The crypto transparency clock: what 1 January 2027 means for crypto businesses in the hubs we cover

The OECD's Crypto-Asset Reporting Framework (CARF) does for crypto what the Common Reporting Standard did for bank accounts. A crypto-asset service provider collects tax residence information from its users and reports those users, and their transactions, to its local tax authority. That authority then passes the information to the authorities where the users are resident.

Whether CARF reaches a crypto business is settled. When it arrives, and where, is the part still worth reading closely.

Two groups of jurisdictions

The most recent version of the OECD's list of commitments that we have been able to read is dated 17 June 2025. On it, 52 jurisdictions committed to first exchanges by 2027 and a further 17 by 2028. The Cayman Islands and the United Kingdom sit in the first group; the UAE, Singapore, Hong Kong, the British Virgin Islands and the Seychelles sit in the second.

An exchange in 2028 covers the calendar year 2027. So a business in the second group starts collecting information on 1 January 2027.

Where the rules stand

Singapore has enacted its CARF regulations, and they enter into force on 1 January 2027. The IRAS e-Tax Guide published in August 2026 puts the deadline for 2027 reports to IRAS at 31 May 2028, with the first exchange to follow in September 2028. A crypto-asset service provider that becomes reportable during a year must register by 31 March of the following year.

The Cayman Islands is a year ahead. Its CARF rules have applied since 1 January 2026 and the first reports fall due by 30 June 2027. Existing service providers had until 30 April 2026 to register; a new one registers by 31 January of the year after it becomes reportable.

Hong Kong gazetted its implementing bill on 22 May 2026. The same bill brings in the amended Common Reporting Standard, and it had its first reading in the Legislative Council on 3 June. If it passes, CARF applies from 1 January 2027 and the amended CRS from 1 January 2028.

The UAE, the British Virgin Islands and the Seychelles have committed to first exchanges by 2028. Businesses there should work on the basis that data collection starts on 1 January 2027, and watch for domestic rules and guidance as they appear.

Mauritius signed the CARF multilateral competent authority agreement on 12 December 2025, according to the Mauritius Revenue Authority. It is not on the June 2025 commitments list, and we have not seen its first exchange year confirmed.

What it means in practice

Most of the work sits in onboarding. Every user, existing and new, needs a valid self-certification of tax residence. A platform that onboards without collecting one now will have to go back to its users in 2027, and the users who do not reply become a reporting problem and a commercial one at once.

The second issue is the group map. Take a group with a licensed entity in Dubai, a trading entity in the Seychelles and a holding company in the British Virgin Islands. It may have reporting obligations in more than one place, each on its own timetable, because the obligation follows the rules of every jurisdiction where an entity is a reporting provider. Where the group would prefer to report does not come into it.

The third is the conversation with clients. CARF ends the assumption that a crypto account held in one hub is invisible to the tax authority of another. Clients who chose a platform for that reason should hear about the change from the platform first, and not from a tax authority.