Back to research

Compliance

Hong Kong Crypto Reporting Readiness: CARF and CRS Controls for 2027–2028

Hong Kong’s proposed crypto-asset reporting framework would impose registration, due-diligence, recordkeeping, and reporting obligations on reporting crypto-asset service providers with a Hong Kong nexus. Financial institutions should also prepare for expanded CRS data requirements and avoid treating the proposal as merely a future technology project.

By Nomadic Tax Institute research team · 5-8 min read · Published

The compliance direction

Hong Kong’s Inland Revenue (Amendment) (Crypto-Asset Reporting Framework and Amended Common Reporting Standard) Bill 2026 proposes to implement the OECD Crypto-Asset Reporting Framework, or CARF, and the latest amendments to the Common Reporting Standard. The Inland Revenue Department states that, subject to passage, CARF-related amendments would apply from January 1, 2027, while amended CRS provisions would apply from January 1, 2028.

The framework is designed to support automatic exchange of information on crypto-asset transactions. It is therefore broader than a conventional income-tax filing issue: the primary obligation for covered intermediaries is gathering, validating, retaining, and transmitting information about users, accounts, transactions, and tax residence.

Who should assess exposure

A crypto-asset service provider should examine whether it has a reporting nexus with Hong Kong. Potentially relevant businesses include exchanges, brokers, custodial wallet providers, and other businesses facilitating reportable crypto-asset transactions. The proposed framework contemplates registration in the CARF Portal, due diligence, annual return filing, and recordkeeping.

Traditional financial institutions should separately review the amended CRS scope. The proposal would bring additional digital financial products into the reporting perimeter, including central-bank digital currencies, specified electronic-money products, derivatives referencing relevant crypto-assets, and certain investment entities investing in relevant crypto-assets.

Operational consequences

A covered provider may need to collect tax-residence self-certifications, identify controlling persons, classify accounts, and distinguish reportable crypto-asset transactions from non-reportable activity. The amended CRS proposal also contemplates additional information such as whether valid self-certification has been obtained, whether an account is pre-existing or new, whether it is joint, and the type of financial account.

A group operating both a regulated exchange and a reporting financial institution should design a single data-governance model. The Bill addresses potential duplication by allowing relevant gross proceeds to be reported under CARF rather than again under amended CRS in specified circumstances.

Practical preparation steps

  • Map products and services against the proposed crypto-asset definitions.
  • Identify all Hong Kong offices, subsidiaries, servers, and management functions.
  • Test customer tax-residence and controlling-person data quality.
  • Build an audit trail for due-diligence decisions and account classifications.
  • Assign ownership for registration, annual reporting, exception handling, and record retention.

Because the legislation remains under scrutiny, businesses should label procedures as draft controls and update them after enactment. Early preparation is nevertheless valuable: data remediation and systems testing usually take longer than the legal analysis.

Sources

1www.ird.gov.hk
Official source for Hong Kong Crypto Reporting Readiness: CARF and CRS Controls for 2027–2028
2www.ird.gov.hk
Official source for Hong Kong Crypto Reporting Readiness: CARF and CRS Controls for 2027–2028
3www.ird.gov.hk
Official source for Hong Kong Crypto Reporting Readiness: CARF and CRS Controls for 2027–2028