The Cryptoasset Reporting Framework (CARF) is the most significant change to UK crypto tax enforcement in years. This page sets out exactly what it is, the precise dates that matter, and what it means in practice for anyone who holds or has held cryptoassets. The dates below are sourced directly from HMRC guidance and are stated precisely, not exaggerated.
CARF in brief: the short answer
From 1 January 2026, UK cryptoasset platforms are required to collect user identity and transaction data under the Cryptoasset Reporting Framework. The first report covering that data (the full 2026 calendar year, 1 January to 31 December 2026) must be submitted to HMRC between 1 January 2027 and 31 May 2027. Annual reports follow by 31 May each year thereafter. CARF is a data-sharing framework, not a new tax, and it does not require platforms to report data from years before 2026 under this mechanism. Sources: gov.uk on collection and gov.uk on reporting.
What the Cryptoasset Reporting Framework is
CARF is an OECD standard for automatic exchange of cryptoasset information between tax authorities, adopted into UK law and administered by HMRC. Its practical effect is to require UK-regulated cryptoasset platforms, exchanges and custodians to collect standardised information about their users (identity, tax residency, account details) and about transactions (disposals, receipts, transfers) and to pass that information to HMRC.
HMRC can then cross-reference what platforms report against what taxpayers declare in their Self Assessment returns. This is the same data-matching model that has operated for employment income via PAYE and for bank interest for many years. CARF applies that model to cryptoassets.
CARF is not a new tax. It does not create any new liability. If you owe tax on crypto gains or income, you owed it before CARF under Capital Gains Tax and income tax rules that have applied since 2018 in HMRC's published guidance. What CARF changes is HMRC's ability to see exchange data systematically and automatically.
The timeline that matters
| Date | Milestone |
|---|---|
| 1 January 2026 | UK platforms begin collecting user identity and transaction data (collection year starts) |
| 31 December 2026 | End of the first collection year (covering full 2026 calendar year activity) |
| 1 January 2027 to 31 May 2027 | Window in which platforms must submit the first report to HMRC, covering 2026 activity |
| 31 May 2028 and annually thereafter | Deadline for subsequent annual reports, each covering the preceding calendar year |
Sources: HMRC: collecting cryptoasset user and transaction data (collection from 1 January 2026) and HMRC: reporting cryptoasset user and transaction data (first report 1 January to 31 May 2027; annual by 31 May thereafter).
What CARF does not mean
Several things are often overstated in coverage of CARF. It is worth being clear on the limits of the framework.
- CARF is not retroactive collection. Platforms are not required under CARF to report data from years before 2026. The first collection year runs from 1 January 2026. HMRC does not receive a 2018-to-2025 data dump via CARF.
- CARF does not trigger automatic investigations or automatic assessments. It gives HMRC data it can use for data-matching. A mismatch between reported exchange activity and a Self Assessment return may prompt a compliance check, but there is no automatic outcome from a data match alone.
- The first CARF report has not happened yet. As of today (July 2026), platforms are in the collection year. The first report to HMRC is due between 1 January and 31 May 2027. HMRC does not currently hold platform-submitted CARF data for the 2026 year.
- CARF is not a substitute for filing. You remain responsible for registering for Self Assessment and reporting gains and income correctly on time. CARF data-matching supplements HMRC's enforcement, it does not remove your obligation to report.
What CARF practically changes: the era of exchange invisibility is ending
Until now, HMRC's visibility of cryptoasset exchange activity has depended largely on voluntary disclosure, specific information notices to individual platforms, and intelligence from other sources. For many holders that invisibility created a false sense of security. CARF changes the structural position.
From 2027 onwards, HMRC will receive systematic exchange data as a matter of routine. That data will cover the identities of UK users and the transactions they carried out during 2026 and every subsequent calendar year. The practical consequence is that the risk profile of undisclosed crypto gains and income increases meaningfully once that data flow begins.
This does not mean that prior years are invisible forever. HMRC retains its existing information-gathering powers for earlier years, and the number of years it can assess depends on the nature of the non-compliance: four years for reasonable care, six years for careless, up to twenty years for deliberate behaviour. CARF adds a new data source going forward; it does not close the door on earlier years.
If your past crypto history is untidy: understanding the window
HMRC operates a dedicated cryptoasset disclosure service. The service allows individuals to come forward voluntarily to declare unpaid tax on cryptoassets covering prior years.
The distinction between a voluntary (unprompted) disclosure and a disclosure made after HMRC opens an enquiry matters significantly for penalties. An unprompted disclosure, made before HMRC has indicated it is looking at your tax affairs, typically attracts lower penalties than a prompted disclosure made in response to a nudge letter or enquiry. The principle is the same as it is across all HMRC compliance work: coming forward first is better than being found.
If you have unreported gains or income from cryptoassets covering years before 2026, the period before the first CARF report lands with HMRC (before 31 May 2027) is a practical window to regularise your position. That window is finite.
To understand the likely scope and cost of a disclosure, our scenario tool can help you think through the variables involved. It is an estimate, not a filing-ready calculation, and it ends where complexity begins: with a recommendation to speak to us.
Use the disclosure scenario estimator
Getting tidy before the first report: what to do now
Whether your crypto history spans one exchange or many, a few years or many more, the steps to a clean position are the same.
- Gather your transaction history. Every exchange, wallet, DeFi protocol and NFT platform you have used. Exports from Koinly, Recap or similar tools are a starting point, not a finished answer, particularly for DeFi activity and cross-chain bridges.
- Identify the tax years with open exposure. If you disposed of cryptoassets (including crypto-to-crypto swaps, which are taxable disposals under HMRC's rules) in any year from 2018-19 onwards and did not report them, those years may carry unpaid tax.
- Quantify the position, including losses. Unreported losses are as much a part of the picture as unreported gains. Capital losses must be claimed to be usable and are time-limited to four years after the end of the tax year in which they arose.
- Consider voluntary disclosure before any HMRC contact. If there is unpaid tax, the question is not whether to disclose but when. An unprompted disclosure gives you the most control over the process and the most favourable penalty position.
If you want to talk through your situation before committing to a disclosure, our HMRC disclosure service page explains how the process works and what to expect. You can also read the related guide on what to do if you have received an HMRC nudge letter about cryptoassets.
For the size of the UK crypto population and a running countdown to the first CARF report deadline, the UK Crypto Tax Compliance Index sets out the FCA ownership figures and the HMRC reporting timeline, each cited to source.