
Legislative Council approves CARF and amended CRS implementation ahead of 2028 international information exchanges
AI-generated summary
In December 2024, Hong Kong intended to complete legislative amendments by 2026 and begin crypto-information exchanges in 2028. The Nov. 4 vote marks the legislative milestone ahead of the collection year. CARF establishes due diligence and annual reporting requirements for crypto-asset service providers concerning tax transparency.
Hong Kong's Legislative Council passed a crypto tax-information reporting bill on Nov. 4, requiring covered providers to begin collecting information in 2027 before the Inland Revenue Department starts exchanging it with partner jurisdictions in 2028.
The department's implementation background specifies Jan. 1, 2027, for the Crypto-Asset Reporting Framework (CARF). Providers collect and report information to the tax authority, and the department conducts the international exchanges.
The first collection year comes before the cross-border sharing date for covered firms.
CARF establishes due diligence and annual reporting requirements for crypto-asset service providers. It concerns tax transparency, with providers gathering information that tax authorities can use, rather than setting an individual user's tax bill.
The bill also implements the amended Common Reporting Standard (CRS) for financial account information. The government says that the revised standard takes effect in 2028, with exchanges starting in 2029. Its schedule is separate from CARF's 2027 collection and 2028 exchange timetable.
In December 2024, Hong Kong intended to complete legislative amendments by 2026 and begin crypto-information exchanges in 2028. The Nov. 4 vote marks the legislative milestone ahead of the collection year.
Provider scope and next steps
In its CARF explanation, the Inland Revenue Department describes reporting providers as businesses carrying out customer exchanges between crypto-assets and fiat currencies, or between crypto-assets.
These include businesses acting as counterparties or intermediaries and those operating trading platforms. Obligations depend on the provider's connection to a jurisdiction under the framework's nexus rules.
The department describes reportable users, and relevant controlling persons of entity users, by tax residence in reportable jurisdictions. A provider must identify the relevant users or controlling persons before it can prepare information for the annual reporting process described by the department.
Its explanation lists identifying details, tax-residence information, and aggregated transaction information among the required data. That scope is key when assessing a provider's obligations and which customers' information is reportable.
Hong Kong says exchanges will be reciprocal and subject to confidentiality and security safeguards. The Inland Revenue Department will issue guidance and has established a dedicated team to provide technical support and answer industry inquiries.
The department also says it will develop a CARF reporting portal and publish the data schema that defines the reporting format, with further details to follow. Those materials will set out more of the reporting process for providers preparing to collect the required data in 2027.
AI outlook — possibilities, not facts
The Inland Revenue Department will issue guidance and publish a CARF reporting portal and data schema before 2027 collection begins.
Very likely · Within months

Brazilian crypto exchange Mercado Bitcoin will begin restoring customer account access Monday after a hack that blockchain analysts estimated at more than $46 million in stolen assets. The exchange pledged to use company funds to replenish affected assets, noting over $15 million in stolen funds had already been frozen with industry help.

BitMart founder Sheldon Xia said the exchange's security team is severely understaffed after restructuring, following a Monday hack that Bitquery linked to a wallet implicated in the $46 million Mercado Bitcoin breach. BitMart faces months of uncertainty over its planned shutdown, while the T3 Financial Crime Unit alliance has dissolved amid a wave of major crypto hacks including the $6.3 billion Binance breach.

Sherrod Brown's victory over Jon Husted in Ohio delivered the crypto industry its biggest electoral loss of the 2026 midterms, as Democrats won control of both chambers of Congress. Crypto super PACs spent about $176 million across 100 seats, including $64 million in Ohio alone, yet Brown won and Elizabeth Warren is positioned to chair the Senate Banking Committee.

Australia will scrap the 50% capital gains tax discount from July 1, 2027, effectively doubling taxable crypto gains. The article outlines legal strategies including SMSFs, crypto-backed loans, and hoping for a bull market or election reversal before the changes take effect.

Stand With Crypto counted 222 pro-crypto House winners and 19 pro-crypto Senate winners in its Nov. 4 scorecard, alongside 106 anti-crypto House winners and eight anti-crypto Senate winners, as AP reported Democrats won the House and unified control of Congress.

Coinbase says it was unaffected by last week's $6.4 billion Binance hack and details cold storage, key splitting, kill switches, and multi-approval controls designed to prevent similar attacks, while noting recent security incidents involving bribed support agents and an Amplitude vendor breach.