CARF UK crypto reporting is now live. On 1 January 2026, the Crypto-Asset Reporting Framework (CARF) came into full force in the UK. Every UK crypto exchange now automatically submits customer transaction data to HMRC — names, wallet addresses, National Insurance numbers, and complete trade history. If you hold crypto personally or through your business and your Self Assessment return does not match what HMRC now sees, you are already on notice. The window to voluntarily disclose before HMRC writes is closing fast.

What CARF UK Crypto Reporting Means for HMRC and You

CARF is the OECD’s international standard for crypto tax reporting, adopted into UK law through the Finance (No. 2) Act 2023 and implementing regulations. It covers every crypto-asset service provider operating in the UK. That includes centralised exchanges, custodial wallet services, and certain DeFi platforms. Each must now collect and report identifying information and transaction data on every UK customer. The first automatic data exchange between exchanges and HMRC covered the 2025/26 tax year. Data flowed from exchanges to HMRC in early 2026 and will continue on an annual cycle.

Under CARF UK crypto reporting, the data HMRC now receives is comprehensive. It includes full name, residential address, National Insurance number or Unique Taxpayer Reference. The report also covers wallet addresses, and every transaction — buy, sell, swap, transfer, stake, and airdrop — with date, value, counterparty where available, and fees. Connect then matches all of it automatically against Self Assessment returns. Mismatches are flagged. The Self Assessment form itself was updated in 2024/25 with a dedicated crypto section, so there is no ambiguity about whether HMRC expects a return.

How This Affects Your Business

If you hold crypto personally, in a business account, or as a director-shareholder of a company with crypto on its balance sheet, you now face three distinct risks.

First, historic non-disclosure under CARF UK crypto rules. HMRC can assess up to 20 years of back tax where non-disclosure was deliberate. The penalty range runs from 0% (unprompted voluntary disclosure, reasonable care) to 100% of the tax owed (deliberate, concealed, prompted). Take a director who made £80,000 of undeclared crypto gains over five years. Their exposure is roughly £19,200 in capital gains tax at 24%. Add penalties of up to £19,200 and interest at 7.75% simple — which on its own adds tens of thousands over a multi-year assessment window.

Second, current-year mismatch under CARF UK crypto reporting. Your 2025/26 Self Assessment, due 31 January 2027, will be matched directly against exchange data. Every wallet you hold is visible to HMRC. If you omit a DeFi position, a staking reward, an airdrop, or a gain from a swap, the mismatch is automatic.

Third, CARF UK crypto rules also apply to business-held crypto. Where a limited company holds crypto, corporation tax applies to realised gains. Capital gains tax does not. Fair-value movements may also need to flow through the profit and loss depending on your accounting policy under FRS 102. Most accountants have not yet adapted their year-end processes to handle this correctly, meaning many company crypto holdings are either under- or over-stated on submitted accounts.

What You Must (and Must Not) Do

What to Do Now

• Compile a full transaction history from every exchange, wallet, and DeFi platform you have used in the last six years — HMRC already has this data
• Calculate your capital gains position using HMRC’s share pooling rules (Section 104 pool, same-day rule, 30-day bed-and-breakfast rule) — these do not follow the methods most exchange statements use
• For each year, identify whether you exceeded the CGT annual exempt amount. The thresholds are £3,000 for 2024/25 onwards, £6,000 for 2023/24, and £12,300 before that. Also check the £50,000 proceeds threshold that triggers a reporting requirement
• If you identify undeclared gains, make a voluntary disclosure through HMRC’s Digital Disclosure Service before HMRC writes — this is the single biggest factor in reducing penalties
• For business-held crypto, get your accounting policy reviewed — particularly if holdings are material to your balance sheet

What Not to Do

• Never wait for HMRC to contact you — once you are ‘prompted’, penalty minimums rise from 0% to 15% for careless behaviour and from 20% to 35% for deliberate behaviour
• Avoid assuming small gains are below the radar — CARF captures every trade, not just disposals above a threshold
• Resist relying on exchange CSV exports alone — HMRC has confirmed these frequently misstate cost basis because they do not follow UK share pooling rules
• Never move crypto between wallets to obscure history — on-chain analysis tools used by HMRC trace transfers across wallets, and deliberate obscuration increases penalty behaviour category
• Avoid submitting a 2025/26 return with no crypto section if you hold any crypto. Even where gains seem below thresholds, a nil disclosure entry is the correct filing

How Tax Guard Defence Works

Our CARF UK crypto defence runs a structured crypto disclosure process. Step one is a full wallet and exchange reconciliation. We assemble every transaction across every platform used, apply HMRC’s share pooling rules, and produce a defensible calculation for every tax year affected. The second step is a disclosure strategy. We choose between the Digital Disclosure Service, the Contractual Disclosure Facility (for suspected deliberate behaviour), and a Worldwide Disclosure Facility submission where overseas exchanges are involved. Finally, representation takes over — presenting the disclosure, negotiating the penalty category, and where challenged, defending the technical calculation through to Tribunal if necessary.

Most of our crypto clients have some degree of undisclosed activity — it is the norm rather than the exception, given how recently the rules crystallised. In our experience, clients who disclose proactively through the correct facility achieve final penalties 50–80% lower than those who wait for HMRC contact. The cost of the process is almost always less than the penalty reduction it secures.

Key Facts at a Glance

• CARF effective date in the UK: 1 January 2026
• Data reported: names, wallet addresses, NI numbers, every transaction with date, value and fees
• Self Assessment crypto section: new for 2024/25 returns onwards
• CGT rates on crypto: 18% (basic rate band), 24% (higher rate band), 2024/25 onwards
• CGT annual exempt amount: £3,000
• Assessment window: 4 years (reasonable care), 6 years (careless), 20 years (deliberate)
• Penalty range: 0% (unprompted voluntary, reasonable care) to 100% (deliberate, concealed, prompted)

Speak to Tax Guard Today

Before HMRC writes, call us. A free, confidential consultation will tell you whether a voluntary disclosure is needed, what it will likely cost, and how much penalty you can save by acting now rather than waiting. The difference between unprompted and prompted disclosure is typically tens of thousands of pounds — and the prompted letter could arrive any day.

Common Questions About HMRC Crypto Reporting

Q: Can HMRC really see my crypto trades?

A: Yes. From 1 January 2026, every UK crypto exchange must report customer identification and every transaction to HMRC annually, under the Crypto-Asset Reporting Framework (CARF). Data includes names, NI numbers, wallet addresses, and full trade history with dates and values. HMRC’s Connect platform matches this data against your Self Assessment. Assume HMRC already has every UK-based crypto transaction you have ever made.

Q: Do I have to declare crypto if I never converted it to pounds?

A: In most cases, yes. Crypto-to-crypto swaps are taxable disposals under HMRC’s rules — if you swap Bitcoin for Ethereum, that is a disposal of Bitcoin at market value, triggering a capital gain or loss. Staking rewards, mining income, and airdrops are typically taxable as income at the point of receipt. Holding crypto is not taxable, but almost every other action is.

Q: What if I made losses overall — do I still need to report?

A: Yes. You must report disposals if total proceeds exceed £50,000 in a tax year. You must also report if gains exceed the £3,000 annual exempt amount. This applies regardless of whether you are in an overall loss position. Reporting losses is also valuable. They can be carried forward indefinitely to offset future gains. The catch: you must claim them on a return within four years of the tax year in which they arose.

Q: What is voluntary disclosure and how does it reduce penalties?

A: Voluntary disclosure is a formal process of telling HMRC about undisclosed tax before HMRC contacts you. It is made through HMRC’s Digital Disclosure Service or, for more complex cases, the Contractual Disclosure Facility or Worldwide Disclosure Facility. Unprompted voluntary disclosure reduces the minimum penalty from 15% to 0% for careless behaviour and from 35% to 20% for deliberate behaviour — typically a 50–80% reduction in total penalty.

Q: What happens if I just do not file the crypto section?

A: HMRC’s matching process will flag the omission within weeks of your return being submitted. You will receive either a Connect risk letter, a nudge letter, or a Section 9A enquiry notice. From that point, you are ‘prompted’, and the penalty minimums rise. Continued non-disclosure where deliberate can push you into the 20-year assessment window and expose you to criminal referral under the Fraud Act 2006.

Q: Does crypto held by my limited company count?

A: Yes, but the tax treatment is different. Company-held crypto is subject to corporation tax on realised gains (currently 19%–25%), not capital gains tax. Depending on your accounting policy under FRS 102, fair-value movements may need to flow through the profit and loss account even before disposal. This is a technical area that most general-practice accountants do not yet handle reliably — specialist review is essential.