What documents prove a client's Cyprus tax residency for onboarding purposes?

A passport plus proof of a permanent home or tenancy, utility bills, an employment contract or directorship, and travel logs showing days present, together with a CRS self‑certification and TIN. A Cyprus tax residency certificate from the Tax Department is the formal confirmation of status.

How do I apply the 60‑day test versus the 183‑day test?

The 183‑day test turns on physical presence of more than 183 days in the tax year. The 60‑day test requires all of its criteria: the individual is not tax resident in any other state and not present in another state for more than 183 days; spends at least 60 days in Cyprus; carries on business, is employed or holds an office in Cyprus; and maintains a permanent home in Cyprus.

What AML checks must be run when onboarding a non‑resident?

Identity and address verification, sanctions, PEP and adverse media screening, source‑of‑wealth checks, and EDD where the client is high‑risk, with all evidence retained.

When should I collect CRS self‑certifications and TINs?

At onboarding, before any account opening or service start. Collect and validate them during the tax‑residency screening step to avoid reporting gaps.

How long must I retain onboarding evidence under Cyprus rules and CRS?

Typically at least 5 years from the end of the relationship for AML purposes, applying any longer CRS/DAC or GDPR‑driven period set in internal policy.

How do GDPR consent and cross‑border transfers affect onboarding?

Identify an appropriate lawful basis (consent is only one option), provide a data‑processing notice, apply appropriate safeguards for transfers outside the EEA, and log the relevant assessments.

Tax Residency Due Diligence Cyprus: Onboarding Checklist 202

Updated for 2026 CRS/DAC & AML guidance.

Overview: why tax residency due diligence cyprus matters now

Tax residency due diligence cyprus sits at the centre of every compliant onboarding file an adviser opens in 2026. This checklist is written for relationship managers, tax specialists and MLROs who onboard international or non‑resident clients and must satisfy four overlapping regimes at once: the Cyprus residency tests (183‑day and 60‑day), CRS/DAC reporting, AML/KYC obligations, and GDPR record‑keeping. With supervisory focus on onboarding evidence sharpening ahead of year‑end reporting cycles, advisers need a single, procedural workflow rather than scattered checks. The guidance below sets out who the process applies to, the steps, the documents, the deadlines and the costs, so that each file is defensible from day one.

Quick takeaway

Collect the CRS self‑certification and TIN at onboarding, never after the service begins.
Risk‑rate every client before approval and apply enhanced due diligence (EDD) promptly for high‑risk cases.
Log a GDPR lawful basis and retain evidence securely for the statutory period.

Eligibility: which clients and situations need this process

This process applies to any international or non‑resident client, individuals or entities tax resident outside Cyprus, or claiming Cyprus residence under the 60‑day test, and to cross‑border structures that trigger CRS/DAC reporting. International information exchange obligations flow from Directive 2011/16/EU (DAC) and the OECD Common Reporting Standard, so residence and TIN data must be captured and validated at intake.

When to apply enhanced due diligence (EDD)

Politically exposed persons (PEPs) and their close associates or family members.
Complex or opaque ownership structures, including layered holding companies and nominee arrangements.
Trusts and foundations where settlors or beneficiaries are not immediately identifiable.
High‑risk third countries or clients with unclear source of wealth.

Test	Key criteria	Practical proof examples
183‑day test	Individual physically present in Cyprus more than 183 days in the tax year	Travel records, passport stamps, accommodation leases
60‑day test	Not tax resident elsewhere and not present in another state more than 183 days; at least 60 days in Cyprus; carries on business, is employed or holds an office in Cyprus; and maintains a permanent home (owned or rented)	Employment contract or directorship, residential lease, title deed

Note that the residency tests above apply to individuals. A company is generally tax resident in Cyprus if it is managed and controlled in Cyprus; under legislation effective from the 2023 tax year, a company incorporated in Cyprus is also treated as Cyprus tax resident unless it is tax resident elsewhere.

Step‑by‑step onboarding workflow for tax residency due diligence cyprus

Follow these seven steps in order. Each produces a documented output that forms part of the client file.

Initial ID & source‑of‑wealth capture (KYC Cyprus). Verify identity and address, run selfie or video ID where used, and obtain proof of funds.
Tax‑residency screening. Obtain the self‑certification, collect residence evidence and determine 183‑day or 60‑day status.
AML screening & risk assessment. Run sanctions, PEP and adverse media checks and build the business profile.
Beneficial ownership verification. Cross‑check the corporate BO register, shareholder records and any trust documents.
CRS/DAC flags & reporting triggers. Capture the TIN, residence for tax, and check treaty positions.
Data‑protection & consent capture. Record the GDPR lawful basis, issue the processing notice and document safeguards for any cross‑border transfer.
Approve or reject & upload evidence to a secure repository and set the periodic review schedule.

Step	Responsible (Who)	Typical duration
1. Client intake & ID capture	Relationship manager / adviser	1–2 business days
2. Tax‑residency self‑certification & evidence	Adviser / tax specialist	1–5 business days
3. AML screening & risk rating	Compliance officer / MLRO	0.5–2 business days
4. Beneficial ownership verification	Corporate team / compliance	1–5 business days
5. CRS/DAC data collection & validation	Tax team / adviser	1–3 business days
6. GDPR consent & record creation	Data protection officer / adviser	Immediate (during onboarding)
7. Final approval & system upload	Authorising officer / manager	0.5–1 business day

Required documents for tax residency documentation Cyprus

Collect certified or electronically verified copies and record the date each item was obtained. The table below is the minimum defensible set for an international client file.

Document	Purpose / minimum acceptable evidence
Valid passport / national ID	Proof of identity, certified copy or e‑ID verification
Proof of address (utility bill / bank statement, recent)	Evidence of residence for KYC
Tax residency self‑certification (CRS form) + TIN	CRS/DAC reporting & tax residency verification
Evidence of days in Cyprus (travel records / tenancy / employment contract)	Support for 183‑day or 60‑day test
Proof of source of wealth/funds (bank statements, sale contracts)	AML risk assessment
Corporate documents (certificate of incorporation, shareholder register)	Beneficial ownership checks
BO declaration or registry extract	Verify ultimate beneficial owners
Trust deed / trustee declaration (if applicable)	Identify settlors and beneficiaries
GDPR consent / processing notice	Lawful basis for data handling and cross‑border transfers
Sanctions / PEP screening report	AML evidence and risk rating

Timeline & deadlines

Onboarding core checks: commonly 0–7 business days end to end, depending on complexity.
EDD for high‑risk clients: commence promptly on flagging and before the relationship proceeds.
CRS/DAC data: collect self‑certifications and TINs at onboarding, before the service starts; file per the Tax Department’s annual reporting cycle.
Retention: retain AML onboarding evidence for at least 5 years from the end of the relationship under the AML Law, applying any longer CRS/DAC or GDPR‑driven period in internal policy.

Costs / fees

Adviser and compliance costs vary significantly by provider and complexity. The ranges below are indicative only; complex structures, trusts and high‑risk clients attract higher review time. Government and registry fees are set by the relevant authority and should be confirmed at the time of filing.

Item	Indicative cost (EUR)	Notes
ID verification (digital)	Provider‑dependent	Per client
AML/PEP/sanctions screening subscription	Provider‑dependent	Team subscription amortised per client
Legal / tax residency review (hourly)	By engagement	Complex cases higher
CRS reporting / tax filing	By engagement	Per client / per report
Beneficial ownership registry extract / filing	As set by the Registrar	Government fees vary

What changed in 2026

For 2026, advisers should expect continued supervisory focus on the quality of onboarding evidence, ongoing CRS/DAC technical handling of TINs and residence, and periodically refreshed national AML guidance. Reviewers increasingly scrutinise whether residency conclusions are supported by documents rather than client self‑certification alone. Align files with current MOKAS, Tax Department and OECD/EU guidance. Advisers should also note the EU’s phased establishment of the Anti‑Money Laundering Authority (AMLA) and monitor any resulting changes to national supervision.

Common pitfalls in tax residency due diligence cyprus

Relying on self‑certification only. Corroborate residence with travel logs, leases and economic‑tie evidence.
Missing 60‑day test evidence. The test fails without proof of a permanent home, a Cyprus business/employment/office tie, and non‑residence elsewhere.
Inadequate beneficial ownership verification. Always reconcile the BO register against shareholder records.
Poor GDPR consent capture. Record the lawful basis and cross‑border transfer safeguards at onboarding.
Delayed EDD for high‑risk clients. Complete EDD before the relationship proceeds.

Need Legal Advice?

This article was produced by Global Law Experts. For specialist advice on this topic, contact Rafaella Dionysiou at Dionysiou Legal, a member of the Global Law Experts network.