People using cryptocurrency services in the UK are now required to provide personal and tax identifying details to cryptoasset platforms, following new reporting rules that came into force on 1 January 2026.
What Are The Rules?
From the start of 2026, anyone buying, selling, transferring, or exchanging cryptoassets through a cryptoasset service provider must provide specific identifying information, or risk penalties. The change forms part of the UK’s implementation of the Cryptoasset Reporting Framework, commonly known as CARF, an international standard developed to improve tax transparency around cryptoassets.
Will Link Crypto Activities To Tax Record
According to guidance published by HM Revenue & Customs, the information collected by crypto platforms is to be used to link a person’s crypto activity to their tax record. HMRC says this “makes it easier for us to find out what tax you need to pay”, emphasising that the measure is designed to support enforcement of existing tax rules rather than introduce a new form of crypto taxation.
Applies Whether The Crypto Service Is In The UK Or Not
HMRC says the reporting obligation applies regardless of whether the cryptoasset service provider is based in the UK or overseas. For example, as HMRC’s guidance states on its website, users must provide the required information “to every cryptoasset service provider you use, even if they’re not based in the UK”.
What Information Is Needed?
The details required depend on whether the user is an individual or an organisation. For example, individual users must provide their full name, date of birth, and the address and country where they normally live. They must also supply a tax identification number. For UK residents, this will usually be a National Insurance number or a Unique Taxpayer Reference.
Where a person is not eligible for a tax identification number, for example because their country of residence does not issue one, HMRC says it is not required.
Entity users, such as companies, partnerships, trusts, or charities, must provide their legal business name, main business address, and company registration number if they are a UK company. Non-UK entities must provide a tax identification number and the country that issued it. Some entities are also required to provide details of their controlling person.
Incorrect Details Could Result In A Fine
HMRC is making it clear that users must provide accurate information. It says that giving incorrect details, or failing to provide them at all to a UK cryptoasset service provider, can lead to a penalty of up to £300. Where a non-UK provider is involved, the penalty could be higher.
How Penalties And Tax Enforcement Fit Together
The £300 penalty relates specifically to failures to provide accurate identifying information to cryptoasset service providers. It sits alongside, rather than replaces, HMRC’s existing powers to penalise unpaid tax.
HMRC’s guidance warns that if someone has not paid tax they owe on cryptoassets and the tax authority later identifies this, penalties can be far more significant. For example, in such cases, HMRC says penalties can be “up to 100 per cent of the tax due plus interest”. For offshore matters or offshore transfers, penalties can be higher still.
Voluntary Disclosure Facility (For Previous Years) Available
The department is also operating a disclosure facility for people who have underpaid tax on cryptoassets in earlier years, which allows individuals to correct their tax affairs voluntarily for undeclared gains or unpaid tax prior to April 2024.
Why The Focus On Crypto For Tax Authorities?
Cryptoassets have long posed challenges for tax authorities because of their decentralised and cross-border nature. For example, transactions can take place across multiple platforms, wallets, and jurisdictions, often without the kind of centralised reporting that applies to traditional bank accounts.
CARF
Government policy documents describe cryptoassets as a rapidly expanding area where tax authorities have historically had limited visibility. The Cryptoasset Reporting Framework (CARF) was, therefore, developed to address gaps that remained even after the introduction of the Common Reporting Standard. In simple terms, CARF is designed to prevent people from avoiding tax reporting by shifting assets into crypto. It creates a framework under which cryptoasset service providers collect standardised information about users and their transactions, which can then be shared automatically between tax authorities in participating countries.
How International Data Sharing Will Work
CARF is a multinational framework, meaning its impact goes beyond the UK alone. For example, where a UK resident uses a UK cryptoasset service provider, HMRC will use the reported information to link crypto activity to the individual’s UK tax record. Where a UK resident uses a non-UK provider based in a country that has also implemented CARF, the tax authority in that country will share the information with HMRC.
Similarly, if a non-UK resident uses a UK cryptoasset service provider, HMRC will share the relevant information with the tax authority in the user’s country of residence, provided that country also follows the CARF rules.
The UK government has said that the first international exchanges of data under CARF are expected to take place from 2027, reflecting the time required for jurisdictions and businesses to build reporting systems.
How Crypto Is Taxed In The UK
The new reporting rules do not change how cryptoassets are taxed, but they are expected to make enforcement more effective.
In the UK, cryptoassets are generally subject to Capital Gains Tax when they are disposed of. Disposal can include selling crypto for traditional currency, exchanging one cryptoasset for another, spending crypto on goods or services, or gifting it to someone other than a spouse, civil partner, or charity.
If total gains across all disposals exceed the annual Capital Gains Tax allowance, the gains must be reported to HMRC and tax paid. Losses can be offset against gains, and in some cases carried forward to future tax years.
Where cryptoassets are received through employment, mining, or other income-generating activities, Income Tax and National Insurance contributions may also apply.
With this in mind, HMRC has now updated its Self Assessment tax return to include a dedicated section for cryptoassets, reflecting the growing expectation that taxpayers accurately report crypto-related income and gains.
How Widespread Is Crypto Use In The UK?
The changes come at a time when crypto awareness and usage remain significant in the UK. For example, research published by the Financial Conduct Authority shows that public awareness of cryptoassets remains high. Its most recent consumer research found that more than 90 per cent of adults had heard of cryptoassets, while around 8 per cent of respondents reported owning or using them.
The same research indicates that most users rely on centralised exchanges as their main way of accessing crypto, rather than decentralised protocols or peer-to-peer transactions. This is significant because CARF reporting obligations apply primarily to cryptoasset service providers that act as intermediaries.
For many consumers, the impact of the new rules is likely to be experienced through additional identity checks, requests to confirm tax residency, and prompts to supply or update tax identification details.
What The Rules Mean For Crypto Businesses
The change in the rules essentially sees the burden of compliance falling heavily on cryptoasset service providers, which must collect, verify, and report user information and transaction data.
Government impact assessments suggest that businesses already preparing for international CARF obligations may face relatively modest additional costs to extend reporting to UK resident users. Even so, firms may need to update systems, data validation processes, and reporting workflows to ensure information is accurate and submitted in the required format.
Around 50 UK businesses are estimated to be affected by the domestic reporting extension, though overseas platforms serving UK users are also brought into scope where their home jurisdictions implement CARF.
For example, a crypto exchange that already collects customer data for anti-money laundering purposes may still need to restructure how that data is stored and reported so it aligns with CARF requirements around tax residency and transaction reporting.
The Wider Regulatory Context
The introduction of CARF reporting coincides with broader efforts to regulate the UK crypto sector, although those initiatives are progressing on a separate track. The Financial Conduct Authority is currently consulting on proposals for a comprehensive regulatory regime for cryptoassets, covering areas such as exchange standards, conduct requirements, and crypto lending and borrowing. The consultation is due to close in February 2026.
The FCA has been clear that its goal is not to eliminate risk from crypto markets, but to ensure consumers understand those risks and that firms operate to clear standards. David Geale, the FCA’s executive director for payments and digital finance, has said regulation is coming and that the authority wants a regime that “protects consumers, supports innovation and promotes trust”.
For UK crypto users and businesses, the key distinction is that CARF focuses on tax transparency and data sharing, while the FCA’s work addresses how crypto markets operate and how consumers are protected within them.
Challenges and Criticisms
While HMRC says the new reporting framework is about enforcing existing tax law, the changes have prompted some concerns from parts of the crypto industry and from privacy advocates.
For example, one criticism centres on data protection and security. The rules require cryptoasset service providers to collect and store sensitive personal and tax information, sometimes across multiple jurisdictions. Critics argue this increases the risk of data breaches, particularly where smaller or overseas platforms may not have the same security standards as large UK financial institutions.
There are also questions about proportionality. For example, some industry voices argue the rules apply broadly to all users, including those with relatively small holdings or minimal trading activity, potentially increasing compliance friction for people who do not owe any tax. The requirement to provide tax identifiers to every platform used, even where no taxable gain has been realised, has been cited as a source of unnecessary complexity.
From a business perspective, crypto platforms face operational and cost pressures. Although many already collect customer information for anti-money laundering purposes, aligning systems with CARF reporting standards adds technical and administrative overhead, particularly for firms operating across multiple countries with different implementation timelines.
Others point out that CARF does not fully address decentralised finance. Transactions carried out directly on decentralised protocols, without an intermediary acting as a service provider, may remain harder for tax authorities to observe, raising questions about how evenly the rules will apply across the crypto ecosystem.
HMRC has acknowledged that regulation cannot eliminate all non-compliance, but maintains that broader data collection and international information sharing will significantly narrow the gaps that have historically made cryptoassets difficult to tax.
What Does This Mean For Your Business?
The new reporting rules mark a clear change in how crypto activity is treated by the UK tax system, moving it closer to the level of visibility long associated with traditional financial accounts. For individual users, the message is pretty straightforward. Crypto transactions are no longer operating in a grey area, and HMRC now expects crypto activity to be linked clearly and consistently to a person’s tax record, regardless of where the platform they use is based.
For UK businesses operating in the crypto sector, the changes reinforce the idea that compliance and data governance are now central operational requirements rather than secondary considerations. Firms offering exchange, wallet, or portfolio services are being drawn more firmly into the UK’s tax reporting infrastructure, with real implications for system design, data accuracy, and cross-border coordination. Even businesses that already meet anti-money laundering standards may need to rethink how customer data is structured, verified, and reported over time.
More broadly, the rules reflect a wider change in how governments, regulators, and tax authorities view cryptoassets. For example, what was once treated as a niche or experimental asset class is now being integrated into mainstream regulatory frameworks, with greater expectations placed on platforms, investors, and advisers alike. While concerns remain around privacy, proportionality, and coverage of decentralised activity, HMRC’s position is clear that increased transparency is necessary to close long-standing enforcement gaps.
As CARF data sharing begins to scale internationally from 2027, the practical impact of these rules is likely to become more visible across markets. For users, businesses, and regulators, things are clearly moving towards a tighter alignment between crypto activity and existing tax and compliance systems, with fewer opportunities for crypto to sit outside the scope of routine financial oversight.
