We specialize in providing one-stop financial and tax compliance services for cross-border e-commerce businesses, foreign trade companies, and entrepreneurs expanding overseas. We help businesses address a wide range of issues, from setting up corporate structures, daily bookkeeping and tax filing, and export tax rebates, to tax planning, platform transaction compliance, Hong Kong company audits, and offshore business operations. Today, Qicaiying will provide a comprehensive breakdown of financial and tax compliance issues faced by cross-border businesses—covering everything from business models, fund flows, and contracts and invoices to platform payments and tax filings—to help companies proactively identify risks and avoid issues such as mismatches between transaction records and tax filings, insufficient cost documentation, and disorganized accounting. These measures will help prevent additional tax payments, fines, and even tax audits.
01

Defining the Target Audience: Pain Points for Cross-Border Expanders

In fact, it’s not just large companies—many small cross-border sellers and entrepreneurs just starting out may also encounter tax alerts. Think about it: running a cross-border business is inherently more complex than operating domestically. You have to navigate compliance in overseas markets while also managing domestic tax filings. If you’re not careful, a risk alert pops up on your phone, and you instantly panic. According to industry observations by Niuzhang.com,More than 60% small and medium-sized cross-border e-commerce sellers have financial and tax compliance issues, and more than 40 percent of those sellers have received tax risk alerts in various forms.

The profile of this group of people working in cross-border trade is actually quite clear:

• One group consists of sellers who initially rose to prominence by capitalizing on the traffic boom. In the early days, they used personal accounts to receive payments from the platform and didn’t pay much attention to compliance issues; now that their businesses have grown, they’ve suddenly come under scrutiny.
• One category consists of traditional foreign trade manufacturers that have transitioned to cross-border trade; they are unfamiliar with the tax reporting rules for cross-border exports, making them prone to errors in customs clearance and tax refund procedures.
• Another group consists of entrepreneurs who have just started expanding overseas. To cut costs, they hire unprofessional financial and tax agents, resulting in disorganized accounting that creates potential risks.

To put it simply, these business owners all share one common trait: their business operations are growing faster than their financial management, and their compliance efforts can’t keep up with their scale. Many people think, “I run a small business—the tax authorities won’t audit me,” but since the launch of the Golden Tax Phase IV system, with data now linked and cross-checked, even the slightest anomaly can trigger a risk alert—and there’s no way to avoid it.

02

Specific scenarios: These situations are very common

Have you ever done any of these things? I’ve compiled a few of the most common scenarios faced by cross-border sellers—see if any of them sound familiar. The first scenario is,Third-Party Payment Platforms Routing Funds Through Smuggling Accounts. Many sellers, either to save trouble or because they lack a compliant channel for receiving foreign exchange, have the platform transfer the proceeds directly to the owner’s personal bank account and fail to file any tax returns. Over time, large sums flowing in and out of a personal account can easily attract the attention of both banks and tax authorities, triggering risk alerts.

According to a report by Yicai, in recent years, banks in many regions have continuously stepped up their monitoring of large, unusual transactions in individual accounts, and individual accounts with annual inflows and outflows exceeding one million have become a key focus of monitoring.

The second scenario,Non-compliant practices regarding customs declaration or entrusting a third party to handle tax refunds. Some small sellers do not have import/export rights, or, in order to secure lower customs clearance costs, they arrange for other companies to handle the customs declaration and export procedures on their behalf. This practice is essentially illegal; if there are any issues with the upstream supplier, your entire business chain will be implicated, directly triggering a tax audit.

The third scenario,Hong Kong Companies That Have Not Been Audited for a Long Time. Many people involved in cross-border business have registered Hong Kong companies to receive foreign currency payments, but since they believe the companies are not generating profits, they consistently file zero tax returns and do not undergo audits. Now, with the CRS information exchange, Hong Kong company account information is automatically shared with the mainland. If non-compliance with zero tax filing requirements is discovered, you will not only have to pay back taxes and fines, but it will also affect the tax credit rating of your entire mainland entity.

The fourth scenario,There is a significant discrepancy in cost invoices, and the reported data does not match.. In cross-border procurement, it is often impossible to obtain input invoices. When filing corporate income tax returns, these costs cannot be properly deducted, resulting in artificially inflated reported profits. At the same time, discrepancies between the platform’s payment records and the revenue you report will trigger risk alerts immediately upon comparison with the big data from the Golden Tax Phase IV system.

03

Potential Risks: Don't Take Warnings Lightly

What’s the first reaction of many people when they receive a tax risk alert? Either they panic, thinking they’re about to be audited, or they shrug it off, figuring it’s no big deal and they can just ignore it. Both of these reactions are actually wrong—they’ll turn a minor issue into a major problem. Let me break down the potential levels of risk you might face after receiving such a notice.

First, the first risk:If no response is received by the deadline, the matter will be escalated to the audit department.. Many people don’t realize that tax risk alerts actually give you an opportunity to conduct a self-inspection and correct any issues. When the tax authorities detect anomalies through big data monitoring, they first send you an alert, allowing you to explain the situation yourself. If you don’t respond within the specified timeframe, the system will automatically mark the anomaly as “unresolved,” and tax officials will then be dispatched to conduct an on-site audit. What started as a minor data discrepancy can, if left unaddressed, escalate into an on-site audit—which in turn may uncover other potential non-compliance issues, making it a case where the cost far outweighs the benefit.

Second, the second risk:Self-diagnosis misses the mark; the more you explain, the more trouble you get into.. Many sellers spend a long time poring over the reports themselves but can’t find the specific issues corresponding to the risk alerts, so they just write something like “I have no issues” and submit it. As a result, when the tax authorities review the response, they see that you haven’t provided a targeted explanation for the points of concern. Instead, they may suspect you have something to hide, further deepening their suspicion. Moreover, cross-border business involves two sets of rules—one domestic and one international—and many risk points are hidden within the fund flows and transaction structures. These are virtually impossible for non-professionals to detect, and offering a haphazard explanation on your own can easily expose even more issues.

Third, the most serious risk:Tax Backpayments and Penalties Affect a Company’s Creditworthiness. If non-compliance does occur—such as concealing income or making false declarations—and the company fails to voluntarily disclose and correct the issue, only to be discovered later, it will not only be required to pay the full amount of back taxes and late payment penalties but will also face fines ranging from 0.5 to 3 times the amount owed. If the violation involves a serious offense such as tax fraud, it may also result in criminal liability. A decline in a company’s tax credit rating not only affects your ability to apply for export tax rebates but also impacts your access to bank loans and platform listings; it may even affect the business owner’s personal credit history.
04

Misconception: Getting the First Step Wrong

Having discussed all these risks, what should you actually do first when you receive a risk alert? I’ve seen many people take the wrong first step, so let me list a few common mistakes. The first mistake:Go straight to your connections to get things done, ignoring the prompt itself. Many business owners’ first instinct isn’t to read the notification, but to reach out to people they know and pull strings to try to sweep the issue under the rug. In fact, now that the Golden Tax Phase IV system is up and running, all anomalies are recorded in the system and cannot be deleted simply through personal connections. If you miss the response deadline, you’ll only end up turning a minor issue into a major one.

The second mistake:I’ll file the amended return and pay the back taxes right away—I’m afraid of getting audited.. Some business owners panic too easily; as soon as they see a risk alert—regardless of whether there’s actually a problem—they immediately pay back taxes. In reality, many risk alerts are simply due to data discrepancies—such as differences in export tax rebate cycles or variations in revenue recognition timing—and do not actually indicate underpayment of taxes. Blindly paying the back taxes not only amounts to admitting you’ve done something wrong but also results in paying more than necessary for no reason, while leaving an abnormal record on your file.

The third mistake:Let the finance department just slap something together and turn it in. In many small and medium-sized companies, the finance staff are essentially just bookkeepers; they’re unfamiliar with the rules governing cross-border business and have never handled risk notifications before, so they just jot down a few random sentences about the risk points and submit them. As a result, when the tax authorities review your explanation and find that the logic doesn’t hold up and the evidence is insufficient, they’ll come directly to your office to conduct an on-site audit.

To put it simply, these mistakes all boil down to the same problem: taking action without fully understanding what risks the tax authorities are actually pointing out. When you’re heading in the wrong direction, the harder you try, the further off the mark you end up.
05

The First Step: First, Verify That the Information Is Complete

So what should be the right first step? Actually, it can be summed up in one sentence:First, take a moment to calm down, read through the risk disclosure carefully, confirm the three key points, and don’t rush into taking any action.Let me break it down for you. Specifically, we need to confirm these three pieces of information:

First, verify the authenticity of the notification. With so many scams circulating these days, start by checking where the notification came from: if it’s a pop-up from the Electronic Tax Bureau or an official notice from your local tax authority, it’s legitimate; if it’s just an unsolicited text message or phone call asking you to call a certain number or transfer money, it’s most likely a scam. Call the public phone number listed for your local tax authority to verify the information first.

Second, confirmationWhat are the specific risk factors?Tax risk alerts do not simply tell you in vague terms that “you are at risk”; they clearly specify which data points are abnormal. For example: “There is a significant discrepancy between your company’s revenue reported on the 2024 VAT return and the revenue reported on the corporate income tax return,” “The amount declared on your company’s export customs declaration does not match the foreign exchange receipts,” or “Your company has unreported revenue from foreign exchange receipts deposited into personal accounts.” You must identify these specific risk points to understand what the tax authorities are focusing on, so you can conduct a targeted self-inspection afterward. If you are only told that there is an anomaly without being given specifics, you should proactively contact the tax authorities to clarify the exact issues in person.

Third, confirm the deadline for providing feedback. Each risk notice specifies a required response period, typically within 15 business days. Be sure to keep this deadline clearly in mind and under no circumstances miss it. If you genuinely need more time to prepare the required materials, contact the tax authorities in advance to request an extension; do not simply ignore the notice.

Many people say, “Is it really that simple? Isn’t it just a matter of reading the alert once?” I’ve seen far too many business owners whose first reaction upon receiving an alert is to panic. They can’t calm down enough to read the content, and without even understanding where the risks lie, they start making haphazard moves—ultimately turning a simple problem into a complicated one. Actually, if you think about it the other way around, when the tax authorities send you a notice, they’re essentially telling you, “We’ve detected an anomaly—please explain it to us.” You have to know where the anomaly lies before you can explain it, right?
06

Next Steps: Identify Risks According to the Process

Once you’ve confirmed the information, the next step is to follow the process step by step. I’ve laid out the standard procedure clearly for you—just follow it. Step 1: Conduct a targeted self-inspection focused on risk areas. Once you’ve identified the specific risk areas, gather all relevant business documents: contracts, invoices, shipping documents, bank statements, and customs declarations. Organize them all and verify that they match the data you reported. For example, if the risk alert states that your “reported revenue does not match,” you should verify every payment received from the platform to see if all amounts have been recorded and reported, if any have been omitted, or if discrepancies are due to differences in revenue recognition timing. Identify the cause of any discrepancies.

According to a report by Sohu Mobile, the key to cross-border e-commerce companies conducting risk self-assessments is to ensure"Four streams of consistency"—that is, as long as the four pathways—business flow, cash flow, invoice flow, and goods flow—align, most anomalies can be explained.

Step 2: Prepare the feedback materials based on the facts. If your self-inspection reveals that the discrepancies are normal and do not indicate any issues, simply clarify the reasons for the discrepancies, attach the corresponding supporting documents, and fill out the self-inspection form as required before submitting it. If your self-inspection reveals actual non-compliance—such as underreported income—proactively explain the situation, make the necessary adjustments, and pay any back taxes. As long as you take the initiative to self-inspect and correct the issue, you will generally only be required to pay the back taxes and late payment penalties; no fines will be imposed, and even if fines are assessed, they will be relatively minor.

Step 3: Seek professional support for complex issues. Cross-border business inherently involves two sets of tax regulations—one domestic and one international. Many risk areas, such as transfer pricing for related-party transactions, compliance for Hong Kong companies, and issues with export tax rebates, cannot be handled by the company on its own. In such cases, it is best to seek assistance from a professional financial and tax services firm. Professional firms deal with tax authorities on a daily basis; they understand the key issues the authorities focus on and know how to prepare documentation to clearly address these matters. They can help you avoid many pitfalls and minimize risks as much as possible.

07

A Fundamental Solution: Ensure Compliance in Advance

In fact, the best approach is to prevent risk warnings from arising in the first place. For cross-border businesses, financial and tax compliance is no longer an option—it’s a matter of survival. With the implementation of the Golden Tax Phase IV initiative and the CRS information exchange, regulatory authorities can now track both domestic and overseas income—the era of “tax avoidance through information asymmetry” is long gone. Here are a few key compliance areas you can use to assess and adjust your business operations:

• First.Selecting a Compliance-Based Export Model: Depending on your business type, choose either the 1039 Market Procurement Trade or the 9810 Cross-Border E-Commerce Export model to resolve issues related to invoice-free exports and profit repatriation, and legally take advantage of tax incentives.
• Second.Compliance with Fund Flow Requirements: Don’t keep using personal accounts to receive payments. Establish a compliant foreign exchange receipt channel as soon as possible to bring your overseas income into the open and avoid triggering monitoring by having large sums of money move in and out of personal accounts over extended periods.
• Third.Architectural Design Compliance: Based on the scale of your business, establish a reasonable corporate structure both domestically and internationally that not only reduces your overall tax burden but also complies with regulatory requirements in each region, thereby avoiding potential risks.
• Fourth,Daily Accounting Compliance: Keep all business documents on file, ensure consistency among the four flows, file tax returns accurately and on time, and avoid leaving any discrepancies that could be flagged during data comparisons.

Based on Qicaiying’s industry experience, more than 80% cross-border tax risks can be avoided through proactive compliance planning. Waiting until a risk alert is received to address the issue not only incurs higher costs but also makes resolution much more difficult.

Many business owners believe that ensuring compliance will increase costs. However, if you look at it the other way around, the costs associated with non-compliance—such as back taxes, fines, and damage to creditworthiness—are far higher than the costs of compliance. Now that the traffic boom in cross-border e-commerce has passed, the next competitive edge lies in compliance capabilities. Whoever gets their compliance in order first will go the farthest.

Qicaiying specializes in providing one-stop financial and tax compliance services for cross-border e-commerce businesses, foreign trade companies, and entrepreneurs expanding overseas. Our services include corporate structuring, bookkeeping and tax filing, export tax rebates, platform transaction compliance, Hong Kong company audits, tax planning, and offshore business management. If you are currently facing issues such as unclear accounting records, discrepancies between transaction records and tax filings, insufficient cost invoices, Hong Kong companies that have not been audited for an extended period, or uncertainty regarding the appropriateness of your current corporate structure, please add us on WeChat at 19076121147 for a detailed analysis tailored to your company’s specific business situation.