Cyprus Company Tax Number and TFA: Registration and Access

Distinguish incorporation, tax registration and online access

Incorporation creates the company in the corporate register. Tax registration establishes its record with the Tax Department and produces the relevant tax identifier. Online access allows an authorised user to work with that record. These are connected steps, but a document or confirmation from one does not prove the others have been completed. A newly incorporated company should obtain clear evidence for each stage.

Use a simple status sheet: company incorporated; tax application submitted; tax number issued; taxpayer access confirmed; representative permissions checked; relevant tax obligations reviewed. Add the date and evidence beside each item. This avoids the common ambiguity of a service-provider email saying that “registration is done” without specifying which register or access step it means.

The company-registration guide covers the wider formation process. This article focuses on the company’s tax identity and practical TFA administration. VAT registration, employer setup and annual return preparation have their own conditions and procedures. They should appear as separate decisions in the company’s handover file rather than being assumed from the existence of a tax number.

Check the registration obligation and current route

The Tax Department’s business tax-registration page states a 60-day registration requirement from the relevant triggering event, including incorporation. It also specifies the current route for the different entity categories. Review that page when preparing the application rather than relying on a historic paper-form checklist.

For Registrar entities with HE, AE or S prefixes, the Department states that applications from 1 July 2026 must be submitted through TFA using CY Login. Other categories follow the applicable TFA route described in the guidance. Identify the entity category before setting up access. A procedure that worked for an individual or a different organisation is not automatically the correct route for an ordinary Cyprus company.

Work backwards from the applicable date. Collect the corporate documents and resolve access questions promptly after incorporation. If the company already existed before the current adviser was appointed, review the historic file before deciding that a new application is required. Missing evidence in the new adviser’s folder does not prove that the Tax Department has no existing record.

Search the company’s own records for an existing TIN

Ask the former accountant, company administrator and directors for prior tax correspondence, returns and registration confirmations. Compare any number found with the legal company name and registration details. Keep the source document rather than copying an unexplained identifier into a new spreadsheet. A group may hold several tax numbers for different entities, so identify the record belonging to this company.

Where an existing number is confirmed, the task may be obtaining access or updating details instead of registering a new taxpayer. The official TFA account guidance distinguishes account creation and linking the tax identifier. Follow the route applicable to the existing record. Do not create a duplicate application merely because the new director does not know the previous login.

If the position remains uncertain, prepare a focused enquiry with the company documents and any historic evidence. Explain that the company is trying to establish its existing registration or access status. Avoid submitting several competing applications through different people. A coordinated enquiry is easier to track and reduces the chance that the authority receives inconsistent company information.

Prepare the application file before starting data entry

For an ordinary HE company, the official checklist identifies incorporation, registered-office, directors/secretary and shareholder certificates, together with identification for the officer submitting the application. Use the category-specific requirements on the Department’s page. Foreign entities, partnerships and other organisations may need different material. Do not add unnecessary documents simply because another entity’s list is longer.

Check names, registration numbers and dates across the file. If a recent director or address change is still being processed, ask the adviser which evidence should accompany the application. The company-certificates guide explains how to organise corporate evidence, while the director and secretary change guide addresses the underlying corporate update.

Prepare readable files with descriptive names. A complete certificate scanned sideways or missing a page can delay review even though the company technically possesses the document. Verify each attachment before upload and keep the submitted version. Where personal identification is required, use the official submission route and restrict local access to the application file.

Use CY Login and TFA for the intended company

Follow the current official login guidance rather than a saved screenshot of an older interface. Check which entity is selected before entering or submitting company information. A director may act for several companies and also have a personal taxpayer account. That makes entity confirmation a meaningful control, not a cosmetic check at the top of the screen.

The Tax For All information site provides current guides and notices. Keep the distinction between authentication and authority clear: being able to sign in does not itself establish that the user has the correct taxpayer access or representative role. Confirm the intended company and function after login, before treating setup as complete.

Use secure company administration for credentials and recovery arrangements. Avoid making a single employee’s personal inbox the only route to important notices. Where an authorised adviser operates the process, agree how the company will receive confirmations and maintain continuity. The company should know how to regain appropriate access if the provider changes, without sharing passwords indiscriminately among staff.

Submit once and track the actual outcome

Review the completed application and attachments before submission. Confirm the legal entity, contact details and intended registration information. Save the reference or acknowledgement and record the person responsible for monitoring the response. A saved draft should remain labelled as a draft; a submitted application should be distinguishable from an approved registration.

The official registration FAQ provides the current guidance, and the Department’s TFA registration explanation describes notification of the assigned number. Preserve the actual outcome rather than inferring it from the absence of a rejection.

If further documents are requested, reply through the appropriate channel and keep the complete exchange. Identify which application the additional information relates to. Do not restart the whole process unless instructed or clearly required, because a fresh application can obscure the original chronology. Keep the director informed of unresolved questions and any effect on the company’s upcoming compliance work.

Confirm access to the right taxpayer record

After registration, verify that the authorised user can access the intended taxpayer record and see the relevant details. Check the company name and TIN against the confirmation. Record any missing or incorrect access as a separate issue. Having the number in an email is useful, but it does not demonstrate that the company’s chosen operator can perform the required actions.

Use the official account-linking process where applicable. Do not confuse a representative’s own business tax record with the clients it represents. The Tax Department’s representative FAQ explains that distinction. A firm may need separate arrangements for its own taxes and for acting for a client; the client company should verify its own representation outcome.

Test only the functions necessary to establish correct access. Do not submit a dummy return or payment simply to see whether a button works. A read-only review of the taxpayer details and permissions, together with the official confirmation, can establish the setup without creating an inaccurate filing. Plan the first real compliance task with the accountant once the access position is clear.

Appoint representatives with an explicit scope

Agree which adviser handles which taxes and filings. Corporate income tax, VAT, VIES and employer matters can involve different responsibilities, and a broad commercial instruction does not necessarily create every electronic permission. The representative FAQ identifies the TFA representative-management route and relevant forms. Use the current procedure and retain evidence of the appointment or change.

Prepare a responsibility schedule showing the return or account, preparer, reviewer, submitting party and person monitoring notices. The company should also know which obligations remain outside the adviser’s engagement. For example, an accountant appointed to prepare VAT returns may not be handling recruitment notifications or corporate-register filings. Make those boundaries explicit before the first deadline.

When representation changes, coordinate removal and replacement so that notices and open filings are not lost between providers. The service-provider change guide covers the wider handover. Retain submitted returns, payment references and outstanding correspondence before ending the previous arrangement. New access should be verified, not assumed from an engagement letter alone.

Keep VAT and employer decisions separate from the TIN

A tax number does not by itself establish that the company is registered for VAT or that a particular transaction should include VAT. Review the company’s activities, customers and purchases under the VAT-registration guide. Confirm the actual VAT outcome and effective date before changing invoice templates. A portal showing a company’s TIN is not a substitute for that review.

Similarly, a company becoming an employer has separate Social Insurance and relevant tax-administration steps. Use the first-employee guide to coordinate them. Do not give a payroll provider only the company’s TIN and assume the employer registration is complete. Label each identifier and confirmation so the right number reaches the right process.

The same discipline applies to customs and special schemes. EORI, OSS and other registrations should be assessed where the business model requires them. Keep the identity sheet concise but precise: identifier, issuing authority, purpose, status and supporting record. This prevents the generic phrase “tax registered” from concealing a missing operational registration.

Update company details and refund-bank information correctly

The Department’s change-of-details and IBAN guidance distinguishes profile changes from other updates and provides the relevant forms and routes. Use that current guidance when a company changes contact information, registered details or bank instructions. Do not assume that a Registrar filing automatically updates the Tax Department’s record.

Treat bank-detail changes as a sensitive instruction. Verify the company’s authority and supporting bank evidence through the established internal process before submitting the change. Keep the exact request and confirmation, and avoid sending payment information in a general email thread with unnecessary recipients. If access is unavailable, follow the official support route rather than creating a new taxpayer registration as a workaround.

After an update is processed, check the record and notify the responsible adviser. Preserve the prior details where needed to explain historical correspondence. A company-name change, for example, should leave an understandable connection between older returns and the current identity. The objective is a coherent history, not deletion of every old reference.

Finish with a usable tax-administration handover

The completed file should include the registration outcome, TIN, access arrangements, representative scope and the first compliance calendar. Link it to the company’s post-incorporation handover. Include unresolved issues rather than marking the whole tax setup complete while a permission or registration is still pending.

The TD4 return guide explains annual company-return preparation. Check the official route for the relevant return and tax year rather than assuming every historic and current obligation uses the same portal. TFA development and transitions make year-specific instructions important. Store the source and date used to establish the filing route alongside the calendar entry.

A hypothetical new company should be able to show the progression from incorporation to submitted tax application, issued number and working authorised access. A hypothetical established company changing accountants should instead show continuity of its existing taxpayer record. Those are different administrative projects. Recognising the difference early helps the business avoid duplicate applications, lost notices and misplaced confidence in a login that does not yet connect to the required company record.