CARF Crypto Reporting UK 2026: What HMRC Now Sees About Your Trades

The single most important UK crypto-tax development of 2026 is one most retail investors haven't heard of: the Crypto-Asset Reporting Framework (CARF). It went live in January 2026, and it changes the calculus of "do I really need to file this?" for every UK crypto holder. Here's what's actually happening, what HMRC now sees, and what you should do before the 31 January 2027 deadline.

What CARF is, in one paragraph

CARF is an OECD-built standard for automatic exchange of crypto transaction data between tax authorities. It works the same way the Common Reporting Standard (CRS) works for traditional bank accounts: exchanges in participating countries collect identifying information about their users, then send a summary of each user's crypto activity to that user's home tax authority each year. The UK signed up; HMRC started receiving CARF reports for the 2025 calendar year in early 2026.

What HMRC now sees

Every major centralised exchange that serves UK customers — Binance, Coinbase, Kraken, Bitstamp, Crypto.com, Gemini, KuCoin, OKX, Bybit, plus most regulated brokers — now hands HMRC a CARF report each year. That report typically includes the account holder's name, address, NI number where collected, total gross fiat-in, total gross fiat-out, total token-to-token swap volumes by asset, and end-of-period holdings.

It does NOT (yet) include per-transaction matched cost basis or your CGT liability — HMRC still has to work that out themselves, or wait for you to report it. But they now know whether you've been active.

The "they'll never find out" era is over

For a decade, UK crypto tax compliance ran on the soft assumption that HMRC didn't really have line of sight into what was happening on exchanges. That assumption is now wrong. The data flows whether you file or not.

This matters because the discrepancy detection is automatic. If HMRC has a CARF report showing you moved £80,000 of crypto through Binance in 2025/26 and you've filed a Self Assessment with no SA108 schedule, the algorithm flags you for review. Nudge letters started going out in volume in late 2024 — the 2026 batch will be much larger.

What it doesn't change

CARF reports what happened on the exchange. It does not see your self-custody wallet, your DeFi activity, your DEX swaps, or your hardware wallet. So:

- A holder who only uses Coinbase: HMRC now has near-complete visibility. - A holder who only uses MetaMask + Uniswap: HMRC sees nothing direct from CARF — but they can see the on-ramp deposit from your bank and they can chain-trace from there. - A holder who never on-ramped (acquired crypto via P2P, mining, work payment): much harder for HMRC to spot — but the activity is still legally taxable and CARF doesn't change the legal obligation.

Decentralised exchanges and DeFi

CARF specifically targets "Reporting Crypto-Asset Service Providers" — i.e. centralised exchanges that custody user assets. Pure DEX swaps (Uniswap, Jupiter), wallet-to-wallet transfers, and DeFi protocols are out of scope. The UK government has been consulting on whether to extend reporting to DEX aggregators, but no rule is in force as of mid-2026. For now, the gap exists.

What to do before 31 January 2027

If you've been crypto-active and haven't filed:

1. Pull your full 2025/26 transaction history from every exchange you used. Most have a "CSV tax export" — Binance, Coinbase, Kraken, Crypto.com all offer this for UK users. 2. Add your on-chain wallets to the mix. Self-custody isn't optional any more — HMRC may not see it via CARF, but you still owe tax on the disposals. 3. Run the HMRC matching rules — same-day, 30-day bed-and-breakfast, then Section 104. Don't shortcut to FIFO. 4. File the SA108 schedule even if your gains are below the £3,000 allowance, if your total proceeds exceeded £12,000 (the SA108 reporting threshold). 5. Keep evidence — wallet exports, exchange CSVs, screenshots of the matching output you used.

CryptoLens automates steps 2-4: paste your wallet addresses, upload your exchange CSVs (Binance, Coinbase, Kraken, Crypto.com, Bitstamp, Gemini, Bitfinex), and the engine produces an SA108-formatted PDF with the matching disclosure HMRC requires.

The political wind

CARF is part of a broader UK government push, with HMRC growing its dedicated crypto compliance team year-on-year. The era of "nobody filed and nothing happened" was driven by the fact that nobody had the data. Now they do.

The penalty regime for late or incomplete Self Assessment filing is unchanged: a £100 initial late filing penalty, more for incomplete or careless disclosure, up to 100% of unpaid tax for deliberate concealment, and an extra "offshore" multiplier (×1.5 or ×2) for income sourced via overseas platforms. With CARF data now in HMRC's hands, the discovery risk is no longer "if" — it's "when."

Filing accurately, on time, against the actual data is now strictly cheaper than the alternative. CryptoLens exists to make that filing accurate and on time.