OECD CARF: The Global Tax Framework That Will End Crypto Tax Evasion
CARF is not a regulation. It's an information-exchange agreement. But its consequence — tax authorities in 75 countries automatically receiving data on their residents' crypto holdings and transactions — will be more impactful for actual crypto user behaviour than any licensing regime.
The Crypto-Asset Reporting Framework is the OECD’s mechanism for applying to cryptocurrency the same automatic tax information exchange infrastructure that has transformed offshore banking transparency over the past decade. It was developed by the OECD’s Global Forum on Transparency and Exchange of Information for Tax Purposes and endorsed by G20 Finance Ministers in 2022. As of early 2026, over 75 jurisdictions have committed to implement CARF. Forty-eight are scheduled to begin collecting data from crypto service providers in 2026, with the first automatic exchange of that data with partner jurisdictions occurring on 30 June 2027.
If CARF is fully implemented, the era of invisible crypto is over.
The Lineage: FATCA and CRS
CARF’s design draws explicitly on two existing international tax transparency frameworks. The US Foreign Account Tax Compliance Act (FATCA), enacted in 2010, required foreign financial institutions to report information on accounts held by US persons to the IRS, or face withholding penalties on their US-source income. FATCA was unilateral — the US imposed it on the world — but it created the technical and legal infrastructure for automatic cross-border financial account reporting.
The Common Reporting Standard (CRS), developed by the OECD in 2014 and now implemented by over 100 jurisdictions, extended the FATCA model multilaterally. Under CRS, financial institutions report the balances, income, and transaction data of their foreign-resident account holders to their national tax authority, which automatically exchanges this information with the tax authorities of those account holders’ countries of residence. A French bank reports French-held accounts of German residents to the French tax authority, which sends the data to Germany. Germany reciprocates.
The consequence of CRS implementation has been dramatic. Undeclared offshore accounts that were invisible to home-country tax authorities became reportable. Amnesty programmes across Europe saw hundreds of thousands of taxpayers voluntarily declaring previously hidden offshore assets. Swiss banking secrecy, which had persisted for a century, was effectively ended as a mechanism for tax concealment within participating jurisdictions.
CARF applies the same model to crypto.
What CARF Requires
CARF requires Reporting Crypto-Asset Service Providers — exchanges, brokers, and other platforms facilitating crypto transactions — to collect information on their users and report specified data to their national tax authority annually.
The reported data covers: the user’s name, address, tax identification number, and date of birth; the crypto assets held by the user; the aggregate amount of transfers (sales, exchanges, payments) involving each type of crypto asset during the year; and the aggregate consideration received by the user for those transfers. In effect, every meaningful crypto transaction executed through a reporting platform must be disclosed.
The reporting platform’s obligations include collecting this information from users during onboarding (know-your-customer requirements thus serve dual AML and tax purposes), maintaining accurate records, and filing annual reports with the tax authority of the jurisdiction in which they operate.
National tax authorities then automatically exchange the collected data with the tax authorities of the users’ countries of residence — the same automatic exchange mechanism used for CRS. A user resident in France who trades on a Singapore-based exchange will have their transaction data reported by the Singapore exchange to Singapore’s tax authority (IRAS), which sends it to France’s Direction Générale des Finances Publiques (DGFiP). France’s tax authority can compare the data against the user’s French tax return.
The 75 Committed Jurisdictions
The jurisdictions that have committed to implement CARF span the major financial centres and crypto-significant economies. The 48 jurisdictions beginning collection in 2026 — for the June 2027 first exchange — include the EU member states, the United Kingdom, Switzerland, Singapore, Japan, South Korea, Canada, Australia, and several of the major offshore financial centres including the British Virgin Islands and Cayman Islands.
The commitment of offshore financial centres to CARF is particularly significant. The Cayman Islands, which resisted CRS for years before implementing it, has committed to CARF. This eliminates a gap through which crypto transactions structured through offshore platforms could remain invisible to onshore tax authorities.
A second wave of jurisdictions — including several emerging markets — have committed to later implementation dates. The OECD is working to expand CARF coverage continuously.
The Notable Non-Signatories
Four significant jurisdictions are notable for their absence from the CARF commitment list: the United States, India, Pakistan, and Vietnam.
The United States presents the most significant gap. The US has its own domestic crypto tax reporting requirements — the Infrastructure Investment and Jobs Act 2021 included broker reporting requirements for crypto transactions — but the US has not committed to automatic exchange of crypto tax information with partner jurisdictions under CARF. This is partly a domestic political question (the US Congress is reluctant to commit to information-exchange agreements that might impose reciprocity obligations) and partly reflects the US’s preference for its own FATCA-based bilateral approach. The absence of the US from CARF means that a US-based exchange serving non-US users will not automatically report to non-US tax authorities — creating a gap that matters for the substantial volume of global crypto activity intermediated through US-based platforms.
India has over 100 million crypto users and has implemented stringent domestic crypto taxation (30 percent flat tax plus 1 percent TDS) but has not committed to CARF. India’s position on international tax information exchange has historically been cautious — India joined CRS but as a non-reciprocal jurisdiction for certain purposes. The absence from CARF means Indian-resident users of offshore exchanges will not have their transactions automatically reported to Indian tax authorities through the CARF mechanism, though India’s 1 percent TDS creates some domestic transaction visibility.
Pakistan and Vietnam reflect emerging market positions where tax administration capacity and political economy around crypto have not yet produced CARF commitment.
DeFi and NFT Coverage
CARF’s coverage of decentralised finance and non-fungible tokens is an area of active OECD technical work and ongoing uncertainty. CARF as designed targets Reporting Crypto-Asset Service Providers — entities with sufficient centralisation and customer relationships to identify users and collect the required data. Truly decentralised protocols, where there is no intermediary collecting user information, present a different technical and legal problem.
The OECD has acknowledged that DeFi protocols present coverage challenges and is developing supplementary guidance. The initial CARF implementation will focus on centralised exchanges — the largest share by volume of reportable transactions — while DeFi coverage is addressed in subsequent iterations.
NFTs are covered by CARF where they represent a financial instrument used for investment — the sale of an NFT for significant consideration is a taxable event in most jurisdictions and would be reportable. Purely collectible NFTs with no investment characteristics present harder classification questions.
Practical Implications for Crypto Users
For the crypto user who has been operating on the assumption that crypto transactions are invisible to tax authorities, CARF is transformative. Beginning in June 2027, tax authorities in 75+ jurisdictions will be receiving automatic, annual data on their residents’ crypto holdings and transactions at reporting exchanges.
The practical consequence is that crypto tax non-compliance becomes detectable in the same way that offshore bank account non-compliance became detectable after CRS. Tax authorities can match CARF-received data against filed tax returns. Discrepancies — unreported gains, undisclosed holdings — become evidence of potential evasion. The same voluntary disclosure programmes that offshore banking clients used to regularise their positions after CRS are likely to appear in crypto contexts as CARF data begins flowing.
CARF does not create a new tax obligation. Crypto gains were already taxable in most CARF-committed jurisdictions before CARF existed. What CARF changes is the probability of detection for non-compliance. It applies the enforcement infrastructure that has already transformed offshore banking secrecy to the crypto ecosystem. The era of invisible crypto is not ending slowly — it has a specific date: 30 June 2027.
Subscribe for full access to legislative trackers, country benchmarks, political economy analysis, and policymaker profiles across 25+ jurisdictions.
Subscribe from $29/month →