From 2026, crypto providers will be required to share data

10/07/25

As of 1 January 2026, crypto service providers will be required to collect and share their users’ data with the Dutch Tax Authorities. This information will then be automatically exchanged with other EU Member States and Participating Jurisdictions. The aim of DAC8 is to enhance cooperation between EU Member States regarding the taxation of cryptoassets.

This obligation arises from the Bill for Implementation of the EU Directive on Cryptoasset Data Exchange (known as ‘DAC8’) which the State Secretary for Finance submitted to the House of Representatives on 8 July 2025. Below, we provide insight into the background, significance and content of the proposed legislation.

What does this mean for your organisation?

The implementation of this new legislation will have significant impact on cryptoasset service providers in the Netherlands. Reporting cryptoasset service providers will be required to collect, verify and report data and information to the Dutch Tax Administration. This means they are responsible for the accuracy and completeness of the reported information. Should they fail to meet this obligation, an administrative fine may be imposed, up to a maximum of 1,030,000 euros.

Crypto providers must share not only details about themselves, such as identification numbers and registration codes, but also information concerning reportable users and transactions. Implementing the necessary compliance infrastructure may prove a substantial challenge.

Crypto providers must report for the first time on the calendar year 2026. The first report must be submitted to the Tax Administration by 31 January 2027 at the latest.

Background

International approach to crypto-assets

The rapid emergence and growth of the crypto-asset market has led to new challenges for tax authorities worldwide. Crypto-assets, such as digital coins and tokens, are often traded via decentralised networks without the involvement of traditional financial institutions. This makes it more difficult for tax authorities to monitor potentially taxable income and to check whether taxpayers are complying with their tax obligations. The Organisation for Economic Co-operation and Development (OECD), in its Crypto-Asset Reporting Framework (CARF), has emphasised that this digital market, due to its cross-border and anonymous nature, brings an increased risk of tax evasion and avoidance. The OECD therefore underscores the importance of international cooperation and streamlined reporting obligations to ensure transparency and promote tax compliance.

European implementation: DAC8

To address these challenges at a European level, the European Union has adopted Directive (EU) 2023/2226 (also known as DAC8). This directive amends the existing rules for administrative cooperation in the area of taxation and introduces specific reporting obligations for providers of crypto-asset services. DAC8 obliges these providers to collect, verify and report data about their users and transactions to the tax authorities of the member state in which they are active. The member states then automatically exchange this information, enabling tax authorities across the EU to better detect and tax income from crypto-assets. The aim is to create a level playing field, prevent tax evasion and increase transparency in the digital economy.

Dutch implementation: Act to Implement the EU Directive on the Exchange of Information on Crypto-Assets

The Dutch government is implementing DAC8 through the draft Act to Implement the EU Directive on the Exchange of Information on Crypto-Assets. This legislative proposal amends, among other things, the Act on International Assistance in the Levying of Taxes (WIB) and the General Tax Act (AWR). The Act imposes reporting obligations on providers of crypto-asset services with a relevant connection to the Netherlands and ensures that both cross-border and domestic transactions are covered by the reporting duty. Through this implementation, the Dutch Tax and Customs Administration’s information position is strengthened, enabling more effective control and enforcement of existing tax obligations. In this way, the Netherlands joins in with international and European efforts to increase tax transparency around crypto-assets and to counter tax evasion.

The proposed legislation

The proposed legislation provides a detailed structure for the implementation of the EU directive on the exchange of information regarding crypto-assets in the Netherlands. It places significant compliance and reporting responsibilities on crypto providers to ensure they meet the requirements.

The legislative proposal specifies which information reporting crypto-asset service providers must supply to the Tax and Customs Administration. The reporting rules require providers to share information about both their own activities and those of users and transactions.

Who is required to report?

According to the draft legislation, the following parties may fall within the scope of the reporting obligations:

Entities required to file tax returns in the Netherlands or to provide information to the Dutch tax inspector regarding their income. This concerns, for example, legal entities or legal arrangements that are subject to tax in the Netherlands or required to provide fiscal information to the Dutch Tax and Customs Administration.

Entities whose management is located in the Netherlands or is performed by a tax resident of the Netherlands. This means that if the actual management or leadership of an entity is established in the Netherlands, or if a natural person who is a tax resident of the Netherlands manages it, this entity falls under the reporting obligation.
Providers of crypto-asset services established in another country with a branch in the Netherlands. Foreign providers offering crypto-asset services through a Dutch branch must report transactions carried out via that branch to the Dutch authorities.
Certain types of entities already subject to other tax reporting requirements or posing a low tax compliance risk. This includes, among others, some financial institutions, entities whose shares are regularly traded on recognised stock exchanges, government bodies, international organisations and central banks. These groups may (partially) be exempt from the reporting obligation because of their existing transparency or low risk of tax non-compliance.

Extraterritorial effect

The legislative proposal has extraterritorial effect. This means that foreign providers of crypto-asset services may also be required to report if they have a relevant connection to the Netherlands, for example because they offer services to Dutch residents, have a branch or management in the Netherlands, or otherwise fall within the Dutch fiscal sphere. Foreign providers without an establishment in the EU must register in the EU member state with which they have the closest connection. The aim is to ensure that cross-border and international activities also fall under the reporting obligation, thereby preventing tax evasion through foreign constructions.

What must be reported?

Under the new legislative proposal, providers of crypto-assets are required to report various types of information about both their users and themselves. These reporting obligations are divided into the following three categories:

1. Information about the provider: This includes details such as the name of the provider, registration number and address.

2. (Personal) information about users: This concerns, among other things, the name, address, Tax Identification Number (TIN), place of birth and the country where the user is tax resident.

3. Transactional information about users: This includes, among other things:

The full name of the type of relevant crypto-asset involved.
The aggregated gross amount paid or received, the aggregated number of units and the number of transactions related to purchases and sales against fiat currency.
The aggregated fair market value, the aggregated number of units and the number of transactions related to purchases and sales against other relevant crypto-assets.
The aggregated fair market value, the aggregated number of units and the number of reportable retail payments.
The aggregated fair market value, the aggregated number of units and the number of relevant transactions per type of transfer.
The aggregated fair market value and the aggregated number of units related to transfers by reportable users to external wallet addresses not known to the provider.

Although reporting wallet addresses connected with transfers of relevant crypto-assets is not mandatory, providers of crypto-assets must collect such external wallet addresses (or similar identifiers) and retain them in their records for at least five years when these addresses are involved in reportable transfers. This ensures that tax authorities have the necessary information should follow-up investigations or requests occur.

With these reporting obligations, the legislative proposal aims to create greater transparency within the crypto market and combat tax evasion.

Parliamentary process

Once the House of Representatives has approved the legislative proposal, it will be submitted to the Senate. It is noteworthy that this implementation bill is explicitly not included in the parliamentary process of the 2026 Tax Plan package. This may mean that the procedure will proceed more quickly.

Challenges

The legislative proposal presents various practical and organisational challenges for providers of crypto-assets. The main bottlenecks are briefly explained below:

1. Short reporting deadlines: The reporting obligation requires providers of crypto-assets to submit their reports annually, no later than 31 January, for the previous calendar year. This means providers have only one month to collect, verify, aggregate and report all required data. This short turnaround demands tight internal processes and a high level of preparation, especially given the complexity and volume of data to be processed.

2. Compliance obligations: Although the first report must be submitted by 31 January 2027 at the latest, providers of crypto-assets are already required from 1 January 2026 to collect the necessary data. This means that from that moment on they must also request and verify self-certification forms from their users. Preparation for these obligations requires timely adjustments to customer processes (onboarding) and IT systems.

3. Complexity of data to be reported: Unlike existing reporting requirements such as the Common Reporting Standard (CRS), where financial institutions report on account balances and income, the new Crypto-Asset Reporting Framework (CARF) requires more detailed and segmented reporting. Providers of crypto-assets must aggregate and report data per user, per type of crypto-asset and per type of transaction (such as purchases, sales, transfers and retail payments). This means that for each user and each crypto-asset, an overview must be made of all relevant transactions, broken down into different categories. This level of detail and the need to aggregate data at multiple levels results in significant technical and administrative challenges that go beyond current reporting practices under CRS.

These challenges highlight the importance for providers of crypto-assets to invest in their administrative organisation, IT infrastructure and compliance processes in good time, so they can meet the new legal requirements.