DAC8 is live: what the EU's crypto reporting rules actually change for you
Based on verified official data as of 24.07.2026; hands-on update coming.
Since 1 January 2026, Directive (EU) 2023/2226 — DAC8 — obliges crypto exchanges, brokers and custodial wallet providers serving EU tax residents to collect your tax identification number and report your transactions to tax authorities, which then exchange that data automatically across all 27 member states. The first exchange covers full-year 2026 data and lands with tax offices by 30 September 2027. It reaches crypto-to-fiat sales, crypto-to-crypto swaps, staking rewards and even withdrawals to self-hosted wallets — and it applies to non-EU platforms with EU customers too. There is no new tax and no retroactive levy, but the data lets authorities re-check past years under national rules.
TL;DR
- In force since 1 January 2026 across all 27 EU states; first automatic data exchange covers 2026 and reaches tax offices by 30 September 2027.
- Reporting platforms (RCASPs) include exchanges, brokers and custodial wallets — EU-registered or foreign, if they serve EU tax residents.
- Reported: your TIN, tax residency, wallet addresses, crypto-to-fiat and crypto-to-crypto totals, staking and airdrop rewards, transfers to self-hosted wallets.
- Penalties are real: the Netherlands set fines up to €1,030,000 for non-reporting platforms; accounts without a TIN face freezes.
- DAC8 is the EU arm of the OECD's CARF — 50+ countries are set to exchange the same crypto data by 2027, so leaving the EU rarely escapes it.
What DAC8 is, in one honest paragraph
DAC8 is the eighth amendment to the EU's Directive on Administrative Cooperation — Council Directive (EU) 2023/2226, adopted on 17 October 2023, transposed by member states through 2025, applying from 1 January 2026. It does one thing: it makes crypto platforms report their users' transactions to tax authorities the way banks have reported accounts for a decade under CRS. The tax rules themselves did not change. What changed is that your national tax office now receives the data to enforce them.
The reporting entities — the directive calls them Reporting Crypto-Asset Service Providers, RCASPs — are crypto exchanges, brokers, custodial wallet providers and crypto transfer services. The scope clause matters most: the obligation attaches to platforms serving EU tax residents, wherever the platform itself is registered. A Seychelles exchange with German customers reports German data the same as a Frankfurt one.

Exactly what data moves, and when
Platforms collect identity data at onboarding — name, address, date of birth, tax residency and tax identification number (TIN) — and then aggregate your yearly transaction volumes by asset and category. Users who refuse to provide a TIN face account freezes: the platform cannot lawfully keep serving an unreportable EU resident.
The timeline is slower than the panic suggests. Reporting covers calendar year 2026 as the first period; platforms submit to their member state, and the automatic exchange between all 27 tax administrations completes by 30 September 2027. Your 2026 trades become visible to your tax office in autumn 2027 — alongside whatever your bank already reports about the fiat side.
| What gets reported | Detail |
|---|---|
| Identity | Name, address, date of birth, tax residency, TIN |
| Crypto-to-fiat | Annual aggregate per asset (e.g. BTC sold for EUR) |
| Crypto-to-crypto | Swaps count too (e.g. ETH to USDT) — unlike some national regimes |
| Transfers out | Withdrawals to self-hosted wallet addresses, including the addresses |
| Rewards | Staking rewards and airdrops credited by the platform |
| First exchange | 2026 data, delivered to tax offices by 30 September 2027 |
Poland just showed how transposition looks
Transposition is national law, and Poland is the fresh example: on 9 March the President's Office announced the signing of the law amending automatic exchange of information provisions — implementing DAC8, incorporating the OECD's Crypto-Asset Reporting Framework (CARF) elements, and updating the Common Reporting Standard to cover electronic money and central bank digital currencies. Poland's first information exchange is scheduled for 2027, covering 2026 data — exactly the directive's calendar.
The CARF mention is the bigger story. DAC8 is the EU implementation of a global OECD standard, and more than 50 jurisdictions are committed to exchanging the same crypto data by 2027. The practical consequence: relocating your exchange account outside the EU increasingly moves your data between reporting regimes rather than out of them.

The retroactivity question, answered without panic
DAC8 introduces no tax and no retroactive levy — the directive is a reporting instrument. The honest caveat: once a tax office holds your 2026 platform data, it can run data matching against your past declarations and bank records, and where national law permits auditing earlier periods, undeclared crypto income from those years can surface. The reassessment power was always there; the data feed is new.
Small sums are not exempt by design. There is no de minimis threshold in the reporting: a few hundred euros earned on an exchange and cashed out through P2P still appears in the aggregate totals. Whether it triggers anything depends on your national rules and your declarations — the mechanics per country are in our per-country tax guides, starting with whether you pay tax on crypto card spending at all.
Enforcement teeth vary by member state, and some are sharp: the Netherlands legislated fines up to €1,030,000 for platforms that fail their reporting duties, and the UK's parallel CARF regime prices individual non-disclosure at roughly £300 per user. The direction across the bloc is uniform even where the numbers differ.
What DAC8 means if you hold a crypto card
Here is the part none of the coverage spells out. Most crypto cards are issued by exchanges and custodial platforms — exactly the RCASPs the directive captures. Every top-up you spend through a custodial card is platform activity: the conversion from crypto to fiat at the moment of payment is a disposal the platform itself executes and now reports. If you spend through a Bybit, Wirex or Crypto.com card as an EU resident, assume the card's activity rides along in the annual aggregate.
Non-custodial cards shift the reporting point, not the obligation. A card that spends directly from your self-custody wallet still settles through a card program, and the crypto that funded the wallet usually came from a reporting exchange — whose records now include the withdrawal to your address. Chain analysis connecting that address to your spending is exactly the data-matching workflow DAC8 feeds. Our non-custodial cards guide covers what self-custody genuinely changes; tax visibility is not on the list.
The sober conclusion mirrors our no-KYC legality guide: the card layer was never where tax privacy lived. Your obligations attach to disposals under national law, DAC8 simply delivers the evidence — so the winning move in 2026 is boring: keep cost-basis records, declare what your country requires, and choose cards on fees and custody rather than on reporting fantasies.

What to do before autumn 2027
The window between now and the first exchange is preparation time, not hiding time. Reconstruct your cost basis for anything you plan to dispose of — acquisition dates and prices, per asset. Check what your platforms hold about you: the TIN and residency they report should match what you file. If past years have gaps and your country offers voluntary disclosure, price that route against the audit alternative with a local adviser — several member states treat self-correction dramatically better than discovery.
And read your own country's rules, because DAC8 delivers data into very different tax regimes: Germany's one-year holding exemption, Spain's savings-rate bands, Poland's flat crypto rate all produce different outcomes from identical data. Our country guides for Germany and Spain break down the card-spending arithmetic under each regime.
Risk warning: derivatives and crypto-backed credit involve significant risk, including liquidation of your collateral. Never commit funds you cannot afford to lose. Nothing on this page is financial, investment or tax advice.
Who this is NOT for
- Anyone looking for a way around the reporting — the directive attaches to platforms, not to anything you control, and 50+ CARF countries close the relocation route.
- Non-EU residents without EU tax residency — DAC8 keys on residency, not citizenship; your regime is CARF's rollout in your own country.
- Anyone expecting a new EU crypto tax — DAC8 taxes nothing; it reports to whatever national rules already apply to you.
- Readers wanting legal advice on past undeclared years — that conversation belongs with a tax professional in your member state, ideally before autumn 2027.
Frequently asked questions
Yes, if you are an EU tax resident. The obligation follows the customer: non-EU platforms serving EU residents must register and report into the system. Foreign registration of the platform changes which state receives the file first, not whether your data flows.
NomadCrypto Editor
Editorial Team, NomadCard
The NomadCrypto editorial team verifies every published fee across 59 crypto cards against issuer documentation, with the verification date shown on every figure.