FATCA, CRS & CbCR: Is Your UAE Entity Reporting Correctly?

FATCA CRS CbCR UAE
UAE Reporting Financial Institutions must complete their CRS and FATCA submissions – including nil returns and the mandatory Risk-Based Assessment – by 30 June 2026 for the 2025 reporting year. Separately, multinational groups above AED 3.15 billion in consolidated revenue carry Country-by-Country Reporting duties with the Ministry of Finance. These are three distinct regimes, easy to conflate, each running on its own calendar.
 
If your UAE entity has foreign account holders, cross-border ownership, or sits inside a large multinational group, knowing where FATCA, CRS, and CbCR overlap – and where they do not – keeps you off the wrong end of a Ministry of Finance or Federal Tax Authority review.

FATCA and CRS: Two Agreements, One Reporting Window

FATCA is a bilateral intergovernmental agreement between the UAE and the United States, aimed at identifying US persons holding accounts abroad. CRS is a broader, multilateral standard developed by the OECD, covering tax residents of dozens of participating jurisdictions. Both regimes sit under the UAE’s Automatic Exchange of Information framework, administered by the Ministry of Finance through its dedicated portal.
 
For the standard timeline, both FATCA and CRS submissions for a given reporting year fall due on 30 June of the following year – so data covering 1 January to 31 December 2025 is due by 30 June 2026. The Ministry has extended deadlines in past years, so treat 30 June as the baseline and confirm the current year’s exact window before you rely on it.

The Risk-Based Assessment Businesses Often Skip

Alongside the annual return or nil filing, Reporting Financial Institutions must complete a mandatory Risk-Based Assessment. Institutions that skip this step, or complete it without documentation, tend to run into the same problems: account holders classified incorrectly, existing accounts never reviewed for a change in circumstances, and no audit trail if the Ministry asks how a classification was reached.

Country-by-Country Reporting: A Different Threshold Entirely

CbCR applies when a UAE-resident Ultimate Parent Entity heads a multinational group with consolidated revenue at or above AED 3.15 billion (roughly USD 855 million) in the preceding financial year, under Cabinet Resolution No. 44 of 2020. Two separate obligations follow from that threshold.
 
    • Notification: every UAE constituent entity of an in-scope group – not only the Ultimate Parent Entity – must notify the Ministry of Finance which entity is filing the CbC report on the group’s behalf.
    • The CbC Report itself: due within 12 months of the financial year-end, prepared in the OECD’s three-table format.
 
Guidance on the exact notification date varies by source – some describe it as due by the last day of the reporting fiscal year, others as within four months of year-end. Because the gap between those two readings matters, confirm the precise date for your group’s fiscal year directly with the Ministry of Finance or your tax advisor rather than assuming either version. Note also that CbCR data feeds directly into Pillar Two Domestic Minimum Top-up Tax calculations, so an error in one report can distort the other.

Where the Tax Residency Certificate Fits In

A Tax Residency Certificate is not itself an AEOI filing, but it is frequently the document that supports a FATCA or CRS self-certification, and it is what proves tax residence to banks, counterparties, and foreign tax authorities. TRCs are issued through the FTA’s EmaraTax portal, valid for one specific 12-month period, and must be renewed every year – they cannot be issued for a future period.
 
A useful update from the FTA removed bank statements as a standard requirement for individuals applying for a treaty-purpose TRC, which cleared one of the most common causes of rejection. For companies, foreign banks and counterparties increasingly ask for a current TRC before processing cross-border royalty, interest or management-fee payments.

Where Compliance Breaks Down in Practice

    • Treating a CbCR notification as optional for a UAE entity that is not the Ultimate Parent Entity – it is not.
    • No periodic review of existing accounts for changes in circumstances under CRS or FATCA.
    • Incomplete or missing documentation for the Risk-Based Assessment.
    • Applying for a Tax Residency Certificate only after a bank blocks a transaction, rather than renewing it proactively.
    • Weak internal governance over who owns AEOI classification decisions across group entities.

Building a Compliance Calendar That Does Not Rely on Memory

Register early with the Ministry of Finance’s AEOI portal, calendar the 30 June deadline the moment the reporting year closes, confirm whether each UAE entity is a UPE or constituent entity for CbCR purposes, review AEOI classifications annually rather than once at onboarding, and renew Tax Residency Certificates before a counterparty asks for one.

Frequently Asked Questions

What is the difference between FATCA and CRS?

FATCA is a bilateral agreement targeting US persons. CRS is a multilateral OECD standard covering many participating jurisdictions. Both currently share a 30 June annual deadline through the Ministry of Finance.

Who needs to file a CbCR notification in the UAE?

Every UAE constituent entity of a qualifying MNE group, even if it is not the Ultimate Parent Entity and even if the group’s CbC report is filed in another country.

How long is a UAE Tax Residency Certificate valid?

One specific 12-month period. It must be renewed annually and cannot be issued for a future period.

What happens if we file a late or incorrect CRS or FATCA return?

The Ministry of Finance can apply penalties, and unresolved classification errors tend to resurface at every future filing cycle, so correcting them early is worth the effort.

Can a UAE company have CbCR and TRC obligations at the same time?

Yes. They are independent obligations that can apply simultaneously, particularly for group entities with foreign ownership or cross-border payment flows.

Is a CbCR notification the same as the CbC report?

No. The notification identifies who is filing on the group’s behalf; the CbC report is the full three-table disclosure filed separately, generally within 12 months of year-end.

Next Step

FATCA, CRS, and CbCR rarely fail because a business ignores them outright – they fail because the calendar, the classifications, or the documentation slip between reporting cycles. NR Doshi & Partners reviews your AEOI classification, CbCR exposure, and Tax Residency Certificate status together, so nothing falls through the cracks between regimes. Book a FATCA, CRS and CbCR compliance review with our team.

Author:

Written by an Audit team at NR Doshi & Partners, an FTA-approved Audit firm in Dubai providing internal audit, external audit, and compliance services across Dubai, Abu Dhabi, and the wider UAE.

Share this post on →

Related Articles

Do You Need a CFO? 7 Signs Before You Hire One
Main
Do You Need a CFO? 7 Signs Before You Hire One

Table of Contents What an Outsourced CFO Does That a Bookkeeper or Accountant Doesn’t 7 Signs You Need CFO-Level Support Outsourced vs Full-Time CFO: Weighing Cost and Fit Family Businesses:...