In fundamental economic principles, risk is directly proportional to return (risk-reward trade-off). The higher the risk an entity assumes, the higher the expected return. In transfer pricing, risk analysis is not a mere formality; it is a vital component of the Functions, Assets, and Risks (FAR) Analysis that determines the profit share an entity is entitled to within a multinational group.
Global frameworks such as the OECD TP Guidelines 2022, the UN TP Manual 2021, and regional regulations (Indonesia’s PMK 172/2023, Malaysia’s TPG 2024, and Singapore’s IRAS TPG 8th Edition) have shifted from observing "on-paper" (contractual) risk to testing the substance of control.
1. Definition and Identification of Risk
Risk is defined as the effect of uncertainty on business objectives. Every business decision—from product launches to credit extensions—carries the uncertainty of whether actual results will meet expectations.
Economically Relevant Risks:
Based on Indonesia’s Audit Guidelines (PER-22/PJ/2013) and Malaysian guidance, key risks include:
- Market Risk: Fluctuations in input prices, demand, and competition.
- Inventory Risk: Risk of devaluation or obsolescence.
- Credit Risk: Risk of customer default.
- Financial Risk: Currency and interest rate volatility.
- R&D Risk: Uncertainty regarding the success of new product development.
2. The Six-Step Framework (OECD & UN)
Otoritas pajak di Asia Tenggara mengadopsi enam langkah sistematis:
- Identify Specific Risks: Determine economically significant risks.
- Contractual Analysis: Review risk allocation based on written agreements.
- Functional Analysis: Observe the actual conduct of parties regarding risk management.
- Interpretation: Test if the contract aligns with conduct and if the risk-bearer possesses control and financial capacity.
- Risk Reallocation: If the contractual party lacks control/capacity, risk is reallocated to the party that actually exercises it.
- Pricing: Determine the transfer price based on the adjusted risk allocation.
3. Core Concepts: Control and Financial Capacity
This is the heart of the post-BEPS (Base Erosion and Profit Shifting) paradigm.
A. Control over Risk:
To be considered the risk-bearer, an entity must have the "control"—defined as the capability to make decisions to take on, lay off, or decline a risk-bearing opportunity, and the capability to make decisions on how to respond to those risks.
Note: Performing day-to-day mitigation is not the same as having control. One can outsource mitigation, but "control" remains with the party that sets the objectives, hires the provider, and evaluates performance.
B. Financial Capacity:
The risk-bearer must have the financial "buffer" to absorb the negative consequences if the risk materializes. If an entity cannot financially bear the loss, the risk will be reallocated to the party that can.
4. Jurisdictional Case Studies
- Indonesia (Substance over Form): PMK 172/2023 treats risk analysis as inseparable from functional analysis. Failure to prove control (especially in intra-group financing) allows the DGT to disregard or reallocate the risk.
- Malaysia (Re-characterization): The 2024 Guidelines allow the DGIR to disregard transactions that lack commercial rationality, such as high-risk loans granted by entities without risk-control capabilities.
- The "Cash Box" Entity: Funding entities that lack control over the risks of the projects they fund (e.g., R&D) are entitled only to a risk-free return, rather than high yields or royalties.
5. Consequences of Misallocation
Failure to align TP documentation with actual conduct leads to:
- Profit Reallocation: Shifting profit to the entity that actually manages the risk.
- Price Adjustments: Downgrading an "Entrepreneur" (high risk/reward) to a "Service Provider" (low risk/cost-plus).
- Transaction Disregard: Completely ignoring the structure if it lacks commercial substance.