Tax authorities around the world have struggled to track crypto transactions since Bitcoin's inception. The OECD's Crypto-Asset Reporting Framework, known as CARF, is designed to close that gap. Finalized in 2023 and now being implemented across 48 signatory jurisdictions, CARF creates a standardized system for crypto service providers to automatically report user transactions to tax authorities.
If you trade on any centralized exchange, use a regulated on-ramp, or interact with covered DeFi platforms, your transaction data is now being collected and shared with your home country's tax agency. Understanding what CARF covers and how to stay compliant is essential for avoiding penalties.
What CARF Is and Why It Exists
CARF is modeled on the Common Reporting Standard (CRS), which has governed automatic exchange of bank account information between countries since 2017. Just as CRS made it nearly impossible to hide offshore bank accounts from tax authorities, CARF aims to do the same for crypto holdings.
The framework was developed by the OECD at the request of the G20, which identified crypto tax evasion as a growing concern. By some estimates, unreported crypto gains cost governments tens of billions in lost tax revenue annually. CARF is the coordinated response.
Implementation began in 2026 for early-adopter countries. Others have committed to implementation by 2027 or 2028. The United States, while not directly implementing CARF, has parallel reporting requirements through its own IRS rules that achieve similar outcomes for US taxpayers. For more on the US-specific regulatory landscape, see our coverage of SEC crypto regulation in 2026.
What Gets Reported and to Whom
CARF requires reporting of four types of transactions: exchanges between crypto assets and fiat currency, exchanges between different crypto assets, transfers of crypto assets (including transfers to non-custodial wallets above certain thresholds), and retail payments made with crypto assets.
Reporting entities include centralized exchanges, OTC trading desks, crypto ATM operators, and potentially certain DeFi platforms with identifiable operators. These entities must collect user identity information, report annual transaction volumes and values, and share this data with the user's country of tax residence.
The data flows through automatic exchange agreements between countries. If you are a US citizen trading on a UK-based exchange, that exchange reports your data to UK tax authorities, who then share it with the IRS. The system works bidirectionally, covering both inbound and outbound reporting. Reuters has published extensive coverage of the CARF implementation timeline.
Which Countries Are Participating
As of early 2026, 48 countries have committed to CARF implementation. Early adopters include the United Kingdom, Canada, Germany, France, Australia, Japan, and South Korea. These jurisdictions began collecting data in 2025 and will commence automatic exchanges starting in 2026.
A second wave of countries, including India, Brazil, and several Southeast Asian nations, have committed to implementation by 2027. Some notable absences include countries with significant crypto activity but limited international cooperation, such as certain jurisdictions in the Middle East and Central Asia.
The EU's DAC8 directive aligns closely with CARF and adds additional reporting requirements specific to European exchanges and users. The overlap between CARF and DAC8 in Europe means that European crypto users face the most comprehensive reporting environment globally. For a country-by-country regulatory overview, read our guide on crypto regulation by country.
Impact on DeFi and Self-Custody
CARF's application to DeFi is its most controversial aspect. The framework defines reporting entities broadly enough to potentially include DeFi protocol front-ends that have identifiable operators, even if the underlying smart contracts are decentralized. This has created uncertainty about whether platforms like Uniswap Labs or Aave's governance entity would face reporting obligations.
Self-custody wallets are not directly covered by CARF. However, transfers from a reporting entity to a self-custody wallet above certain thresholds must be reported. This means moving your crypto off an exchange to a hardware wallet will be logged and shared with tax authorities, though the subsequent on-chain transactions from that wallet are not directly reported.
The practical effect is that truly anonymous crypto usage is becoming much harder for anyone who has ever interacted with a centralized service. On-chain analytics combined with CARF reporting creates a data trail that tax authorities can use to reconstruct your transaction history. As noted by CoinDesk, privacy-focused users are migrating to fully decentralized tools, but the on-ramps and off-ramps remain covered.
How to Prepare
The most important step is maintaining accurate records of all your crypto transactions. Use portfolio tracking software that records your cost basis, transaction dates, and counterparties. Tools like Koinly, CoinTracker, and TokenTax integrate with major exchanges and can generate tax reports automatically.
Review your past filings. If you have unreported crypto gains from previous years, CARF will likely surface discrepancies. Many jurisdictions offer voluntary disclosure programs that allow you to correct past filings with reduced penalties. Addressing this proactively is far less expensive than waiting to be audited.
Consider consulting a tax professional who specializes in crypto. The interaction between CARF, domestic tax laws, and DeFi transactions creates complex situations that general-purpose tax software may not handle correctly. This is especially important if you participate in staking, liquidity provision, or cross-chain bridges, where the tax treatment varies by jurisdiction. For more on privacy-related tools, read about privacy coins in 2026.
FAQ
Does CARF apply to small crypto holders?
CARF does not set a minimum reporting threshold at the framework level. Individual countries may implement de minimis thresholds below which transactions are not reported, but the framework itself covers all transactions regardless of size. Even small holders on centralized exchanges should expect their data to be reported.
Can you avoid CARF by using DEXs?
Using decentralized exchanges may reduce direct CARF reporting if the DEX has no identifiable operator in a participating jurisdiction. However, your tax obligation exists regardless of whether reporting occurs automatically. Tax evasion carries criminal penalties in most countries, and on-chain data is increasingly used by tax authorities for investigations.
How does CARF differ from US crypto tax reporting?
The US uses its own domestic framework rather than directly implementing CARF. However, the US has exchange-of-information agreements that achieve similar cross-border data sharing. Starting in 2026, US exchanges must issue 1099-DA forms to the IRS for crypto transactions, paralleling CARF's automatic reporting mechanism.
