The Crypto Tax Reckoning || Why HMRC's New CARF Reporting Rules Mean 7 Million UK Crypto Holders Can No Longer Stay Invisible in 2026 — and How the EU's DAC8 Casts an Even Wider Net

Q: Does CARF reporting apply if I only hold crypto and have never sold anything?

No CGT liability arises until you make a disposal — selling, swapping or spending your crypto. However, from 1 January 2026, exchanges are collecting and will report your identity and holdings to HMRC regardless. If you later sell, HMRC will have the baseline data to assess any gain accurately against the reported cost.

From 1 January 2026, UK crypto exchanges are legally required to collect and automatically report user identity and transaction data to HMRC under the Cryptoasset Reporting Framework (CARF) ending any practical prospect of staying invisible to the tax authority. The FCA's Cryptoassets Consumer Research 2025 found that approximately 12% of UK adults have owned crypto at some point, representing around 7 million people, and virtually every one of them will now fall within HMRC's data collection net. Simultaneously, the EU's DAC8 directive came into force across member states on the same date, extending the same reporting architecture to an estimated 50 million-plus European investors and closing every meaningful cross-border loophole.

The Crypto Tax Reckoning: Why HMRC's New CARF Reporting Rules Mean 7 Million UK Crypto Holders Can No Longer Stay Invisible in 2026 — and How the EU's DAC8 Casts an Even Wider Net

What CARF Actually Requires From Exchanges

CARF places binding legal obligations on crypto-asset service providers exchanges, custodial wallet operators, and certain brokerage platforms not directly on individual holders. Under the Reporting Cryptoasset Service Providers (Due Diligence and Reporting Requirements) Regulations 2025, which entered UK law ahead of the January 2026 start date, platforms are required to collect and verify:

Each user's full name, date of birth, residential address and country of tax residence
The user's National Insurance number or Unique Taxpayer Reference (for UK residents)
All reportable transactions: crypto-to-fiat sales, crypto-to-crypto swaps, wallet transfers, stablecoin activity, and crypto debit card payments

The UK activated CARF alongside more than 40 jurisdictions simultaneously on 1 January 2026, in what regulators have described as the most coordinated global transparency effort in financial history. Platforms were required to register with HMRC by 31 December 2025. The first batch of collected data is due to be filed with HMRC by 31 May 2027, covering the full 2026 calendar year — after which HMRC will begin exchanging data internationally with every other participating tax authority.

Non-compliance carries serious commercial consequences. Exchanges face penalties of up to £300 per user account for inaccurate, incomplete or unverified reports. Failure to register with HMRC triggers fines of £1,000 plus £300 per day; late or missing reports carry penalties of up to £5,000 plus £600 per day. With major platforms already operating robust KYC infrastructure, the practical barriers to compliance are low making avoidance a deliberate, not accidental, act.

The Shrinking CGT Allowance and Why Even Small Holders Are Caught

Most casual crypto investors dramatically underestimate their CGT exposure. The annual Capital Gains Tax exempt amount for individuals now stands at just £3,000 a figure that can be breached after a handful of trades in a bull market. That threshold has been cut repeatedly: from £12,300 in 2022/23, to £6,000 in 2023/24, and down to £3,000 from April 2024, where it currently remains for 2025/26 and 2026/27.

CGT rates on crypto were also raised from 30 October 2024 following the Autumn Budget. Gains now attract:

18% where total income and gains fall within the basic-rate band
24% on any portion above the higher-rate threshold

The combination of a historically low allowance and higher rates creates compounding liability for even modest portfolios. An investor who made several small trades during Bitcoin's price appreciation in 2025 perhaps netting £8,000 in gains owes tax on £5,000 of that after the allowance, at a minimum of 18%. Yet many such investors filed nothing. HMRC's published CGT rates and allowances are updated annually and leave no ambiguity about what is owed. With CARF data arriving in 2027, any discrepancy between exchange records and self-assessment filings will be immediately apparent.

DAC8: How the EU Goes Even Further

The EU's Directive on Administrative Co-operation (DAC8) entered into force on 1 January 2026, mirroring CARF in structure but extending its reach across all 27 EU member states. Its most significant feature is jurisdictional: DAC8 applies to any crypto-asset service provider with EU-resident clients, regardless of where the platform is incorporated. A UK-registered exchange serving French or German investors must comply with both CARF and DAC8.

According to the European Commission's DAC8 framework, the directive is designed to cover more than 50 million crypto users across Europe. Germany, France, and Ireland were all among the 14 of 27 member states that transposed the directive into national law before the 31 December 2025 deadline, per an IBFD analysis published in January 2026. The remaining member states are expected to follow in the coming months, with implementation understood to be well advanced.

EU-based platforms have been granted until 1 July 2026 for full operational compliance. Reporting to national tax authorities is due between January and 30 September 2027, after which data will be exchanged automatically between EU administrations. The practical effect is the elimination of any remaining tax arbitrage from holding assets on continental platforms rather than UK-based exchanges.

What Counts as a Taxable 'Disposal'

HMRC's position on taxable disposals is broader than many investors appreciate, and encompasses far more than simply selling crypto for sterling. Under current guidance, every one of the following triggers a CGT calculation:

Selling crypto for fiat currency the most obvious disposal
Swapping one cryptocurrency for another (e.g. exchanging Ethereum for Solana crystallises a gain or loss at current market value)
Spending crypto on goods or services, including via crypto-linked debit cards
Gifting crypto to anyone other than a spouse or civil partner
Moving crypto into a DeFi liquidity pool in exchange for a pool token typically treated as a disposal under current HMRC guidance, which has not yet enacted proposed 'no gain, no loss' treatment for DeFi lending

Staking rewards and airdrops are generally subject to Income Tax at the point of receipt, based on their sterling value on that date, with a separate CGT calculation arising on any later disposal. The cost basis matters: HMRC applies pooling rules and a same-day matching rule, both of which affect the gain calculation. Comprehensive records are not optional — they are the only defence available if HMRC queries a return.

Your 2026 Compliance Checklist

CARF data collection is already under way. The deadline to act before HMRC begins systematic cross-referencing is not May 2027 it is now. For UK and EU investors:

Download your full transaction history from every exchange, wallet, and DeFi platform you have used, from your first transaction to the present day.
Calculate your gains and losses using HMRC-recognised crypto tax software that applies UK pooling rules correctly.
File a Self Assessment return if you have not already; gains above the reporting threshold must be declared even where no tax is owed. The 2025/26 return is due by 31 January 2027.
Use HMRC's real-time CGT reporting service for in-year disposals where appropriate, accessible via your Government Gateway Personal Tax Account.
Offset any crystallised losses against gains losses must be formally reported to HMRC to be recognised, and unused losses carry forward indefinitely.
Seek specialist advice if you have used DeFi protocols, received staking rewards, or hold assets on non-UK platforms the rules in these areas carry ongoing legal risk.

The Data Is Coming Act Before It Does

CARF and DAC8 together mark the end of crypto's structural opacity. The regulatory infrastructure identity verification, transaction capture, international data exchange is now fully operational. HMRC will begin receiving 2026 exchange data in the first half of 2027, and every discrepancy between those records and self-assessment filings will be visible at scale. For the millions of UK and EU holders who have never filed because nothing was ever verified, the window to correct the record on voluntary terms remains open. Once the data lands at HMRC, that window closes — and the penalties for deliberate non-disclosure are substantially more severe than those for late filing.

Frequently Asked Questions

Does CARF reporting apply if I only hold crypto and have never sold anything?

No CGT liability arises until you make a disposal selling, swapping or spending your crypto. However, from 1 January 2026, exchanges are collecting and will report your identity and holdings to HMRC regardless. If you later sell, HMRC will have the baseline data to assess any gain accurately against the reported cost.

What if my crypto is on a foreign exchange based outside the UK or EU?

If the exchange operates in any of the 40-plus CARF-adopting jurisdictions which include the United States, Canada, Australia, Singapore, and Japan it is required to report your data to your country of tax residence. HMRC will receive that information automatically via international exchange agreements from 2027 onwards. There is no longer a safe harbour in offshore platforms.

Can I use crypto losses to reduce my CGT bill?

Yes. Crystallised losses from crypto disposals can be offset against gains from any asset class in the same tax year, and unused losses carry forward indefinitely. Losses must be formally reported to HMRC they are not applied automaticall and claiming them requires accurate disposal records for the loss-making transactions.

What are the penalties for not declaring crypto gains to HMRC?

Failure to notify HMRC of a liability by 5 October following the relevant tax year can trigger penalties of up to 100% of unpaid tax, plus interest. Where HMRC determines the omission was deliberate, penalties can rise to 200% for offshore-sourced assets. With CARF data arriving in 2027, any systematic gap between exchange records and filed returns will be identifiable making 'I didn't know' an increasingly difficult position to maintain.