CARF (the Cryptoasset Reporting Framework) is an OECD standard that requires crypto exchanges and brokers to collect and report user transaction data to national tax authorities, starting with the 2026 tax year for UK-regulated platforms. HMRC will use this data to cross-reference self-assessment returns and identify unreported gains. This article explains which platforms must report, what data they share, and what UK crypto holders should do before the 2026/27 reporting deadline.
Key takeaways
- CARF is an OECD standard requiring crypto platforms to share user transaction data with HMRC.
- Bitcoin, Ether, stablecoins, and most fungible tokens all fall within CARF’s reporting scope.
- Exchanges must report your legal name, address, date of birth, tax identification number, and transaction totals.
- HMRC will automatically cross-reference CARF data against your Self Assessment return for discrepancies.
- A mismatch between declared gains and exchange records triggers a compliance query without manual review.
- Download complete transaction histories from every exchange or wallet you have used before 2026/27.
- Reconciling your records before the reporting window opens reduces the risk of HMRC scrutiny significantly.
What CARF Is and Why the UK Adopted It
Review your crypto exchange accounts now, before the 2026/27 reporting window opens, to understand exactly what transaction data platforms already hold on you. The Crypto-Asset Reporting Framework (CARF) is an OECD standard that compels crypto service providers to collect and share user data with national tax authorities, closing the anonymity gap that made crypto harder to tax than traditional financial assets.
The UK incorporated CARF into domestic law through the Finance Act 2024, requiring crypto asset service providers to report to HMRC from the 2026/27 tax year. Covered platforms include centralised exchanges, crypto brokers, and certain payment processors handling crypto transfers. HMRC will then exchange that data with over 40 participating tax jurisdictions automatically, meaning offshore accounts held on foreign exchanges carry the same disclosure risk as UK-based platforms.
For anyone evaluating is crypto safe from a regulatory standpoint, CARF represents a structural shift: pseudonymous transactions are now traceable at the institutional level. Platforms must report wallet addresses, transaction volumes, and asset types alongside user identity information collected during KYC onboarding.
Which Crypto Assets and Platforms Fall Under CARF
| Asset or Platform Type | Within CARF Scope | Outside CARF Scope |
|---|---|---|
| Bitcoin & Ether | ✅ Yes | — |
| Stablecoins | ✅ Yes | — |
| Fungible tokens (centralised/decentralised) | ✅ Yes | — |
| NFTs (investment utility) | ✅ Yes | — |
| NFTs (pure collectibles, no investment utility) | — | ✅ Excluded |
| Centralised exchanges (e.g. Coinbase, Binance) | ✅ Yes | — |
| Decentralised exchanges (UK-jurisdiction operator) | ✅ Yes | — |
| Wallet providers facilitating transactions | ✅ Yes | — |
| DeFi liquidity pools (intermediated) | ✅ Yes | — |
| Custody-only platforms (no transfers enabled) | — | ✅ Excluded (direct CARF) |
CARF captures a broader range of assets than most users expect. It covers cryptocurrencies such as Bitcoin and Ether, stablecoins, and most fungible tokens traded on centralised or decentralised platforms. Non-fungible tokens fall outside the scope only where they function purely as collectibles with no investment utility, a distinction that narrows as NFT markets mature.
The platforms required to report are those that provide exchange, transfer, or custody services for crypto assets as a regular business activity. Centralised exchanges like Coinbase and Binance fall squarely within scope. Decentralised exchanges that operate without any intermediary also face reporting obligations where they have a discernible operator subject to UK jurisdiction. Wallet providers that facilitate transactions, not merely store assets, are included too.
DeFi positions create additional complexity. Returns generated through liquidity pools, including gains or losses from impermanent loss, sit within reportable activity where a qualifying service provider intermediates the transaction. Platforms that exclusively custody assets without enabling transfers remain outside CARF’s direct reach, though HMRC may still request data through separate powers.
What Data Exchanges Must Collect and Report
Missing or incomplete identity verification is the most common reason exchanges fail their CARF obligations. Platforms must collect a verified legal name, residential address, date of birth, and tax identification number (TIN) for every reportable user. Where no TIN exists, the platform must record that absence and flag it in the report rather than leave the field blank.
On the transaction side, exchanges must log the asset type, units traded, and gross proceeds in fiat currency at the transaction date rate, not at withdrawal or disposal. Wallet transfers to third-party addresses outside the platform also require reporting.
Exchanges submit this data to their local tax authority, which passes it to HMRC under automatic exchange agreements. The OECD’s CARF documentation specifies annual reporting cycles, so platforms transmit the prior year’s records in a single batch. Users with accounts across multiple exchanges will have each platform report independently to its own authority, generating separate data streams that HMRC cross-references.
How HMRC Will Use CARF Data to Identify Non-Compliance
HMRC will cross-reference CARF data against Self Assessment returns automatically, flagging discrepancies before a human officer reviews the case. If your declared gains do not match the transaction totals reported by your exchange, HMRC’s compliance systems will generate a query without manual case selection.
The matching process works because CARF data arrives structured and standardised. HMRC receives gross proceeds, acquisition costs, and asset types in a format built for automated comparison. Undisclosed disposals, unreported staking income, and mismatched holding periods become visible at scale in a way they were not when records existed only on-chain.
Completing full KYC verification on every exchange you use is the most effective step to avoid false mismatches. Keep your legal name, residential address, and tax identification number consistent across all accounts and updated whenever they change.
Do not assume activity on smaller or newer platforms goes unnoticed. CARF reporting obligations apply to the platform, not the volume of your trades. An exchange processing a single reportable transaction must still file, so low activity does not reduce exposure.
What UK Crypto Holders Should Do Before 2026/27
Crypto holders who reconcile their records before the 2026/27 reporting window will face far fewer problems than those who wait for HMRC to raise a query. CARF data is precise enough to identify discrepancies at the transaction level, so a gap between your declared gains and your exchange records will trigger scrutiny automatically.
Download complete transaction histories from every exchange or wallet you have used since 2018. Many platforms limit CSV export ranges, so request historical data directly from customer support if needed. Cross-reference those records against the capital gains figures on previous Self Assessment returns.
If your filings contain errors, a voluntary disclosure through HMRC’s disclosure service before the data exchange begins will attract lower penalties than a compliance inquiry initiated after CARF reports arrive. HMRC distinguishes between prompted and unprompted disclosures, and the financial difference can be significant.
Check that your name and address match across every exchange account and your Self Assessment record, as a mismatch can flag your profile for manual review. Tax tools such as Koinly or Crypto Tax Calculator aggregate data across multiple exchanges and produce HMRC-compatible capital gains reports, giving you a baseline that mirrors what HMRC will receive.
Frequently Asked Questions
What is the Crypto-Asset Reporting Framework and why is the UK adopting it from 2026/27?
CARF is an OECD tax transparency standard that requires crypto exchanges and brokers to collect and report user transaction data to national tax authorities. The UK is adopting it from the 2026/27 tax year to close the gap between crypto activity and declared income. HMRC will receive this data automatically, enabling cross-referencing against tax returns.
Which crypto transactions and account details will UK platforms have to report to HMRC under CARF?
CARF covers exchanges between crypto and fiat currency, crypto-to-crypto swaps, and transfers of digital assets. Platforms must also report account holder details: full name, address, date of birth, tax identification number, and jurisdiction of residence. Wallet addresses and aggregate transaction values are included where relevant.
Who will be affected by the UK CARF rules, including individual investors, traders and crypto service providers?
UK-based crypto asset service providers must register with HMRC and report user data from 2026/27. This affects individual investors, active traders, and businesses transacting in crypto. Anyone holding accounts on a UK-regulated exchange or using a qualifying foreign platform that reports to HMRC should expect their transaction data to be shared with tax authorities.
How will HMRC use CARF data to check crypto tax reporting and identify undeclared gains or income?
HMRC will cross-reference CARF reports against Self Assessment returns to spot mismatches. Unreported disposals, staking rewards, or trading income flagged by exchanges will trigger compliance checks. Persistent gaps between reported figures and exchange data are likely to result in penalties or investigation.
What should UK crypto holders do before 2026/27 to prepare for CARF reporting and reduce the risk of tax errors?
HMRC will receive transaction-level data covering tax year 2026/27 onwards. Before then, review all open tax years and correct any unreported gains through HMRC’s voluntary disclosure process. Gather complete records of acquisition costs, disposal dates, and exchange history. Accurate historical records reduce both the risk of discrepancies and any penalties triggered by mismatched data.