financial account held by a tax resident of a Reportable Jurisdiction), the RFI must report:
- Name, address, jurisdiction(s) of tax residence, and Tax Identification Number (TIN) of the account holder.
- Date and place of birth (for individual account holders).
- Account number.
- Name and identifying number of the RFI.
- Account balance or value at the end of the reporting period (or at closure during the year).
- For Custodial Accounts: total gross interest, dividends, other income, and gross proceeds from sale or redemption.
- For Depository Accounts: total gross interest paid.
- For other accounts: total gross amount paid or credited.
For Passive Non-Financial Entity (NFE) account holders, the RFI must also identify and report each Controlling Person who is a Reportable Person.
The Annual Reporting Cycle
| Activity | Deadline |
|---|---|
| Register as a Singapore RFI with IRAS | Within 3 months of becoming an RFI |
| Conduct CRS due diligence on new accounts | On account opening |
| Annual CRS report to IRAS via myTax Portal | By 31 May each year (covering preceding calendar year) |
| File nil return (even if no reportable accounts) | Same 31 May deadline |
| Retain records | 5 years |
The 31 May deadline is firm. IRAS publishes a CRS reporting schema annually — the XML format must match exactly.
Due Diligence Procedures
CRS due diligence breaks accounts into four categories, each with its own procedures:
Pre-existing Individual Accounts
- Lower Value Accounts (≤ US$1 million): Residence address test or electronic search for tax residence indicia.
- High Value Accounts (> US$1 million): Enhanced review including paper record search, RM enquiry.
Pre-existing Entity Accounts
- De minimis exception: accounts ≤ US$250,000 do not require review.
- Otherwise: determine entity classification, identify Controlling Persons of Passive NFEs.
New Individual Accounts
- Self-certification at account opening with reasonableness check.
New Entity Accounts
- Self-certification with entity classification and Controlling Person identification.
Common Pitfalls
- Self-certifications collected but not reasonableness-checked. The reasonableness check is mandatory — RFIs must compare self-certification to other AML/KYC data.
- Treating Active vs Passive NFE incorrectly. An investment holding company is typically a Passive NFE, even if it has substance.
- Missing Controlling Person identification. For Passive NFEs, every Controlling Person who is a tax resident of a Reportable Jurisdiction must be reported.
- Failing to file nil returns. If no Reportable Accounts exist, a nil return is still required.
- Not updating after change of circumstances. A change of tax residence triggers a refreshed CRS review.
Penalties
| Default | Penalty |
|---|---|
| Failure to register | Up to S$5,000 fine |
| Failure to file CRS return | Up to S$10,000 fine per year |
| Filing incorrect return without reasonable excuse | Up to S$10,000 fine per year |
| Failure to comply with due diligence procedures | Up to S$5,000 fine per breach |
| Wilfully aiding tax evasion via CRS | Criminal penalties — fine and/or imprisonment |
For a Singapore family office or fund manager, the reputational cost of non-compliance — including potential debanking by counterparty banks — typically exceeds the statutory fine.
How CRS Interacts With Other Compliance Streams
- AML/CFT (PMLA, PSMA, MAS Notices) — CRS self-certifications align with KYC, but are not a substitute. See our MAS AML/CFT 2026 guide.
- FATCA — separate US-specific reporting under the IGA. Most RFIs comply with both in parallel.
- Beneficial ownership (UBO) register — overlaps but distinct. The ACRA register of registrable controllers is not the same as CRS Controlling Person data.
- Section 13O/13U fund tax exemption — many tax-exempt funds are still RFIs and must report.
Practical Compliance Steps for 2026
- Classify your entity — RFI or not? Custodial, Depository, Investment Entity or Specified Insurance Co?
- Register with IRAS as an RFI via myTax Portal (if not already).
- Implement self-certification collection at account opening.
- Refresh due diligence on pre-existing accounts annually.
- Map Controlling Persons of Passive NFEs.
- Prepare the CRS XML using IRAS’s annual schema.
- File by 31 May each year — including nil returns.
- Retain records for 5 years.
- Update procedures whenever the OECD CRS standard is amended (Crypto-Asset Reporting Framework extension is in progress for 2027+).
What’s Coming Next — CARF and the 2027 Expansion
The OECD’s Crypto-Asset Reporting Framework (CARF) is set to roll into Singapore alongside CRS amendments from 2027. Singapore-based crypto exchanges and custodial service providers will become reporting entities. See our Singapore crypto tax 2026 guide for the broader IRAS approach to digital tokens.
Bottom Line
CRS is one of those compliance streams that quietly grows in importance every year. For Singapore family offices, fund managers, custodians and banks, it is now a baseline obligation — not a “we’ll get to it” item. The 31 May annual deadline is unforgiving, and IRAS’s audit posture in 2026 is materially more proactive than five years ago.
If you need help classifying your entity, designing the self-certification workflow, or preparing the annual XML return, get in touch. We work with specialist tax counsel and CRS technology providers to deliver an end-to-end compliance solution.
— The Editorial Team, Raffles Corporate Services