Guidance

Collecting cryptoasset user and transaction data

Find out what information you'll need to collect under the Cryptoasset Reporting Framework (CARF).

From 1 January 2026 if you provide cryptoasset services in the UK, you鈥檒l need to start collecting certain user and transaction data.

This is because the UK is introducing the Organisation for Economic Development (OECD) Cryptoasset Reporting Framework (CARF), and extending it to include domestic reporting.

You may want to start collecting information earlier to prepare for the new rules.

We鈥檒l be updating this guidance with more information.

You can聽subscribe to get emails about updates to the聽guidance.

Before you start

Check whether you鈥檒l need to report to HMRC.

What you鈥檒l need to collect

You鈥檒l need to collect information about:

  • all individual users
  • all entity users, which for CARF includes companies, partnerships, trusts and charities
  • cryptoasset transactions, for users in the UK and other CARF countries

For individual users

You鈥檒l need to collect their:

  • name
  • date of birth
  • home address
  • country of residence
  • for UK residents, their National Insurance number or Unique Taxpayer Reference
  • for non-UK residents, their tax identification number (TIN) and the country where it was issued

If a user cannot be issued a TIN (for example, because their country does not issue TINs), you do not need to provide one.

For entity users, including companies, partnerships, trusts and charities

You鈥檒l need to collect their:

  • legal business name
  • main business address聽
  • for UK companies, their company registration number
  • for non-UK companies, their tax identification number and the country where it was issued

For some entities, you鈥檒l also need to collect information about their controlling person.

Transactions

For each transaction, you must collect the:

  • value
  • type of cryptoasset
  • type of transaction
  • number of units

When to start

You must collect all data from 1 January 2026 onwards.

You may want to start collecting information earlier, so that you are ready when the new rules come into force.

Due diligence

You鈥檒l need to verify that the information you collect is accurate by carrying out due diligence. We鈥檒l update the guidance with information about how to do this in due course.

There will be penalties of up to 拢300 per user for inaccurate, incomplete or unverified reports.

Reporting to HMRC

Depending on the information you collect, you may need to submit a report to HMRC each year. Find out what you鈥檒l need to report to HMRC.

More information

You can find detailed information about聽the Cryptoasset Reporting Framework in the聽.

You can find out about聽.

If you have questions about聽the Cryptoasset Reporting Framework, you can email聽eoi.policy@hmrc.gov.uk.

Updates to this page

Published 14 May 2025
Last updated 19 June 2025 show all updates
  1. Updated HMRC contact details.

  2. First published.

Sign up for emails or print this page