Seventy-six jurisdictions have now committed to the OECD's Crypto-Asset Reporting Framework (CARF), according to the Global Forum on Tax Transparency's March 2026 update. Data collection began January 1, 2026, across an initial 48 countries. The first automatic cross-border exchanges of crypto tr...
"This is the beginning of the end for crypto investors who thought they could invest and gain from crypto in secrecy." — Andrew Park, Tax Investigations Partner, Price Bailey
Seventy-six jurisdictions have now committed to the OECD's Crypto-Asset Reporting Framework (CARF), according to the Global Forum on Tax Transparency's March 2026 update. Data collection began January 1, 2026, across an initial 48 countries. The first automatic cross-border exchanges of crypto transaction data are scheduled for September 30, 2027. In the European Union, the parallel DAC8 directive imposed its compliance deadline on July 1, 2026, requiring every crypto-asset service provider (CASP) serving EU residents — regardless of where the platform is headquartered — to have reporting systems, customer due diligence procedures, and internal controls in place.
The enforcement push arrives against a backdrop of extreme non-compliance. According to Divly's 2026 Global Crypto Taxation Report, just 1.76% of the estimated 301 million global crypto owners appear to declare their holdings to tax authorities. In practical terms, that is roughly 1 in 57 holders. U.S. Senator Elizabeth Warren's office has estimated the American crypto tax gap alone at $50 billion within a broader $688 billion federal revenue shortfall. The UK Treasury projects £315 million in recovered revenue by 2030 from CARF-enabled enforcement.
This report examines the three concurrent regulatory regimes — CARF, DAC8, and the U.S. Form 1099-DA — their implementation status, the compliance burden on exchanges, and the structural gap that decentralized finance (DeFi) creates in the reporting perimeter.
Three distinct but coordinated frameworks now require crypto platforms to report user transaction data to tax authorities:
| Framework | Scope | Data Collection Start | First Exchange Date | Jurisdictions | |-----------|-------|----------------------|--------------------|----| | OECD CARF | Global | January 1, 2026 | September 30, 2027 | 76 committed (48 active) | | EU DAC8 | EU + global platforms serving EU residents | January 1, 2026 | September 30, 2027 | 27 EU member states | | U.S. Form 1099-DA | U.S. brokers | January 1, 2025 (transactions) | February 2026 (first filings) | United States |
All three regimes target the same opacity problem: unlike bank accounts, brokerage accounts, and insurance products — which have been subject to automatic information exchange under the Common Reporting Standard (CRS) since 2017 — crypto assets have operated outside the global tax transparency net. That era ended on January 1, 2026.
The OECD published the final CARF text on October 10, 2022. The G20 endorsed it, and by November 2023, 48 jurisdictions issued a joint statement committing to implementation by 2027. As of March 2026, 76 Global Forum members have announced implementation intentions.
Wave 1 — First exchanges by 2027 (52 jurisdictions): Austria, Azerbaijan, Belgium, Bermuda, Brazil, Bulgaria, Canada, Cayman Islands, Colombia, Croatia, Cyprus, Czechia, Denmark, Estonia, Faroe Islands, Finland, France, Germany, Gibraltar, Greece, Guernsey, Iceland, Indonesia, Ireland, Isle of Man, Israel, Italy, Japan, Jersey, Kazakhstan, Korea, Latvia, Liechtenstein, Lithuania, Luxembourg, Malta, Mexico, Netherlands, New Zealand, Norway, Poland, Portugal, Romania, San Marino, Slovak Republic, Slovenia, South Africa, Spain, Sweden, Switzerland, Uganda, United Kingdom.
Wave 2 — First exchanges by 2028 (15+ jurisdictions): Australia, Bahamas, Barbados, British Virgin Islands, Costa Rica, Hong Kong, Malaysia, Mongolia, Nigeria, Saint Vincent and the Grenadines, Seychelles, Singapore, Thailand, Türkiye, United Arab Emirates.
Wave 3 — First exchanges by 2029: United States.
Notable holdouts: Argentina, El Salvador, Georgia, India, and Vietnam have not yet committed to CARF implementation.
CARF requires Reporting Crypto-Asset Service Providers (RCASPs) to collect self-certifications from users establishing tax residency and taxpayer identification numbers (TINs). Reportable data includes: user identity and TIN, aggregate transaction values by crypto-asset type, number of units transferred, and the nature of each transaction (sale, exchange, transfer). The data is then exchanged automatically between participating jurisdictions' tax authorities.
The EU adopted Directive 2023/2226 (DAC8) to align its administrative cooperation framework with CARF. DAC8 went beyond CARF in one critical respect: it applies to any global platform serving EU residents, not just EU-domiciled firms. Binance, Coinbase, Kraken, and any other exchange with EU users must comply regardless of headquarters location.
Key DAC8 dates:
The scope covers all reportable crypto assets except central bank digital currencies (CBDCs) and certain e-money tokens already covered by existing banking directives. Penalties for non-compliance reach up to €300 per unreported user in some member states.
The IRS finalized rules requiring centralized crypto exchanges to issue Form 1099-DA (Digital Asset Proceeds From Broker Transaction) beginning with the 2025 tax year. The form was due to taxpayers by February 17, 2026.
Implementation proved difficult. Multiple exchanges — including Coinbase and Kraken — missed the February deadline and pushed delivery to mid-March 2026 or later. The IRS responded with transitional relief under Notice 2024-56: brokers making a "good-faith effort" to comply face no penalties for late or incorrect 1099-DAs during the first filing year.
For 2025 transactions, brokers must report gross proceeds but are not required to include cost basis. Cost basis reporting becomes mandatory for transactions on or after January 1, 2026. This phased approach means the 2027 filing season (covering 2026 transactions) will produce the first complete picture of both proceeds and basis for U.S. crypto investors.
The DeFi sector received a partial reprieve: under current rules, only custodial brokers — centralized exchanges and digital asset payment processors — must file 1099-DAs. Non-custodial protocols remain outside the reporting perimeter, though the IRS has signaled that future rulemaking may expand coverage.
Divly's 2026 Global Crypto Taxation Report provides the most granular estimate of the compliance gap. The report estimates 301 million crypto owners worldwide, of whom approximately 5.3 million — 1.76% — appear to declare their holdings to tax authorities. Even in a high-estimate scenario, the figure rises to only 3.00%, or roughly 9 million declarants.
Country-level compliance rates vary substantially:
| Country | Estimated Compliance Rate | |---------|--------------------------| | Japan | 19.78% | | Norway | 14.63% (official data) | | Germany | 7.71% | | United Kingdom | 7.33% | | Austria | 6.37% | | Australia | 4.8% (separate survey: 72% self-reported accuracy) | | South Korea | 3.9% (separate survey: 54% self-reported compliance) | | Brazil | 0.29% | | Turkey | 0.16% | | India | 0.16% | | Indonesia | 0.13% | | Philippines | 0.02% |
The data implies that CARF's impact will be largest in jurisdictions where current compliance is lowest. Countries like India, Turkey, Indonesia, and Brazil — all either committed to CARF or operating exchanges subject to foreign CARF obligations — have compliance rates below 0.5%. The introduction of automatic information exchange could surface substantial unreported gains.
Japan's relative outlier status at 19.78% reflects its early adoption of exchange-level reporting requirements through the Financial Services Agency, which has required Japanese exchanges to report user data to the National Tax Agency since 2018.
Major exchanges — Binance, Coinbase, Kraken, Bitstamp, Bitpanda — have confirmed DAC8 compliance programs are underway. The operational burden is substantial: new data workflows, system upgrades, privacy procedures, customer communication programs, and staff training across compliance, legal, and customer service departments.
For platforms operating globally, the challenge multiplies. A single exchange serving users in 40+ jurisdictions must implement reporting to each national authority with country-specific formats, deadlines, and penalty regimes. Platforms complying with DAC8 largely satisfy CARF obligations for EU operations simultaneously, but non-EU jurisdictions may impose additional requirements.
RSM, the audit and advisory firm, noted that DAC8 and CARF "present extensive reporting challenges for crypto platforms," citing the compressed timeline between the January 2026 data collection start and the operational readiness requirements. The firm observed that most platforms did not have the required infrastructure when the rules were finalized, forcing an accelerated buildout.
Smaller exchanges and non-custodial wallet providers face the steepest compliance curves. The cost of building reporting infrastructure may prove prohibitive for platforms operating on thin margins, potentially accelerating consolidation in the exchange sector — a dynamic already underway as MiCA licensing requirements eliminated 83% of EU crypto firms by mid-2026.
CARF defines Reporting Crypto-Asset Service Providers (RCASPs) to include DeFi protocols with a "point of central influence or control." In practice, this language captures hybrid protocols with identifiable governance teams but exempts fully decentralized, permissionless systems where no entity maintains user accounts or transaction records.
This creates a structural gap. Centralized exchange activity faces comprehensive reporting, while peer-to-peer transactions on decentralized protocols remain outside the perimeter. The exemption creates a rational incentive for tax-sensitive users to shift activity toward DeFi platforms to reduce visibility.
The gap is not absolute. Users remain legally obligated to self-report gains from DeFi transactions in virtually all jurisdictions. But self-reporting compliance for centralized exchange users — already low at 1.76% globally — is likely lower for DeFi activity, where no third party generates a tax document.
Tax authorities are aware of the problem. The OECD's step-by-step implementation guide for CARF acknowledges that the DeFi exemption "may prove temporary" as governments develop monitoring approaches for decentralized activity. The IRS has similarly signaled that future rulemaking may extend 1099-DA obligations to non-custodial platforms, though no concrete proposal has been published.
Pre-CARF enforcement has already produced measurable results in jurisdictions with proactive tax authorities.
United Kingdom: HMRC sent 65,000 "nudge letters" to suspected crypto tax evaders in the year ending April 2025 — a 134% increase from 27,700 the prior year. The letters are based on data obtained from exchanges under existing voluntary disclosure agreements. HMRC recovered over £8 million from 502 crypto investors over two years through these efforts. The UK Treasury projects £315 million in additional revenue by April 2030 once CARF-enabled automatic exchange is fully operational.
United Kingdom holdings context: Approximately 7 million UK adults hold an estimated £12.9 billion in crypto assets, up from £7.8 billion in 2022, according to HMRC survey data.
United States: The IRS Criminal Investigation division has made crypto enforcement a stated priority. The introduction of Form 1099-DA creates an automatic matching capability — the same mechanism that drives compliance for stock and bond transactions, where third-party reporting pushes compliance rates above 95%. The $50 billion estimated crypto tax gap cited by Senator Warren's office represents roughly 7.3% of the total federal tax gap.
Japan: The National Tax Agency has required exchange-level reporting since 2018, producing the highest estimated compliance rate (19.78%) among major crypto markets.
The simultaneous activation of CARF, DAC8, and Form 1099-DA marks the end of crypto's structural tax opacity. The mechanisms are identical to those that transformed traditional financial asset compliance over the past decade under CRS: automatic information exchange between tax authorities, third-party reporting by intermediaries, and cross-border data sharing.
The 1.76% global compliance rate will not survive contact with these regimes. Japan's experience — where exchange-level reporting since 2018 produced a 19.78% compliance rate, the highest globally — offers a forward indicator. That rate remains far below the 95%+ compliance seen in traditional brokerage accounts with 1099 reporting, suggesting crypto compliance rates have substantial room to rise as reporting matures.
The DeFi exemption is the most significant remaining gap. As long as decentralized protocols remain outside the reporting perimeter, a portion of activity will migrate to avoid visibility. Whether tax authorities close this gap through expanded definitions of RCASPs, on-chain analytics, or new legislative frameworks will determine the ultimate effectiveness of the global crypto tax dragnet.
The data is clear on one point: the infrastructure for global crypto tax enforcement is now operational. The question is no longer whether crypto transactions will be reported, but how quickly the reporting net expands to cover the full ecosystem.