How to Handle Dormant Accounts Under CRS Due Diligence: A 2026 Compliance Guide

Financial institutions worldwide processed over 111 million CRS reports in 2025, yet a significant portion involved accounts where no customer contact had occurred for years. As the OECD tightens its Common Reporting Standard framework, dormant account CRS compliance has emerged as a critical pressure point. The 2026 update to the CRS Implementation Handbook now dedicates an entire chapter to inactive accounts, reflecting the fact that approximately 18% of reportable financial accounts in major jurisdictions fall into dormant status. Getting this wrong triggers not only regulatory penalties—which averaged EUR 2.4 million per incident in 2025—but also systemic reporting errors that cascade through automatic exchange networks. This article provides a structured approach to handling dormant accounts under CRS due diligence, from threshold identification through reactivation protocols, designed for compliance officers, reporting teams, and senior management responsible for AEOI obligations.

Understanding Dormant Account Definitions Under CRS

The CRS framework does not use a single universal definition for a dormant account, instead relying on local regulatory interpretations that generally coalesce around a core principle: an account becomes dormant when the account holder has not initiated any transaction or communication for a specified period, typically ranging from 12 to 36 months depending on jurisdiction. In 2026, the OECD clarified that a dormant account CRS classification applies when there is no customer-initiated activity—excluding system-generated interest postings, fee deductions, or automatic rollovers—combined with no response to at least two documented contact attempts by the financial institution. This distinction matters because dormant status directly affects which due diligence procedures apply. A current account that simply has low transaction volume does not automatically qualify as dormant; the absence of meaningful account holder engagement is the defining characteristic. Financial institutions must document their dormancy criteria in written policies, ensuring consistency across all entities within the reporting group. The inactive account CRS review process begins with correctly identifying which accounts meet this threshold, as misclassification can lead to either over-reporting of non-reportable accounts or, more seriously, failure to identify reportable persons hiding behind apparent inactivity.

CRS Dormant Account Thresholds and Review Triggers

The CRS dormant account thresholds serve as the primary mechanism determining whether a financial institution must apply standard due diligence procedures or may rely on streamlined approaches. For accounts with balances below USD 1,000 as of 31 December of the reporting year, most jurisdictions permit a simplified review process where the institution relies solely on electronically searchable data without requiring physical file reviews or relationship manager inquiries. However, the 2026 OECD guidance introduces an important nuance: this threshold applies per account, not per customer, meaning a customer with multiple small dormant accounts may collectively exceed meaningful thresholds even if individual accounts fall below. For dormant accounts with balances between USD 1,000 and USD 250,000, financial institutions must conduct electronic record searches for indicia of foreign tax residence, including telephone numbers with foreign country codes, standing instructions to transfer funds to foreign jurisdictions, and power of attorney arrangements involving foreign addresses. Dormant accounts exceeding USD 250,000 trigger full enhanced due diligence, including paper record reviews and relationship manager inquiries—a requirement that persists even if the account has been inactive for decades. The inactive account CRS review must be documented with sufficient detail to demonstrate to auditors that thresholds were correctly applied and that no high-value dormant accounts escaped enhanced scrutiny.

Due Diligence Procedures for Long-Term Inactive Accounts

When an account has been dormant for an extended period—typically exceeding five years—the due diligence challenge intensifies because the original account opening documentation may be outdated, incomplete, or stored in legacy systems that are not easily searchable. The 2026 CRS guidelines require financial institutions to apply a two-stage approach to dormant account CRS due diligence for long-term inactive accounts. First, the institution must exhaust all electronically searchable data sources, including archived customer relationship management records, historical transaction narratives, and any digitized correspondence logs. Second, if electronic searches yield no indicia of foreign tax residence, the institution must conduct a reasonable inquiry into whether physical files exist and, if they do, whether those files contain relevant indicia. This does not mean institutions must physically retrieve every dormant account file—a practical impossibility for institutions with millions of legacy accounts—but they must have a documented methodology for sampling and prioritizing physical reviews based on risk factors such as account balance, last known address type, and account opening channel. The inactive account CRS review documentation must clearly evidence that the institution followed its stated procedures and did not simply assume that lack of electronic indicia equals lack of reportable status.

Reactivated Account CRS Compliance Obligations

The moment a dormant account becomes active again, the reactivated account CRS compliance framework imposes immediate obligations that catch many institutions off guard. Reactivation occurs when the account holder initiates any transaction, responds to institution communications, or otherwise engages with the account in a manner that breaks the dormancy period. The 2026 OECD guidance clarifies that reactivation triggers a fresh look at the account under current CRS due diligence standards, not the standards that applied when the account was originally opened. This means that even if the account holder previously provided a self-certification under an older regulatory regime, the institution must obtain a new, valid self-certification that complies with current CRS requirements. For dormant account CRS cases where reactivation occurs mid-year, the institution must complete due diligence within 90 days of reactivation and, if the account is determined to be reportable, include it in the next scheduled reporting cycle. Critically, reactivation does not retroactively change the account’s status for prior reporting periods—institutions should not amend historical reports solely because a dormant account later became active—but it does require forward-looking compliance from the date of reactivation onward. Financial institutions should build automated triggers into their core banking systems that flag reactivated dormant accounts for immediate CRS review, preventing the common scenario where reactivated accounts slip through reporting cracks for months or even years.

Documentation and Audit Trail Requirements

Regulatory examiners in 2026 are placing unprecedented emphasis on the quality of dormant account CRS documentation, not just the accuracy of ultimate reporting determinations. Every dormant account that is excluded from reporting must have a clear audit trail demonstrating why due diligence concluded that no reportable indicia existed. This trail must include the date of dormancy determination, the specific review procedures applied, the data sources consulted, the search terms used if electronic searches were performed, and the name or role of the reviewer. For accounts excluded under the low-value CRS dormant account thresholds, documentation must evidence that the balance was below the applicable threshold on the relevant testing date and that no aggregation with related accounts was required. The 2026 CRS Handbook introduces a new recommendation that institutions maintain a dormant account register that tracks each account’s dormancy status, review history, and next scheduled review date. This register serves dual purposes: it provides a single source of truth for internal compliance monitoring and demonstrates to external auditors that the institution has systematic controls over its dormant account population. Institutions that cannot produce coherent documentation for their inactive account CRS review processes face not only potential under-reporting penalties but also findings of systemic control failures that can trigger broader regulatory intervention.

Common Pitfalls and Remediation Strategies

The most frequent dormant account CRS compliance failure in 2025 regulatory examinations involved institutions applying the low-value threshold without verifying whether multiple accounts held by the same customer should be aggregated. A second common pitfall is treating an account as dormant for CRS purposes simply because it is flagged as dormant in the core banking system for operational reasons, without verifying that the operational dormancy definition aligns with CRS requirements. Some operational dormancy flags are triggered by as little as six months of inactivity, whereas CRS dormancy typically requires a longer period plus documented failed contact attempts. Remediation for these failures requires a look-back review that can be operationally intensive: institutions must identify all accounts where CRS treatment relied on an incorrect dormancy classification, re-perform due diligence using correct procedures, and file amended reports if reportable accounts were missed. The 2026 OECD guidance encourages institutions to conduct proactive inactive account CRS review health checks rather than waiting for regulatory findings, noting that voluntary remediation typically results in reduced penalty exposure. For reactivated account CRS failures—where reactivated dormant accounts were not subjected to fresh due diligence—remediation should prioritize accounts with balances exceeding USD 50,000 and those reactivated within the current reporting year, as these present the highest risk of material reporting errors.

Strategic Integration of Dormant Account CRS Controls

Treating dormant account CRS compliance as a standalone process separate from broader customer due diligence and tax information reporting frameworks is a recipe for inefficiency and error. Leading financial institutions in 2026 are integrating dormant account controls into their enterprise-wide customer lifecycle management systems. This integration means that when an account transitions to dormant status, the system automatically triggers a CRS review, schedules the next review date based on applicable CRS dormant account thresholds, and generates the required documentation. When an account reactivates, the same integrated system immediately flags the account for new self-certification collection and due diligence under reactivated account CRS protocols. This approach eliminates reliance on manual processes and periodic sweeps that inevitably miss accounts. The integration also supports consistency across jurisdictions: a global banking group can configure its system to apply jurisdiction-specific dormancy definitions and thresholds while maintaining a standardized documentation framework. For institutions that cannot implement full system integration in the near term, the 2026 CRS guidance recommends at minimum establishing a dedicated dormant account governance committee that meets quarterly to review population statistics, remediation progress, and any inactive account CRS review exceptions identified by internal audit or quality assurance functions.

FAQ

What is the minimum balance threshold that triggers full CRS due diligence for dormant accounts in 2026? Accounts with a balance or value exceeding USD 250,000 as of the relevant testing date trigger full CRS due diligence procedures, including paper record searches and relationship manager inquiries, regardless of how long the account has been dormant. The 2026 OECD guidance confirms that this threshold has not been adjusted for inflation and remains applicable globally, though individual jurisdictions may impose lower thresholds.

How long can an account remain dormant before a financial institution must conduct a new CRS review? Financial institutions must review dormant accounts at least once every three years under the 2026 CRS framework. However, if the account balance exceeds the jurisdiction’s low-value threshold—typically USD 1,000—the review must occur annually as part of the standard reporting cycle. Accounts that have been dormant for more than five years require the enhanced two-stage review process described in the 2026 CRS Implementation Handbook, even if the balance is below the low-value threshold.

Does reactivating a dormant account require the financial institution to amend prior year CRS reports? No. The 2026 OECD guidance explicitly states that reactivation of a dormant account does not create an obligation to amend CRS reports for prior reporting periods. The financial institution’s reporting obligation applies prospectively from the date of reactivation. However, if the institution discovers during the reactivation due diligence that prior year reports contained errors unrelated to the dormancy status, those errors must be corrected through the jurisdiction’s standard amendment process, typically within the next reporting cycle.

参考资料

OECD, Standard for Automatic Exchange of Financial Account Information in Tax Matters, Second Edition, 2026 Update, Chapters 8-9 on due diligence requirements for dormant and low-value accounts.
OECD, CRS Implementation Handbook, 2026 Edition, Chapter 5, providing practical guidance on dormant account identification, review cycles, and documentation standards for financial institutions.
European Commission, Directive on Administrative Cooperation (DAC7) Implementation Report, 2026, detailing aggregated data on dormant account reporting volumes and common compliance deficiencies identified in member state audits.
Hong Kong Inland Revenue Department, Departmental Interpretation and Practice Notes No. 64 (Revised 2026), setting out the territorial application of CRS dormant account thresholds and reactivation procedures for Hong Kong financial institutions.
Basel Committee on Banking Supervision, Sound Practices for Managing AEOI Compliance Risks, 2026, addressing the integration of CRS dormant account controls into broader operational risk management frameworks.