If I have accounts on three exchanges simultaneously, do I need to repeat this verification workflow for each one?
Yes, each exchange needs to be confirmed separately, since CARF's data collection obligation falls on individual service providers, not determined holistically for "you as a person." Being covered at exchange A doesn't automatically mean exchange B is covered too — the two exchanges might be headquartered in different jurisdictions, and their respective compliance timelines might not be synchronized.
A more efficient practical approach is to build a simple list of every exchange you use and its jurisdiction, checking against this list item by item each time you verify, rather than relying on memory — this way, even as the number of accounts grows, you can maintain the completeness of the verification process and are less likely to overlook a less-frequently-used account that's easy to forget about.
If an exchange's website makes no mention of CARF or DAC8 at all, does that mean the exchange is completely unaffected?
Not necessarily — the website not clearly mentioning it could be due to a few reasons: the exchange genuinely hasn't fallen within coverage yet (because its jurisdiction hasn't committed to implementation, or its service type has been determined not to qualify as a CASP); or the exchange may already be covered, but the official communication hasn't been updated yet, or the relevant statement is buried on a hard-to-find page (such as a subsidiary clause within a privacy policy or terms of service, rather than a standalone compliance page).
If simply checking the website doesn't turn up clear information, a more conservative approach is to directly contact that exchange's support and ask whether the account is covered by CARF- or DAC8-related rules, as a supplementary verification channel when the website's information is insufficient — rather than directly assuming that no mention means no coverage.
Why does the OECD's publicly available jurisdiction list often not match up with when I actually notice a change in an exchange's requirements?
This mismatch is normal, since the OECD list reflects policy-level information about "which jurisdictions have committed to participation," while there's typically an implementation gap between that and when an individual exchange actually rolls out its due diligence procedures. After a jurisdiction commits to participation, it still needs to complete domestic legislation and require service providers within its borders to adjust their operations — this process can take several months or even longer before it genuinely shows up as an interface change you notice when using an exchange.
This means the OECD list is better suited for judging "the long-term trend and eventual coverage," while an exchange's actual notification or interface change is the more real-time indicator for judging "whether you're already affected right now." The two provide different layers of information, and it's advisable to check both rather than drawing a conclusion from just one.
After verifying, I found I genuinely span a jurisdiction that has committed to implementing CARF, but my past filings have always been quite incomplete — what should I prioritize in this situation?
The suggested priority is: first fully inventory all your past transaction records across every exchange and wallet, confirming how large the actual reporting gap actually is, rather than rushing into a catch-up decision without knowing the specific discrepancy amount. This inventory process can reference this site's other content on cross-platform data reconciliation and commonly underreported income types (such as airdrops and staking rewards), to make sure the inventory scope is complete enough — not just looking at the past year or two, or the platform you use most.
Once the inventory is complete and the scope of the discrepancy is confirmed, the next step is assessing whether you qualify for a voluntary disclosure program, and handling it as soon as possible within the window before cross-border information exchange actually happens — the later you handle it, the higher the risk that a tax authority catches the discrepancy through cross-referencing, causing you to lose eligibility for voluntary disclosure leniency. This kind of situation involving both an inventory and a catch-up decision simultaneously warrants seeking help from a professional familiar with crypto taxation, to make sure the entire process's sequence and data completeness both hold up.
Knowing CARF exists is one thing — concretely confirming whether the exchange you use is already within its coverage is another. Most people aren't sure where to even start checking, or which factor — "my tax residency" or "where my exchange is located" — is actually the key one determining whether they're affected. This article provides a concrete, executable verification workflow to help you sort this out.
Determining whether you're affected by CARF isn't a single question — it's the result of two independent questions stacking together. The data collection obligation falls primarily on the crypto-asset service provider (CASP), meaning you need to separately confirm: whether your own tax residency country has committed to implementing CARF, and where each exchange or service provider you actually use is headquartered or operates, and whether that jurisdiction has committed to implementing it. These two answers don't necessarily match, and if either one is a yes, you may already be affected.
Most large exchanges, in responding to rules like CARF and DAC8, typically state their applicable regulatory scope clearly on their website's legal or compliance page, and some exchanges even proactively notify users about changes to account due diligence procedures. If you're unsure whether the exchange you use is covered, the first place to check is that exchange's official legal or compliance disclosure page, searching for any statement referencing CARF or DAC8.
Once CARF takes effect, a covered exchange typically requires users to complete a due diligence procedure, concretely manifesting as being asked to provide a document like a Tax Residency Self-Certification, or having tax-related fields added to an existing identity verification process. If you've recently been asked to supply this kind of information when logging into an exchange you regularly use, this is typically a concrete signal that the exchange has already fallen within CARF or DAC8's coverage and started fulfilling its due diligence obligation.
The OECD's official website continuously updates the list of jurisdictions that have committed to implementing CARF — this is the most authoritative primary data source. When verifying, it's advisable to cross-reference this list directly, confirming whether your own tax residency country and each jurisdiction where an exchange you use is located appear on it, rather than relying purely on media coverage or secondhand summaries, since the list of committed jurisdictions itself continues to be updated.
If, after verifying, you find that any jurisdiction you span has already committed to implementing CARF, the most practical next step is to re-examine whether your past filings have been complete while cross-border information exchange hasn't actually happened yet, rather than waiting to react passively once data genuinely starts flowing across borders and a tax authority catches a discrepancy through cross-referencing. It's advisable to run through this verification workflow periodically (say, every six months), since the list of committed jurisdictions continues to expand — being unaffected today doesn't mean you'll remain unaffected in the future.
⚠️ This article was researched against the most current regulations and official guidance available at the time of writing, but tax rules change frequently, and the applicable rules can vary by jurisdiction and individual circumstance. This content is intended to help you understand concepts and general direction — it does not constitute formal tax or legal advice. Before filing, please verify current rules directly with the official tax authority in your jurisdiction, or consult a qualified tax professional.