NOT financial advice - seek advice from a professional for your specific situation

    TaxKilnUK tax guidance
    TaxKilnUK tax guidance

    Crypto + Digital Assets Tax → CARF January 2026

    UK CARF Implementation 1 January 2026 — RCASP Reporting + First Report 31 May 2027 + Pre-CARF DDS Window

    The OECD Cryptoasset Reporting Framework (CARF) is the most significant change to UK crypto compliance since HMRC first published the Cryptoassets Manual. UK implementation effective 1 January 2026 requires UK Reporting Cryptoasset Service Providers (RCASPs) — exchanges, brokers, custodians, certain DeFi front-ends, and ATM operators — to collect and report annually to HMRC: user identity (name + DOB + address), tax residence (TIN), cryptoasset holdings, and transaction summaries (acquisitions, disposals, transfers in/out by type). First RCASP report covers 2026 calendar year activity and is due to HMRC by 31 May 2027. HMRC then automatically exchanges the data with OECD CARF partner jurisdictions and reconciles it against UK SA returns via the CONNECT system from the 2026/27 cycle. The compliance implication: UK individuals with prior under-reported crypto activity should consider the Digital Disclosure Service (DDS) BEFORE HMRC matches CARF data against returns. The pre-CARF window for unprompted disclosure (which secures materially lower penalty bands under Sch 24 FA 2007) is narrowing fast.

    Last reviewed:

    Guidance, not advice. We explain the rules, we don't assess your situation. Always seek financial or tax advice from your accountant, or contact HMRC. Read our editorial scope →

    In plain English

    Before CARF, HMRC visibility of UK individuals' crypto activity was patchy. UK exchanges already shared some data (HMRC has used powers under FA 2008 Sch 36 + bulk data requests since at least 2019), but offshore exchanges and self-custody were effectively invisible to HMRC unless a specific enquiry was opened. CARF changes the baseline. From 1 January 2026, UK RCASPs must collect KYC-grade identity data + tax residence + holdings + a full year's transaction history for every user. They report annually to HMRC. HMRC exchanges that data with the 60+ jurisdictions implementing CARF (US, EU member states, Australia, Singapore, UAE etc. — most major financial centres). So a UK individual using a US exchange that participates in CARF will see their data flow: US exchange → IRS → automatic exchange → HMRC. The first major data wave hits HMRC by 31 May 2027 for the 2026 calendar year. CONNECT — HMRC's system — already reconciles against SA returns across PAYE, banks, land registry, DVLA, and more. Adding CARF crypto data is straightforward — and the mismatch detection on undeclared disposals or staking income is mechanical. The practical urgency: prior-year under-disclosure. HMRC penalty bands under Sch 24 FA 2007 are calibrated by behaviour AND by whether disclosure was 'unprompted' or 'prompted'. Once HMRC has CARF data showing your disposals and opens an enquiry, your disclosure is 'prompted' — much higher penalty band. Disclose via DDS BEFORE CARF data lands and you have an unprompted disclosure — bottom of the band, often 0% for careless errors. Note: there is also a user-side CARF penalty for non-compliance with the framework's own requirements (e.g. failure to provide TIN to your RCASP). That cap is £300 per failure — per failure, not per transaction. Crucially, this does NOT replace the underlying SA penalty regime — under-reported income/gains still face the full Sch 24 / Sch 41 / Sch 18 stack, including the 200% offshore failure-to-correct rate.

    How it works

    OECD CARF framework

    Published October 2022. Builds on the Common Reporting Standard (CRS) but tailored to cryptoassets. Requires Reporting Cryptoasset Service Providers (RCASPs) in implementing jurisdictions to perform KYC due-diligence on users + collect tax residence (Tax Identification Number) + report annually to home tax authority. Home tax authority then automatically exchanges the data with partner jurisdictions based on user tax residence. 60+ jurisdictions committed including US, UK, EU member states, Australia, Singapore, Switzerland, UAE.

    UK implementation — 1 January 2026

    UK CARF regulations bring obligations into force from 1 January 2026. UK RCASPs (defined as exchanges, brokers, custodians, ATM operators + certain DeFi front-ends with UK nexus) must from that date: (a) perform on-boarding due-diligence on all new users; (b) re-paper existing users to obtain TIN + verified tax residence; (c) record all reportable transactions throughout the calendar year; (d) report annually to HMRC by 31 May following each calendar year. First report due 31 May 2027 covers 2026 calendar year activity.

    What gets reported

    Per OECD CARF schema: user identity (full name + DOB + address); tax residence (TIN); cryptoasset holdings (end-of-year balance by token); reportable transactions during the year (acquisitions, disposals, transfers in, transfers out — by token + sterling value where applicable). Transaction-level granularity sufficient to compute disposals + match against SA108 capital gains pages.

    Data exchange + CONNECT reconciliation

    HMRC receives RCASP reports + automatically exchanges with partner-jurisdiction tax authorities based on user tax residence. UK-resident user data from US/EU/AU exchanges flows TO HMRC; non-resident data from UK exchanges flows OUT to home authorities. HMRC ingests received data into CONNECT — the system that already reconciles against PAYE, banks, land registry, etc. From 2026/27 SA cycle onwards, CONNECT cross-references CARF data against SA returns; mismatches (unreported disposals, unreported staking income) flag for enquiry under TMA 1970 s.9A or discovery under s.29.

    Pre-CARF voluntary disclosure window — DDS

    Critical practical implication: HMRC penalty bands under Sch 24 FA 2007 are calibrated by behaviour band (innocent / careless / deliberate / deliberate-and-concealed) AND by whether disclosure was 'unprompted' or 'prompted'. Once CARF data lands at HMRC + an enquiry is opened, your disclosure is 'prompted' — much higher penalty band. Disclosing PRIOR-YEAR under-reported crypto activity via the Digital Disclosure Service (DDS) BEFORE CARF reconciliation is unprompted — bottom of the band, often 0% on careless errors. See /tribunals-and-hmrc-enquiries/voluntary-disclosure-mechanisms for the full DDS framework.

    User-side CARF penalty + interaction with underlying tax penalties

    There is a separate user-facing CARF penalty for failing to comply with the framework's own requirements (e.g. failure to provide TIN to your RCASP, providing false information). That penalty is capped at £300 PER FAILURE — per failure, not per transaction (so providing wrong TIN once = £300, not £300 × every transaction during the year). Crucially this CARF-specific penalty does NOT replace the underlying SA penalty regime — under-reported income/gains still face the Sch 24 inaccuracy + Sch 41 failure-to-notify + Sch 18 F(No.2)A 2017 failure-to-correct 200% offshore stack, plus interest. CARF compliance is a process-level obligation alongside (not instead of) the substantive tax obligations.

    Who this applies to + key conditions

    Statute + manual references

    Primary: OECD Cryptoasset Reporting Framework (CARF) — UK implementation via UK CARF regulations effective 1 January 2026; underlying penalty exposure via Sch 24 FA 2007, Sch 41 FA 2008, Sch 18 F(No.2)A 2017 (Failure to Correct 200% offshore), TMA 1970 s.7 (notification to chargeability).

    Related: OECD CARF text + commentary (published October 2022); UK CARF regulations (implementing OECD model); TMA 1970 s.7 — duty to notify chargeability; Sch 24 FA 2007 — inaccuracy penalties (behaviour bands + prompted/unprompted multipliers); Sch 41 FA 2008 — Failure to Notify chargeability (offshore-enhanced bands); Sch 18 F(No.2)A 2017 — Failure to Correct offshore — 200% penalty; FA 2019 s.80 + Sch 11 (inserting TMA 1970 s.36A) — 12-year offshore assessment time limit

    HMRC manual: CRYPTO Manual updates (in train); CH (Compliance Handbook) for penalty + disclosure framework; CCM (Cryptoassets Compliance) — HMRC operational guidance

    Case law: Tooth v HMRC [2021] UKSC 17 — discovery + 'deliberate' threshold; Tinkler v HMRC [2021] UKSC 39 — service of notice + procedural rigour relevant to enquiry openings

    Common mistakes + traps

    Worked example

    Tom, software engineer in Reading, used multiple offshore exchanges 2020-2024 without declaring crypto disposals, then stopped trading in 2024

    Tom realises in early 2026 that he has cumulative unreported disposals across 2020/21 to 2023/24 of approximately £45,000 in chargeable gains. He never registered for SA crypto reporting + filed nil capital gains every year. He used Binance, Kraken, and a US-based platform — all CARF-participating. His income was £42,000 PAYE annually (below higher rate). He has stopped trading.

    1. Step 1 — Quantify exposure. £45,000 cumulative gains across 4 years. Apply old CGT rates pre-30 Oct 2024 (10% basic / 20% higher). Tom was basic-rate → estimated CGT ~£4,500 across years. Plus interest under FA 2009 s.101 (base + 4% from April 2025, lower previously) ~£1,000-£1,500 cumulative.
    2. Step 2 — Behaviour assessment. Tom did not actively conceal — he was unaware crypto-to-crypto swaps were disposals. Likely 'careless' under Sch 24 FA 2007 — NOT deliberate. If deliberate or deliberate-and-concealed, Sch 18 F(No.2)A 2017 Failure to Correct 200% offshore could engage; on careless, standard Sch 24 careless bands apply.
    3. Step 3 — Disclosure route. Digital Disclosure Service (DDS) — online form; covers all back-years up to 20-year window where deliberate, 12-year for offshore, 4 years for careless. Tom's careless behaviour → 4 years assessment window (extended to 6 if careless under FA 2008 Sch 39 — depends on specific behaviour finding).
    4. Step 4 — Critical timing. CARF first reports cover 2026 calendar year activity → report due 31 May 2027. Tom's 2020-2024 activity is PRE-CARF reporting window but post-CARF data may include legacy account-level disclosures from exchanges. Pre-CARF unprompted DDS NOW: penalty band 0%-15% (careless unprompted). Wait for HMRC enquiry post-CARF: prompted band 15%-30% (careless prompted).
    5. Step 5 — Estimate penalty under DDS (careless unprompted). Bottom of band 0% if disclosure-quality maximised (telling-helping-giving-access). Realistic mid-point ~5-10%. On ~£4,500 CGT base = ~£225-£450 penalty + ~£1,000-£1,500 interest + £4,500 tax = total ~£5,725-£6,450.
    6. Step 6 — Compare prompted (post-CARF enquiry) estimate. Careless prompted 15%-30% band = ~£675-£1,350 penalty + interest accruing for longer + tax = total ~£6,475-£7,500+. Difference £750-£1,000+ — and growing as interest accrues.
    7. Step 7 — Execute DDS. Online notification of intent (HMRC issues unique reference). 90 days to compute and submit full disclosure with payment. Self-serve appropriate — see /tribunals-and-hmrc-enquiries/voluntary-disclosure-mechanisms for full DDS walkthrough. Optional qualified accountant review £400-£800.
    8. Step 8 — Anti-charlatan note: 'crypto tax specialist' quote of £6,000 for DDS handling is wholly unwarranted for Tom's case. DDS is an HMRC online form with structured fields; Koinly / CoinTracker / CryptoTaxCalculator / Recap historic-import (£100-200) computes the back-year disposal figures; £400-800 accountant review optional. Total realistic professional cost ~£500-1,000.

    Outcome: Pre-CARF DDS unprompted disclosure secures bottom-of-band Sch 24 penalty (~5-10% careless) saving £500-£1,000+ versus post-CARF prompted disclosure once enquiry opens. Self-serve via HMRC DDS online form + crypto tax software back-import + optional accountant review — total professional cost ~£500-£1,000, not 'specialist' £6,000+.

    How this connects to the rest of the framework

    CGT on disposals + pooling →

    CARF reports include disposal-level data — accurate pooling on SA108 will be cross-referenced from 2026/27 onwards.

    Income tax — mining, staking, airdrops →

    Staking + airdrop receipts visible to HMRC via CARF; declared misc income essential.

    DeFi, NFTs, stablecoins + emerging →

    DeFi front-ends with UK nexus may be RCASPs; transaction-level data flows to HMRC.

    Scenarios + anti-charlatan →

    Pre-CARF DDS scenario walks the timing + behaviour-band calculus for prior-year disclosure.

    /tribunals-and-hmrc-enquiries/voluntary-disclosure-mechanisms →

    DDS is the route for pre-CARF unprompted disclosure — bottom of Sch 24 penalty bands; Sch 18 F(No.2)A 2017 offshore window still operative.

    /tribunals-and-hmrc-enquiries/penalty-regime →

    Sch 24 FA 2007 inaccuracy bands + prompted/unprompted multipliers drive the practical urgency of pre-CARF disclosure.

    Frequently asked questions

    What happens if I miss the Self Assessment deadline?+
    The Self Assessment deadline is 31 January (online filing) for the previous tax year. Miss it and HMRC apply an automatic £100 penalty. Beyond that: £10 per day from 3 months late (capped at £900), 5% of tax due at 6 months late, and another 5% at 12 months late, under Schedule 55 of the Taxes Management Act 1970. If you have a genuine reason (serious illness, bereavement, technical issue with HMRC's systems) you can appeal with evidence; HMRC accepts reasonable excuse appeals in most genuine cases.
    Do I need an accountant or can I file Self Assessment myself?+
    Legally you can file Self Assessment yourself via gov.uk for free, most simple sole-trader returns (single income source, basic expenses) are realistic to self-file. An accountant adds real value when: your trading profit is above £40,000 (extraction-strategy decisions matter), you have multiple income streams (PAYE + self-employment + property + dividends), you've crossed the £90,000 VAT threshold, you're considering incorporation, or you have an HMRC enquiry. Expect to pay £400-£1,500/year for a typical sole-trader accountant; the cost is itself a deductible expense.
    How do payments on account work?+
    When your Self Assessment tax bill exceeds £1,000 for the first time, HMRC requires payments on account toward NEXT year's tax. Half the current bill is due 31 January (alongside the current bill); the other half is due 31 July. So your first January after crossing the threshold can hit with a double-bill: last year's balance + first payment on account. Adjust via Form SA303 if you expect next year's income to drop substantially. Payments on account don't apply if more than 80% of your tax is collected via PAYE.
    Does CARF apply retrospectively to my 2024 or 2025 disposals?+
    CARF reporting starts with the 2026 calendar year (first report due 31 May 2027). But CARF data MAY include legacy account history where exchanges already capture it — and HMRC's existing powers (FA 2008 Sch 36 information notices + voluntary information requests + bulk data requests) already reach prior-year activity. Pre-2026 disposals remain subject to standard assessment time limits (4/6/12/20 years depending on behaviour + offshore character) regardless of when CARF reports them.
    Will HMRC chase small amounts?+
    CONNECT is mechanical — any mismatch above HMRC's threshold flags for enquiry. Historic SA enquiry openings on undeclared dividends as small as £1,000 are well-documented. For crypto, expect similar — under-reporting of gains above the £3,000 AEA likely triggers enquiry once visible.
    Is self-custody / hardware wallet activity captured by CARF?+
    RCASPs report what flows through THEM — on/off-ramp transactions, on-platform trades. Pure self-custody between two hardware wallets is not directly reported. But the on-ramp (fiat-to-crypto via a CARF-RCASP exchange) IS reported, and on-chain analysis tools (used by HMRC FIS) can trace flows from reported on-ramp addresses to subsequent wallets. 'Self-custody = invisible' is a flawed framing.
    Does the £300 CARF user penalty mean I can ignore CARF compliance?+
    No. The £300/failure penalty relates to procedural CARF non-compliance (failing to provide TIN to your RCASP, providing false info). The underlying tax-on-disposals + tax-on-staking obligations remain — and the SA penalty regime (Sch 24/Sch 41/Sch 18) stacks on top. Substantively under-reported gains can attract penalties of 100%+ (Sch 18 F(No.2)A 2017 offshore 200%) — vastly more than the £300 CARF cap.

    Free + regulated-body resources

    Last reviewed: