Crypto reporting from 2027: what CARF means for platforms in the UAE, Singapore and Hong Kong

If you hold crypto on a platform in Dubai, Singapore or Hong Kong, expect a new question in the coming weeks: where are you resident for tax, and what is your tax number? From 1 January 2027, platforms in all three places apply the OECD's Crypto-Asset Reporting Framework, CARF for short. They collect that information from every customer, report it to their local tax authority, and the authority passes it on to the customer's country of residence from 2028.

For bank accounts this machinery has run for years under the Common Reporting Standard. CARF copies the template for crypto platforms, and in 2026 it turned into dates and laws in exactly the places many crypto holders chose because they seemed far away.

Who joins, and when

The OECD's Global Forum keeps the official list of commitments. Its latest version, updated on 14 September 2026, sorts jurisdictions into three groups:

• First exchanges by 2027 (46 jurisdictions): among them the United Kingdom, Norway, Sweden, Denmark, Finland, Japan, the Cayman Islands, Jersey, Liechtenstein and every EU member state except Cyprus.
• First exchanges by 2028 (27 jurisdictions): among them the United Arab Emirates, Singapore, Hong Kong, Switzerland, Bahrain, Cyprus, Australia and Canada.
• First exchanges by 2029 (4 jurisdictions): Argentina, Azerbaijan, Mexico and the United States.

The Global Forum names only four relevant jurisdictions that have not committed yet, and one of them is already in the process. The rhythm is the same as for bank accounts: what is collected in one calendar year is exchanged in the next. That is why the 2028 group matters now. For the UAE, Singapore and Hong Kong, the collecting starts on 1 January 2027.

At home, the rules already apply

For readers in the UK and the Nordics, the 2027 date is the second wave, not the first.

United Kingdom. UK platforms have worked under the Reporting Cryptoasset Service Providers (Due Diligence and Reporting Requirements) Regulations 2025 since 1 January 2026. According to HMRC's guidance, they report users who are tax resident in the UK or in another CARF country, and the first report, covering calendar year 2026, is due by 31 May 2027. A British customer of a British platform is reported to HMRC as well.

EU and the Nordic member states. The EU implements the same standard through DAC8, Council Directive (EU) 2023/2226, which applies from 1 January 2026. Providers collect data on all EU-resident users, including residents of their own member state, and the first exchanges for 2026 take place by 30 September 2027. Norway is outside the EU but sits in the OECD's 2027 group.

What a platform will ask you

The core of CARF is the self-certification: a signed or otherwise confirmed statement of every jurisdiction where you are resident for tax, with the tax identification number for each, plus your name, residence address and date of birth. Singapore's regulations reproduce the OECD text in full and show how it works in practice:

• New customers give it when the relationship is established.
• Existing customers give it within 12 months after the rules take effect.
• The platform must confirm that it is reasonable, checked against what it already holds from its anti-money laundering file.

The answer is not given once and forgotten. If a change of circumstances gives the platform reason to know that a self-certification is wrong or unreliable, it may no longer rely on it and must obtain a new one, or a reasonable explanation with supporting documents. Someone who moves to Dubai, updates the address and keeps the old tax residence on file is exactly the case this rule targets. Update the self-certification together with the address, not when the platform chases you.

Singapore goes one step further: platforms must establish all of a customer's tax residences, even where that country is not one Singapore reports to. The question is asked of everyone.

What gets reported

For each customer resident in a reportable jurisdiction, the platform reports:

• name, address, jurisdiction or jurisdictions of residence, tax numbers and date of birth (place of birth only where domestic law already requires it);
• for each type of crypto-asset, the aggregate amounts, units and number of transactions for purchases and sales against fiat currency;
• the aggregate fair market value, units and number of transactions for exchanges between crypto-assets;
• retail payments in crypto for goods or services worth more than USD 50,000;
• other transfers into and out of the account, broken down by type where the platform knows it;
• transfers to wallet addresses not known to belong to a crypto service provider or a financial institution, in aggregate value and units.

The last line is the one that surprises people. Moving coins from a platform to your own wallet does not take them out of view: the withdrawal itself is reported. Excluded are central bank digital currencies, regulated electronic money products tied to a single currency, and crypto-assets the platform has found cannot be used for payment or investment.

The UAE: dates set by the Ministry of Finance

The UAE has moved in clear steps. It signed the CARF agreement between tax authorities on 21 July 2025, consulted on domestic implementation from 15 September to 8 November 2025, and ratified the agreement by Federal Decree No. 60 of 2026 on 4 May 2026. The Ministry of Finance's readiness circular sets out the timetable:

• By 31 December 2026: platforms complete their operational preparations.
• 1 January 2027: target effective date of the Cabinet Decision and Ministerial Decisions; new customers self-certify when the relationship starts.
• During 2027: platforms register on the Ministry's reporting system (the deadline is still to be confirmed).
• By 31 December 2027: a valid self-certification for every existing customer.
• 30 June 2028: first annual report, or nil return, for 2027.
• 1 September 2028: first automatic exchange of information.

The implementing decisions are still to come, which is why the Ministry calls 1 January 2027 a target date. The direction is fixed by a ratified treaty. If you bank or hold crypto in Dubai, plan with these dates.

Singapore: already law

Singapore is furthest along. Its Crypto-Asset Reporting Framework Regulations 2026 were published in the Government Gazette on 11 August 2026 as S 551/2026 and come into operation on 1 January 2027.

A platform falls under them if it is tax resident in Singapore, incorporated there, managed from there, has a regular place of business there, or acts through a Singapore branch. It files a return for calendar year 2027 and every following year by 31 May of the next year; platforms in scope during 2027 register by 31 March 2028. Existing customers must have a valid self-certification by 31 December 2027, and from 1 January 2028 a platform may not carry out crypto transactions for an existing customer who still has none. According to IRAS, Singapore intends to begin exchanges from September 2028.

The same date brings Singapore's amended CRS for bank and investment accounts, covered in Singapore banking from 2027. A customer with both a bank account and a crypto account in Singapore will give two self-certifications from 2027, and they had better match.

Hong Kong: the bill passed on 4 November

Hong Kong's Inland Revenue (Amendment) (Crypto-Asset Reporting Framework and Amended Common Reporting Standard) Bill 2026 was gazetted on 22 May 2026 and introduced into the Legislative Council on 3 June 2026. The Council passed it on 4 November 2026, as the Inland Revenue Department announced the same day.

According to the IRD, CARF applies from 1 January 2027 and the first crypto exchanges follow in 2028. Platforms register by 31 January of the year after they first fall within the rules, new customers self-certify at onboarding and existing customers within 12 months. The amended CRS for bank accounts follows a year later than in Singapore: it takes effect in 2028, with exchanges from 2029. Our Hong Kong destination page covers the account side.

What this means for you

Answer accurately. The self-certification is a statement you sign. A residence you cannot support with facts is worse than useless: the platform tests it, and the receiving tax authority can test it again.

Give the same answer everywhere. Every platform will ask, and every bank already asks under the CRS. If you hold accounts in several places, the answers should be identical. The same applies to the address and tax number questions nomads struggle with.

Self-custody is not invisible. The withdrawal from the platform is reported in aggregate. What happens on-chain afterwards is outside CARF, but the exit is not.

A report is not a tax bill. CARF moves information. Whether anything is owed depends on the tax law of the country receiving it. A genuine resident of a country that does not tax the gains will see little change. Someone who lives in Dubai on paper while remaining resident in the UK or a Nordic country under that country's own tests will find the information arriving where it matters.

Geography buys only time. The United States joins in 2029, and the handful of uncommitted jurisdictions is small. Moving a portfolio to stay ahead of CARF is a plan with a short shelf life. Holding accounts and crypto abroad remains legal, your income and gains stay taxable at home, and we never help anyone hide anything. Declaring your offshore account explains the home side.

Frequently asked questions

CARF does for crypto platforms what the CRS did for bank accounts, and the main Gulf and Asian hubs join on 1 January 2027. For anyone whose residence position is sound, it is paperwork. For anyone whose position relies on nobody comparing notes, that is the date it stops working.