Origins: An American Oddity and a Swiss Scandal
To understand FATCA, start with an anomaly. The United States is, along with Eritrea, the only country that taxes its people based on citizenship rather than residence. The principle dates back to the Civil War-era revenue acts and was upheld by the Supreme Court in 1924 in Cook v. Tait: a U.S. citizen living in Mexico City, Paris, or Tokyo must report worldwide income to the Internal Revenue Service, no matter where they live or where the money was earned. For decades, the rule was largely theoretical. The IRS had no way of knowing what Americans were holding in a bank in Zurich or Singapore.
A first attempt at a fix, the Qualified Intermediary (QI) program, launched in 2001. It made foreign banks responsible for identifying clients who received U.S.-source income. The UBS affair would show just how easily it could be gamed. In 2007, Bradley Birkenfeld, a private banker at UBS in Geneva, told U.S. authorities how Switzerland’s largest bank courted wealthy Americans and helped them hide assets behind shell structures. Around the same time, the LGT scandal erupted in Liechtenstein after stolen client data was sold to several Western tax agencies. In July 2008, the Senate Permanent Subcommittee on Investigations, chaired by Democrat Carl Levin, released a scathing report estimating that offshore evasion cost the Treasury roughly $100 billion a year.
The rest is well known. In February 2009, UBS entered into a deferred prosecution agreement, paid $780 million, and handed over client names. A deal between Bern and Washington that August expanded the disclosure to roughly 4,450 accounts. Swiss banking secrecy had cracked. Birkenfeld went to prison, then collected a $104 million whistleblower award in 2012. But Congress drew a different lesson: you can’t prosecute banks one at a time. You need a system.
A Law That Hitched a Ride
The bill was introduced in October 2009 by Rep. Charles Rangel and Sen. Max Baucus, with the Obama administration’s backing. It never got a debate of its own. FATCA was enacted on March 18, 2010, as Title V of the HIRE Act (Hiring Incentives to Restore Employment Act), a jobs bill for which it served as the pay-for: the Joint Committee on Taxation projected about $8.7 billion in revenue over ten years. A modest sum, given the upheaval that followed.
Legally, the statute added Chapter 4 to the Internal Revenue Code (Sections 1471 through 1474) and, through Section 6038D, created a new reporting requirement for individuals. It took the IRS and Treasury nearly three years to write the instruction manual: the final regulations, running several hundred pages, came out in January 2013. The effective date, originally set for early 2013, was pushed back twice, to July 1, 2014.
The Core Mechanism: The 30% Withholding Tax
FATCA’s genius, and its bluntness, comes down to one simple idea. Washington has no authority over a bank in Lyon or Kuala Lumpur. But it does control access to the world’s largest financial market. So the law offers a deal: any “foreign financial institution” (FFI, in the jargon) that refuses to cooperate gets hit with a 30% withholding tax on its U.S.-source payments, meaning dividends, interest, and other so-called FDAP income. The original statute also reached gross proceeds from sales of U.S. securities; that piece, delayed again and again, was dropped in proposed regulations in late 2018.
The definition of a financial institution is sweeping: banks, custodians, and brokers, but also investment funds, certain life insurers, asset managers, and many trusts and holding companies. For any player of meaningful size, walking away from U.S. markets is unthinkable. The threat has almost never had to be carried out. It was enough that it existed.
To avoid the tax, an institution registers with the IRS, which issues it a 19-character identifier known as a GIIN (Global Intermediary Identification Number), published on a list that withholding agents check. Several hundred thousand entities worldwide now appear on it. The institution then commits to three things: identifying its American clients, reporting their accounts every year, and appointing a responsible officer who periodically certifies compliance.
Hunting for “U.S. Indicia”
Identification runs on a checklist of indicators that banks must search for in their records: U.S. citizenship or residence, a U.S. place of birth, a U.S. address or phone number, standing instructions to transfer funds to a U.S. account, a power of attorney granted to someone with a U.S. address, or an “in care of” or hold-mail address as the only address on file. A single hit is enough. The client must then prove they are not American, or fill out a Form W-9 and provide a U.S. taxpayer identification number (TIN).
Thresholds lighten the load. Preexisting individual accounts under $50,000 can be exempted from review, as can cash-value insurance contracts under $250,000. Above $1 million, enhanced due diligence kicks in, including paper files and a check with the relationship manager. For entities, the law looks through the structure: a “passive” foreign company, one whose income is mostly investment income, must disclose its substantial U.S. owners, defined as more than 10% in the statute and generally 25% under the bilateral agreements. The point is to make sure a Panamanian shell is no longer enough to make a taxpayer vanish.
Each year, the institution reports, for every U.S. account, the holder’s name, address, TIN, account number, balance, and income paid. The relevant form is Form 8966.
The Individual Side: Form 8938
It’s often forgotten that FATCA also lands directly on taxpayers. Any “U.S. person” holding foreign financial assets above certain thresholds must itemize them on Form 8938, attached to their tax return. For a single filer living in the United States, the threshold is $50,000 at year-end or $75,000 at any point during the year. For those living abroad, it rises to $200,000 and $300,000, and doubles for married couples filing jointly. Failure to file costs $10,000, plus up to $50,000 more for continued noncompliance, and a 40% penalty applies to tax understatements tied to undisclosed assets. The statute of limitations stretches to six years.
This requirement sits on top of, and does not replace, the FBAR filing inherited from the Bank Secrecy Act of 1970, which is triggered at $10,000 in aggregate foreign holdings and goes not to the IRS but to FinCEN. Two forms, two agencies, two penalty regimes for largely overlapping information: tax lawyers who specialize in this area have never lacked for work. Matching what the taxpayer reports against what the bank reports is the heart of the system.
The Legal Problem and the Intergovernmental Workaround
An obstacle emerged quickly. In most countries, sending client-level data straight to a foreign tax authority violates bank secrecy laws, data protection laws, or both. European banks found themselves caught between American penalties and penalties at home.
The solution was diplomatic. On February 8, 2012, France, Germany, Italy, Spain, and the United Kingdom issued a joint statement with Washington paving the way for intergovernmental agreements, or IGAs. Treasury drew up two models. Under Model 1, by far the more common, banks report to their own tax authority, which passes the data on to the IRS. The obligation becomes a matter of domestic law, and the conflict disappears. Under Model 2, chosen by Switzerland and Japan among others, institutions report directly to the IRS with the client’s consent, and the government pledges to clear the way when clients refuse. Bern, for its part, signed a new agreement in June 2024 to switch to Model 1, with a planned effective date of 2027.
The UK signed first, in September 2012. More than 110 jurisdictions followed. France signed a “reciprocal” Model 1 agreement on November 14, 2013, ratified by statute in September 2014; its tax authority made its first transmissions in 2015.
Reciprocity in Name Only
That word “reciprocal” deserves a closer look. Under Model 1A agreements, the United States commits to sharing information on accounts held at American institutions by residents of the partner country. But the scope is far narrower: no account balances, no identification of beneficial owners behind entities, coverage limited to certain types of income. The agreements include a political commitment by Washington to pursue equivalent reciprocity, which would take an act of Congress. It never came. A French parliamentary report said as much bluntly in 2019, and the European Parliament had already adopted a resolution in July 2018 condemning the law’s effects.
The paradox deepened with FATCA’s own success. In 2014, the OECD adopted the Common Reporting Standard (CRS), a multilateral carbon copy of the American system, based on residence rather than citizenship and now applied by more than 100 jurisdictions, with the first exchanges in 2017. The United States never joined, arguing it already has FATCA. The result: the country that tore down everyone else’s banking secrecy has become one of the few places where a nonresident can still park assets quietly, notably through trusts in South Dakota, Nevada, or Delaware. In 2022, the Tax Justice Network ranked it first on its Financial Secrecy Index.
Collateral Damage: Expats and “Accidental Americans”
Designed to catch wealthy tax cheats living in the United States, the law has mostly upended the lives of millions of ordinary Americans living overseas. To a foreign bank, an American client became a cost and a liability. Many chose to close accounts, deny mortgages, or block access to investment products.
The hardest cases are the so-called accidental Americans: people born on U.S. soil while their parents happened to be posted there, who left as infants, have no ties to the country, and sometimes don’t even know they hold citizenship. To FATCA, a U.S. birthplace is an indicator like any other. Boris Johnson, born in New York, was the most famous example: pursued by the IRS over the capital gain on his London home, he renounced his U.S. citizenship in 2016. In France, the Association of Accidental Americans, founded in 2017 by Fabien Lehagre, puts their number in the tens of thousands. Its legal challenge to the Franco-American agreement was rejected by the Conseil d’État, France’s highest administrative court, in July 2019.
Getting out is expensive. Renouncing citizenship means being current on five years of tax filings, paying a consular fee that was raised to $2,350 in 2014 (the State Department has since moved to bring it back down to $450), and, for those with a net worth above $2 million, facing an exit tax. Renunciations, which numbered a few hundred a year before 2010, topped 5,000 in 2016 and hit a record of about 6,700 in 2020. In 2019, the IRS introduced relief procedures for certain former citizens with modest income and assets.
One technical problem captures the absurdity of some of these situations. Banks are required to report a TIN that accidental Americans don’t have, since they never applied for a Social Security number. Faced with the prospect of mass account closures, flagged by European banking federations, the IRS has granted a series of grace periods through notices issued in 2017, 2023, and late 2024, the last covering calendar years 2025 through 2027. A temporary fix that keeps getting renewed.
The Courtroom Front and GDPR
In the United States, the constitutional challenge fizzled. Crawford v. Department of the Treasury, in which Sen. Rand Paul was a plaintiff, was dismissed for lack of standing, and the Supreme Court declined to take it up in 2018. In Canada, challenges under the Charter of Rights and Freedoms failed at every level.
In Europe, the fight has shifted to data protection. The argument turns on proportionality: the automatic, bulk transfer of data on people who overwhelmingly owe no U.S. tax would violate the General Data Protection Regulation, particularly since the EU’s Court of Justice has toughened its stance on data transfers to the United States. Belgium’s data protection authority ruled along those lines in May 2023. Its decision was overturned on procedural grounds by the Brussels Market Court, and the authority took the matter up again on the merits in 2025. A ruling against FATCA by Europe’s top court would be the first serious breach in the structure. So far, it hasn’t happened.
An Awkward Bottom Line
That leaves the question any auditor would ask: what does it actually bring in? The answer is uncomfortable. The Treasury Inspector General for Tax Administration (TIGTA) found in 2018 that the IRS had spent nearly $380 million on FATCA without building a real enforcement program around it. Then, in 2022, that the tab had reached $574 million against directly attributable revenue of around $14 million. The data comes in, often without a usable TIN, and the agency struggles to match it to tax returns. On the private-sector side, compliance costs run into the billions of dollars globally, far beyond the $8.7 billion in ten-year revenue Congress was promised.
The law’s defenders counter that its real payoff is indirect: deterrence. The voluntary disclosure programs that ran from 2009 to 2018 brought in more than $11 billion, and tens of thousands of taxpayers came clean for fear their bank would report them first. It’s a fair point, but it’s hard to separate FATCA’s effect from that of the criminal cases against Swiss banks, from Credit Suisse’s guilty plea in 2014 to the collapse of Wegelin, the country’s oldest bank.
What Now?
Outright repeal, which made it into the Republican platform in 2016, has never gained real traction: no Congress wants to look like it’s protecting tax cheats. The debate has moved to the root cause, citizenship-based taxation. During the 2024 campaign, Donald Trump promised to end “double taxation” of Americans abroad, and a bill to establish residence-based taxation was introduced in the House in late 2024 by Rep. Darin LaHood. As of this writing, it has not advanced. If it passed, FATCA would lose most of its grip on expats without going away.
Because the law’s legacy goes beyond its stated purpose. FATCA proved that a power with enough financial leverage can impose its rules on the world without a multilateral treaty or anyone’s prior consent. It also made the idea of automatic, global exchange of bank data first thinkable, then routine. Banking secrecy died from a revenue offset in a jobs bill that almost nobody read. The rest of that story — CRS, BEPS, the global minimum tax, and the American retreat from it — is told in the wider history of international tax cooperation.