CFC bite: when your offshore company still owes home-country tax

You set up a company in a zero-tax jurisdiction, route some revenue through it, and assume the profits sit there untouched. Then your home-country tax authority sends a letter explaining that they've attributed those offshore profits to you personally, and you owe tax on every penny. This scenario plays out hundreds of times a year, and it catches founders who assumed "offshore" meant "invisible."

The CFC bite is one of the most misunderstood risks in international structuring. It doesn't matter whether you're a UK resident with a BVI holding company, a US citizen with a Cayman subsidiary, or a German founder running an entity in Dubai. If your home country has controlled foreign company rules on the books, and virtually every developed economy does, the profits you thought were sheltered may already be taxable in your hands. Knowing how these rules work, where the thresholds sit, and what genuine substance actually looks like is the difference between a compliant international structure and a very expensive mistake.

‍

What controlled foreign company rules actually do

CFC rules exist for a single purpose: to prevent residents of high-tax countries from parking passive income (or sometimes active income) in low-tax jurisdictions to defer or avoid domestic taxation. The mechanism is straightforward. If you, as a tax resident, control a foreign company that pays little or no local tax, your home country can "look through" the entity and tax you on the company's profits as if you'd earned them directly.

The concept originated in the United States in 1962 with Subpart F, and most OECD nations adopted their own versions over the following decades. The rules vary in detail, but the architecture is consistent: identify a foreign company, determine whether a domestic taxpayer controls it, test whether the company's income is the type the rules target, and if so, attribute that income to the controlling person for home-country tax purposes.

What trips founders up is the word "control." You don't need to own 100% of the offshore entity. In many jurisdictions, owning just 25% or even having indirect influence through related parties is enough to trigger CFC treatment. The rules are designed to be broad, and they've only gotten broader since the OECD's BEPS project accelerated anti-avoidance reforms worldwide. The same pressure that produced BEPS Pillar Two and the 15% global minimum tax reshaped CFC rules in every major economy.

‍

The trigger every founder underestimates

Most founders focus on where the company is incorporated and what the local tax rate is. They rarely think about the CFC trigger test their home country applies. This is the specific set of conditions that, once met, causes your offshore profits to be pulled back into your domestic tax return.

Trigger tests typically examine three things. First, do you (alone or with connected persons) control the foreign entity? Second, is the entity subject to a significantly lower rate of tax than your home country would impose? Third, is the income of a type the CFC rules are designed to catch, such as passive investment income, intercompany royalties, or income from related-party transactions?

The threshold that catches people off guard is usually the tax-rate comparison. The UK uses a 75% test: if the offshore company's local tax is less than 75% of what UK corporation tax would have been, the CFC gateway opens. The US doesn't use a single rate test but instead categorises income types. Germany applies a 25% effective tax rate threshold. If your offshore jurisdiction charges zero or near-zero tax, you're almost certainly above every one of these thresholds.

The mistake founders make is assuming that because they have "a real business" offshore, the rules won't apply. CFC rules don't care about your intentions. They care about specific statutory tests, and those tests are mechanical.

‍

The UK position: TIOPA and the twenty-five per cent test

UK CFC rules sit in Part 9A of the Taxation (International and Other Provisions) Act 2010 (TIOPA). They apply when a UK-resident person (individual or company) holds at least a 25% interest in a non-UK company, and that company is subject to tax at less than 75% of the corresponding UK tax.

The rules operate through a series of "gateway" chapters. Chapter 3 catches profits from UK activities. Chapter 4 targets non-trading finance profits. Chapter 5 looks at profits from arrangements lacking economic substance. Each chapter has its own exemptions, and navigating them requires precision. The HMRC International Manual sets out HMRC's interpretation in detail and is the starting point for any serious UK CFC analysis.

For a UK founder running a Dubai or BVI entity, the most common exposure comes through Chapter 5, which attributes profits where the CFC's activities are designed to reduce UK tax and lack genuine economic substance. If your offshore company licences IP that was developed in the UK, or if key decisions are made from your London flat, HMRC will argue those profits belong in the UK.

The safe harbour that matters most is the "excluded territories" exemption, but this only applies if the offshore company meets strict conditions, including paying local tax at an effective rate above 75% of the UK rate. For a zero-tax jurisdiction, that exemption is unavailable by definition.

‍

The US position: GILTI, Subpart F and what they tax

American founders face a double layer of CFC exposure. Subpart F, the original 1962 regime, targets specific categories of passive and related-party income. If your offshore company earns interest, dividends, rents, royalties, or income from sales involving a related US person, that income is taxed currently in the United States regardless of whether it's distributed.

Then there's GILTI: Global Intangible Low-Taxed Income, introduced by the 2017 Tax Cuts and Jobs Act and still very much in force in 2026. GILTI operates differently from Subpart F. It captures essentially all active income of a CFC that exceeds a deemed return on tangible assets. If your offshore company is a software business with minimal physical assets (which describes most founder-led tech companies), nearly all its profit falls into GILTI.

The GILTI rate for individual US shareholders is punishing. Corporate shareholders get a 50% deduction and foreign tax credits, bringing the effective rate down to roughly 10.5-13.125%. Individual shareholders get no such deduction, meaning GILTI income is taxed at ordinary rates up to 37%. A US founder with a Cayman Islands SaaS company earning $500,000 in profit could face a federal tax bill exceeding $180,000, plus state taxes, on income they never repatriated.

The lesson for US founders is blunt: citizenship-based taxation combined with Subpart F and GILTI makes pure tax-deferral through offshore entities nearly impossible without very specific structures involving corporate blockers and genuine foreign operations.

‍

Germany, France and the EU pattern

Germany's CFC rules (Außensteuergesetz, sections 7-14 AStG) are among Europe's most aggressive. They apply when a German tax resident holds more than 50% of a foreign entity and that entity earns "passive" income taxed at an effective rate below 25%. The definition of passive income is broad: it includes licensing, lending, leasing, and even certain service income where the services are rendered to related parties.

France applies its own version under Article 209 B of the Code Général des Impôts. French rules attribute profits of a foreign entity to a French company or individual holding at least 50% if the entity is established in a jurisdiction with an effective tax rate less than 60% of the French rate. Given France's corporate tax rate of approximately 25% in 2026, that threshold sits around 15%.

The broader EU pattern follows the Anti-Tax Avoidance Directive (ATAD), which required all EU member states to implement CFC rules by January 2019. ATAD provides two models: one based on income categories (similar to Subpart F) and one based on a substance analysis. Most member states adopted a hybrid approach, and the result is a patchwork where each country's rules differ in detail but share the same intent.

For founders operating across EU borders, this means you can't simply compare your home country's rules to one standard. A structure that survives German CFC analysis might fail under French rules or Italian rules. Each jurisdiction requires its own assessment. This is exactly the kind of multi-country complexity that choosing a holding company jurisdiction requires you to work through before committing to a structure.

‍

When real substance breaks the CFC charge

Here's where things get practical. Most CFC regimes include an escape hatch for companies with genuine economic substance. If your offshore entity isn't just a letterbox but actually conducts real business with real people making real decisions locally, many CFC rules either don't apply or provide an exemption.

What "substance" means in practice:

• Local employees with genuine expertise, not just a registered agent or nominee director
• A physical office where day-to-day management decisions are made and documented
• Board meetings held locally with minutes reflecting actual strategic discussion
• Contracts negotiated and executed by people in the offshore jurisdiction
• Revenue generated from activities performed locally, not merely invoiced from there

The UK's Chapter 5 exemption, for instance, is disapplied where the CFC's profits arise from activities with genuine economic substance in the territory of residence. Germany similarly excludes income from "active" business operations conducted through a fixed establishment with qualified personnel.

But substance must be real, documented, and proportionate to the profits being claimed. An office with one part-time administrator cannot justify $2 million in annual profit from IP licensing. Tax authorities in the UK, US, Germany, and France have all become sophisticated at spotting arrangements where substance is cosmetic rather than commercial. The practical tests are covered in detail in the substance question: what economic substance actually looks like in practice.

IP structures face particular scrutiny. If you hold IP in an offshore entity but the valuable work of developing, maintaining, and exploiting that IP happens in your home country, a CFC charge is likely regardless of formal ownership. Where you set up your IP holding company is a decision that turns precisely on this substance question.

‍

A two-page sanity check before you bank the offshore saving

Before you commit to any offshore structure, run through this checklist honestly. If you can't answer "yes" to most of these, the CFC bite is likely coming for you.

• Have you mapped every CFC regime that applies based on your tax residency, citizenship, and corporate ownership chain?
• Does your offshore entity pay local tax above the threshold your home country tests against (75% for UK, 25% effective for Germany, and so on)?
• Can you demonstrate that key management decisions are made locally by qualified individuals who live and work in the offshore jurisdiction?
• Are your intercompany agreements bespoke, professionally drafted, and reflective of arm's-length pricing, not pulled from a template?
• Do you have board minutes, employment contracts, lease agreements, and local financial statements that would survive a tax authority audit?
• Have you modelled the worst-case scenario where your home country attributes 100% of the offshore profits to you, and can your cash flow handle that tax bill?

The founders who get this right treat offshore structuring as a compliance exercise first and a tax-planning exercise second. They hire advisers in both the offshore jurisdiction and their home country. They build substance before they route revenue. And they accept that a well-structured arrangement might save 10-15% in effective tax, not the 0% they fantasised about.

The ones who get it wrong usually started with a podcast, a friend's recommendation, or a formation agent's sales pitch. They end up paying back taxes, interest, and penalties that dwarf whatever they thought they'd saved. There's also a timing dimension that compounds the cost: founders who plan to exit or sell before they've resolved a CFC exposure find the liability surfaces at the worst possible moment. Exit planning and CFC compliance belong in the same conversation, not separate ones.

If your offshore company still owes home-country tax because you failed a CFC test, the cost isn't just financial. It's years of correspondence with a tax authority that now considers you high-risk. Get proper advice before you incorporate, not after the assessment lands on your doormat. Cosmos maps the CFC exposure across your residency, citizenship, and ownership chain, and builds the substance and registered agent infrastructure that makes the structure defensible. Start with the tax product or tell us your home country and offshore jurisdiction and we'll come back with the specific tests that apply.