There is a file with your name on it sitting on a server in Bengaluru right now, and you did not create it.
Your crypto exchange did. Since April 2026, every Indian platform you trade on has been sending your transaction history to the Income Tax Department automatically. In 2027, that pipeline goes international. Foreign exchanges will start reporting Indian users back to India under CARF, the OECD’s Crypto-Asset Reporting Framework.
I want to be clear about the timing, because most articles on this get it wrong. CARF is not a future threat. The domestic half of it is already running. 2027 just adds the offshore data.
Key takeaways
- Indian exchanges have been reporting your trades to the tax department since April 1, 2026.
- CARF international data exchange begins April 1, 2027, covering foreign platforms.
- More than 50 jurisdictions signed on, so Binance, Coinbase, and Kraken data flows back to India.
- Exchanges face Rs 200 per day for late reporting and Rs 50,000 for wrong data.
- Undisclosed foreign crypto can trigger a flat Rs 10 lakh penalty per assessment year.
- The 30% tax and 1% TDS do not go away. CARF sits on top of them.
What is CARF? The OECD Crypto-Asset Reporting Framework explained
CARF is a global standard that forces crypto exchanges and wallet providers to collect your tax residency and identity details, hand them to their local tax authority, and have that authority automatically pass the data to your home country’s tax office once a year.

The OECD published it in October 2022 under a G20 mandate. The logic was: Banks had been reporting cross-border account data to each other since 2017 under the Common Reporting Standard. Crypto sat outside that system entirely, which made offshore exchanges a convenient blind spot.
Under CARF, the reporting entity is called a Reporting Crypto-Asset Service Provider, or RCASP. That covers centralized exchanges, brokers, dealers, and most wallet providers that facilitate transactions as a business. Fully decentralized protocols mostly fall outside the definition, at least as of now.
What gets collected:
- Your name, address, date of birth, and tax residence.
- Your Tax Identification Number, which for Indian residents means your PAN.
- Aggregate values of crypto-to-fiat trades, crypto-to-crypto swaps, and transfers.
- Identifying information on transfers to and from unhosted wallets.
So if you move funds from a foreign exchange to a self-custody wallet, the exchange still records where it went. Doesn’t matter how anonymous crypto is.
CARF vs CRS: how the two OECD frameworks compare
CRS tracks what you hold. CARF tracks what you do.
| CRS | CARF | |
| Covers | Bank accounts, custodial and depository financial accounts | Crypto-assets, stablecoins, tokenized securities, most NFTs |
| Reporting entities | Banks, insurers, funds | Exchanges, brokers, wallet providers (RCASPs) |
| Data reported | Year-end balances and gross income | Transaction-level aggregates and transfer values |
| India start | 2017 | 2027 |
That difference in data type is the part I find most underrated. A balance snapshot tells the tax office what you owned in December. Transaction data tells them everything you did in between.
Why India is adopting CARF for tax transparency
Domestic exchanges already deduct 1% TDS on every sale, which builds a clean audit trail. Foreign platforms deduct nothing and report nothing. For a few years, that created an obvious arbitrage: trade on an Indian exchange and leave a permanent record, or trade on Binance and leave none. Plenty of people understandably picked the second option, and the tax department knew it.

The other factor is credibility. India held the G20 presidency when the New Delhi Leaders’ Declaration in September 2023 backed CARF adoption, and more than 50 jurisdictions have since committed to 2027 exchanges. Having pushed for the framework at the G20 table, sitting out would have been awkward.
There is a third reason that gets less attention. India’s existing anti-money-laundering setup under the FIU works well domestically but has limited reach across borders. CARF gives the tax department a standardized, automatic pipeline rather than a case-by-case request to a foreign authority that may take years to answer.
To be clear: joining CARF is a surveillance decision, not an endorsement. India adopting global crypto reporting standards does not mean India has warmed up to crypto. Visibility and approval are separate things.
India’s crypto tax and reporting rules under CARF
Two section numbers float around in coverage of this, and the confusion is worth clearing up because it makes people think there are two different laws.
There is one obligation. The Finance Act 2025 inserted Section 285BAA into the Income-tax Act, 1961. The Income-tax Act, 2025 then replaced the 1961 Act from April 1, 2026, and the same provision was renumbered as Section 509. Older articles cite 285BAA. Newer ones cite 509. Same rule.

What reporting entities must furnish:
- Identity and KYC details of every user, including PAN.
- Transaction-level data covering trades, swaps, and transfers.
- Fair market values and counterparty information where available.
- Due diligence confirming each user’s declared tax residence.
The penalty framework tightened on April 1, 2026. Under Section 446 of the Income-tax Act, 2025, reporting entities now face a daily fine for non-filing and a flat fine for uncorrected errors.
| Failure | Penalty | Applies to |
| Failure to furnish the statement | Rs 200 per day of default | Exchanges and reporting entities |
| Inaccurate information, not corrected | Rs 50,000 | Exchanges and reporting entities |
| Failure to meet due diligence rules | Rs 50,000 | Exchanges and reporting entities |
These land on the platform by the way, not on you. But the practical effect reaches you anyway. An exchange staring down a per-day penalty has zero incentive to be relaxed about your KYC file. Expect more verification requests, more residency confirmations, and less tolerance for incomplete profiles.
The revenue trend explains the urgency. India collected almost Rs ~270 crore in crypto taxes in FY 2022-23 and Rs ~440 crore in FY 2023-24. Those are small numbers for a market this size, and the gap between reported and actual activity is exactly what CARF is built to close.
What CARF means for crypto investors in India
Right now, if you trade on a foreign exchange, the Income Tax Department can only see what you tell them. From April 2027, that exchange’s home jurisdiction collects your data and sends it to India automatically, once a year, in a standardized format.
Here is the before and after in practical terms:
| Before CARF | After April 2027 | |
| Domestic exchange trades | Reported since April 2026 | Unchanged |
| Foreign exchange holdings | Visible only if you declare them | Reported to India automatically |
| Transfers to self-custody | Largely invisible | Identifying data collected by the RCASP |
| Cross-border enquiry | Slow, case by case | Annual bulk exchange |
The self-custody point deserves a disclaimer, because it gets overstated in both directions. CARF does not track your wallet on-chain. Nobody is indexing your addresses. What happens is that the exchange records identifying information when funds leave or arrive from an unhosted wallet. In other words – move 2 ETH from Coinbase to a MetaMask address and the departure is logged with your name attached. What that wallet does afterward is not part of the report. But the government can look at it if it wanted to.
So the honest summary: CARF closes the on-ramp and off-ramp, not the middle. That is still most of what matters, because almost everyone eventually converts back to rupees.
One more thing that catches people off guard. CARF is reciprocal. India receives data on Indian residents abroad, and it sends data on foreign residents using Indian platforms. If you are a non-resident trading on an Indian exchange, your details go the other way.
How CARF fits into India’s wider crypto regulations
Again, CARF is a reporting layer bolted onto rules that already exist. None of the following changes in 2027:
- 30% flat tax on gains from Virtual Digital Assets, plus 4% cess, so an effective 31.2%
- No deductions except cost of acquisition. Trading fees, gas, and software costs are not deductible
- No loss set-off. A Bitcoin loss cannot reduce tax on an Ethereum gain, and losses do not carry forward
- 1% TDS on transfers, credited back when you file
- PMLA obligations requiring exchanges to run full KYC and AML checks
- Schedule VDA in your ITR, where every transaction gets reported
The interesting open question is TDS. The 1% deduction exists largely to create a transaction trail, since that was the only visibility mechanism available in 2022. Once CARF delivers richer data automatically, the industry argument is that TDS has done its job and should go. Industry bodies have pushed for exactly this.
I wouldn’t hold my breath. The prudent regulatory move is to keep TDS until CARF has proven it delivers equivalent visibility, and proving that takes at least a couple of reporting cycles. Assume TDS survives through 2028 at minimum.
CARF timeline: key dates for Indian crypto investors
| Date | What happens |
| October 2022 | OECD publishes the CARF standard |
| November 2023 | 54 jurisdictions sign the joint statement committing to 2027 exchanges |
| 2025 | India legislates via the Finance Act 2025, inserting Section 285BAA |
| April 1, 2026 | Domestic reporting begins. Indian exchanges start furnishing user data. Section 509 and the Section 446 penalties take effect |
| 2026 | India signs the CARF Multilateral Competent Authority Agreement |
| Through 2026 | RCASPs run due diligence and collect residency and TIN data on all users |
| April 1, 2027 | First international data exchanges begin |
| 2027 onwards | Annual exchanges covering the previous calendar year |
How you as a crypto investor can prepare for CARF before 2027
None of this is complicated. It is just tedious, and tedium is why people skip it.
- File Schedule VDA properly: Transaction-wise, not a summary line. Use ITR-2 for capital gains treatment or ITR-3 if you trade as a business.
- Reconcile against Form 26AS and AIS: Match every TDS entry under Section 194S with a transaction you have declared. Mismatches trigger defective return notices automatically now.
- Check whether Schedule FA applies to you: Crypto held on foreign platforms may need disclosure as a foreign asset. The treatment is still being clarified by the CBDT, and the safe move is to disclose.
- Export your full history now: Exchanges close, get acquired, or restrict access. WazirX users learned this the expensive way. Pull CSVs from every platform you have ever used, including dead ones.
- Track cost basis per asset: Since losses cannot offset across assets, you need clean per-asset acquisition records, not a portfolio-level number.
- Talk to a CA who actually handles VDAs: Generalist tax practitioners routinely get the no-set-off rule and the TDS credit mechanics wrong.
If you’ve only ever bought and held on a single Indian exchange, never traded, and never touched a foreign platform, CARF is meaningless for you and you can ignore it. The exchange already reports you, your TDS is already on record, and there is no offshore data to arrive in 2027.
What happens if you have not reported past crypto holdings
The mechanism here is data matching. If the department receives exchange data and compares it against what you filed, it could find gaps. This is automatic. And for undisclosed domestic crypto income, standard provisions will apply: tax on the omitted amount, interest for the delay, and penalties that can reach 200% of the tax for deliberate misreporting.
Foreign holdings are a different order of severity. Under the Black Money (Undisclosed Foreign Income and Assets) Act, 2015, failing to disclose a foreign asset carries a flat Rs 10 lakh penalty per assessment year, levied by the Income Tax Department regardless of the asset’s value. Not a percentage. A flat amount, applied for each year the omission continues.
Where undisclosed foreign assets are detected during assessment, tax plus a penalty of three times the tax can apply, which would be roughly 120% of the asset value. Prosecution provisions exist and carry imprisonment terms.
The critical point: pre-2027 activity does not become invisible when exchanges start reporting. CARF data arriving in 2027 covers prior periods, and the assessment window for foreign assets stretches back further than the ordinary limitation period. A 2023 trade on a foreign platform can surface in a 2027 data file.
Can you still correct past crypto tax filings?
Yes. The legitimate routes are a revised return where the deadline has not passed, an updated return under the extended provisions where it has, or voluntary disclosure before the department issues a notice. The Budget 2026 also introduced a limited amnesty window for undisclosed foreign assets, though the conditions and eligibility are narrow.
Also read: 5 Mistakes Indians Make When Selling Crypto in India
FAQs
CARF is a Crypto-Asset Reporting Framework. International data exchange begins in India on April 1, 2027, while domestic exchange reporting started on April 1, 2026.
Yes. Schedule FA disclosure may be necessary in conjunction with Schedule VDA disclosure in crypto on a foreign platform. The Black Money Act imposes a flat fine of Rs 10 lakh on non-disclosure.
This section is S.509 of the Income-tax Act, 2025 (formerly S.285BAA of the 1961 Act). Penalties are located in Section 446.
No. CARF is a reporting layer. There is no change in the rate of 30%, cess of 4%, TDS at 1%, and no-loss-set-off.
Exchanges pay Rs 200 per day for late filing and Rs 50,000 for uncorrected errors. Domestic penalties and Black Money Act exposure for foreign assets for investors.
Not directly. For transfers to and from unhosted wallets, exchanges record identifying information for the transfers, but do not report on activity after the transfer.
