Collecting cryptoasset user and transaction data

IfFrom 1 January 2026 if you provide cryptoasset services in the UK, youyou’ll mustneed collectto start collecting certain user and transaction data.

This is because ofthe rulesUK calledis introducing the Organisation for Economic Development (OECD) Cryptoasset Reporting Framework (CARF).), and extending it to include domestic reporting.

You may want to start collecting information earlier to prepare for the new rules.

Before you start

Check whether youyou’ll need to report to HMRC.

What you’ll need to collect

YouYou’ll mustneed to collect information about:

• all individual users
• all entity users, which for CARF includes companies, partnerships, trusts and charities
• cryptoasset transactions, for users in the UK and other CARF countries

For individual users

YouYou’ll need to collect their:

• name
• date of birth
• home address
• country of residence
• for UK residents, their National Insurance number or Unique Taxpayer Reference
• for non-UK residents, their tax identification number (TIN) and the country where it was issued

If a user cannot be issued a TIN (for example, because their country does not issue TINs), you do not need to provide one.

For entity users, including companies, partnerships, trusts and charities

YouYou’ll need to collect their:

• legal business name
• main business address 
• for UK companies, their company registration number
• for non-UK companies, their tax identification number and the country where it was issued

For some entities, youyou’ll also need to collect information about their controlling person.

Find out when you need to report on the controlling person of an entity (International Exchange of Information Manual: IEIM8000435).

Transactions

For each transaction, you must collect the:

• value
• type of cryptoasset
• type of transaction
• number of units

When to start

FindYou outmust aboutcollect transactions (Internationalall Exchangedata offrom Information1 Manual:January IEIM8000500).2026 onwards.

You may want to start collecting information earlier, so that you are ready when the new rules come into force.

Due diligence

YouYou’ll need to verify that the information you collect is accurate by carrying out due diligence.

Find outWe’ll update the guidance with information about how to do this in due diligencecourse.

There requirements (Internationalwill Exchangebe penalties of Informationup Manual:to IEIM8000400).£300 per user for inaccurate, incomplete or unverified reports.

Reporting to HMRC

Depending on the information you collect, you may need to submit a report to HMRC each year. Find out what youyou’ll need to report to HMRC.

More information

You can find detailed information about the Cryptoasset Reporting Framework:

• in the International Exchange of Information technical manual
• in the rules and commentary on the Organisation for Economic Development (OECD)’s website

You can also find out about international tax transparency standards on the OECD’s website.

If you have questions about the Cryptoasset Reporting Framework, you can email eoi.policy@hmrc.gov.uk.