Cyprus Economic Substance Requirements 2026: Management & Control Rules Explained

Why Substance Matters

A Cyprus company is a Cyprus tax resident — and therefore subject to Cyprus tax law, including all its benefits — only if it is 'managed and controlled' from Cyprus. This is the foundational test under Article 2 of the Cyprus Income Tax Law.

Without genuine management and control from Cyprus, the company may be treated as a tax resident of another country (wherever the effective management actually takes place), potentially triggering: tax liability in that other country on all profits; denial of double tax treaty benefits between Cyprus and third countries; disqualification from IP Box, participation exemption, and other Cyprus-specific tax reliefs; and regulatory scrutiny under CFC (Controlled Foreign Company) rules in the shareholders' home country.

Beyond the tax question, inadequate substance has become a direct compliance risk. Cyprus regulators and banks conduct substance reviews, and enforcement actions have increased significantly since 2022.

What 'Management and Control' Actually Means

Management and control is determined by substance over form. A company is managed and controlled from the location where the real strategic decisions are made — not necessarily where the company is registered or where its paperwork says it operates.

The Cyprus Tax Department, following OECD guidelines, assesses management and control based on the following factors.

Core Income-Generating Activities (CIGAs)

For companies benefiting from specific regimes — notably the IP Box — the OECD modified nexus approach and Cyprus's implementation require that the Core Income-Generating Activities (CIGAs) are performed in Cyprus. CIGAs are the substantive activities that justify the income: for an IP holding company, this means actual R&D, development, and enhancement activities performed by qualified personnel in Cyprus, not just ownership of IP.

A Cyprus company that owns intellectual property but performs no actual R&D in Cyprus and employs no qualified tech staff locally will have a nexus fraction close to zero — eliminating the IP Box benefit in practice, regardless of the legal structure.

Minimum Substance Checklist

• At least one Cyprus-resident director on the board who actively participates in board decisions
• Board meetings held in Cyprus at least quarterly (or more frequently for active companies); agendas and minutes maintained
• A genuine physical office address in Cyprus (not just a registered address) — coworking space acceptable for smaller companies at an early stage but should match business scale
• All strategic decisions (major contracts, banking arrangements, corporate structure changes) made at Cyprus board level
• Company bank account(s) held at a Cyprus bank or EU-regulated bank, operated from Cyprus
• Accounting records maintained in Cyprus; bookkeeping performed by Cyprus-based accountants
• Annual statutory audit conducted by ICPAC-licensed auditors
• UBO Register up to date and annual confirmation filed
• All director and secretary changes notified to the Registrar within 14 days

What Happens Without Adequate Substance

The consequences of inadequate substance have escalated significantly.

From a tax perspective: the company may be treated as a tax resident of another jurisdiction (where effective management is actually located), triggering full tax exposure in that jurisdiction; double tax treaty benefits may be denied under the anti-abuse provisions (Principal Purpose Test) of the OECD Multilateral Instrument; and specific regime benefits (IP Box, participation exemption) may be disallowed.

From a regulatory and banking perspective: Cyprus banks have substantially increased substance due diligence since 2021; accounts are refused or closed where substance is assessed as inadequate; the Cyprus AML framework imposes significant penalties on obliged entities (banks, accountants, lawyers) that maintain relationships with shell structures.

From an enforcement perspective: in 2024, Cyprus authorities conducted 150+ penalty actions against superficial substance arrangements, with total penalties exceeding €1.2 million. The AML law was amended in 2024 to increase maximum penalties from €100,000 to €350,000 for serious substance breaches.

Building Genuine Substance: Practical Steps

1. 1Appoint at least one genuinely active Cyprus-resident director — not a passive nominee, but someone who attends board meetings, understands the business, and makes real decisions
2. 2Hold board meetings physically in Cyprus at least quarterly — use real agendas, make real decisions, keep signed minutes with sufficient detail to demonstrate genuine deliberation
3. 3Maintain a genuine office — at minimum a dedicated desk in a reputable business centre or co-working space; for active operations, a serviced or own office is expected
4. 4Hire qualified Cyprus-based staff if the business scale warrants it — for IP companies, qualified R&D staff; for trading companies, operational staff
5. 5Ensure all major contracts, banking decisions, and strategic choices are approved at Cyprus board level with documented resolutions
6. 6Use Cyprus banks (Bank of Cyprus, Eurobank Limited, Alpha Bank Cyprus) or EU-regulated banks with Cyprus operations — operate accounts from Cyprus
7. 7Engage ICPAC-licensed accountants for all accounting, audit, and tax compliance
8. 8Document everything — a well-maintained corporate governance file is the single most important defence in a substance challenge

Frequently Asked Questions

Share this article

Disclaimer: This article is for informational purposes only and does not constitute legal, tax, or financial advice. Tax laws change frequently. Consult a qualified Cyprus adviser for guidance specific to your situation. The information on this page is general guidance only and does not constitute legal, tax, accounting, immigration or financial advice. Specific advice should be obtained based on the facts of each case.