UK Confirms Crypto Tax Data Rules Under CARF; First Deadline May 2027

  • CASPs must collect all user data but will only report UK tax residents and CARF-aligned jurisdictions.
  • Service providers face penalties of up to £300 per user for non-compliance.
  • The UK joins more than 40 jurisdictions advancing crypto tax transparency.
  • The UK government has confirmed it will implement new crypto tax data rules under the OECD’s Crypto-Asset Reporting Framework (CARF), aligning with international standards for tax transparency.

    Crypto asset service providers (CASPs) operating in the UK will be required to begin collecting user data from 2026 and to submit reports starting in May 2027. These changes aim to curb tax evasion, bolster global reporting obligations, and increase accountability across the digital asset sector.

    The rules will apply to any CASP offering exchange, transfer, or custody services, including companies that are not based in the UK but provide services to UK users.

    Entities must collect both identity and transactional data for all users, although they will only include users who are tax residents of the UK or of jurisdictions that have adopted CARF in their filings.

    Reporting threshold begins 1 January 2026

    The first reporting period will cover activity between 1 January and 31 December 2026, with submissions due no later than 31 May 2027. Subsequent reports will be due annually, each with a 31 May deadline.

    Although providers must gather data for all users, only reportable users—UK tax residents or residents of CARF-aligned jurisdictions—will be included in submissions.

    Reporting must be submitted via HMRC’s online platform using an XML format consistent with OECD guidance. The digital submission tool is not yet active, but the government plans to issue instructions ahead of the first filing deadline.

    This framework is designed to mirror reporting standards used in traditional finance, such as the Common Reporting Standard (CRS).

    According to the OECD, CARF will allow tax authorities to trace cross-border crypto transactions in a standardised and automated way.

    Crypto firms face £300 fines per breach

    HMRC has set strict penalties for failure to comply with the new rules. Crypto companies that fail to file reports, submit them late, or provide inaccurate or incomplete information may be fined up to £300 per user.

    This applies to firms based in the UK as well as those providing crypto services in the UK market.

    Companies are encouraged to establish internal systems now to ensure they can collect the required user identity details and transaction summaries.

    While no penalty will be imposed if no users are reportable in a given year, data must still be collected and kept available for audit.

    The rules place an additional compliance burden on CASPs, particularly decentralized platforms and non-custodial wallet providers that may struggle with identity verification.

    Industry participants are awaiting further clarification on how the rules will apply to decentralised protocols or services that operate with minimal user data collection.

    The UK joins a global push for crypto transparency

    The UK’s adoption of CARF is part of a broader international effort to close regulatory gaps in the crypto space. More than 40 jurisdictions, including EU member states, have committed to implementing the framework on a coordinated timeline.

    The EU has incorporated CARF into the revised Directive on Administrative Cooperation (DAC8), which also takes effect from 2026.

    By aligning with global standards, the UK aims to enhance its credibility as a regulated yet competitive jurisdiction for crypto businesses.

    This move comes as regulators worldwide increase oversight of digital asset activity following high-profile failures in the sector, such as FTX and Celsius.

    Although the new obligations do not take effect until 2026, HMRC urges CASPs to begin preparations now, especially those that may be collecting personal data for the first time.

    Regular updates will be issued by the tax authority, with guidance provided via email alerts for registered companies and individuals.

    Long-term impact on the UK crypto sector

    As the UK tightens compliance requirements for digital assets, some CASPs may choose to relocate or exit the market due to the operational and financial burdens. Others view the shift as a move toward mainstream legitimacy for crypto within the financial system.

    The CARF tax data rules are likely to reshape the UK’s digital asset landscape, increasing transparency for regulators and potentially reducing the appeal for illicit users.

    Whether these measures will ultimately strengthen or hinder innovation remains to be seen, but the message is clear for now: compliance is no longer optional.