Under FATCA and the Common Reporting Standard, identifying the controlling persons of a passive NFE means naming every individual who owns more than 25% of the entity, exercises control through other means, or holds a defined role in a trust, and collecting their identifying and tax-residence information on a self-certification form. The rule exists so that banks can see through holding companies and trusts to the humans behind them. Getting the list wrong, or leaving it blank, triggers 30% withholding on U.S.-source payments and can expose individual owners to penalties reaching $60,000.
First, Confirm the Entity Is a Passive NFE
The controlling-person rules only apply to passive non-financial entities. A non-financial entity is any foreign entity that is not itself a financial institution, and it becomes passive by failing two tests measured against the prior year:
- The income test: 50% or more of gross income came from passive sources such as dividends, interest, rents, royalties, annuities, and gains on financial assets.
- The asset test: 50% or more of assets were held to produce passive income.
An entity that meets either condition, and doesn’t fit an exempt category, is passive, and the look-through requirement kicks in. An operating business whose revenue comes from selling goods or services through its own employees is active, and the controlling-person analysis stops there.
Who Counts as a Controlling Person by Ownership
The primary route to controlling-person status is ownership. Both FATCA (through its intergovernmental agreements) and CRS defer to each jurisdiction’s anti-money-laundering rules, which almost universally set the threshold at more than 25% of shares or voting rights. Any individual crossing that line, directly or indirectly, must be identified.
Indirect ownership is calculated by multiplying through each layer of the corporate chain. If you own 75% of Company A, and Company A owns 80% of the passive NFE, your indirect stake in the NFE is 60%. You are a controlling person. Add another tier where the NFE owns 90% of a subsidiary and your interest in that subsidiary is 54%, still well above the threshold. The multiplication continues for as many layers as exist. Stacking holding companies does not dilute you out of the reporting net.
Controlling Persons Without a 25% Stake
Ownership is not the only route. A person who can appoint or remove directors, veto major transactions, or otherwise steer the entity’s strategic decisions is a controlling person regardless of how little equity they hold. Contractual and structural control counts the same as shares.
When no individual can be identified through ownership or other control mechanisms, the fallback is the entity’s senior managing official, typically the chief executive, chief financial officer, or managing director. Every passive NFE ends up with at least one named human being. Reporting “no one controls this entity” is not an option the framework allows.
Trusts: A Different Set of Roles
When the passive NFE is a trust, the analysis does not use ownership percentages at all. The following individuals are automatically controlling persons:
- The settlor, who transferred assets into the trust.
- The trustee or trustees managing the assets.
- The protector, if one is appointed, who oversees the trustees.
- All beneficiaries, or the class of beneficiaries where individuals have not yet been named.
- Any other person exercising ultimate effective control, including anyone with the power to revoke or amend the trust.
There is no minimum threshold. A beneficiary who has never received a distribution and holds no formal power is still reportable. That breadth is why trust account openings tend to require substantially more documentation than corporate ones.
Information You Must Collect on Each Controlling Person
For every controlling person identified, the self-certification form must capture:
- Full legal name.
- Residential address. This has to be a genuine residence for tax purposes, not a P.O. box or mail-forwarding address, unless it is the entity’s only registered address.
- Date of birth.
- Every jurisdiction in which the person is tax-resident.
- The taxpayer identification number issued by each of those jurisdictions.
FATCA uses Form W-8BEN-E, completed by the entity itself, to certify its classification and disclose substantial U.S. owners or controlling persons. For CRS, the OECD publishes a model entity self-certification form, and most banks use their own version aligned to local requirements. If any answer conflicts with what the institution already knows from its know-your-customer file, expect the account to be flagged and possibly frozen until the discrepancy is resolved. Gathering tax IDs for every jurisdiction of residence before you submit the form heads off the most common delay.
How Long the Certification Stays Good
A W-8BEN-E is valid from the date signed through the end of the third calendar year that follows. A form signed at any point during 2026 expires December 31, 2029. If any fact on the form becomes wrong before then, whether the entity’s classification, a controlling person’s tax residence, or the jurisdiction’s FATCA status, the entity has 30 days to notify the withholding agent and submit a fresh form.
CRS self-certifications carry no fixed expiration. They remain valid until a change in circumstances makes them inaccurate, at which point the entity is obligated to notify the institution. Financial institutions also run periodic reviews and may ask for a refreshed certification as part of ongoing due diligence.
What Happens If You Don’t Provide the Information
The consequences arrive from three directions.
Automatic 30% Withholding
Under 26 U.S.C. ยง 1472, a withholding agent must deduct and withhold 30% of any withholdable payment made to a non-financial foreign entity that has not certified its substantial U.S. owners or controlling persons. Withholdable payments include U.S.-source interest, dividends, and other fixed or determinable income. The 30% comes off at the moment of payment, not after an audit. Until documentation is provided, the entity receives 70 cents on the dollar.
Form 8938 Penalties on Individuals
U.S. taxpayers with interests in foreign financial assets have a separate reporting duty on Form 8938. Filing thresholds vary by residence and status:
- Unmarried and living in the U.S.: assets over $50,000 on the last day of the year, or $75,000 at any point.
- Married filing jointly in the U.S.: $100,000 on the last day, or $150,000 at any point.
- Single and living abroad: $200,000 on the last day, or $300,000 at any point.
- Married filing jointly and living abroad: $400,000 on the last day, or $600,000 at any point.
Failing to file when required starts at a $10,000 penalty. If the failure persists 90 days after the IRS sends notice, another $10,000 accrues for every 30-day period, capped at $50,000 in additional penalties. The maximum for a single failure is $60,000. Joint filers are jointly and severally liable, so the IRS can collect the full amount from either spouse. A reasonable-cause exception exists, but you have to affirmatively show the failure was not due to willful neglect.
Account Restrictions
Financial institutions apply their own deadlines. Accounts that remain undocumented past those deadlines are commonly frozen or closed, and some jurisdictions require the institution to report undocumented accounts to the local tax authority anyway, which tends to invite further inquiries.
Entities That Don’t Require Look-Through
Several categories of entity are exempt from the controlling-person analysis:
- Publicly traded corporations whose stock trades on an established securities market, and affiliates in the same corporate group.
- Active NFEs, meaning entities where less than 50% of gross income is passive and less than 50% of assets produce passive income.
- Foreign governments, their political subdivisions, and wholly owned government agencies.
- International organizations such as the United Nations and World Bank, along with their wholly owned agencies.
- Foreign central banks of issue.
If your entity fits one of these, the self-certification will still ask you to certify the classification, but you will not need to name the individuals behind it. For everyone else, the passive-versus-active line is the one that decides whether the controlling-person exercise applies at all.