DAC8 Is Now in Force: What Crypto Transaction Data Exchanges Collect in 2026 and When Tax Authorities Receive It

From 1 January 2026, DAC8 changed the level of tax transparency surrounding crypto-assets in the European Union. Exchanges and other reporting crypto-asset service providers must now identify EU-resident users, collect tax-residence information and record defined categories of transactions for annual reporting. The rules do not create a single EU crypto tax or make every transfer taxable. Their purpose is to give national tax authorities consistent information that can be compared with tax returns. For crypto holders, the practical change is clear: activity carried out through a reporting provider is no longer likely to remain visible only inside that provider’s account history. The first reporting period covers transactions from 1 January to 31 December 2026, while the first cross-border exchange of information between EU tax authorities is due by 30 September 2027.

What Changed When DAC8 Took Effect in 2026

DAC8 is the eighth amendment to the EU Directive on Administrative Cooperation in taxation. Member States were required to bring the rules into national law by 31 December 2025 and apply them from 1 January 2026. The measure addresses a long-standing gap: conventional financial accounts were already covered by automatic information exchange, but much crypto activity did not fit neatly within those rules. DAC8 therefore adds a dedicated reporting system for crypto-assets and aligns it closely with the OECD Crypto-Asset Reporting Framework. The result is a common minimum set of information that providers must collect and tax administrations must exchange, even though each country continues to apply its own rules for taxing gains, income, staking rewards, business activity and other crypto-related receipts.

The reporting duty is not limited to large exchanges or to transactions that cross a national border. It covers both domestic and cross-border activity involving reportable users resident in an EU Member State. Providers authorised under the EU Markets in Crypto-Assets Regulation can fall within scope, as can other operators that facilitate reportable crypto transactions for customers. A business outside the EU may also have obligations where it serves EU-resident users and cannot rely on an equivalent reporting arrangement with a qualifying non-EU jurisdiction. In that situation, DAC8 provides for single registration in one Member State rather than separate registration in every country where customers live.

DAC8 is an information-reporting law, not a tax-charging law. It does not decide whether exchanging Bitcoin for Ether is taxable, whether staking rewards are income, how losses may be used or which cost-basis method applies. Those questions remain governed by the domestic law of the user’s country of tax residence. The directive instead gives tax authorities data that can help them identify missing declarations, check the value of disposals and ask informed questions about unexplained transfers. A report from an exchange therefore does not automatically mean that tax is due, but it can expose differences between the figures held by the provider and those declared by the taxpayer.

Which Users and Crypto-Assets Fall Within the Rules

The central test for an individual is tax residence, not citizenship, nationality or the location of the exchange’s head office. A customer who is tax resident in an EU Member State can be a reportable user even when the provider is established elsewhere. People with more than one tax residence may have details connected with each relevant Member State. Companies and other entities can also be reportable, and providers may need to identify the natural persons who control certain entities. This prevents the reporting duty from being avoided simply by holding an exchange account through a passive company, trust-like arrangement or another legal structure.

The asset scope is intentionally broad. It can include established cryptocurrencies such as Bitcoin and Ether, many stablecoins, tokens issued without a central issuer and certain non-fungible tokens where they can be used for payment or investment. The decisive point is the practical function of the asset rather than its marketing label. Central bank digital currencies and qualifying electronic-money products are not treated as reportable crypto-assets under the dedicated crypto section because they are addressed through the expanded financial-account reporting rules. Tokens that genuinely cannot be used for payment or investment can also fall outside the definition, although providers must make that assessment carefully.

Self-custody does not disappear under DAC8, and the directive does not give an exchange control over a private wallet. However, transfers between a reporting account and an external address can form part of the annual data. When a provider sends assets to an address that it does not know to be linked to another regulated crypto provider or financial institution, it must report aggregated value and unit information for that category. Direct peer-to-peer transfers made without a reporting intermediary may not create a DAC8 report at the moment of transfer, but earlier withdrawals, later deposits and fiat conversions can still leave a reportable trail. Users should therefore avoid assuming that moving assets to a private wallet removes the need for accurate tax records.

What Crypto Exchanges Collect and Report Under DAC8

The first layer is identification. For an individual reportable user, the required information generally includes the person’s name, residential address, Member State or Member States of tax residence, tax identification number and date of birth. Place of birth may also be reported where domestic law requires the provider to obtain it. For an entity, the report can include its legal name, address, tax residence and tax identification number. Where controlling persons are reportable, their identifying details and the nature of their controlling role may also be included. The provider’s own name, address and identifying details are reported so that the receiving tax authority knows which business supplied the information.

The second layer concerns transaction totals. DAC8 reporting is organised by each type of reportable crypto-asset and by transaction category. Providers report annual aggregate amounts rather than simply sending one combined account balance. The categories include acquisitions of crypto against fiat currency, disposals of crypto for fiat, acquisitions made with another reportable crypto-asset and disposals made for another reportable crypto-asset. For each category, the report can contain the gross amount or fair market value, the number of units and the number of transactions. This means a tax authority may be able to see, for example, that a user sold a stated quantity of a particular asset for fiat during 2026 even if the user did not withdraw the proceeds to a bank account.

The third layer covers transfers and certain payments. Providers report aggregate fair market value, units and transaction counts for transfers into and out of a user’s account that are not already included as purchases or disposals. They also report defined retail payment transactions and outbound transfers to distributed-ledger addresses not known to be connected with a regulated crypto provider or financial institution. The report is therefore more informative than a year-end balance, but it is not necessarily a complete line-by-line trading statement containing every timestamp, order type and fee. The EU format is based mainly on annual totals by asset and category, while providers must retain supporting records that tax authorities may request under domestic procedures.

Why Exchanges Ask for a TIN and Tax Self-Certification

DAC8 requires providers to determine where a customer is resident for tax purposes. For a new relationship established from 2026, the provider must obtain a valid self-certification that states the relevant tax residence and tax identification number. Existing customers whose relationship was already in place on 31 December 2025 are also subject to review, with the directive allowing providers until 1 January 2027 to obtain the required self-certification. This is why a long-standing customer may receive a fresh request for tax details even if identity checks were completed years earlier. Standard know-your-customer information is useful, but it does not always establish tax residence with enough certainty for DAC8.

A valid self-certification must be positively confirmed by the customer and dated. For an individual, it normally includes the full name, residential address, tax-residence country or countries, the relevant tax identification number and date of birth. The provider must assess whether the declaration is reasonable when compared with information already held, such as identity documents, address evidence or other customer-due-diligence records. If circumstances change, the provider cannot continue relying on information it knows or has reason to believe is incorrect. A move to another country, a new address, conflicting documentation or a change in an entity’s ownership may therefore trigger another request.

Ignoring the request can have practical consequences. Where a user does not provide the required information after the initial request and two reminders, and at least 60 days have passed, the provider must prevent that user from carrying out reportable transactions. Member States must also create penalties and compliance procedures for providers that fail to collect, verify or report the required data. Supporting records must generally remain available for at least five years and no more than ten years after the relevant reporting period, subject to the national implementation. Customers should enter their genuine tax residence and correct TIN rather than choosing the country shown on an identity document when that country is no longer their tax home.

When Tax Authorities Receive the First DAC8 Information

The first data-collection year is 2026. Exchanges and other reporting providers record covered activity from 1 January through 31 December, then submit the required information during the following calendar year under the deadline and technical process set by the country handling the report. DAC8 does not establish one universal customer-facing filing date for every provider, so users should not assume that all exchanges will submit on the same day. The European Commission describes the first reporting cycle as taking place between 1 January and 30 September 2027. Providers may close their records, request corrections and validate tax-residence details before the national submission deadline.

For a user dealing with a provider in the same country, the national tax authority may receive the information directly under domestic reporting arrangements. When the user is resident in another EU Member State, the authority that first receives the report must automatically send the relevant information to the authority in the user’s country of residence. The deadline for that inter-authority exchange is nine months after the end of the reporting year, so information relating to 2026 must be exchanged by 30 September 2027. A person resident in more than one Member State may have information sent to each identified jurisdiction. Equivalent international arrangements can reduce duplicate reporting where a non-EU country exchanges matching information with EU authorities.

Receipt of DAC8 data does not mean that every user will immediately receive an enquiry or assessment. Tax administrations can use the information for risk analysis, automated matching and targeted checks. They may compare reported disposals, transfer values and account identity details with annual tax returns, capital-gains schedules, wealth-tax declarations or information already received from banks. A mismatch may have an innocent explanation, such as transfers between wallets owned by the same person, an exchange using gross figures, fees recorded separately or a different valuation method. The taxpayer may nevertheless need reliable records to explain the difference. DAC8 makes unsupported estimates and incomplete histories more difficult to defend.

What Crypto Holders Should Do During 2026

Start by checking the personal information held by every exchange or reporting service you use. Confirm that your legal name, residential address, tax-residence country and TIN are correct and consistent with your current circumstances. Do not assume that a provider will infer tax residence from an IP address, bank card or passport. People who moved country during the year, work across borders or may be tax resident in two jurisdictions should document the dates and obtain advice based on the applicable residence tests. When an exchange asks for a self-certification, respond promptly and keep a copy of the information submitted, together with any confirmation that the account details were updated.

Download transaction histories before an account is closed, a service changes its export format or older records become difficult to access. Keep evidence of purchases, sales, crypto-to-crypto exchanges, rewards, fees, withdrawals and deposits. For transfers between your own accounts or wallets, record both sides of the movement and note that beneficial ownership did not change. Preserve wallet addresses, transaction hashes and screenshots or statements that link the address to you. DAC8 reports gross annual figures by asset and category, while a tax calculation may require acquisition dates, original cost, allowable fees, local-currency values and the purpose of each receipt. The exchange report alone may therefore be insufficient to prepare an accurate return.

Finally, reconcile your records before the relevant national tax-return deadline rather than waiting for the first DAC8 exchange in 2027. Check whether your country treats disposals, staking, lending, mining, airdrops, salary payments and business receipts differently, and correct past omissions through the procedure available under local law where necessary. DAC8 does not remove the taxpayer’s responsibility to calculate and declare the correct amount, nor does it guarantee that the provider’s aggregated figures equal taxable profit. Its main effect is to give tax authorities a consistent external data source. Accurate records, clear wallet-to-wallet explanations and timely corrections are the strongest response to the new level of transparency.