UK Reporting Cryptoasset Service Providers Regulations 2025

The regulations create due diligence, reporting, registration, notification, record-keeping, and penalty rules for UK reporting cryptoasset service providers, commonly referred to as RCASPs. HMRC describes the regime as part of CARF, a framework designed to give tax authorities visibility over cryptoasset users and transactions. The regime is not a consumer-protection licensing framework and should be read separately from the UK financial-services regime for regulated cryptoasset activities.

HMRC guidance says UK-based RCASPs include businesses that transact cryptoassets on behalf of users or provide a means for users to transact cryptoassets, with examples including cryptoasset exchanges, brokers, and dealers. The regulations therefore sit at the intersection of cryptoasset market infrastructure and tax reporting, rather than investment regulation.

• Due diligence: UK RCASPs must collect and verify information about individual and entity users, including tax-residence information and, where relevant, controlling-person details.
• Transaction reporting: Providers must report relevant user and transaction information to HMRC for users tax resident in the UK or another CARF country.
• Registration and notices: HMRC guidance states that providers will need to register with the online service and tell users that their details will be reported.
• Record keeping and penalties: The regime includes penalties for failures involving due diligence, record keeping, late or inaccurate reports, user notifications, HMRC information notices, and registration.

HMRC’s collection guidance states that providers must collect information about all individual users, all entity users, and cryptoasset transactions for users in the UK and other CARF countries. For individuals, the collected data includes name, date of birth, home address, country of residence, and either UK tax identifiers or non-UK tax identification information. For entities, the data includes legal name, address, company or tax identifier information, and in some cases controlling-person information.

The first reporting window runs from 1 January 2027 to 31 May 2027 and covers the 2026 calendar year. HMRC guidance states that later annual reports are due by 31 May for the previous calendar year. As of the latest HMRC reporting guidance reviewed for this draft, the online reporting service was not yet live and reports must be submitted as XML files.

The regulation implements the OECD CARF, which was designed to support automatic exchange of tax-relevant information on cryptoassets between tax authorities. The UK’s 2024 consultation response said the UK intended CARF reporting, including domestic reporting on UK customers, to apply from 1 January 2026, with first reports due by 31 May 2027. Finance Act 2026 later amended regulation 6 of S.I. 2025/744 so the duty to report also applies to information relating to cryptoasset users resident in the United Kingdom, or users with UK-resident controlling persons. This profile therefore records S.I. 2025/744 as the main regulation and treats Finance Act 2026 as a related amendment.

As of 6 June 2026, the regulation is in force and HMRC guidance has been updated for the 2026 reporting period. Editors should review this profile again before 31 January 2027, when providers are expected to register and notify users, and before 31 May 2027, when the first CARF reports are due. This profile is a legal-reference summary only and is not legal, tax, investment, or compliance advice.