Can HMRC See Your Crypto? UK Tracking, Reporting & Audit Risk

If you have been assuming HMRC cannot see your crypto activity, that assumption has been wrong for years. In 2026, it is dangerously wrong. This guide covers exactly what data HMRC can access, how CARF changes the enforcement landscape, and what to do if your past returns are not clean.

Does HMRC Know About Your Crypto?

Yes, and the data available to them has been expanding for years. HMRC issued its first guidance on cryptoasset taxation in 2014 and has been building its enforcement capability since. The tools and powers available to HMRC in 2026 are materially different to what existed even three years ago.

In 2026, the question is not whether HMRC can see your crypto. It is how much detail they now have, and how they will use it.

How HMRC Tracks Crypto Activity

HMRC uses several methods to identify crypto investors and access transaction data.

Exchange information notices

HMRC has the power to issue formal information notices requiring UK-regulated exchanges to hand over customer data. This power has been used against platforms serving UK customers. If you have traded on a regulated exchange, your account details and transaction history are within HMRC's reach under existing powers, regardless of CARF.

Blockchain analytics

HMRC has procured specialist blockchain analytics capability to trace on-chain activity. These tools can link wallet addresses to individuals, track flows across chains, and identify patterns that suggest undisclosed trading. If you have used a decentralised exchange or a non-custodial wallet, HMRC may still be able to connect that activity to you, particularly if funds moved through a regulated exchange at any point.

Self Assessment data matching

Starting with the 2024/25 tax year, HMRC introduced a dedicated cryptoasset section to the Self Assessment capital gains pages. Investors who disposed of cryptoassets are required to declare that activity. Failing to do so is a false declaration. Reporting figures that do not match what platforms submit under CARF creates a discrepancy HMRC can identify.

Why CARF was needed

The Common Reporting Standard (CRS), the existing international framework for automatic exchange of financial account data, does not require the reporting of cryptoasset transactions. This gap is precisely why CARF was developed. Prior to CARF, crypto activity largely fell outside the automated data-sharing infrastructure that already covers bank accounts and investment portfolios. CARF closes that gap.

What Is CARF and Why Does It Matter?

The Cryptoasset Reporting Framework (CARF) is an OECD-developed global standard for the automatic exchange of cryptoasset transaction data between tax authorities. The UK has implemented CARF with effect from 1 January 2026.

What CARF requires

From 1 January 2026, UK Reporting Cryptoasset Service Providers (RCASPs) — which includes most regulated exchanges and crypto platforms operating in the UK — are legally required to collect standardised information on all customers, including UK residents. They must report this data to HMRC.

The data collected and reported includes:

• Full customer identity details
• Transaction type and the type of cryptoasset involved
• Number of units and GBP value at the time of each transaction

When the first reports land

The first CARF reports, covering activity from the 2026 calendar year, are due to HMRC between 1 January and 31 May 2027. HMRC will then exchange relevant data with other participating tax authorities internationally.

What this means in practice

Once CARF data starts arriving, HMRC will hold structured, machine-readable records of your exchange activity for 2026 onwards. Where the figures in those reports do not align with what you have declared on your Self Assessment return, that discrepancy is likely to prompt HMRC review. This is the same mechanism driving audit risk in the US under Form 1099-DA — standardised third-party reporting that makes under-declaration visible at scale.

CARF is global

The UK is not implementing CARF in isolation. The EU, Australia, Canada, Singapore, and dozens of other jurisdictions are adopting the same framework on similar timelines. Where a foreign exchange operates in a participating jurisdiction, that country's tax authority will share the collected data with HMRC. Offshoring crypto activity to a foreign platform is unlikely to provide protection if that platform's jurisdiction participates in CARF.

What About Years Before 2026?

CARF covers 2026 activity onwards. It does not mean prior years are safe.

HMRC's existing powers — information notices, blockchain analytics, third-party data — have always applied to earlier years. And with the introduction of the dedicated crypto section on Self Assessment returns from 2024/25, HMRC now has a clear basis to identify investors who disposed of cryptoassets but did not declare them.

If your 2022, 2023, or 2024/25 returns contain errors or omissions, the arrival of CARF data in 2027 may prompt HMRC to look backwards. Prior years are not protected by the fact that CARF did not yet exist.

What Are the Penalties for Getting It Wrong?

HMRC's penalty regime for undeclared crypto gains depends on whether the failure was careless, deliberate, or involved concealment.

Unprompted disclosure (you come forward voluntarily)

• Careless error: 0% to 30% of the tax owed
• Deliberate but not concealed: 20% to 70%
• Deliberate and concealed: 30% to 100%

Prompted disclosure (HMRC contacts you first)

• Careless error: 15% to 30%
• Deliberate but not concealed: 35% to 70%
• Deliberate and concealed: 50% to 100%

Interest accrues on unpaid tax from the original due date. In serious cases, HMRC can pursue criminal prosecution, though this is reserved for the most egregious cases of deliberate evasion.

The gap between unprompted and prompted penalties is significant. Coming forward before HMRC contacts you materially reduces what you owe.

What Is the HMRC Cryptoasset Disclosure Service?

If you have unreported crypto gains from prior years, HMRC's Cryptoasset Disclosure Service (CDS) allows you to make a voluntary disclosure. This is the formal route for bringing your tax affairs up to date before HMRC initiates an enquiry.

Using the CDS can reduce penalties substantially compared to waiting for HMRC to contact you. However, the CDS is not always the most tax-efficient route for every situation. How you structure a disclosure — what years you include, how you present the figures, whether you argue for reduced penalties — can have a material impact on the outcome.

Seek professional advice before submitting a CDS disclosure. The structure of your disclosure — what years you include, how figures are presented, and how you characterise the nature of any error — can have a material impact on the penalty outcome. Getting this right the first time matters.

What Should You Do Now?

If your crypto tax position is clean and your records are complete, CARF is not a threat — it is confirmation that the approach you have already taken is the right one.

If you have gaps, errors, or years where you did not file, the right move is to act before HMRC acts first. That means:

1. Understanding the basics of how HMRC treats crypto - Our Crypto Tax UK Guide is a great starting point
2. Getting a full picture of your transaction history across all wallets and exchanges
3. Calculating your gains, losses, and income for each affected year using share pooling
4. Determining whether you need to amend prior returns or make a voluntary disclosure
5. Deciding how to approach HMRC — and in what form

CountDeFi works with UK investors at every stage of this process. We reconstruct transaction histories, calculate the correct tax position for each year, and work alongside tax advisers on disclosure strategies where needed. If you are not sure where you stand, a conversation costs nothing. Book a free call with our UK team.