Licensing & Tax Reporting Obligations

Regulator-Grade Guidance Document

Date: June 2026 Domain: Digital Asset Taxation Section: Licensing & CASP/VASP Reporting Obligations Coverage: 19 jurisdictions (Americas, Asia-Pacific, Europe, Middle East & Africa)

1. The Licensing-Taxation Nexus

The taxation of digital assets depends fundamentally on the existence of intermediaries capable of identifying taxpayers and reporting transactions. Unlike traditional financial instruments -- where banks, brokers, and custodians have served as tax information conduits for decades -- the crypto-asset ecosystem was originally designed to disintermediate. The regulatory response across all major jurisdictions has been to re-establish intermediation through licensing regimes, which then serve as the infrastructure for tax reporting.

This nexus operates through a three-stage mechanism:

Stage 1: Licensing creates identification. When a jurisdiction requires Crypto-Asset Service Providers (CASPs), Virtual Asset Service Providers (VASPs), or their local equivalents (DCEs, CAESPs, DPT providers, SPAVs, DASPs) to obtain a license or register, the licensing conditions invariably include Know Your Customer (KYC) and Customer Due Diligence (CDD) obligations. These requirements produce the taxpayer identity data -- names, addresses, tax identification numbers (TINs), dates of birth -- that tax reporting depends on.

Stage 2: Licensing creates transaction records. Licensed entities must maintain comprehensive records of customer transactions, including dates, amounts, asset types, and counterparties. Under AML/CFT frameworks (derived from FATF Recommendations 15 and 16), these records must be retained for a minimum of five to seven years, depending on the jurisdiction (Japan and South Korea mandate seven and fifteen years respectively).

Stage 3: Licensing enables reporting mandates. Once licensed entities hold both identity and transaction data, regulators can impose reporting obligations -- either domestically (e.g.,

US Form 1099-DA,

India Section 194S TDS,

Japan annual exchange reports to the NTA) or internationally (e.g.,

EU DAC8, OECD CARF).

The critical policy implication: jurisdictions that delay licensing regimes also delay effective tax compliance. Conversely, jurisdictions that license CASPs/VASPs first can layer tax reporting requirements on existing compliance infrastructure at marginal cost.

The Regulatory Sequence Observed Globally

Two patterns emerge. In most jurisdictions, AML licensing preceded tax reporting by several years.

India and

Brazil are notable exceptions: both imposed tax reporting obligations on exchanges before formalizing comprehensive licensing, relying on exchanges' voluntary or de facto compliance with identity verification.

2. Reporting Obligations by Jurisdiction

Of the 19 jurisdictions surveyed, 18 have committed to the OECD CARF -- only

El Salvador has not (it remains one of five non-committed "relevant" jurisdictions per the OECD's 2025 monitoring update). The CARF first-exchange timeline now spans 11 jurisdictions in 2027, 6 in 2028, and 1 on a longer 2027-2029 path (

US), with

El Salvador outside the framework entirely.

2.1

US: Form 1099-DA (Brokers)

Legal basis: IRC Section 6045, as amended by the Infrastructure Investment and Jobs Act (IIJA), P.L. 117-58, Section 80603. Final regulations published as T.D. 9989 (July 9, 2024). Digital asset definition at IRC 6045(g)(3)(D).

Reporting entity: "Brokers" -- defined as any person who, in the ordinary course of a trade or business, stands ready to effect sales of digital assets on behalf of another person. This includes custodial exchanges (Coinbase, Kraken), hosted wallet providers, digital asset kiosks (ATMs), and certain Processors of Digital Asset Payments (PDAPs).

DeFi exclusion: Treasury Decision 10021, which would have extended broker reporting to DeFi platforms, was repealed by H.J. Res. 25 (signed April 10, 2025). Under the Congressional Review Act, a substantially similar rule cannot be reissued without new legislation.

Information reported:

Thresholds: No de minimis threshold for reporting. All broker-facilitated transactions are reportable. Special aggregate reporting permitted for qualifying stablecoins and specified NFTs (effective 2026).

Penalties: Standard information return penalties apply: $60-$310 per return for failure to file/furnish (2025 amounts), with a maximum of $3,783,000 per year for large filers. Good-faith compliance relief for 2025 transactions under Notice 2024-56. Backup withholding transition relief through 2027 under Notice 2025-33. Section 6050I ($10,000+ digital asset reporting via Form 8300) carries penalties up to $25,000 and up to 5 years.

Effective dates:

• Gross proceeds reporting: January 1, 2025
• Cost basis reporting: January 1, 2026
• Section 6050I ($10,000+ digital asset reporting via Form 8300): Not yet effective -- awaiting final regulations (IRS Announcement 2024-04)

CARF status: Committed. Treasury submitted CARF implementation proposed regulations to OIRA on November 14, 2025 (under OIRA review). The US runs a longer timeline than the 2027 first-mover cohort -- first exchange is expected in the 2027-2029 window, not January 1, 2026/2027.

Sources:

• IRS Instructions for Form 1099-DA (2025)
• IRS Final Regulations and Related Guidance
• IRS FAQs about Broker Reporting

2.2

EU: DAC8 (RCASPs)

Legal basis: Council Directive (EU) 2023/2226 (DAC8), adopted October 17, 2023. Published in the Official Journal October 24, 2023.

Reporting entity: Reporting Crypto-Asset Service Providers (RCASPs) -- exchanges, brokers, transfer facilitators, and any entity effectuating exchange transactions for or on behalf of customers. DAC8 has extraterritorial reach: non-EU platforms serving EU-resident taxpayers must comply.

Information reported:

• Taxpayer identification (name, address, TIN, date of birth)
• Aggregate gross amounts of purchases/sales against fiat
• Aggregate market values of crypto-to-crypto exchanges
• Units and number of transactions
• Specific designation of the crypto-asset traded

Scope: Crypto-assets as defined under MiCA (Regulation (EU) 2023/1114), including decentralized issuances, stablecoins, e-money tokens (EMTs), and certain NFTs used for payment or investment.

Customer blocking provision: If a customer fails to provide self-certification after two reminders, the RCASP must block the customer from performing reportable transactions within 60 days. This is the most aggressive enforcement mechanism of any reporting framework globally.

Penalties: EUR 20,000 to EUR 500,000 for serious non-compliance. Member states retain discretion over specific penalty structures within this range.

Transposition status (as of June 2026):

• Transposed on time (by December 31, 2025): Germany (KStTG, gazetted December 24, 2025), France (Finance Act 2025 Article 54), Italy (gazetted December 22, 2025), and others
• Infringement proceedings: The European Commission launched formal proceedings on January 30, 2026 against 12 member states that missed the transposition deadline. Several have since transposed -- Poland (Official Gazette March 17, 2026; in force March 18, 2026) and Luxembourg (Law of March 27, 2026; Parliament adopted March 19, 2026) among them. Portugal transposed via Law No. 26/2026 of June 3, 2026 (which also transposes DAC9/Pillar Two).

Effective dates:

• Application date: January 1, 2026
• First reporting year: Calendar year 2026
• First exchange of information: By September 30, 2027

Interaction with MiCA: MiCA requires all CASPs to obtain authorization from national competent authorities. As of December 30, 2024, MiCA is fully applicable. CASPs operating under MiCA authorization are the primary reporting entities under DAC8. The VASP-to-CASP transition deadline under MiCA is July 1, 2026 in many member states, after which unlicensed entities must cease operations.

Sources:

• European Commission -- DAC8
• KPMG -- EC Launches Infringement Procedures for DAC8/DAC9
• RSM -- DAC8 and CARF Reporting Challenges

2.3 EU Member-State Transpositions:

France,

Germany,

Portugal

DAC8 is an EU directive; the substantive reporting obligation lands at member-state level. Three transpositions illustrate the range:

France: DAC8 transposed via Finance Act 2025 Article 54 (EU Directive 2023/2226), effective January 1, 2026. CASPs report to the DGFiP; individuals use Forms 2042 C, 2086, and 3916-bis. France is among the 2027 first-exchange cohort (reports due January 1 - September 30, 2027 for FY2026). Form 3916-bis penalties run EUR 750/account (EUR 1,500 if the account exceeds EUR 50,000); the MiCA/PSAN transition deadline is June 30, 2026.

Germany: DAC8 + OECD CARF transposed via the Kryptowerte-Steuertransparenzgesetz (KryptoStTranspG/KStTG) -- Bundestag November 6, 2025, Bundesrat December 19, 2025, in force January 1, 2026. Germany signed the CARF MCAA on November 26, 2024. CASPs submit to the BZSt; the first collection period is calendar 2026, with submission to the BZSt by July 31, 2027 and first international exchange by September 30, 2027. Domestic reporting uses the dedicated Kryptowerte section of Anlage SO (from tax year 2025).

Portugal: DAC8/CARF transposed by Law No. 26/2026 of June 3, 2026 (Diário da República 1st series No. 107; parliamentary text approved May 11, 2026), which also transposes DAC9/Pillar Two. Data collection runs from January 1, 2026; RCASPs file their first report to the AT by May 31, 2027 (covering 2026), with the first CARF international exchange in 2027. RCASP registration/reporting failures carry penalties of EUR 2,000-22,500. MiCAR was implemented separately via Law No. 69/2025 (VASP transition to July 1, 2026).

2.4

UK: CARF Regulations

Legal basis: The Reporting Cryptoasset Service Providers (Due Diligence and Reporting Requirements) Regulations 2025 (SI 2025/744), enacted June 24, 2025, implementing OECD CARF into UK domestic law. Effective January 1, 2026.

Reporting entity: UK Reporting Cryptoasset Service Providers (RCASPs) -- entities or individuals conducting exchange transactions as a business. Approximately 50 entities initially in scope. Includes registered exchanges, custodial wallet providers, and in some cases DeFi applications with a controlling entity.

Domestic extension: The Autumn Budget 2025 confirmed that RCASPs must collect and report data for all customers, including UK residents -- going beyond the OECD CARF minimum (which only requires reporting on non-resident users for international exchange). This is a significant expansion that gives HMRC comprehensive domestic transaction data.

Information reported:

• User identity (name, address, TIN/NI number, date of birth)
• Tax residency of users
• Activity summaries and aggregate transaction values
• Transaction details for in-scope activities

Penalties:

Estimated impact: HMRC estimates CARF will raise GBP 315 million over four years (through 2029/30). Implementation cost: GBP 69 million.

Effective dates:

• Data collection begins: January 1, 2026
• First reports due to HMRC: January 1 to May 31, 2027 (covering 2026 calendar year)
• International exchange of data: Later in 2027

Interaction with FCA regime: The UK is transitioning from FCA Money Laundering Regulations (MLR) registration to full FCA authorization under a comprehensive FSMA-based regime. The FSMA 2000 (Cryptoassets) Regulations 2026 (SI 2026/102) were made February 4, 2026, with full commencement October 25, 2027. CARF reporting obligations are independent of and additional to the FCA authorization process.

Sources:

• SI 2025/744 -- legislation.gov.uk
• GOV.UK -- Implementation of CARF
• GOV.UK -- Domestic Reporting of UK Resident Cryptoasset Users
• ICAEW -- UK CARF Expected to Raise GBP 315m

2.5

Switzerland: CARF (Delayed)

Legal basis: CARF is implemented via an amended Automatic Exchange of Information Act (AEOIA), passed by Parliament September 26, 2025, in force January 1, 2026. However, the crypto-asset provisions are suspended for 2026 -- the Federal Council decided on November 26, 2025 that the crypto provisions of the AEOIA/AEOI Ordinance will not apply in 2026 (earliest application 2027).

Reporting entity: FINMA-licensed crypto service providers once the partner-jurisdiction list is activated. The National Council WAK committee suspended activation of the CARF partner-jurisdiction list on November 3, 2025 (draft 25.052); a proposed exchange list covers approximately 74 jurisdictions.

Effective dates: No CARF reporting in 2026. First automatic exchange expected ~2028 (covering 2027 data), if and when the partner-jurisdiction list is activated. Until then, Switzerland relies on self-assessment annual tax returns (wealth + income) and risk-based audits.

2.6

Australia: AUSTRAC DCE/VASP Reporting and ATO Data Matching

Legal basis (AML/registration): Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (AML/CTF Act), as amended. Digital Currency Exchange (DCE) providers registered with AUSTRAC since 2018. The AML/CTF Amendment Act 2024 (tranche-2 reform) expands scope to "Virtual Asset Service Providers" (VASPs), bringing crypto-to-crypto, custody, and token issuance into the perimeter, with full obligations from July 1, 2026.

Legal basis (tax reporting): No dedicated crypto tax return form equivalent to Form 1099-DA. Australia relies on the ATO Crypto Assets Data Matching Program (covering 2014-15 to 2025-26 financial years), a separate domestic crypto tax transparency reporting regime confirmed in the 2025-26 MYEFO (December 17, 2025), and the forthcoming CARF implementation.

ATO Data Matching Program:

• The ATO collects bulk transaction data from Designated Service Providers (exchanges)
• Estimated scope: records relating to 700,000 to 1,200,000 individuals per financial year
• Data includes: client identification (names, addresses, dates of birth, phone, email), bank account details, wallet addresses, transaction dates/times/types/quantities, coin types
• Over 350,000 reminder letters sent to crypto holders identified through data matching
• 27% increase in crypto compliance audits in 2024; fines exceeding A$18 million

AUSTRAC expanded obligations:

• Crypto-to-crypto exchanges, custody wallet services, and token issuance brought into regulatory scope
• Travel Rule implementation: postponed from March 31, 2026 to July 1, 2026 (applies to all VASPs from that date)
• New-VASP enrolment opens March 31, 2026; registration deadline July 29, 2026
• Full VASP enrollment and AML program compliance: July 1, 2026

CARF and domestic reporting:

• ATO committed to CARF and CRS 2.0; both CARF and the domestic crypto tax transparency regime were confirmed in the 2025-26 MYEFO (December 17, 2025)
• Both regimes commence 2027
• First international exchanges: 2028

Sources:

• AUSTRAC -- Digital Currency Exchange Provider Registration
• ATO -- Crypto Assets Data Matching Program Protocol
• Australian Treasury -- CARF Consultation
• KPMG -- Australia Commitment to Implement CARF and CRS 2.0

2.7

Japan: Exchange Reporting to NTA

Legal basis: Payment Services Act (PSA), as amended; Income Tax Act; CARF implementation effective January 1, 2026 (early adopter, under the "tax reform of 2024"). All crypto exchanges must register with the FSA as Crypto-Asset Exchange Service Providers (CAESPs).

Domestic exchange reporting: Registered exchanges in Japan have long been required to provide annual transaction reports (年間取引報告書) to both users and the NTA. This pre-existing domestic reporting system means the NTA already has comprehensive transaction data for all users of Japan-based exchanges -- a significant enforcement advantage.

CARF implementation (from January 1, 2026):

• Reporting entities: Reporting Crypto-Asset Exchange Service Providers (RCAESPs), including CAESPs, financial instruments business operators, and electronic payment instruments transaction operators
• Scope: Information on crypto asset transactions involving non-resident individuals and entities
• Filing deadline: April 30 of the following year (first reports due April 30, 2027 for the 2026 reporting period -- i.e., first exchange 2027)
• Due diligence: New accounts must provide TIN and residency status at opening (Coincheck and others began collection January 6, 2026); pre-existing accounts must complete due diligence by December 31, 2026
• Penalties: Fines up to JPY 500,000 per violation for missing, incomplete, or inaccurate reports

Proposed reform (FY2026 Tax Reform Outline, December 19, 2025): The "establishment of a duty of reporting by business operators to tax authorities" -- formalizing and expanding the existing exchange reporting obligation as part of the broader shift toward separate taxation at ~20.315% for specified crypto assets (proposed effective 2027, contingent on FIEA enactment -- the FIEA amendment bill was Cabinet-approved April 10, 2026 but is NOT yet enacted).

Sources:

• KPMG -- Japan FAQs on CARF and Revised CRS
• PANews -- Japan Adopts OECD CARF
• Tokyo Foundation -- Perspectives on Crypto Asset Tax Reform

2.8

India: Section 194S TDS

Legal basis: Section 194S of the Income Tax Act 1961 (inserted by Finance Act 2022). Effective July 1, 2022. The VDA regime was carried forward unchanged into the Income-tax Act 2025, in force April 1, 2026.

Mechanism: India adopted a unique withholding-at-source model rather than an information return model. A 1% Tax Deducted at Source (TDS) applies to all Virtual Digital Asset (VDA) transfers above specified thresholds:

How it works as a reporting mechanism: Indian exchanges automatically deduct and deposit TDS. The TDS data appears in the taxpayer's Form 26AS and Annual Information Statement (AIS). The Income Tax Department then cross-references Schedule VDA data (reported in income tax returns) with TDS data from exchanges to identify discrepancies. Mandatory exchange data-sharing with the Income Tax Department under Section 509 became effective April 1, 2026, alongside an expanded Form 26QF.

Enforcement results:

• 44,057 NUDGE campaign emails/messages (44,000+ tax notices) sent to individuals trading crypto without reporting
• INR 888.82 crore in undisclosed crypto income uncovered through enforcement
• Penalties for non-compliance: 50% to 200% of tax evaded; new reporting-entity penalties under Section 446 (INR 200/day for failure to file; INR 50,000 flat for inaccurate disclosures) effective April 1, 2026

CARF implementation:

• Target date: April 1, 2027 (India among the 52 jurisdictions committed to first exchanges in 2027)
• CBDT finalized CARF rules September 8, 2025
• First cross-border crypto data sharing targeted from April 1, 2027

Policy impact: The 1% TDS, combined with the 30% flat tax under Section 115BBH, has driven steep declines in domestic trading volumes and significant migration of Indian crypto trading to offshore platforms.

Sources:

• ClearTax -- Guidelines on TDS Under Section 194S
• TaxGST.in -- Crypto Tax India 2026
• Business Standard -- India Set to Share Cross-Border Crypto Data from April 2027

2.9

South Korea: VASP Registration and CARF

Legal basis: Act on Protection of Virtual Asset Users (VAUPA, Act No. 19563, effective July 19, 2024). VASPs register with KoFIU with ISMS certification (KISA), real-name accounts, cold-wallet storage, asset segregation, and a 15-year record retention obligation.

Tax reporting: A 20% (+2% local = 22% effective) tax on net gains above a KRW 2.5 million annual threshold is enacted, effective January 1, 2027 (MOEF confirmed May 7, 2026 it will proceed "as scheduled"; first filings May 2028, ~13.26 million investors affected).

CARF implementation:

• The Ministry of Strategy and Finance signed the CARF Information Exchange Agreement September 2, 2025; data recording from 2026
• First international exchange 2027 (South Korea is in the 2027 first-exchange cohort)
• Cross-border transaction monthly reporting to the Bank of Korea from mid-2026; individual annual returns from 2027

Note: South Korea still lacks published guidance on mining, staking, NFT, and DeFi taxation -- a recognized framework gap (NOT VERIFIED for those categories per the matrix).

2.10

Singapore: MAS-Licensed DPT Providers and CARF

Legal basis: Digital Payment Token (DPT) service providers are licensed by the MAS under the Payment Services Act 2019 (scope expanded April 4, 2024; DTSP licensing under FSMA 2022 from mid-2025). AML obligations under MAS Notice PSN02 (CDD, EDD, STR to STRO, 5-year record retention).

Tax reporting: No crypto-specific reporting for individuals beyond standard income tax filing (Singapore has no capital gains tax). RCASPs will collect and report data once CARF is implemented (data collection by 2027).

CARF implementation: Singapore signed the CARF MCAA on November 26, 2024, committing to first automatic exchanges in 2028. Implementation preparation runs 2025-2027.

2.11

Thailand: SEC-Licensed Operators and CARF

Legal basis: Digital asset businesses are licensed/supervised by the Thai SEC under the Emergency Decree on Digital Asset Businesses B.E. 2561 (2018); AMLO registration applies. A 2025 amendment brought offshore platforms targeting Thai users under domestic regulation.

Tax reporting: The 5-year personal income tax exemption (2025-2029) for SEC-licensed platform trades is an exemption from tax, not from reporting -- individuals must declare exempt gains and maintain SEC-licensed-platform records. CASPs face due-diligence/reporting obligations ahead of the CARF exchange.

CARF implementation: Committed. The Revenue Department is working on transposing CARF into domestic regulation (not yet enacted, NOT VERIFIED). First exchanges 2028, covering data collected from 2027.

2.12

Brazil: Normative Instruction RFB 2291/2025

Legal basis: Normative Instruction RFB No. 2291 (November 14, 2025), updating Normative Instruction RFB 1888/2019. Aligned with OECD CARF (Brazil signed the CARF-MCAA November 21, 2024).

Reporting entities:

• Brazilian exchanges (SPAVs, licensed by the BCB): Must submit monthly reports to the Receita Federal (RFB) regardless of transaction volume
• Individuals and entities: Must file monthly reports via the e-CAC portal when off-exchange crypto transactions exceed R$35,000 per month

Expanded scope under NI 2291/2025:

• Staking rewards, yield farming, DeFi operations
• Airdrops, loans, and complex transactions
• Crypto-to-crypto swaps, donations, and transfers
• Enhanced client data aligned with the FATF Travel Rule

DeCripto system (launching July 1, 2026):

• Replaces the current reporting system (IN RFB 2291 revokes/replaces IN 1888/2019 as of July 1, 2026)
• Exchanges must classify transactions into: crypto-to-fiat trades, crypto-to-crypto swaps, retail payments over USD 50,000, transfers in/out of wallets, movements to unhosted wallets
• Submissions via the RFB's e-CAC portal

Penalties:

(Penalty figures not independently re-verified against RFB primary text.)

Enforcement: The RFB uses AI-driven blockchain analytics to tie wallet activity to CPF numbers (Brazilian taxpayer ID), cross-referencing declared holdings against exchange-reported data and on-chain activity.

CARF status: Brazil is committed to first automatic exchanges by 2027.

Sources:

• KPMG -- Brazil Implementation of DeCripto Under CARF
• Bloomberg Tax -- Brazil Gazettes NI Under MCAA-CARF
• Chainalysis -- Breaking Down Brazil's New Crypto Framework

2.13

Canada: CASP Reporting Under CARF

Legal basis: Canada endorsed the CARF joint statement November 10, 2023 and released draft CARF legislative proposals August 15, 2025 (consultation closed September 12, 2025). CARF took effect January 1, 2026; CASPs began collecting data, with the first reporting period being calendar 2026 and first exchange in 2027.

Reporting entity: CASPs report under CARF. Domestic returns use Schedule 3 (capital gains), T2125 (business income), and T1135 (foreign property over CAD 100,000). FINTRAC AML obligations (exchanges as MSBs, KYC, LCTRs for CAD 10,000+, STRs) apply under the PCMLTFA.

Enforcement: The CRA runs a crypto compliance campaign (35 auditors, 230+ active audit files, blockchain analytics; ~$100M collected over three years). Bill C-29 (Financial Crimes Agency) was introduced April 27, 2026 (proposed, not enacted).

2.14

Nigeria: NTAA 2025 Monthly VASP Reporting

Legal basis: The Nigeria Tax Administration Act (NTAA) 2025 -- one of the four 2025 Tax Reform Acts signed June 26, 2025 (with the Nigeria Tax Act 2025, NRS Establishment Act, and Joint Revenue Board Establishment Act) -- came into full effect January 1, 2026. Virtual assets are classified as securities under the Investment and Securities Act (ISA) 2025 (Section 357). VASPs are licensed by the SEC (ARIP framework).

Reporting entity: VASPs file monthly reports to the Nigeria Revenue Service (NRS, successor to FIRS) -- transaction dates, asset types, Naira values, and party identities. Individuals file CGT returns twice yearly (June 30, December 31). NIN/TIN identity linkage is mandatory from January 1, 2026 (validation before trading).

Penalties: N10,000,000 for the first month of default; N1,000,000 for each subsequent month; the SEC may suspend or revoke a VASP licence.

CARF status: Nigeria committed to OECD CARF in November 2024, pledging its first automatic exchange by 2028 (CARF-aligned legislation/CASP procedures required by January 1, 2028). Nigeria is not in the 2027 first-mover cohort.

2.15

South Africa: CASP Reporting to SARS Under CARF

Legal basis: South Africa is adopting OECD CARF and the updated CRS from March 1, 2026 -- among the earliest global adopters. The FSCA declared crypto a financial product (October 2022); FICA designates CASPs as accountable institutions (KYC, CDD, STR); CARF due diligence runs from March 1, 2026.

Reporting entity: CASPs report to SARS (customer ID/tax numbers, acquisitions/disposals/transfers, Rand values, unit quantities, wallet transfers). Individuals declare via ITR12 (dedicated crypto section).

Effective dates:

• CARF/CRS go-live: March 1, 2026
• First reporting period: March 1, 2026 - February 28, 2027
• First CARF return due to SARS: May 31, 2027
• First international exchange: September 2027 (2027 cohort)

Penalties: Understatement penalties 5% (substantial understatement) to 200% (intentional evasion) under the Tax Administration Act 2011, plus interest.

2.16

UAE: Multi-Regulator Licensing and CARF

Legal basis: Multi-regulator licensing -- the federal Capital Markets Authority (CMA, successor to the SCA under FDL No. 33/2025), VARA (Dubai), FSRA (ADGM), and DFSA (DIFC). The FTA administers corporate tax and VAT. The UAE signed the OECD CARF-MCAA on September 20, 2025 (OECD list reflects September 21, 2025), with a public consultation on implementing regulations September 15 - November 8, 2025.

Reporting entity: Corporate tax filing with the FTA (annual returns, transfer-pricing docs); VAT returns for mixed-supply businesses; VARA/FSRA/DFSA reporting (financial statements, transaction monitoring, SARs). CARF reporting begins at go-live.

Effective dates:

• CARF go-live: January 1, 2027
• First automatic exchange: 2028 (covering the 2027 reporting year)
• Final CARF regulations expected 2026

Penalties: FTA administrative penalties for late filing/underpayment/non-registration; loss of Qualifying Free Zone Person status triggers retroactive 9% taxation for up to five tax periods.

2.17

El Salvador: Outside CARF

Legal basis: Bitcoin is legal tender (Decree No. 57/2021; made voluntary under the 2025 IMF amendment); other digital assets fall under the DASP framework supervised by CNAD. AML/KYC for CNAD-licensed entities runs under LEAD (2023).

Reporting: CNAD-licensed businesses file monthly reports plus an annual Form F-971; individuals file by April 30 only if they have taxable income, and Bitcoin gains are not reportable (0% Bitcoin CGT).

CARF status: El Salvador has NOT adopted CARF -- it is one of only five "relevant" jurisdictions not committed (with Argentina, Georgia, India's earlier hold-out cohort, and Vietnam, per the OECD's November 2025 monitoring update). No automatic exchange of Salvadoran CASP data is contemplated. This makes El Salvador the sole non-reporting jurisdiction among the 19 surveyed and a structural gap in the global transparency network.

3. Comparative Table

Aggregate (of 19): 18 of 19 jurisdictions are CARF-committed (

El Salvador is the sole non-participant). By first-exchange year: 11 in 2027 (

Brazil,

Canada,

India,

Japan,

South Korea,

France,

Portugal,

UK,

South Africa, plus

EU/

Germany by September 30, 2027), 6 in 2028 (

Australia,

Singapore,

Thailand,

Nigeria,

UAE, and

Switzerland ~2028 after its deferral), and 1 on a longer 2027-2029 path (

US).

4. CASP Compliance Costs

The cost of compliance with combined licensing and tax reporting obligations is substantial and disproportionately burdens smaller operators.

EU MiCA/DAC8 Compliance

Under MiCA, CASPs face own-funds requirements of EUR 50,000 to EUR 150,000 depending on the service category. The licensing process itself costs an estimated EUR 30,000 to EUR 60,000 in legal and administrative fees, with total operational setup costs (including DORA ICT security requirements, business continuity plans, and governance frameworks) reaching EUR 150,000 to EUR 250,000.

DAC8 reporting adds additional technology costs for:

• Self-certification collection and validation systems
• TIN verification workflows
• Aggregate transaction calculation engines
• XML schema reporting (CARF format) integration
• GDPR notification processes (unique to DAC8)
• Customer blocking mechanism implementation

HMRC estimated the UK's CARF implementation cost at GBP 69 million across industry and government, with an expected exchequer benefit of GBP 315 million over four years (through 2029/30). This suggests a relatively short payback period from a government perspective, though the compliance burden falls unevenly on industry.

US Form 1099-DA Compliance

US brokers must invest in:

• Systems to capture and report gross proceeds (2025) and cost basis (2026)
• Per-wallet/per-account tracking infrastructure
• TIN solicitation and backup withholding systems
• Integration with IRS FIRE (Filing Information Returns Electronically) system

The IRS provided extensive transition relief (Notices 2024-56, 2024-57, 2025-7, 2025-33) specifically because the compliance build was recognized as significant for industry.

India's TDS Model: Lower Compliance Cost, Higher Economic Cost

India's Section 194S TDS model is comparatively inexpensive to implement -- exchanges simply withhold 1% at the point of transaction. However, the economic cost has been severe: steep declines in domestic trading volume and capital flight to offshore platforms. The administrative simplicity of TDS comes at the price of market distortion.

Scale Considerations

5. What Works and What Doesn't

What Works

1. Phased implementation with transition relief (

US model). The US approach -- gross proceeds reporting in 2025, cost basis in 2026, with multiple relief notices -- gives industry time to build compliant systems while establishing the reporting infrastructure. This model reduces the risk of widespread non-compliance in the early years.

2. Leveraging AML licensing for tax reporting infrastructure (

EU model). The EU's sequential approach -- MiCA licensing (2024-2025) followed by DAC8 reporting (2026) -- ensures that the entities required to report tax information are already identified, authorized, and operating with KYC data. This minimizes the marginal cost of adding tax reporting to existing AML compliance.

3. Bulk data matching programs (

Australia model). The ATO's data matching program, covering 700,000 to 1,200,000 individuals per year, demonstrates that regulators do not need to wait for formal reporting frameworks. By collecting bulk transaction data from exchanges and cross-referencing against tax returns, the ATO achieved measurable compliance improvements years before CARF implementation.

4. Domestic extension of CARF (

UK model). By requiring RCASPs to report on UK-resident customers (not just non-residents as CARF requires), the UK created a comprehensive domestic reporting dataset. This eliminates a significant gap in the OECD model, where domestic users of domestic platforms would otherwise be unreported.

5. Exchange-submitted annual transaction reports (

Japan model). Japan's requirement that registered exchanges submit annual transaction reports directly to the NTA, predating CARF, means the NTA already has comprehensive transaction data. When combined with CARF for cross-border data, this creates near-complete coverage.

6. Early CARF adoption with identity linkage (

South Africa and

Nigeria models). South Africa's March 1, 2026 CARF/CRS go-live and Nigeria's NTAA 2025 monthly VASP reporting (with mandatory NIN/TIN linkage from January 1, 2026) show that emerging-market regulators can layer reporting onto licensing quickly, ahead of many advanced economies.

What Doesn't Work

1. Punitive withholding without offsetting benefits (

India model). India's 1% TDS, combined with a 30% flat tax and no loss offset, has demonstrably driven trading offshore. The tax regime incentivizes exactly the behavior it was designed to prevent. Revenue collection is undermined by volume collapse. (India retained the 30% / 1% TDS structure unchanged in Budget 2026-27.)

2. DeFi coverage gaps (all jurisdictions). No jurisdiction has implemented effective tax reporting for fully decentralized protocols. The US repealed its DeFi broker rule via CRA. The EU's DAC8 and OECD CARF apply only where an entity exercises "sufficient control." Truly decentralized protocols with no controlling entity remain outside all existing reporting frameworks.

3. Fragmented implementation timelines. CARF first-exchange dates span 2027 (11 jurisdictions), 2028 (6 jurisdictions), and a longer 2027-2029 window (

US). This multi-year window creates regulatory arbitrage opportunities, as users can migrate to jurisdictions where reporting has not yet commenced.

4. Twelve member states missing DAC8 transposition deadline. The European Commission's January 30, 2026 infringement proceedings against 12 EU member states demonstrate that even mandatory directives face implementation delays. Several (

Portugal, Poland, Luxembourg) have since transposed, but regulatory fragmentation within a theoretically harmonized bloc undermines the framework's effectiveness.

5. Deferral of crypto provisions (

Switzerland model). Switzerland passed CARF-enabling legislation but suspended the crypto-asset provisions for 2026, pushing its first exchange to ~2028. A jurisdiction can adopt the legal shell of CARF while deferring the substance, undermining the framework's near-term coverage.

6. Non-participation (

El Salvador). El Salvador's decision not to commit to CARF leaves a structural hole in the global transparency network: Salvadoran CASP data is not subject to automatic exchange, creating an arbitrage destination for non-resident users.

7. Absence of real-time reporting. All current frameworks rely on annual (or, in Brazil's case, monthly) aggregate reporting. In a market where significant gains or losses can occur within hours and users can move assets across dozens of wallets and protocols in a single day, periodic aggregate reporting provides a limited compliance picture.

6. Recommended Framework

Based on comparative analysis of operational frameworks, the following recommended architecture targets regulators designing new CASP/VASP tax reporting obligations.

Principle 1: License First, Then Report

Establish AML/KYC licensing before imposing tax reporting. The licensing process builds the identity and record-keeping infrastructure that tax reporting depends on. Attempting to impose tax reporting without prior licensing (as

India effectively did) creates compliance gaps and enforcement difficulties.

Principle 2: Adopt CARF as the International Baseline

The OECD CARF provides a tested, internationally recognized framework. Jurisdictions should adopt CARF model rules with minimal deviation to ensure interoperability with the committed jurisdictions (18 of the 19 surveyed). Bespoke domestic frameworks increase compliance costs for multinational operators.

Principle 3: Extend CARF to Domestic Reporting

Follow the

UK approach of extending CARF reporting to domestic users, not just non-residents. The marginal cost of domestic reporting is minimal once the CARF infrastructure is in place, and the compliance benefit is substantial.

Principle 4: Phase Implementation with Relief

Follow the

US model of phased effective dates (e.g., gross proceeds Year 1, cost basis Year 2) with explicit transition relief for good-faith compliance efforts. This reduces the risk of industry pushback and widespread penalties in early years.

Principle 5: Avoid Punitive Withholding Models

Do not use transaction-level withholding (TDS) as the primary reporting mechanism.

India's experience demonstrates that withholding at the point of transaction, when combined with high substantive tax rates, drives capital offshore. Information reporting (without withholding) preserves market function while providing enforcement data.

Principle 6: Plan for DeFi

Even though no jurisdiction has solved DeFi reporting, regulators should include legislative authority for future extension. The US CRA repeal of the DeFi broker rule illustrates the risk of proceeding without legislative authorization. Build the statutory authority now, implement when technically feasible.

Principle 7: Coordinate Penalties with Compliance Timelines

Set penalty levels proportional to the maturity of the reporting obligation. Low or no penalties in Year 1, escalating penalties in subsequent years. The US good-faith compliance relief (Notice 2024-56) and the EU's penalty range (EUR 20,000-500,000) provide models at different ends of the spectrum.

7. Decision Matrix

Regulators designing CASP/VASP tax reporting obligations should evaluate each design choice against the following matrix:

Implementation Sequencing

Year 0: Enact licensing legislation (AML/KYC)
Year 1: License CASPs/VASPs; begin KYC data collection
Year 2: Enact tax reporting legislation; CARF transposition
Year 3: Begin gross proceeds reporting; CARF data collection starts
Year 4: Add cost basis reporting; first CARF international exchanges
Year 5: Full enforcement with escalating penalties

Verification Notes

Refresh conducted: June 4, 2026 (mirrors the canonical fact matrix; no independent web search performed this pass)

Source of truth: .claude/digital-asset-taxation-fact-matrix.json (canonical per-jurisdiction facts, all 19 jurisdictions). This document mirrors the matrix and introduces no fact absent from it.

CARF first-exchange timeline (corrected this pass, per matrix):

• 2027 cohort (11):
  Brazil,
  Canada,
  India (Apr 1, 2027),
  Japan (first reports Apr 30, 2027),
  South Korea,
  France,
  Portugal (AT report May 31, 2027),
  UK (HMRC reports by May 31, 2027),
  South Africa (return May 31, 2027; exchange Sep 2027), plus
  EU and
  Germany (exchange by Sep 30, 2027)
• 2028 cohort (6):
  Australia,
  Singapore,
  Thailand,
  Nigeria,
  UAE (go-live Jan 1, 2027; first exchange 2028), and
  Switzerland (~2028 after deferring crypto provisions for 2026)
• Longer path (1):
  US -- 2027-2029 (proposed regs submitted to OIRA Nov 14, 2025; not the Jan 1 first-mover cohort)
• Non-committed (1):
  El Salvador -- not a CARF participant

Key reporting facts corrected/updated this pass:

• US CARF first exchange aligned to 2027-2029 (matrix), replacing the prior "2028-2029" figure
• UAE CARF MCAA signature confirmed September 20, 2025 (go-live Jan 1, 2027; first exchange 2028)
• Nigeria domestic reporting now under NTAA 2025 (monthly VASP reports to NRS; NIN/TIN linkage from Jan 1, 2026; first exchange 2028)
• Brazil DeCripto launch and IN 1888 revocation fixed at July 1, 2026; CARF-MCAA signed Nov 21, 2024; first exchange 2027
• Switzerland crypto-asset CARF provisions suspended for 2026; first exchange ~2028
• Portugal DAC8/CARF transposition via Law No. 26/2026 of June 3, 2026; first AT report May 31, 2027
• India Section 509 mandatory exchange data-sharing and Section 446 reporting-entity penalties effective April 1, 2026; Income-tax Act 2025 in force April 1, 2026
• South Africa CARF/CRS go-live March 1, 2026; first return May 31, 2027; first exchange Sep 2027
• Japan proposed ~20.315% separate-taxation reform is contingent on FIEA enactment (FIEA bill Cabinet-approved Apr 10, 2026, NOT yet enacted)

Items marked as estimates or subject to change:

• Compliance cost ranges for different operator sizes are estimates based on industry analyses, not official regulatory impact assessments
• Thailand's CARF transposition is reported as in-progress and NOT VERIFIED against an enacted instrument
• Brazil penalty figures not independently re-verified against RFB primary text
• Japan's 20.315% separate-taxation proposal is pending Diet enactment of the FIEA amendment
• South Korea mining/staking/NFT/DeFi reporting guidance remains absent (NOT VERIFIED)

Sources

Official Government / Regulatory Sources

• IRS -- Instructions for Form 1099-DA (2025)
• IRS -- Final Regulations and Related Guidance for Broker Reporting
• IRS -- FAQs about Broker Reporting
• European Commission -- DAC8
• SI 2025/744 -- legislation.gov.uk
• GOV.UK -- Implementation of CARF
• GOV.UK -- Domestic Reporting of UK Resident Cryptoasset Users
• AUSTRAC -- Digital Currency Exchange Providers
• ATO -- Crypto Assets Data Matching Program
• Australian Treasury -- CARF Consultation
• ClearTax -- Section 194S
• OECD -- Jurisdictions Committed to Implement CARF
• OECD -- CARF MCAA Signatories
• OECD -- CARF 2025 Monitoring and Implementation Update

Professional / Industry Analysis

• KPMG -- EC Launches Infringement Procedures for DAC8
• KPMG -- Japan FAQs on CARF
• KPMG -- Australia CARF and CRS 2.0 Commitment
• KPMG -- Brazil DeCripto Implementation
• RSM -- DAC8 and CARF Reporting Challenges
• ICAEW -- UK CARF Expected to Raise GBP 315m
• Bloomberg Tax -- Brazil NI Under MCAA-CARF
• Chainalysis -- Brazil's New Crypto Framework
• TaxGST.in -- Crypto Tax India 2026
• Business Standard -- India CARF Data Sharing
• Carey Olsen -- Introducing CARF
• Korea Times -- Korea Still Unprepared for 2027 Crypto Tax
• Hacken -- VASP License Costs
• AccountingCapital -- July 2026 VASP-to-CASP Deadline </content>

</invoke>