DAC8 Crypto Regulation: What EU Traders Need to Know in 2026

On January 1, 2026, the EU's DAC8 crypto regulation closed the last major gap in European tax enforcement. For years, crypto's cross-border, pseudonymous nature made it nearly impossible for tax authorities to verify what traders owned and traded. DAC8 ends that.

Every crypto exchange operating in the EU — or serving EU residents from anywhere in the world — must now collect and report your transaction data to national tax authorities. Automatically. Annually. Without exception.

This isn't voluntary. It's EU law, formally adopted October 17, 2023, with full application from January 1, 2026. Your transactions will be reported. The question is whether your tax filings will match what your exchange tells the government.

What Is DAC8?

DAC8 stands for the Eighth Directive on Administrative Cooperation — an amendment to Directive 2011/16/EU, which governs tax information sharing between EU member states. Earlier versions of DAC covered bank accounts, financial instruments, and digital platform income. DAC8 extends automatic exchange of information (AEOI) to crypto-assets for the first time.

The European Commission proposed the dac8 directive in December 2022, recognizing that crypto markets had created a growing tax gap — billions in unreported capital gains and trading income across the bloc. The Council formally adopted it on October 17, 2023. Full text is available at the EU Commission's DAC8 page.

In practical terms, DAC8 requires every qualifying crypto platform to do three things:

1. Identify all EU-resident users
2. Collect detailed transaction data throughout the year
3. Report that data to the relevant national tax authority annually

The tax authority then automatically shares it with the authority in the user's home country. Your home tax office knows what you traded, when, and for how much — whether or not you declare it.

That's the shift. Before DAC8, eu crypto regulation largely relied on self-reporting. Now tax authorities have independent data to verify against your filed return.

Who Does DAC8 Affect?

Two groups: the platforms that facilitate crypto trading, and the traders who use them.

Crypto-Asset Service Providers (CASPs)

Primary compliance responsibility falls on Reporting Crypto-Asset Service Providers (RCASPs). That includes:

• Centralized exchanges (Binance, Coinbase, Kraken, Bitstamp, Bitpanda)
• Crypto brokers and dealers
• Operators of trading platforms
• NFT marketplaces (when NFTs are traded for profit)
• E-money issuers dealing in crypto products

The geographic scope is deliberately broad. You don't need to be incorporated in the EU to fall under dac8 reporting requirements. Any platform that offers services to EU-resident users must either hold MiCA authorization (which triggers automatic DAC8 compliance) or register with a competent authority in at least one EU member state.

The European Parliament's briefing on DAC8 estimates that tens of thousands of crypto service providers globally fall within scope — including many US and Asian exchanges with significant EU user bases.

Individual Crypto Traders and Investors

If you hold and trade crypto in the EU, you're affected — even if you're using a non-EU exchange. The platform reports about you. You remain responsible for filing accurate tax returns.

You are affected by DAC8 if:

• You are tax resident in any EU member state
• You hold accounts on any exchange serving EU users
• You made transactions in 2026 or later (buys, sells, swaps, transfers)

You are not directly affected if:

• You're a non-EU resident using non-EU exchanges exclusively
• You only hold crypto without making any transactions (though your balance may still be shared)
• You only use fully decentralized protocols with no custodial intermediary — but read the DeFi section below before getting comfortable with this

What Information Must Be Reported Under DAC8?

Every RCASP must collect and report the following for each EU-resident user.

User identification data:

• Full legal name, date of birth, address
• Country of tax residence
• Taxpayer Identification Number (TIN) — required for each jurisdiction of residence
• VAT number for entities

Transaction data:

• Aggregate gross proceeds from crypto sales and exchanges
• Aggregate fair market value of transfers to non-custodial wallets
• Type of crypto-asset in each transaction category
• Number of units transferred

There is no minimum transaction threshold. A €5 Dogecoin trade gets logged the same as a €500,000 Bitcoin sale. Every taxable event — and many non-taxable transfers — is in scope.

Assets covered under DAC8:

The asset definitions follow MiCA — the EU's crypto licensing framework. If an asset qualifies as a crypto-asset under MiCA, it falls within DAC8 scope. If you need to import exchange data from multiple platforms to get a complete picture, do it before tax season — not after the first data exchange happens in 2027.

CASP Obligations Under DAC8

For crypto platforms, DAC8 is the biggest compliance undertaking in the industry's history. The casp reporting obligations are operational, legal, and technical all at once.

Registration. Any RCASP not already authorized under MiCA must register with a competent authority in one EU member state by January 1, 2026. One registration covers all 27 member states. Non-EU exchanges that fail to register face a 60-day grace period — then must block EU-resident users from accessing accounts.

Data collection. Platforms must obtain a valid TIN and self-certification from every EU-resident user. If a user doesn't provide this within 60 days of a request, the platform must block the account. (This caused major disruption at exchanges throughout late 2025, with millions of customers receiving urgent verification emails.)

Annual reporting. Data for each calendar year must be filed with the competent authority within 9 months of year-end. So 2026 data is due by September 30, 2027. That authority then shares it with the member state where each user is resident.

GDPR notification. Platforms must inform users that their data is being collected and shared under DAC8 — an obligation that sits on top of existing GDPR requirements.

As the RSM analysis of DAC8 and CARF details, the operational burden is real: new data workflows, system upgrades, privacy procedures, customer communication programs, and staff training across compliance, legal, and customer service. Major exchanges — Binance, Coinbase, Kraken, Bitstamp — have all confirmed dac8 compliance programs. Your 2026 transaction data is being collected right now.

DAC8 vs. CARF: What's the Difference?

DAC8 is the EU's implementation of a global standard. But the two frameworks are not the same thing.

The OECD's Crypto-Asset Reporting Framework (CARF) was adopted in July 2023 — months before DAC8. The EU designed DAC8 to be CARF-compatible, so platforms complying with DAC8 largely satisfy carf crypto obligations for EU operations simultaneously.

For EU traders, DAC8 is what matters legally. CARF matters for the bigger picture: as a crypto asset reporting framework involving 58 participating jurisdictions — including the US, UK, Canada, Australia, and Japan — it means eu crypto tax transparency is now a coordinated global effort. Dac8 2026 marks the first year this system goes live across all 27 member states. The era of moving assets offshore to avoid domestic reporting is effectively over.

Penalties for Non-Compliance

DAC8 sets minimum penalty standards. Each member state sets exact amounts during transposition. No EU country went below the directive's €20,000 floor for basic violations — and some went considerably higher.

CASP Penalties by Country

The upper range applies to systemic failures — not reporting at all, or submitting materially false data. The lower range covers procedural issues like missed deadlines. Platforms also face the customer-blocking mechanism: the EU can force exchanges to restrict EU-resident accounts until dac8 compliance is achieved.

Individual Trader Penalties

For individual traders, the direct dac8 penalties don't apply to you. What does apply — and this is worse — is what happens when tax authorities receive your exchange data and compare it against your tax return.

• Germany: Unreported gains trigger income tax reassessment plus 1.8% annual interest, with potential criminal charges for deliberate evasion
• Italy: Penalties of 90%–180% of the undeclared tax amount, plus back-taxes at 26% on gains over €2,000
• Netherlands: Box 3 wealth tax reassessment plus penalties for failure to disclose
• France: 40% surcharge plus interest for deliberately undeclared income
• Spain: Penalties of 100%–150% of unpaid tax for intentional concealment

Bottom line: the penalties for being caught under-declaring are always higher than the tax you were trying to avoid. And as of 2027, getting caught is no longer a question of luck.

Implementation Status by EU Country

All 27 EU member states transposed DAC8 into national law by the December 31, 2025 deadline. As of January 1, 2026, the directive is fully in force across the bloc. But implementation isn't uniform — each country appoints its own competent authority and sets local penalty levels.

Germany — Active. The BZSt is the competent authority. Germany's one-year holding period exemption (tax-free gains after 12 months) remains in place — but dac8 reporting applies regardless of whether a gain is taxable. See our Germany crypto tax guide.

France — Active. DGFiP administers the exchange. French traders face a flat 30% PFU (prélèvement forfaitaire unique) on crypto gains. DAC8 doesn't change the rate — it just makes non-disclosure effectively impossible.

Italy — Active. Agenzia delle Entrate is the competent authority. Italy's 26% capital gains tax applies on profits above €2,000 annually. Penalties for non-disclosure are among the strictest in the EU. See our Italy crypto tax guide.

Netherlands — Active. Belastingdienst has set the EU's highest penalty ceiling at €900,000. Dutch holdings are taxed under Box 3 (wealth tax) at a deemed return rate — a system that creates its own compliance complexity alongside DAC8.

Spain — Active. AEAT administers the exchange. Spain had already required model 721 overseas crypto declarations and model 172/173 domestic reporting — DAC8 adds automatic inbound exchange from other member states.

Austria — Active. The BMF (Bundesministerium für Finanzen) administers. Austria's flat 27.5% crypto tax applies to gains.

Switzerland (non-EU, CARF) — Switzerland is outside DAC8's scope as EU law. But as a CARF early adopter, Swiss exchanges will participate in the global exchange beginning in 2027. EU residents using Swiss exchanges won't be able to rely on that gap much longer.

What DAC8 Means for You as a Crypto Trader

Let's step back from the regulatory detail. Here's what actually changes.

Your transactions will be reported. Binance, Coinbase, Kraken, Bitstamp, Bitpanda — any regulated exchange with EU users is collecting and reporting your 2026 data. This is not speculative. It's the mechanism DAC8 was built to create.

You still need to file your own return. DAC8 is exchange-to-government reporting. It doesn't replace your tax filing obligation. Tax authorities receive raw transaction data; you still calculate your gains and losses, apply your country's rates and exemptions, and file. If there's a mismatch between what the exchange reported and what you filed, expect scrutiny.

DeFi and self-custody buy time, not immunity. Transactions on fully decentralized exchanges and non-custodial wallets are currently outside DAC8's direct scope. But every time you convert DeFi gains to fiat or transfer to a regulated exchange, that on- or off-ramp triggers reporting. Your DeFi tax obligations and staking rewards remain taxable under national law regardless.

The window for voluntary correction is narrowing. DAC8 covers 2026 onward — but the attention it brings to crypto taxation is prompting tax authorities to pursue prior-year cases using other data sources. Unreported gains from 2021–2025 don't disappear because DAC8 only starts in 2026. Consult a tax professional about voluntary disclosure if you have significant gaps.

Choosing the right cost basis method — FIFO, LIFO, HIFO — has always mattered for your tax liability. Under DAC8, it matters even more because your method must produce results consistent with what exchanges will report.

How to Prepare for DAC8 in 2026

The directive is in force. Here's what to do now.

Step 1: Verify your TIN is on file with every exchange you use. Log into each exchange and check account settings. Most platforms issued TIN verification requests in late 2025. If you haven't responded, your account may already be in limited-access mode. Submit your TIN immediately.

Step 2: Complete KYC on every platform. DAC8 requires CRS-level identity verification. Partial KYC needs upgrading. Don't wait to be blocked — complete it proactively.

Step 3: Consolidate your transaction history. If you trade across multiple exchanges, wallets, and DeFi protocols, you need one complete picture of your activity. Connect your exchanges to a portfolio tool that handles import of exchange data across all platforms. Do this now, not at tax season.

Step 4: Know your country's rules. DAC8 reports transactions. Your country decides what's taxable. Germany's one-year exemption, Italy's €2,000 threshold, France's flat 30% — these rules differ significantly. A crypto tax calculator that applies country-specific rules will save you from manual errors.

Step 5: File accurately. Your 2026 return will be checked against DAC8 data. There's no longer any ambiguity about whether you'll be caught under-reporting. The penalties for discrepancies are far worse than the taxes themselves.

How CoinTracking Helps With DAC8 Compliance

CoinTracking has been the leading crypto portfolio tracker for EU traders since 2012. Over 1.6 million users rely on it to document exactly the kind of multi-exchange activity that DAC8 now requires you to track accurately.

DAC8 creates a clear new standard: your declared transactions must match what your exchanges report to tax authorities. Using dedicated crypto tax software is no longer optional — it's the practical requirement.

Here's what CoinTracking does for DAC8 compliance:

• Imports from 300+ exchanges — Binance, Coinbase, Kraken, Bitstamp, Bitpanda, Bitfinex, and hundreds more. Connect your exchanges and your full transaction history is imported automatically.
• Country-specific tax reports for all 27 EU member states — Germany's FIFO rules, Italy's 26% CGT threshold, France's PFU regime. CoinTracking applies the right calculation for your country.
• DeFi and staking support — DeFi transactions and staking rewards across major protocols are tracked alongside your exchange data.
• All cost basis methods — FIFO, LIFO, HIFO and others. Pick the method that minimizes your liability under your country's rules.

The alternative to crypto tax software is manually reconciling dozens of CSV exports and hoping you don't miss anything the exchange will flag. Under DAC8, that risk is no longer acceptable.

Start Preparing for DAC8 Free Import all your exchange data, apply your country's tax rules, and generate a DAC8-ready crypto tax report. Get Started Free →