Short answer: from 1 January 2026 crypto platforms in the EU, UK, Canada, Japan and South Korea began collecting and reporting user transaction data under the OECD's Crypto-Asset Reporting Framework, implemented in the EU as DAC8. The first reports go to domestic tax authorities during 2027, and cross-border exchange follows. The United States is on a later timeline, targeting 2029.
What changed on 1 January 2026
CARF is the crypto equivalent of the bank-account reporting standard that ended banking secrecy for ordinary account holders. It obliges reporting crypto-asset service providers to identify their customers, record their transactions and hand the data to their local tax authority, which then exchanges it automatically with the authority where the customer is tax resident.
The framework went live for the first wave of committed jurisdictions on 1 January 2026 — the entire European Union via DAC8, plus the United Kingdom, Canada, Japan and South Korea. Those platforms are collecting data now; the reporting deadlines arrive in 2027.
Who has to report
The definition is deliberately broad. It covers exchanges and trading platforms, brokers, wallet providers that facilitate transactions, financial institutions dealing in crypto-assets, and certain DeFi front-ends that facilitate transactions on behalf of users. The test is functional: if a business facilitates crypto transactions for customers, it is likely in scope regardless of how it describes itself.
What is actually reported
| Category | Detail |
|---|---|
| Identity | Name, address, jurisdiction of residence, tax identification number, date of birth |
| Transactions | Type, dates, quantities, gross proceeds, and from 2026 cost basis |
| Transfers | Wallet addresses for transfers out to external addresses |
| Asset detail | Which crypto-assets, crypto-to-fiat and crypto-to-crypto trades, retail payment transactions |
Two items deserve emphasis. First, crypto-to-crypto trades are in scope — the widespread belief that only cash-out events matter has not been true for some time, and now the data trail reflects that. Second, external wallet addresses are reported on transfer out, which links your self-custody wallet to your identity within the tax authority's records.
Timeline
- 1 January 2026 — data collection begins in the first-wave jurisdictions.
- 2027 — first reports filed with domestic tax authorities.
- Shortly after — automatic cross-border exchange between authorities begins.
- 2029 — the United States targets its own participation, having committed to a later schedule. US brokers already report on Form 1099-DA under separate domestic rules.
The EU has added enforcement weight: DAC8 penalties reach up to €500,000, which is aimed at platforms rather than users, but it explains why compliance teams have become strict about identification.
What this means in practice
- Keep your own records. Platform data will be reported whether or not you agree with it. If your records differ, you want to be able to show why — especially on cost basis, where platform figures are often incomplete for assets you deposited from elsewhere.
- Reconcile before you are asked. The gap between what platforms report and what taxpayers declare is exactly what the framework is designed to surface.
- Understand what is not covered. CARF reports platform activity. It does not automatically follow purely on-chain, wallet-to-wallet movement between parties with no service in between — but any interaction with a reporting provider brings addresses into view.
- Residency drives everything. The reporting flows to where you are tax resident, not where the platform is. Relocating your platform does not relocate your obligations, a point often misunderstood in relation to zero-tax jurisdictions like the UAE.
Does this end no-KYC swaps?
No, but it sharpens the distinction. Non-custodial instant exchangers that never onboard you as a customer sit differently in this framework than platforms holding accounts and balances. What has changed is the surrounding environment: the exchanges you use for on- and off-ramps report, and their reports include the external addresses you withdraw to. Privacy at the swap layer does not undo visibility at the fiat layer. Plan your tax position on the assumption that anything touching a regulated venue is visible.
FAQ
When did CARF and DAC8 take effect?
Data collection began on 1 January 2026 in the EU, UK, Canada, Japan and South Korea. The first reports are due to domestic authorities in 2027.
Are crypto-to-crypto trades reported?
Yes. Reportable transactions include crypto-to-crypto exchanges, not only conversions to fiat.
Will my self-custody wallet address be reported?
If you withdraw from a reporting platform to an external address, that address is included in the transfer information reported.
What about the United States?
The US committed to a later timeline, targeting 2029 for CARF, while domestic broker reporting on Form 1099-DA already applies.
This article is general information, not tax advice. Rules vary by country and your own position may differ — consult a qualified adviser in your jurisdiction.