A FATCA compliance program is the internal system a foreign financial institution puts in place to identify U.S. account holders, collect the right documentation, report qualifying accounts to the IRS or a local tax authority, and certify to the IRS that the whole apparatus works. The program exists because the Foreign Account Tax Compliance Act, enacted as part of the HIRE Act in 2010, makes participation the price of avoiding a 30% withholding tax on U.S.-sourced payments. If your institution has registered with the IRS or operates under an intergovernmental agreement, the program is not optional infrastructure. It is the thing being audited.
Which Institutions Need a Program
The core population is foreign financial institutions: foreign banks, investment funds, custodial institutions that hold financial assets for others, and certain insurance companies that issue cash-value or annuity contracts. An FFI has two paths to compliance. It either enters into an agreement directly with the IRS to identify and report U.S. account holders, or it operates under an intergovernmental agreement between its home country and the United States. An FFI that does neither faces a 30% withholding tax on certain U.S.-sourced payments it receives.1Office of the Law Revision Counsel. 26 USC 1471 – Withholdable Payments to Foreign Financial Institutions
Not every FFI carries the same load. Certain categories qualify as deemed-compliant, meaning they face reduced or no reporting obligations. These include institutions serving only a local client base (with at least 98% of accounts held by residents of their home jurisdiction), qualified credit card issuers, and certain collective investment vehicles whose interests are held entirely by exempt beneficial owners or active non-financial entities. Deemed-compliant FFIs still register with the IRS, but they avoid the full account-by-account reporting a participating FFI handles.
Passive non-financial foreign entities sit alongside FFIs in the FATCA framework. A passive NFFE — a foreign entity earning most of its income from investments rather than active business — must disclose its substantial U.S. owners to withholding agents, and a withholding agent paying it must withhold 30% unless the entity certifies it has no substantial U.S. owners or provides identifying details for each one.2Internal Revenue Service. Instructions for Form 8966 Some passive NFFEs elect to become direct reporting NFFEs and file Form 8966 with the IRS themselves.
One boundary worth naming: FATCA also imposes separate reporting duties on individual U.S. taxpayers holding foreign assets above certain thresholds, filed on Form 8938 with a personal tax return. Those obligations run parallel to the institutional program and are not satisfied by it.
How Intergovernmental Agreements Shape the Program
The IGA in force in your jurisdiction sets the reporting path, and the two models operate differently enough that they change how a program is built.
Under a Model 1 IGA, the FFI reports U.S. account information to its own local tax authority, which then transmits the data to the IRS automatically. The institution never reports directly to the IRS.3Internal Revenue Service. FATCA – Governments This is the more common arrangement and generally aligns reporting with local formats.
Under a Model 2 IGA, the FFI reports account information directly to the IRS. For account holders who do not consent to information sharing, the institution reports aggregate data, and the IRS can then make a group request to the partner country for specifics.3Internal Revenue Service. FATCA – Governments Model 2 FFIs also cannot receive filing extensions for reporting non-consenting U.S. accounts.4Internal Revenue Service. Frequently Asked Questions (FAQs) FATCA Compliance: Legal
The Responsible Officer
Every registered entity must designate a Responsible Officer (RO) with personal accountability for FATCA compliance. The RO oversees written policies, manages staff training, and acts as the point of contact with the IRS. Most importantly, the RO periodically certifies to the IRS that the entity has maintained an effective compliance program.5Internal Revenue Service. Overview of FATCA Certification Process
If the RO discovers material failures during a certification period, such as accounts that should have been reported but weren’t, or due diligence steps that were skipped, they must disclose those failures and describe a remediation plan. Certifying while sitting on known problems creates far worse exposure than disclosing and fixing them.
The Certification Cycle
For a participating FFI, the first certification period runs from the effective date of the FFI agreement through the end of the third full calendar year after that date. Each subsequent period covers three calendar years. The RO must submit the certification to the IRS no later than July 1 of the year following each certification period.5Internal Revenue Service. Overview of FATCA Certification Process
The certification is the moment the program is measured. Everything the RO signs off on rests on the documentation, procedures, and audit records the institution has generated over three years.
Due Diligence and Internal Controls
The heart of the program is identifying accounts held by U.S. persons, both at account opening and on an ongoing basis. For new accounts, this means collecting documentation upfront and flagging U.S. indicia: citizenship, a U.S. address, a U.S. phone number, standing wire transfer instructions to a U.S. bank. For pre-existing accounts, the institution reviews its records against the same indicators and follows up when it finds matches.
Internal auditing rounds out the framework. Regular reviews confirm that staff follow the written procedures, that data collection is complete, and that no accounts have slipped through. Detailed records of audits, training sessions, and system updates become the institution’s primary defense if the IRS questions its compliance later.
W-8 and W-9 Documentation
The W-8 series documents the foreign status of account holders and payees. The W-8BEN covers foreign individuals; the W-8BEN-E covers foreign entities claiming benefits under FATCA or a tax treaty.6Internal Revenue Service. Instructions for Form W-8BEN-E U.S. citizens and resident aliens provide a W-9, which supplies their taxpayer identification number. Withholding agents must verify that the information on these forms is consistent with other records they hold. A W-8BEN claiming foreign status from someone with a U.S. mailing address on file needs to be resolved before the agent can rely on it.
Electronically signed W-8s are acceptable, but the signature block must include the name of the authorized signer, a time and date stamp, and a statement confirming the form was electronically signed. A typed name on the signature line alone does not qualify.7Internal Revenue Service. Instructions for the Requester of Forms W-8BEN, W-8BEN-E, W-8ECI, W-8EXP, and W-8IMY
Verifying a GIIN
When an FFI provides its Global Intermediary Identification Number to a withholding agent, the agent should verify that the number is valid. The IRS publishes a searchable FFI list monthly, and any institution can be looked up by name, GIIN, or country.8Internal Revenue Service. FATCA Foreign Financial Institution (FFI) List Search and Download Tool A GIIN is a 19-character identifier formatted as XXXXXX.XXXXX.XX.XXX, with segments identifying entity type, category code, and country of registration.9Internal Revenue Service. FATCA Registration and FFI List: GIIN Composition Information If a GIIN does not appear on the published list, the withholding agent should not treat the institution as FATCA-compliant.
Registration and Annual Reporting
The FATCA Registration System
Any FFI that needs a GIIN registers through the IRS’s online FATCA Registration System. The portal handles account creation, branch registration, renewal of the FFI agreement, and submission of FATCA certifications.10Internal Revenue Service. FATCA Foreign Financial Institution Registration Keep the RO’s contact information current, because the IRS routes certification reminders and compliance notices through it.
Form 8966
Form 8966 is the annual account-level report that FFIs and direct reporting NFFEs submit to the IRS. Financial institutions must file electronically regardless of volume. The form is due by March 31 of the year following the reporting period.2Internal Revenue Service. Instructions for Form 8966
Electronic filing goes through the International Data Exchange Service (IDES), which imposes specific encryption and data-packaging standards. After transmission, the system generates metadata files confirming receipt. Monitor the portal for acceptance notifications or error messages, because a technical rejection does not extend the deadline.
Extensions
If the institution cannot meet the March 31 deadline, it can request an automatic 90-day extension by filing Form 8809-I no later than the original due date. Under hardship conditions, a second Form 8809-I can secure an additional 90 days, but it must be filed before the first extension expires.11Internal Revenue Service. Instructions for Form 8966 (2025) Model 2 FFIs cannot obtain extensions for reporting non-consenting U.S. accounts.
What Happens If the Program Fails
An FFI that does not meet its FATCA obligations faces a 30% withholding tax on withholdable payments from U.S. sources. This applies to payments such as interest, dividends, and other fixed or determinable income originating in the United States. The withholding agent deducts the tax before the payment reaches the non-compliant institution.1Office of the Law Revision Counsel. 26 USC 1471 – Withholdable Payments to Foreign Financial Institutions
The same 30% withholding hits payments allocated to recalcitrant account holders: those who refuse to provide the documentation needed to establish their status. Recalcitrant accounts are why the due diligence side of the program matters as much as the reporting side. An institution can be fully willing to comply and still bleed withholding tax through accounts it never got documented.
Beyond the tax itself, a poorly maintained program creates certification exposure. An RO who signs a certification the institution cannot support is not making a paperwork error. It is a representation to the IRS, and material undisclosed failures are the kind of thing the certification process is designed to surface.