CARF crypto tax reporting is coming, and 2027 is closer than most Pakistani traders think. The Crypto-Asset Reporting Framework (CARF) is a global standard, backed by the G20, that requires crypto exchanges and other service providers to collect your personal tax details and share them automatically with tax authorities, including those in your home country. If you trade on a foreign platform, your activity may no longer stay private.
What Is the CARF Crypto Tax Reporting Framework?
OECD’s Crypto-Asset Reporting Framework is best understood as the crypto version of the Common Reporting Standard (CRS), the same system that already makes banks share your account data across borders. Just as banks already report your account balances to foreign tax authorities, crypto exchanges will soon report your trading activity.
The Crypto-Asset Reporting Framework was developed in response to a mandate from the G20, in the light of the rapid growth of the crypto-asset market, and provides for the reporting of information on transactions in crypto-assets in a standardised manner, with a view to automatically exchanging such information with the relevant tax authorities.
Under the pre-CARF framework, individuals could conduct crypto transactions through platforms abroad with no automatic reporting obligation to their home tax authority. Tax obligations existed in law, but enforcement was constrained by the absence of data. CARF closes that gap.
The 2027 Deadline: What Is Actually Happening Right Now
The timeline is already moving. Domestic legislative frameworks should be in effect from the start of 2026, meaning Reporting Crypto-Asset Service Providers subject to the due diligence and reporting requirements in such jurisdictions should be collecting the information to exchange in 2026, for the information to be reported and exchanged in 2027.
As of March 2026, 76 Global Forum members have already announced their intention to commence exchanges under CARF, with most set to begin by 2027. This means that the automatic exchange of information on crypto-assets will combat tax evasion on a global level.
That list of 76 includes most of Europe, the UK, Japan, South Korea, Indonesia, Brazil, and many others. Jurisdictions that will exchange from 2028 include Australia, Canada, Hong Kong, Kenya, Nigeria, Singapore, Switzerland, Thailand, and United Arab Emirates, while the US is slated to exchange from 2029.
In short, the platforms most Pakistani traders use, EU-based, UK-based, or Singapore-based exchanges, are already collecting your data right now.
What Data Do Exchanges Collect and Share?
This is where many traders are caught off guard. CARF goes well beyond standard identity checks. CARF requires two categories: customer identification data (who the user is and where they are tax resident) and transaction data (what they did and what it was worth). A Reporting CASP must collect and verify each reportable user’s legal name, date of birth, home address, taxpayer identification number (TIN), and jurisdiction of tax residence. Tax residency determines which tax authority receives the information.
Reportable activity covers crypto-to-crypto trades, crypto-to-fiat conversions, transfers between accounts, and the customer identity information tied to each transaction. Even swapping one token for another is captured. Many retail investors still believe that swapping one token for another is invisible to tax authorities, from the 2026 reporting year, those swaps will be reported by the platform and exchanged between jurisdictions.
There is also an anti-avoidance twist. CARF includes aggressive anti-avoidance provisions: exchanges must collect your declared tax residence, and if you are tax resident in multiple countries, data goes to all of them. If your declared residence does not match your phone number, address, or IP indicators, the exchange must investigate.
Pakistan Is Not Yet a CARF Signatory, But That Does Not Mean You Are Safe
Pakistan has not yet committed to CARF as a signatory jurisdiction. However, this does not mean Pakistani traders are outside the net. The key point is that the exchange where you trade determines whether your data gets reported, not where you live. If you use a UK, EU, or Japanese exchange that is already collecting CARF data in 2026, that platform will report your activity to its local tax authority. That authority will then share the data with Pakistan’s tax authority, if and when Pakistan joins the exchange framework.
The exchange mechanism works only between participating jurisdictions. Users in non-participating countries are currently outside CARF’s automatic exchange scope. But that window can close fast. Pakistan is building the regulatory structure needed to plug in.
PVARA: Pakistan’s Own Compliance Net Grows
Pakistan moved quickly on crypto regulation. Pakistan’s parliament approved the Virtual Assets Act 2026, which gives the Pakistan Virtual Assets Regulatory Authority a permanent statutory foundation. PVARA had previously operated under a temporary presidential ordinance issued in July 2025. The new legislation gives PVARA full powers to license and supervise digital asset service providers.
PVARA now requires all crypto exchanges, wallet operators, token issuers, and custodians to get licensed before serving Pakistani users. The legislation introduces criminal penalties for unlicensed operations, including fines of up to PKR 50 million ($179,000) and imprisonment of up to five years.
PVARA opened license applications to global firms in September 2025. Applicants must hold regulatory recognition from a major jurisdiction such as the U.S., EU, or Singapore. This is critical, it means exchanges that get PVARA licenses are the same exchanges already under CARF obligations in their home countries. PVARA issued No Objection Certificates to Binance and HTX during December 2025. These approvals allow both companies to begin regulatory registration steps. The exchanges must register with Pakistan’s Financial Monitoring Unit for anti-money laundering compliance.
PVARA is required to align its AML/CFT supervisory framework with FATF standards. This positions Pakistan’s VASP regime as directly tracking FATF Recommendation 15 and Recommendation 16, critical for businesses operating across multiple FATF-member jurisdictions. As Pakistan aligns its rules with global standards, the gap between PVARA compliance and CARF compliance narrows.
For more on how Pakistan’s crypto regulations connect with global frameworks coming out of the United States, see our earlier explainer on the CLARITY Act 2026 and what it means for Pakistani traders.
What Should Pakistani Traders Do Before 2027?
- Check your tax residency status on every platform. Your declared tax residence on your exchange account determines which country gets your data. Make sure it is accurate and up to date.
- Collect your tax documents. Exchanges will ask for your National Tax Number (NTN) or equivalent Tax Identification Number (TIN). Have them ready. Refusing to provide one can trigger account restrictions.
- Review past crypto activity. Investors do not file CARF reports themselves, but they must provide valid self-certifications to their platforms and should expect their transaction history to be visible to their home tax authority. Unreported gains from past years carry more risk once data matching begins.
- Understand that self-custody is different. Self-custodied crypto in personal wallets is not directly reportable under CARF, but on-ramp and off-ramp transactions, moving crypto to and from exchanges, are.
- Follow PVARA updates closely. As licensed exchanges begin full operations in Pakistan, their reporting duties will bring Pakistani user data into a structured, auditable system aligned with global norms.
Frequently Asked Questions
Does CARF crypto tax reporting affect me if I use a foreign exchange from Pakistan?
Yes, it can. If the exchange you use is based in a CARF-participating country, such as the UK, EU, Japan, or South Korea, that platform is already collecting your data. Once Pakistan enters into an exchange agreement with those countries, your trading history can be shared with Pakistan’s Federal Board of Revenue (FBR). Even without a formal agreement, the data will be held and ready to share.
Is Pakistan a CARF signatory?
As of mid-2026, Pakistan has not formally signed onto CARF as a committed jurisdiction. However, the Virtual Assets Act 2026 and PVARA’s alignment with FATF standards show that Pakistan is building the legal plumbing needed to join this network. The question is when, not if.
What exactly will my crypto exchange report about me?
Under CARF, exchanges and other providers may be required to report: customer information including name, address, date of birth, jurisdiction of tax residence, and taxpayer identification number; and transaction data covering purchases, sales, exchanges, transfers, and certain payments made in crypto assets. This is detailed, transaction-level data, not just a year-end balance.
Will using a decentralised exchange (DEX) protect me from CARF reporting?
Fully decentralized, autonomous protocols with no identifiable operator are harder to capture, but the OECD has flagged this for future guidance. Using DEXes may reduce the data that reporting providers share, but it does not eliminate your tax obligations. Regulators are watching this space closely and rules may tighten.
