The change that matters more than anything else on this site
Until now, HMRC’s knowledge of who holds cryptoassets has been patchy, assembled from information notices, exchange requests and inference. That ends. Under the Cryptoasset Reporting Framework, implemented in the UK by the Reporting Cryptoasset Service Providers (Due Diligence and Reporting Requirements) Regulations 2025:
- Data collection began on 1 January 2026. UK reporting cryptoasset service providers must collect and record customer data and carry out due diligence from that date.
- Providers must register with HMRC by 31 January 2027 and notify their users.
- The first reports are submitted between 1 January and 31 May 2027, covering calendar year 2026, with the first international exchanges of data in 2027.
- Domestic reporting of UK-resident users was announced at Autumn Budget 2024, legislated by SI 2025/744, and has already applied since 1 January 2026 — so HMRC will hold CARF data on UK taxpayers using both UK-based and non-UK-based providers.
You will already have been asked for the data: full name, date of birth, address, country of residence and your tax identification number — National Insurance number or UTR for UK residents. Giving inaccurate details, or failing to give them, carries a penalty of up to £300, and the provider may refuse to serve you further.
The practical consequence is simple. From 2027, HMRC receives identity and transaction data on UK residents from exchanges here and abroad, covering calendar year 2026 onwards. Anything unreported becomes visible, and it becomes visible after the point at which a disclosure would have been unprompted.
Nudge letters: what HMRC has actually done
| Date | Who received it | What it said |
|---|---|---|
| October 2021 | Taxpayers believed to hold cryptoassets, and their agents | Three versions, advising that gains on cryptoassets are liable to Capital Gains Tax and setting out common disposal types. |
| August and September 2024 | Taxpayers believed to have disposed of cryptoassets without declaring gains or income | Advises recipients what action to take and points them to the Cryptoasset Disclosure Service. Recipients who believe nothing is owed must contact HMRC with an explanation and supporting documents. |
| January 2026 | Agents who complete IHT400s | HMRC’s Wealthy Team reminding practitioners that cryptoassets must be brought into account for Inheritance Tax. |
| July 2026 | Wealthy taxpayers | A one-to-many campaign encouraging recipients to check they have paid the correct amount of tax on cryptoasset transactions. |
Two things about nudge letters are widely misunderstood. First, a nudge letter is not an enquiry. It is a one-to-many prompt, and receiving one does not mean HMRC has opened a formal investigation into you. Second, it is not harmless. Once you have been prompted, a subsequent disclosure is a prompted disclosure, which attracts a materially smaller penalty reduction than an unprompted one. The letter is, in effect, a closing window.
Ignoring a nudge letter is the worst available option. So is replying quickly without first establishing what the position actually is.
The disclosure route, and what it costs
HMRC operates a dedicated Cryptoasset Disclosure Service for unpaid tax on exchange tokens, NFTs and utility tokens. How many years you must pay for depends entirely on your behaviour:
| Behaviour | Years covered |
|---|---|
| You took reasonable care to get your tax affairs right | 4 years |
| You were careless | 6 years |
| The failure was deliberate | 20 years |
The process runs: gather records, compute the tax, interest and penalties, submit online, receive a payment reference from HMRC within 15 working days, and pay within 30 days. HMRC then accepts or rejects the offer.
Penalties are behaviour-based, under the inaccuracy rules in Schedule 24 Finance Act 2007 and the failure-to-notify rules in Schedule 41 Finance Act 2008. They are reduced for the quality of the disclosure — telling, helping and giving access — and the reduction available for an unprompted disclosure is substantially larger than for a prompted one. Which is the entire commercial argument for acting before the letter arrives, and certainly before CARF data does.
Where we add value in a disclosure
- Establishing the correct number first. Disclosing an unverified figure is worse than not disclosing. Most of the work is the transaction reconstruction, not the form.
- Characterising the behaviour honestly. The difference between careless and deliberate is 14 years of exposure and a different penalty range. It is a judgement that should be made with advice, and evidenced.
- Finding the reliefs on the other side. Historic disclosures very frequently uncover unclaimed capital losses, uncarried base costs from staking and mining income, and negligible value claims never made. It is not unusual for the reliefs to substantially offset the liability.
- Choosing the right service. The cryptoasset service is not always the right vehicle where there is non-crypto income in the mix; the general Digital Disclosure Service may be. Getting this wrong costs time and credibility.
- Handling the correspondence. Including the response to a nudge letter where, having checked, nothing is in fact owed — a reply that needs to be evidenced rather than merely asserted.
Frequently asked questions
I have had a nudge letter. Am I being investigated?
No. A nudge letter is a one-to-many prompt sent to a population HMRC believes may hold cryptoassets, not the opening of an enquiry into you specifically. But it does change your position: any disclosure you make afterwards is prompted, which reduces the penalty mitigation available. Deal with it properly and promptly.
I only made small gains. Does HMRC really care?
The filing obligation is not only about the size of the gain. If your total disposals exceeded £50,000 in a tax year, the capital gains pages are required even where you broke even. And as CIOT’s cryptoassets specialists have pointed out, tax can be due even where an investor does not think their investments have been profitable — token-to-token swaps are the usual reason.
Should I wait and see whether HMRC contacts me?
That was a defensible gamble before CARF. It is not now. Data on calendar year 2026 reaches HMRC by 31 May 2027, covering both UK and overseas providers. Waiting converts an unprompted disclosure into a prompted one and adds interest for every month that passes.
Will I go to prison?
Voluntary disclosure of unpaid tax through the proper route is a civil process resulting in tax, interest and a penalty. Criminal investigation is reserved for a small number of the most serious cases, and coming forward voluntarily is a significant factor against it. If you are worried that your circumstances are at the serious end, take advice before you do or say anything — including from us.
What if my records are incomplete?
That is the norm rather than the exception, and it is not a bar to disclosing. HMRC accepts a just and reasonable methodology where complete records genuinely do not exist, provided the approach is documented and applied consistently. Reconstructing the position is the work we do.
This page is general guidance on UK tax law as at 9 August 2026 and is not advice for any particular person or situation. Tax treatment depends on your individual circumstances and may change. Where we quote HMRC’s internal manuals, note that those manuals are guidance prepared for HMRC staff, are not law, and do not bind HMRC in an individual case. Please take advice before acting. Reviewed by the TaxDigit crypto tax team · Last reviewed 9 August 2026. Updated August 2026.
Related crypto services
TaxDigit is a UK crypto accountant practice handling HMRC disclosures. Chartered certified accountants acting for cryptocurrency holders facing nudge letters, enquiries and CARF data matching.
Get crypto clarity
Book a free, no-obligation consultation with a chartered certified accountant today.
Book a Consultation