DAC8 Explained: EU Crypto Tax Reporting for Businesses

The eighth amendment to the EU Directive on Administrative Cooperation — commonly known as DAC8 — represents the most significant expansion of automatic tax information exchange to cover crypto-assets. Adopted as Council Directive (EU) 2023/2226 on 17 October 2023, DAC8 extends the existing framework of cross-border tax transparency to an asset class that has, until now, operated largely outside the reach of fiscal authorities.

For crypto-asset service providers (CASPs), exchanges, and custodial platforms operating in the EU, DAC8 introduces mandatory reporting obligations that will fundamentally reshape how client data is collected, validated, and transmitted to tax authorities. The first reporting deadline is 1 January 2026, meaning the compliance clock is already ticking.

What Is DAC8 and Why Does It Matter?

The Directive on Administrative Cooperation (DAC) is the EU's legal framework for automatic exchange of tax-relevant information between Member States. Previous iterations covered financial accounts (DAC2/CRS), tax rulings (DAC3), country-by-country reports (DAC4), beneficial ownership (DAC5), and reportable cross-border arrangements (DAC6).

DAC8 extends this framework to crypto-assets, aligning the EU with the OECD's Crypto-Asset Reporting Framework (CARF). The directive requires reporting crypto-asset service providers (RCASPs) to collect identifying information on their users and report crypto-asset transactions to national tax authorities, which then exchange this data automatically with other EU Member States — and, through CARF, with third countries.

The political rationale is straightforward: the European Commission estimated that crypto-asset market capitalisation reached €370 billion in January 2023 alone — roughly equivalent to Austria's entire economy — with minimal visibility for tax administrations. The Commission projects DAC8 will generate between €1 billion and €2.4 billion in additional annual tax revenue across Member States. DAC8 closes the information gap.

Who Must Report Under DAC8?

DAC8 introduces the concept of a Reporting Crypto-Asset Service Provider (RCASP). This includes any entity or individual that, as a business, provides services to exchange or transfer crypto-assets on behalf of customers. The definition deliberately mirrors MiCA's CASP definition but extends further to capture entities not yet licensed under MiCA.

Specifically, the following are in scope:

• Centralised exchanges — platforms facilitating the buying, selling, and trading of crypto-assets
• Custodial wallet providers — entities holding private keys on behalf of clients
• Brokers and dealers — intermediaries executing crypto-asset transactions
• Crypto ATM operators — where transactions exceed due diligence thresholds
• Certain DeFi front-ends — where the operator exercises sufficient control over the transaction process (final interpretation may vary by Member State)

The nexus rules follow a cascade: an RCASP must report in the Member State where it is tax resident, where it is incorporated, where it has its place of management, or where it has a permanent establishment. Non-EU providers serving EU customers may need to register in a single Member State under the directive's registration mechanism.

What Must Be Reported?

RCASPs must report two categories of data:

1. User Identification Data

For each Reportable User (natural persons and entities), the RCASP must collect and report:

• Full legal name (for entities: registered name)
• Address (residential or registered office)
• Date and place of birth (individuals only)
• Tax Identification Number (TIN) and jurisdiction of issuance
• For entities: legal entity identifier (LEI) where available
• Controlling persons of entities (beneficial owners)

2. Transaction Data

For each type of crypto-asset, the RCASP must report aggregate figures per calendar year:

• Crypto-to-fiat exchanges — total gross proceeds, number of transactions
• Crypto-to-crypto exchanges — fair market value in fiat at time of exchange, for both sides
• Transfers of crypto-assets — aggregate value of transfers to wallets not maintained by a reporting RCASP (i.e., to self-hosted wallets or non-reporting platforms)
• Reportable retail payment transactions — where crypto is used for goods/services above €50,000 in aggregate

Importantly, the reporting is on an aggregate basis per crypto-asset type, not on a per-transaction basis. However, the RCASP must retain underlying records for at least five years to support the aggregate figures.

DAC8 Timeline and Key Deadlines

The implementation timeline is structured in phases:

• 17 October 2023 — Council adopted Directive (EU) 2023/2226
• 31 December 2025 — Member States must transpose DAC8 into national law
• 1 January 2026 — Reporting obligations apply (first reporting period: calendar year 2026)
• 30 June 2027 — First reports due to national tax authorities (covering 2026)
• 30 September 2027 — First automatic exchange of information between Member States

Some Member States have signalled earlier implementation. Businesses should check national transposition timelines and not assume the full grace period will apply.

Interaction with MiCA, CARF, and CRS

DAC8 does not exist in isolation. It deliberately aligns with three parallel frameworks:

MiCA (Markets in Crypto-Assets Regulation)

MiCA governs the authorisation and conduct of CASPs; DAC8 governs their tax reporting obligations. The two use compatible definitions, but DAC8's scope is broader — it captures entities that may not require MiCA authorisation (e.g., certain non-custodial service providers). CASPs licensed under MiCA will find that much of the data already collected for AML/KYC purposes satisfies DAC8's due diligence requirements.

OECD CARF (Crypto-Asset Reporting Framework)

DAC8 is the EU's implementation of CARF. Over 48 jurisdictions have committed to implementing CARF by 2027. For businesses operating globally, compliance with DAC8 will substantially satisfy CARF obligations in other participating jurisdictions — but local variations exist.

CRS (Common Reporting Standard)

DAC8 amends the existing CRS framework (implemented in the EU via DAC2) to ensure that e-money products and central bank digital currencies (CBDCs) are also captured. This prevents regulatory arbitrage between traditional financial accounts and digital asset equivalents.

How BlockchainAnalysis Supports DAC8 Readiness

Meeting DAC8 obligations requires two capabilities: accurate transaction classification (distinguishing trades, transfers, payments, and staking rewards by crypto-asset type) and reliable cost-basis calculation for fair market value determination at the time of each exchange.

BlockchainAnalysis's Tax module provides automated transaction ingestion across 80+ blockchains, intelligent classification of transaction types (trades, DeFi interactions, staking, airdrops), and cost-basis methodologies compliant with EU Member State requirements. Paired with our entity-level risk data — covering 1B+ labelled addresses — the platform enables CASPs to reconcile on-chain activity with reported user data and flag discrepancies before they become regulatory findings.

For businesses that need to aggregate transaction data by crypto-asset type, calculate fair market values at point of exchange, and generate machine-readable reports for submission to national tax authorities, our Tax solutions provide the infrastructure to operationalise DAC8 compliance at scale.