Mr. Zhang runs a trading company in Hong Kong and has several million dollars in offshore accounts, as well as dozens of bitcoins stored in an exchange wallet. He had always believed this structure was ”secure”—a Hong Kong company, a BVI shell company, and a crypto wallet, all nested in three layers, hidden from prying eyes. But in April 2026, the Hong Kong Legislative Council gave first reading to a bill, and his ”safety net” was being dismantled piece by piece.

The bill is titled the “Taxation (Amendment) (Automatic Exchange of Information) Bill 2026”; in layman’s terms, it is the Hong Kong legislative version of CRS 2.0. The changes it brings are not merely minor tweaks, but rather a complete overhaul of the rules governing the disclosure of cross-border asset information.

01

What exactly has been upgraded in CRS 2.0?

First, let’s clarify what the CRS is. In 2014, the OECD introduced the Common Reporting Standard (CRS), and its core logic is simple: Do you have bank accounts, stocks, or mutual funds overseas? Financial institutions in the country where the account is held automatically report your account information to the local tax authority each year, and the local tax authority then shares that information with the country of your nationality. As of the end of 2025, more than 120 countries have signed the agreement, including mainland China and Hong Kong, China.

The first-generation CRS primarily focused on traditional financial accounts—bank deposits, securities accounts, and insurance policies. But by 2023, the OECD found that this set of rules was no longer sufficient: crypto assets were not being reported, there were loopholes in dual tax residency, and the look-through approach for offshore shell companies was not thorough enough. Thus, CRS 2.0 was introduced.

There are three key upgrades in CRS 2.0.

First Measure: Cryptocurrencies are subject to mandatory reporting.Bitcoin, Ethereum, stablecoins, NFTs, and central bank digital currencies are all classified as ”financial assets.” Exchanges and wallet custodians must verify their customers’ tax residency status and report balances and transaction records to the tax authorities annually. This includes every on-chain address and transaction hash (TXID)—not a single one is left out.

Second Measure: It is no longer possible to ”choose one or the other” when it comes to dual tax registration.Under the old rules, if you were a tax resident of both the mainland and Hong Kong, you could file a tax return in only one jurisdiction under the ”higher-rate rule” of the tax treaty. CRS 2.0 has closed this loophole—you must now report all your tax residency statuses, and financial institutions are required to report information to every relevant jurisdiction simultaneously.

Step 3: Trace through to the ultimate beneficiary.BVI shell companies, Cayman Islands SPVs, and offshore trusts—in the past, these structures could still provide some protection. CRS 2.0 requires financial institutions to identify and report the ”ultimate beneficial owners” (UBOs) of passive non-financial entities. Shell companies lacking a physical office, local staff, and substantive business operations—the so-called ”three-no” shell companies—will be directly flagged as tax avoidance vehicles.

02

Hong Kong's Legislative Timeline

On April 1, 2026, the Hong Kong “Taxation (Amendment) (Automatic Exchange of Information) Bill 2026” was introduced to the Legislative Council for its first reading. This bill primarily serves two purposes: first, to strengthen the existing CRS administrative framework—through mandatory registration, stricter penalties, and the introduction of a fine mechanism; and second, to lay the administrative groundwork for the full implementation of CRS 2.0 in the future.

The timeline goes something like this:

If the draft bill is passed by the Legislative Council, the administrative enforcement measures will take effect on January 1, 2027. Meanwhile, the substantive expansion of CRS 2.0—including the reporting of crypto assets, full reporting for individuals with dual tax residency, and look-through information exchange—will be implemented in phases between 2027 and 2029 through separate legislation. The first CRS 2.0 information exchange is expected to take place in 2027, covering the 2026 reporting year.

In other words.2026 will be the ”first year of reporting” for CRS 2.0”. Financial institutions will begin collecting data according to the new standards at the end of this year and start exchanging it next year. There isn’t much time left to make adjustments.

03

Who will be affected?

CRS 2.0 is not a vague policy signal, but rather an upgrade to the rules with a specific ”scope of impact.” The following groups of people are directly affected:

People who hold crypto assets.In the past, many people believed that Bitcoin was ”decentralized” and untraceable, but CRS 2.0 has stripped away that layer of protection. Once the crypto asset reporting requirements are fully implemented in 2028, licensed exchanges and wallet providers in Hong Kong will be required to proactively report information on crypto assets held by non-Hong Kong tax residents to the Hong Kong Inland Revenue Department, which will then automatically exchange that information with the countries where the users are tax residents.

People who own offshore shell companies.Shell companies in the BVI, the Cayman Islands, and Hong Kong—a large number of cross-border businesses and investors use these structures to hold assets. CRS 2.0 requires financial institutions to look beyond shell companies and identify the ultimate beneficial owners (UBOs) behind them. Even if a shell company has no physical office, no employees, and no business operations, the information will still be reported to the UBO’s country of tax residence.

People who hold citizenship in both places.Attention to those who have obtained the Hong Kong High-Talent Pass or Quality Migrant Admission Scheme visa—you may be a tax resident of the Mainland, a tax resident of Hong Kong, or both. Previously, you could ”choose one to file with,” but now both jurisdictions will receive your account information.

Sellers in the cross-border e-commerce industry.Many cross-border sellers register companies in Hong Kong to process payments and receive funds, leaving their profits in Hong Kong. Under CRS 2.0, which requires looking through to the beneficial owners, this profit information will be exchanged with mainland tax authorities.

04

What are the consequences of ignoring someone?

Many people think that the CRS is ”a matter between countries” and has nothing to do with them. However, there are several key changes in Hong Kong’s recent legislation that deserve special attention.

First, penalties have been significantly strengthened. Under the previous version of the CRS, the cost of noncompliance was very low, and the Hong Kong Inland Revenue Department generally issued only ”mild reminders.” The new draft introduces several new penalties—financial institutions that fail to fulfill their reporting obligations or retain records as required will face administrative fines or even criminal liability.

Second, the level of detail in the information has increased significantly. In addition to basic data such as account balances, interest, and dividends, CRS 2.0 will also report: the account opening date, account type, number of joint account holders, the specific role of the beneficial owner within the entity (trustee, protector, beneficiary), and even whether the account is ”newly opened” or ”existing.” A complete financial profile.

Third, mainland tax authorities are already taking action. At a press conference held by the State Taxation Administration on April 1, 2026, a clear signal was sent: tax authorities will use cross-border financial account information obtained through the Common Reporting Standard (CRS) to rigorously verify tax returns for overseas income. It is against this backdrop that an increasing number of mainland residents holding Hong Kong and U.S. stocks have received notices to pay back taxes over the past two years.

Furthermore, the CRS information exchange takes place ”behind the scenes.” You don’t know when the tax authorities will access your information, nor do you know what they’ve identified through their comparisons. But once you receive a notice to pay back taxes, it often comes as a ”package deal” that includes late payment charges and penalties.

05

What Should I Do Now?

CRS 2.0 isn’t meant to scare anyone—it’s a rule that’s already in effect. There’s no point in trying to avoid it; transparency is the way of the future. Instead of passively waiting for a tax assessment notice, take the initiative and do these three things.

First, compile a list of assets.List all the countries and institutions where you hold accounts, specifying the type of account—bank deposits, securities, insurance, trusts, or crypto assets—and organize them item by item. Then, compare this list with your tax residency status to determine which accounts have already been reported under the CRS framework and which ones will be newly covered following the CRS 2.0 update.

Second, clarify tax residency status.This is the most underestimated step. Many people are unclear about which country’s tax resident they actually are—they assume that because they hold Hong Kong residency, ”I am a Hong Kong resident,” but if they still have a household registration, real estate, family, and a business in mainland China, they are highly likely to be considered a mainland tax resident based on the ”residence test” combined with the ”center of vital interests” test. Only by clarifying this can you determine exactly where your overseas assets will be reported.

Third, restructure the compliance framework.Don’t even think about closing your account and running away—the CRS information exchange is retroactive, and historical data that has already been reported will not disappear. The right approach is to review whether your current structure is sound: Can you replace shell companies with entities that have substantive operations? Is the distribution of profits in compliance with regulations? Are there any unreported foreign income sources that need to be voluntarily reported? Are you legally claiming tax treaty benefits?

Ultimately, CRS 2.0 doesn’t change the question of ”whether or not to comply,” but rather the ”cost of non-compliance.” In the past, the probability of being caught might have been low, but now that data is automatically processed, compared, and exchanged, the likelihood of being detected has increased significantly. It’s far better to get organized and plan ahead early on than to try to fix things at the last minute.

Scan the QR code to add Qicaiying’s online customer service

—— E N D ——

1. Favorites! Hong Kong company registration full strategy, Hong Kong licensed secretary full process services

2. What does fiscal compliance really mean?

📢 For more practical insights on cross-border business, compliance, taxation, and Hong Kong residency, scan the QR code to follow the “Qicaiying International Business Services” WeChat official account.