The First DAC8 Reporting Year Closes in December — What EU Crypto Holders Need to Do Now

Something Changed on 1 January 2026 and Almost Nobody Noticed

While the crypto industry spent 2026 absorbed in MiCA licensing, a second regulation quietly switched on and has been running in the background ever since.

DAC8 — formally Council Directive (EU) 2023/2226 — began applying across the EU on 1 January 2026. The first reporting year is 2026. It ends on 31 December.

Here’s what that means in plain terms. Every crypto platform serving EU customers has spent this year collecting your tax identification number, your identity details, and a record of your transactions. In 2027, they hand that to their national tax authority, which automatically exchanges it with the tax authority of whichever EU country you live in. The first EU-wide exchange of 2026 data is due by 30 September 2027.

This is not a new tax. Your obligations haven’t changed. What changed is visibility: for the first time, your tax authority will receive a detailed, automatic, cross-border record of your crypto activity without having to ask anyone for it.

The first reporting year closes on 31 December. This article explains what’s being reported, what isn’t, and the specific things worth doing before then.

What DAC8 Actually Is

DAC8 amends Directive 2011/16/EU, the EU’s core framework for administrative cooperation in tax matters, to incorporate the OECD’s Crypto-Asset Reporting Framework (CARF) into binding EU law.

CARF was the OECD’s response to a gap. The Common Reporting Standard, which already handles automatic exchange of bank account information, was designed around traditional financial accounts and simply didn’t reach crypto. CARF closes that gap globally; DAC8 is the EU’s implementation of it.

The scope is deliberately broad. DAC8 catches providers that carry out crypto-asset exchange transactions for users resident in an EU member state, where the provider is linked to the EU by MiCA status, nexus, or a branch. Non-EU operators are relieved of reporting only where their own jurisdiction has an effective information-exchange agreement with the member states concerned.

In other words: using an offshore exchange does not reliably put you outside this.

This is a global rollout, not a European one. As of the OECD’s commitment list published in June 2026, 76 jurisdictions have committed to a first exchange by 2027, 2028, or 2029. The UK is running in parallel, implementing CARF directly, with platforms required to file their first report between 1 January and 31 May 2027 covering calendar year 2026.

The Timeline

The gap between the end of the reporting year and the exchange is where people get complacent. Nothing visible happens in January. The consequences arrive eighteen months later, attached to a year you’ve stopped thinking about.

What Gets Reported

Reporting Crypto-Asset Service Providers (RCASPs) collect and report tax residency information alongside transaction records and account balances.

The item that surprises people most: crypto-to-crypto exchanges are reportable.

That matters because a large number of retail holders operate on an intuition that nothing is relevant until they cash out to euros. Under DAC8, swapping ETH for SOL is a reportable transaction. Whether it’s a taxable event depends on your national law — in most EU jurisdictions it is — but reportability and taxability are separate questions, and DAC8 settles the first one regardless of what you believe about the second.

Transfers of crypto-assets are also within scope.

What DAC8 Does Not Cover

Be clear about the boundary, because it’s narrower than the alarm suggests.

DAC8 reports what service providers see. Transactions that never touch a reporting provider — a transfer between two wallets you control, an on-chain swap on a decentralised exchange with no intermediary — aren’t captured by a provider report.

This is not a loophole and shouldn’t be read as one. Two reasons.

First, your tax obligations are entirely unaffected by whether a platform reported you. Non-reported income is still taxable income, and structuring activity to avoid reporting while avoiding tax is tax evasion, which is a criminal matter in every EU member state.

Second, the on-ramps and off-ramps are reporting providers. If funds enter via a licensed exchange and leave via one, the shape of what happened in between is reconstructable, and the gap is more conspicuous than the activity would have been.

The sensible posture is not avoidance. It’s accuracy.

The TIN Problem

One practical detail is already producing friction.

Reporting providers must collect a valid tax identification number from every user. Platforms that can’t obtain one face an obligation to chase it, and several have implemented account restrictions for users who don’t supply the required details — reported restriction windows of around 60 days have appeared in platform communications during 2026.

If you’ve received a request from an exchange for your TIN and ignored it as probable phishing, check it through your authenticated account dashboard. Some of those requests are genuine.

And some are not. This is a near-perfect phishing pretext: an official-sounding compliance request, a real regulation behind it, and a deadline. Never supply tax details through a link in an email. Log in directly, by typing the address yourself. Related: MiCA Created a Scam Wave: How Fake “Licensed” Exchanges Are Targeting EU Users

What to Do Before 31 December

Five things, in order of how much trouble each saves you.

1. Export your transaction history from every platform you used in 2026

Do this now, not in April 2027.

The reason is specific to this year. 2026 was the year MiCA forced a market consolidation: more than 1,700 unlicensed platforms had to stop serving EU customers, and only around 320 held valid authorisation at the July deadline. If one of the platforms you traded on in early 2026 has since exited the EU, wound down, or shut entirely, your transaction history may already be difficult or impossible to retrieve.

Export everything. CSV where available. Store it somewhere you’ll still have it in two years.

2. Reconstruct the year while you still can

Most people’s 2026 record is scattered across two or three exchanges, a self-custody wallet, maybe a DEX, possibly a platform that no longer exists.

Crypto tax software exists precisely for this: connecting exchanges and wallets, matching transfers so moving your own coins isn’t miscounted as a disposal, and producing a defensible calculation. Doing it manually across more than a handful of transactions is a weekend you will not enjoy and will probably get wrong.

Koinly and CoinTracking both handle multi-platform reconstruction and support EU jurisdictions. Pick one and run your 2026 data through it before the year ends, while every export still works.

Disclosure: TrueToCrypto earns a commission if you subscribe through these links, at no extra cost to you. We recommend them because reconstructing a fragmented year by hand is genuinely impractical, not because of the commission rate.

3. Check that your platform details are correct

Your name, address, and tax residency as held by each exchange will appear in the report sent to your tax authority. If you moved during 2026, or if an account still carries an old address, fix it now. Mismatches between what a platform reports and what your tax authority has on file generate queries, and queries generate work.

4. Reconcile what you reported last year

If your 2025 return said one thing and the 2026 data suggests a materially different picture of your holdings, that discrepancy is now visible in a way it wasn’t before.

Most EU jurisdictions have a voluntary disclosure mechanism that is substantially cheaper than being asked. If your past filings were incomplete, the period before the first automatic exchange is the sensible time to speak to an accountant about it.

5. Separate reportable activity from the rest

Not a tax-avoidance measure — an administrative one. Keeping long-term holdings in self-custody, with a clearly documented transfer trail to and from exchanges, makes reconstruction far easier than operating a single tangled wallet that does everything. Clean records are their own defence.

A Second-Order Risk Nobody Is Discussing

One consequence of all this deserves separate attention, and it isn’t a tax issue.

DAC8 compliance creates comprehensive databases linking real identities and home addresses to crypto holdings, held by more parties than ever before. That data is necessary and lawful. It is also an extraordinarily valuable target.

2026 has already demonstrated the risk concretely: a French tax official allegedly accessed and sold information about crypto investors to criminals, and a breach at a crypto tax-reporting company reportedly exposed data belonging to around 50,000 users. Chainalysis has linked France’s concentration of violent attacks on crypto holders to an alleged breach exposing tax records of high-net-worth holders.

Complying with DAC8 is not optional and this article is not suggesting otherwise. But complying while also assuming your identity-to-holdings link will eventually leak is the realistic posture, and it has practical implications: minimise the number of platforms holding your details, don’t discuss holdings publicly, and treat your home address as compromised information. Related: Your Data Is the Attack Surface: How Breaches, KYC and Tax Records Make You a Target

Frequently Asked Questions

Is DAC8 a new crypto tax?
No. It’s a reporting and enforcement framework. Your underlying tax obligations are set by your own country’s law and haven’t changed.

Does it apply to me if I only hold and never sell?
Holding isn’t a reportable transaction in itself, but account balances fall within the information collected. If you made no transactions in 2026, there’s little to reconstruct — but confirm your platform details are current.

What about non-EU exchanges?
DAC8 reaches providers with EU nexus, and non-EU operators are relieved only where their jurisdiction has an effective exchange agreement. With 76 jurisdictions committed to CARF exchange by 2029, the space outside it is shrinking.

What if I used a platform that has since shut down?
Export anything still accessible immediately. If the platform is gone, reconstruct from your bank records, your wallet addresses, and a block explorer — tax software can usually import from an address.

Do I need an accountant?
If your 2026 activity was more than a handful of trades on one exchange, or if you used DeFi, staking, or multiple jurisdictions: yes. This article is educational, not advice, and national rules differ substantially.

The Bottom Line

The reporting year ends on 31 December. Your tax authority will receive a detailed record of your 2026 activity by September 2027, whether or not your own records match it.

Three things before year-end: export everything from every platform, reconstruct the year with proper tooling while the exports still work, and fix any outdated personal details on your accounts.

None of this is urgent in the sense of a penalty landing next week. It’s urgent in the sense that the information you need is easiest to collect now and gets progressively harder — and in a year when hundreds of platforms left the European market, “harder” sometimes means “gone.”

Transparency: TrueToCrypto may earn affiliate commissions from links in articles, including the tax software referenced above. This article is educational and is not tax, legal, or financial advice. Crypto tax treatment varies substantially between EU member states. Consult a qualified tax professional in your own jurisdiction.

Contact: info@truetocrypto.com

DAC8 timelines verified against European Commission guidance, October 2026. National transposition dates and filing deadlines vary by member state — confirm with your own tax authority.