What Is CARF? The Crypto Reporting Rules, in Plain English
CARF is the OECD's Crypto-Asset Reporting Framework: a global system where crypto exchanges and brokers report your identity, balances, and transactions to tax authorities, which then share that data with the country where you're tax resident. It went live in roughly 50 jurisdictions on January 1, 2026. Self-custody wallets carry no reporting duty of their own.
Published 2026-06-12 · by Jordan Urbs
Every relocation plan eventually hits the same question.
You find the zero-tax jurisdiction, you price the visa, you map the flights… and then someone asks: “doesn’t your exchange report all of this now anyway?”
Since January 1, 2026, the answer is mostly yes. That’s CARF.
The bank-account playbook, applied to crypto
For a decade, banks worldwide have run something called the Common Reporting Standard (CRS): your bank tells its tax authority who you are and what you hold, and that authority automatically forwards the file to the country where you’re tax resident.
CARF, the Crypto-Asset Reporting Framework, is the OECD running that exact playbook on crypto.
The OECD finalized the rules in 2023, and 48 jurisdictions committed in a joint statement that November. As of late 2025, the commitment list had grown to 76.
No new tax was created. CARF is purely an information pipe… but information pipes are how taxes get enforced.
What actually gets reported, and to whom
The reporting duty falls on what the framework calls Reporting Crypto-Asset Service Providers, or RCASPs (read: exchanges, brokers, dealers, and some custodial wallet services).
If you have an account at one, they collect and report:
- Who you are: name, address, date of birth, tax identification number, and country of tax residence
- What you did: crypto-to-fiat trades, crypto-to-crypto swaps, and transfers, with gross proceeds and aggregate values, reported annually
- Where you sent it: withdrawals to addresses the exchange can’t identify as another service provider (your hardware wallet, for instance) get reported as aggregate transfer values
Even large retail payments get caught: pay a merchant more than $50,000 in crypto through a provider and that transaction is flagged under the framework’s rules.
The flow is the part that matters. Your exchange reports to its tax authority, which then automatically exchanges the file with the tax authority of your residence country.
The file goes to the country where you live, no matter where the exchange sits.
The timeline, jurisdiction by jurisdiction
Data collection started January 1, 2026 across roughly 50 jurisdictions (sources count 48 live on day one, with the committed list at 76 and most exchanges of data starting by 2027).
Some markers worth knowing, drawn from the jurisdictions in this directory:
- The EU implemented CARF through a directive called DAC8. Collection from January 1, 2026; first filings due by September 30, 2027. That covers Switzerland’s neighbors and every EU member on our list… and Switzerland itself is phasing in CARF from 2026 on its own track.
- Cayman Islands: live January 1, 2026. Zero tax, full reporting.
- Singapore: slated for 2027.
- UAE: signed in 2025, reporting by 2028.
- Paraguay: not a signatory as of mid-2026. One of the few holdouts left.
- The United States isn’t in CARF at all. It built a parallel system instead: brokers report gross proceeds on Form 1099-DA starting with 2025 transactions, and cost basis from 2026. Some reporting suggests the US may join CARF around 2029, but I wouldn’t plan around that date either way.
So the gaps exist. They’re just shrinking on a published schedule.
What CARF killed
The fantasy it ended was specific: keep living where you live, open an account on an exchange in some friendly jurisdiction, and let distance do the hiding.
That’s dead. The exchange asks where you’re tax resident, and the report follows the answer (the same way it has for bank accounts since CRS started in 2017).
An account in Dubai held by a tax resident of Germany generates a file that lands in Germany. The exchange’s location stopped mattering; your location is the whole game.
Which means the only version of the relocation play that still works is the real one: actually moving, actually becoming tax resident somewhere else, actually building a life there. Our guide to crypto-tax-free countries covers which jurisdictions make that worth doing.
What CARF didn’t touch
This is where the doom takes get it wrong.
CARF regulates intermediaries, not the protocol. A person holding bitcoin in their own wallet, with their own keys, has no reporting obligation under the framework, because there’s no service provider in the picture to do the reporting.
Same for genuine peer-to-peer transactions. Two people, one transfer, no platform in the middle: nothing for CARF to capture.
The honest caveat: the on-ramps and off-ramps are thoroughly captured. The withdrawal that moved coins from your exchange to your hardware wallet was reported in aggregate. The eventual sale back to dollars will be reported too. And the blockchain itself is public, which is a separate visibility problem CARF didn’t create and doesn’t control.
So neither extreme survives contact with the text of the framework. “Privacy is dead” ignores that self-custody sits entirely outside the reporting net. “They can’t touch you” ignores that nearly every ramp between crypto and the banking system now files a report.
I’ll be honest about one more thing: how aggressively tax authorities will act on this flood of data, and how fast, is genuinely unclear. The pipe exists. What flows through it in practice… we’ll find out over the next few years, fellow builders, same as everyone else.
The two takeaways
First: jurisdiction still matters, but only the real kind. Picking where you’re tax resident is still one of the highest-leverage decisions available. What’s gone is the pretend version. The report follows your actual residency, so the question becomes “where do I actually want to live?” rather than “where can I hide an account?”
Second: self-custody matters more than it did in 2025. Notice what CARF could and couldn’t reach. The rules reached every intermediary, because intermediaries are companies that follow laws. The rules couldn’t reach keys you hold yourself, because there’s nobody standing between you and the asset to compel.
That’s the sovereignty ladder distinction in action. An exchange account is a paper guarantee: it works as long as institutions keep their promises, and those promises just got rewritten globally in about three years. Keys in your own wallet are bedrock: math that holds whether or not anyone is watching.
CARF rewrote the paper layer for 50-plus countries at once. It left the bedrock layer exactly where it was.
When a framework this thorough reaches every intermediary on earth and stops cold at the keys in your hand, it has told you something useful about which layer to build on.
(Usual caveat, plainly: I’m a guy who reads frameworks, not your tax advisor. Rules differ by country and change fast… talk to a professional who knows your situation before acting on any of this.)