Sources last verified: 13 October 2026
Official sources cited at the end of this page
Our regulatory compliance engine clears every new Swiss account for CRS 2.0 on Day 1. It collects each self-certification with controlling persons and their roles, runs the TIN check and the reasonableness test, resolves indicia automatically instead of by your team, and prepares the validated CRS XML report for the FTA, with zero remediation, as section 09 shows.
What does CRS 2.0 require of a Swiss bank? Since 1 January 2026, the amended Federal Act on the International Automatic Exchange of Information in Tax Matters (the AEOI Act) and its ordinance apply the OECD’s 2023 update of the Common Reporting Standard in Switzerland: specified e-money products and central bank digital currencies come into scope, every report carries new data points, and the first amended reports reach the Federal Tax Administration (FTA) by 30 June 2027. The standard itself is covered in our CRS 2.0 guide for financial institutions.
The change starts at account opening. A new client resident in a jurisdiction that, on the OECD’s published information, issues tax identification numbers to all residents, who leaves the TIN blank, now gives the bank reason to know the self-certification is unreliable. It cannot be relied on until the TIN is obtained, and the amended report shows whether a valid self-certification was obtained.
The cost is written into the Act. An intentional breach of the due diligence, registration, client-information, reporting or retention duties carries a fine of up to CHF 250,000.
There are two ways to meet the amended Swiss rules. The first collects forms at onboarding, then tests, chases and remediates before the 30 June filing. The second completes and tests the self-certification while the client is still onboarding, so the FTA report is built from data that was clean on Day 1. One finds the gap in June; the other closes it on the day the account opens.
The Federal Council put both texts into force on 1 January 2026, by its decision of 26 November 2025, but held back the crypto-asset provisions, Switzerland’s implementation of the Crypto-Asset Reporting Framework, to 2027 at the earliest.
01 · Switzerland CRS 2.0 at a glance
| Point | Position as at 13 October 2026 |
| Legal basis | AEOI Act (AIAG, SR 653.1) and AEOI Ordinance (AIAV, SR 653.11), as amended; in force since 1 January 2026 |
| Authority | Federal Tax Administration (FTA, ESTV in German); policy with the State Secretariat for International Finance (SIF) |
| Who reports | Swiss Reporting Financial Institutions, now including institutions holding specified e-money products or central bank digital currencies for clients |
| Registration | Unprompted, with the FTA, through its AEOI portal (AIAG Art. 13) |
| Client notice | By 31 January of the year a reportable person’s information is first transmitted (Art. 14) |
| Filing deadline | 30 June for the previous calendar year, nil reports included; first amended reports by 30 June 2027 (Art. 15) |
| XML schema | Version 3.0 from 1 January 2027; the portal supports only 2.0 until 14 December 2026 and only 3.0 from 16 January 2027 |
| Pre-existing accounts | Role information reported only if electronically searchable, for reporting periods ending by the second calendar year after the amended standard took effect |
| TIN rule | A blank TIN, where OECD information shows the jurisdiction issues TINs to all residents, gives reason to know the self-certification is unreliable |
| Penalties | Intentional breaches: up to CHF 250,000 (institution duties), CHF 100,000 (information to the FTA), CHF 10,000 (client) |
| Retention | Ten years, under Article 958f of the Code of Obligations (AIAG Art. 17a) |
| CARF | Not applied in 2026; no date set; OECD list: first exchanges by 2028 |
02 · Understanding CRS 2.0
The Common Reporting Standard is the OECD’s model for exchanging financial account information between tax authorities; as at 30 September 2026 the OECD lists 131 jurisdictions committed to it. CRS 2.0 is the 2023 update, published with CARF in a consolidated text on 8 June 2023. It adds specified e-money products and central bank digital currencies, excludes small e-money accounts and adds data points on roles, self-certification and account status.
03 · Switzerland’s Regulatory Path
Parliament amended the AEOI Act on 26 September 2025 and, the same day, approved the multilateral agreement for CARF. The Federal Council amended the ordinance on 26 November 2025, and the SIF confirms in its FAQ, updated 18 May 2026, that both came into force as planned.
For anyone looking for Switzerland CRS guidance, the operational references are the FTA’s AEOI guidance of 15 January 2026, which applies the 2017 Commentary with the changes of 8 June 2023, and its technical guidance of September 2026, announced on 4 September 2026, on format, deadline and validation.
04 · Who Is Affected, and Are You in Scope?
| Question | What it means for you |
| A Swiss bank, securities firm, custodian or fund? | A Swiss Reporting Financial Institution unless an exemption applies: register with the FTA and run due diligence on every account. |
| Holding specified e-money products or central bank digital currencies for clients? | Those are depository accounts from 2026; the amended standard excludes an e-money account whose 90-day rolling average never exceeds USD 10,000. |
| Clients with crypto derivatives in custody, or a fund investing in crypto-assets? | Caught through the expanded Financial Asset and Investment Entity definitions. |
| An association or a foundation? | Now directly within the CRS, unless it meets the qualified non-profit conditions in AIAV Art. 6a, deemed met where exempt under DBG Art. 56(g) or (h). |
| Offering cash-value insurance or annuities? | A specified insurance company, under the CRS due diligence, with specific relief for some contracts. |
| Running a crypto exchange or wallet service? | Crypto-assets held directly fall under CARF, which Switzerland does not apply in 2026. |
05 · How Reporting Works in Switzerland
The AEOI Act sets a five-step cycle:
- Register. Unprompted, with the FTA, giving name, UID, type of activity and start date (Art. 13), through the FTA’s AEOI portal.
- Inform clients. By 31 January of the year a reportable person’s information is first transmitted: its status as a reporting institution, the agreements, the partner states, the permitted use and their data-protection rights (Art. 14).
- Collect and test. Due diligence on new and pre-existing accounts, section 06.
- Report. Electronically, within six months after the calendar year, including undocumented accounts (Art. 15). An institution with no reportable accounts files a nil report by the same date, which the portal’s online form accepts without an XML file.
- Keep the records. Ten years from the end of the financial year, as Article 958f of the Code of Obligations requires (Art. 17a).
For schema 3.0 the FTA’s guidance adds, among others, AccountType, DDProcedure (new or pre-existing), JointAccount and SelfCert. For accounts opened before the amended standard took effect, role information is reported only where it sits in electronically searchable data, for reporting periods ending by the second calendar year after that date.
On zero or negative balances, the UK tax authority, applying the same OECD standard, states that a reportable account “must be reported even where the balance or value of the account is zero or negative”.
For a European resident weighing the tax implications of having a private bank account in Switzerland, EU residence settles the reporting side: Switzerland exchanges with the EU under a bilateral treaty applied since 1 January 2017, so the bank reports the account to the FTA, which passes it to the Member State of residence. Tax treatment is a matter for that state’s law.
06 · TIN Validation and Ongoing Due Diligence
Every self-certification is tested for reasonableness against the AML/KYC file before the account is relied on.
TIN validation is optional under the amended Commentary, which does not require a format check. Many institutions validate anyway, because a well-formed number can pass every format rule and belong to nobody; at scale, that is the role TIN validation plays in ensuring reporting accuracy. Our TIN lookup tool validates numbers against official sources in 130+ countries, in real time, with format validation across 210+.
After a change in circumstances, the FTA’s guidance lets the institution treat the client on the original information for at most 90 more days, unless a new valid self-certification arrives first. A client who intentionally fails to report a change, or reports it falsely, faces a fine of up to CHF 10,000.
07 · Integrating Digital-Asset Compliance
Switzerland is applying the two regimes at least a year apart. The amended CRS expands reporting to specified e-money products, central bank digital currencies, crypto derivatives held in custody and investment entities investing in crypto-assets. Crypto-assets held directly belong to CARF, which applies at the earliest from 1 January 2027. No date is set: the National Council declined the partner-states decree on 28 September 2026.
For institutions managing cross-border crypto accounts, CRS 2.0 reaches the custodial and fund side now. The OECD’s CARF list of 14 September 2026 places Switzerland among jurisdictions committed to first exchanges by 2028, and the SIF says providers may already adapt their self-certification to collect what CARF will require: that is how firms ensure accurate CARF self-certification during onboarding before the FTA’s CARF guidance appears. In the EU, the same pairing arrives through DAC8.
08 · Penalties and Enforcement
| AEOI Act | Fine up to | For |
| Art. 32 | CHF 250,000 | Intentional breach of the due diligence, registration, client-information, reporting or retention duties |
| Art. 32a | CHF 100,000 | Intentional breach of the duty to provide information to the FTA |
| Art. 33 | CHF 50,000 | Intentionally ignoring an official order in an FTA review |
| Art. 35 | CHF 10,000 | A client who intentionally gives no or a false self-certification, or fails to report a change |
Where a fine of up to CHF 50,000 is in question and tracing the individuals would be disproportionate, the business can be ordered to pay (Art. 34). A voluntary self-disclosure goes unpunished where it is complete and accurate, the person helps establish the facts, and it is their first of the kind (Art. 36).
09 · Compliance Takeaway: Two Ways to Meet Swiss CRS 2.0
Practical Compliance Measures for Financial Institutions
Many Swiss institutions meet the CRS with forms and follow-up, assembling the FTA report before 30 June from whatever has been cured. Its weakness is timing: every gap found later needs the client to answer again, and a self-certification never validated reaches the report flagged as not obtained.
At onboarding, from Day 1
TaxDo runs CRS 2.0 due diligence inside onboarding, from the first self-certification to the CRS XML report, in five steps.
Step 1 · Collect the self-certification. Guided and jurisdiction-aware, with a digital signature; for a passive entity, its controlling persons and their roles in the same flow.
Step 2 · Validate the identity. Every TIN checked in real time against official sources in 130+ countries, and the business against registries in 120+.
Step 3 · Run the due diligence. Indicia detected across everything held on the account, and the self-certification tested for reasonableness against it.
Step 4 · Cure the gaps, without the compliance team:
4a · New accounts. Discrepancies resolved in the same session, while the client is still onboarding.
4b · Existing accounts. The book scanned and prioritised; missing TINs, outdated self-certifications and unresolved indicia remediated.
Step 5 · Report, and keep the evidence. Schema-validated CRS XML (schema 3.0), prepared and validated for your institution to submit to the FTA. On request, our team can also submit it on your behalf as an additional service. Every account holder keeps an immutable clearance record.
From Day-1 self-certification to CRS XML reporting, with zero remediation. Every account is cleared at opening.
Our CRS 2.0 compliance software · Solutions for financial institutions
Where this sits, and what it does not touch
It runs beside your KYC provider and core banking system, not in place of them. The reporting obligation, and the responsibility for what is reported, stays with your institution, including where TaxDo submits the report on its behalf at its request. TaxDo runs the due diligence and prepares and validates the report.
10 · Global Benchmarks and Timelines
| Jurisdiction | Amended CRS applies from |
| United Kingdom | 1 January 2026 |
| Germany | 1 January 2026 (required by DAC8) |
| Japan | 1 January 2026, in principle |
| South Africa | 1 March 2026 |
| Cayman Islands | In 2026 |
| Canada | Proposed for 2027 (Bill C-31) |
1 January 2026
Amended CRS in force in Switzerland.
2027
Schema 3.0 only from 16 January; first amended reports by 30 June; CARF at the earliest.
11 · Related Reading
Framework articles: CRS 2.0 compliance for financial institutions · CARF and crypto tax transparency · Self-certification under CRS 2.0, DAC8 and CARF
Product: Regulatory compliance engine · Day 1 onboarding validation · Business registry check · CRS 2.0 compliance software

