If you run a Hong Kong-based company that receives overseas payments, you may never have considered this: your bank account balance, interest income, and total annual transaction volume are being automatically collected, categorized, packaged, and transmitted by a global system. Who is the recipient? It depends on the “label” assigned to your company within the system. Today, we won’t be covering a Baidu Baike-level explanation of “What is CRS?” Instead, we’ll break down the legal framework, data flows, and current implementation status layer by layer.

01 The Legal Foundation of the CRS—Three Documents Forming a Global Network

The first is the Multilateral Convention on Mutual Administrative Assistance in Tax Matters, which has been signed by 127 countries and regions to date. The second is the CRS Multilateral Competent Authority Agreement (MCAA), which specifies the details of how and what information is to be exchanged. The third is domestic legislation in each country, which transposes international commitments into national law. Mainland China officially began implementing the CRS in 2017, while Hong Kong began implementation in 2018. As of 2026, the system has entered the CRS 2.0 phase, with the scope, depth, and frequency of information exchange significantly enhanced compared to the initial phase. This is not a matter of “possibly being audited,” but rather an automated system that has been in operation for eight years.

02 How Does Data Actually Flow? — The Full Path from Banks to the Tax Authority

Three-tier process: ① Collection by financial institutions—Your Hong Kong bank conducts annual due diligence on the tax residency status of account holders and collects data on account balances, interest, dividends, income from the transfer of financial assets, and total annual inflows. ② Aggregation by the local tax authority—The Hong Kong Inland Revenue Department aggregates and categorizes the data reported by each bank, then bundles it according to tax residency status. ③ Receipt by the tax authority of the receiving country—Data packages designated as “Mainland China” are sent to the State Taxation Administration and entered into the Golden Tax Phase IV system. Key Point: Not all data is transferred to the Mainland—only account data classified as belonging to “Mainland China tax residents” is transferred. This classification depends on whether your company holds a Certificate of Residence (CoR) issued by the Hong Kong Inland Revenue Department.

03 CRS 1.0 vs. 2.0—Five Key Changes, Each of Which Affects You

① Data Granularity: Upgrading from “account balances” to “tracing actual controllers”—examining not only corporate accounts but also who controls the company. ② Due Diligence Standards: Shifting from “declaration-based” to “proactive verification”; banks can no longer passively wait for you to fill out forms but must proactively assess your account risks. ③ Exchange Frequency: From annual batch exchanges to quarterly exchanges; some regions have already begun piloting real-time exchanges. ④ Entities Covered: Expanded from individual accounts to shell companies, trusts, and funds. ⑤ Penalty Mechanism: From no penalties to mandatory compliance plus account freezing; the cost of non-cooperation has shifted from “possibly being investigated” to “certainly being frozen.”

04 What is Hong Kong’s role in the CRS system?

Hong Kong has been implementing the CRS since 2018 and maintains a bilateral automatic exchange arrangement with Mainland China. Key fact: If you do not have a Certificate of Residence (CoR) in Hong Kong, your corporate account data is automatically classified under the “Mainland China” category by default and reported annually. With a CoR, data is exchanged only with the Hong Kong Inland Revenue Department and is no longer reported to the Mainland—this is not “concealment,” but an officially recognized compliant classification.

05 Under what circumstances will your data not be transferred to mainland China?

Three conditions must be met simultaneously: First, your company must be recognized by the Hong Kong Inland Revenue Department as a “Hong Kong tax resident enterprise”; Second, you must hold a Certificate of Registration (CoR) officially issued by the Hong Kong Inland Revenue Department; third, your company must engage in actual business operations in Hong Kong (economic substance). None of these conditions can be omitted. These three conditions constitute a comprehensive compliance framework, with the CoR serving as its most critical component.

06 About Qi Cai Ying

Founded in 2015, Qicaiying specializes in company registration in Hong Kong and overseas, bank account opening, and cross-border financial and tax compliance, and has served thousands of cross-border e-commerce, foreign trade, and global expansion companies. We provide full-service assistance for CoR tax residency certification—from eligibility assessment to certificate delivery. All you need to do is provide the basic information; we’ll handle the rest.

✔ Over 10 years of experience in Hong Kong company services

✔ Full-service handling—no need to travel to Hong Kong in person

✔ Automatic reminders for certificate expiration, ensuring uninterrupted long-term maintenance

Cell phone: 18676749275 ｜ WeChat: qcygscszk

Contact us now for a free compliance risk assessment.