1 January 2027 Is the Day Your Coinbase Account Becomes Visible to the Indian IT Department. You Have 18 Months to Get the ITR Right Before the Notices Land.
The Crypto-Asset Reporting Framework (CARF) was approved by the OECD in 2022. India joined the multilateral agreement to implement it in 2023. The first exchange of data between foreign crypto exchanges and the Indian Income Tax Department happens in mid-2027 covering calendar year 2026.
Every major foreign exchange Indian residents have used to bypass Section 115BBH tax — Coinbase, Kraken, Binance (in CARF-signatory jurisdictions), Bitstamp, Gemini, Bybit, OKX — will be reporting account balances, transactions, and identity to the Indian IT department through an automated cross-border information exchange. The “hold on a foreign exchange and don’t tell” strategy works only until late 2026.
This guide is the actual mechanics: what CARF reports, which exchanges are in and which are out, how it interacts with PMLA and AIS data the IT department already has, what the Black Money Act penalty exposure looks like for unreported foreign crypto holdings, and the specific 18-month preparation playbook for Indians who have not been fully disclosing.
What CARF Actually Is — One Page
The mechanism
CARF is a multilateral agreement under OECD jurisdiction. Signatory countries commit to automatic exchange of information about crypto holdings of each others’ residents. The flow:
- Indian resident opens account on Coinbase US
- Coinbase (a CARF-reporting entity in the US) collects required data — passport/ID, country of tax residence (India), PAN if available
- End of calendar year 2026, Coinbase aggregates the user’s annual activity — balances, trades, transfers, fiat flows
- Coinbase reports this to US IRS (the local competent authority)
- US IRS exchanges the India-resident data with Indian CBDT under CARF MCAA
- CBDT injects the data into the AIS (Annual Information Statement) accessible to the assigned IT officer
Result: from mid-2027 onwards, your Indian IT officer can pull a Coinbase activity report on you without asking, similar to how they already pull your bank account, mutual fund, and stock activity via the existing CRS and AIS infrastructure.
The signatory list (as of mid-2026)
| Signed CARF MCAA — reporting active | Signed but later phase | Not signed (currently) |
|---|---|---|
| US (under domestic Form 1099-DA reporting equivalent) | UAE | Some Pacific micro-jurisdictions |
| EU member states (via DAC8) | Hong Kong (announced) | Some Caribbean jurisdictions |
| UK | Brazil | (List shrinking each quarter) |
| Singapore | South Africa | — |
| Japan, South Korea, Australia, Canada, Switzerland | Mexico | — |
| India | 50+ others | — |
The signatory list grows quarterly. Plan on the assumption that any meaningful foreign exchange will be CARF-reporting by 2027.
What Data Exchanges Will Report About You
Per the OECD CARF Model Rules:
| Data point | Reported? | What this looks like in practice |
|---|---|---|
| Full name | Yes | As on KYC |
| Date of birth | Yes | — |
| Address | Yes | Latest verified address |
| Tax Identification Number (PAN) | Yes if provided | Most exchanges now require this for India residents |
| Passport details | Yes if used for KYC | — |
| Account/wallet identifiers | Yes | — |
| End-of-year balance per asset | Yes | E.g., 0.5 BTC, 12 ETH, 8,500 USDT at 31 Dec 2026 |
| Total gross sales per asset (annual) | Yes | E.g., sold 0.3 BTC for USD 18,000 across 2026 |
| Total gross purchases per asset (annual) | Yes | — |
| Crypto-to-crypto swaps | Yes (gross flows) | E.g., swapped USDT to ETH for USD 10,000 |
| Fiat on-ramps | Yes | E.g., deposited USD 25,000 in 2026 |
| Fiat off-ramps | Yes | E.g., withdrew USD 15,000 to bank in 2026 |
| NFT transactions above thresholds | Yes | — |
| Internal transfers between user’s own wallets | Sometimes | Implementation varies |
This is enough data for the IT department to compute approximate capital gains under Section 115BBH and identify undeclared income. Reconciliation against your filed ITR is automated — gaps trigger notices.
How CARF Stacks on Top of PMLA and FIU Reporting You Already Face
Indian residents holding crypto on Indian exchanges (CoinDCX, WazirX, ZebPay, CoinSwitch, Mudrex) already have full reporting visibility to the IT department through three existing layers:
- TDS reporting under Section 194S — every transaction triggers 1% TDS, reported in your 26AS and AIS
- PMLA Rule 9 reporting — Indian exchanges are reporting entities under Prevention of Money Laundering Act, reporting suspicious transaction reports (STRs) and cash transaction reports (CTRs) to FIU
- FIU-IND registration — every Indian exchange must register with Financial Intelligence Unit India and share user activity data
So domestic exchange activity is already visible. CARF closes the foreign-exchange gap.
The cross-checking that becomes automatic
Pre-CARF (2024-2026): IT department sees your CoinDCX TDS data but has no idea you sent the proceeds to Binance, traded against USDT pairs, and withdrew gains to Bitstamp.
Post-CARF (2027+): IT department sees CoinDCX activity, sees Binance activity (Binance’s CARF reporter), sees Bitstamp activity (via DAC8 reporting from EU), and reconciles all three. If your declared income does not match the reconciled cross-border activity, you get a notice.
For the deeper view of how the existing FIU/PMLA infrastructure operates see crypto exchange comparison FIU fees security.
The Black Money Act Exposure Most Indian Crypto Holders Underestimate
This is the most expensive thing to get wrong.
The Black Money (Undisclosed Foreign Income and Assets) Act, 2015 covers undisclosed foreign assets and income of Indian residents. Crypto on foreign exchanges is a foreign asset.
The penalty structure
| Default | Penalty under Black Money Act |
|---|---|
| Non-disclosure of foreign asset in Schedule FA of ITR | Rs 10 lakh per year of default |
| Tax on undisclosed foreign income | 30% (flat) + 90% penalty = 120% effective |
| Tax on undisclosed crypto on foreign exchange | 30% (under 115BBH) + 25% Black Money penalty = 55% effective |
| Concealment penalty under Section 271AAB | Additional, varies |
| Prosecution risk under Section 50 of BMA | Up to 7 years imprisonment for wilful evasion |
A realistic example
Indian resident holding USD 50,000 (~Rs 42L) of mixed crypto on Binance, never disclosed. Bought primarily in 2021-2023, current value Rs 42L.
| Item | Amount |
|---|---|
| Schedule FA non-disclosure penalty (3 years × Rs 10L) | Rs 30,00,000 |
| Tax on any undisclosed sales — say Rs 8L gain over 3 years | Rs 2,40,000 (30% under 115BBH) |
| Black Money Act penalty on undisclosed income | Rs 2,00,000 (25%) |
| Concealment penalty | Rs 1,20,000 (50%) |
| Total exposure | Rs 35-37 lakh |
| Net result on Rs 42L holding | Loss of ~85% to penalties and tax |
This is the math behind why proactive disclosure before CARF reveals the position is mechanically far cheaper than waiting for a notice.
Voluntary disclosure path
Filing a revised return under Section 139(5) before any notice is issued typically waives the heavier Black Money Act penalties and applies only the standard tax and modest penalty. The window is open until 24 months from the end of the relevant assessment year:
- FY 2023-24 (AY 2024-25) — revised return possible until March 2027
- FY 2024-25 (AY 2025-26) — revised return possible until March 2028
After CARF reports land and a notice is issued, the penalty stack moves to the heavier end of the structure. The voluntary disclosure window effectively closes once the IT department has reconciled CARF data with your filed ITR — likely mid-to-late 2027.
For ITR mechanics on the Schedule VDA side see how to file ITR crypto Schedule VDA step-by-step.
What CARF Means for Different Types of Indian Crypto Holders
Profile 1 — Holds only on Indian exchanges, files ITR correctly
CARF impact: minimal. You are already in the reporting net through domestic PMLA/FIU. CARF adds cross-border verification on any future foreign exchange use. Action needed: none, beyond clean Schedule VDA filing.
Profile 2 — Holds on Binance via P2P, never declared
CARF impact: large. From mid-2027 your Binance balance is visible to IT dept. Black Money Act exposure across all years held. Action needed: voluntary disclosure via revised ITR-2 with Schedule FA for FY 2023-24, FY 2024-25, FY 2025-26. Consult Black Money Act specialist if undeclared value exceeds Rs 5L.
Profile 3 — Holds on Coinbase US via VPN, uses foreign address
CARF impact: enforcement-dependent. Coinbase identifies your address based on KYC documentation, not VPN traffic. If your KYC shows a foreign address (e.g., a friend in US), Coinbase may report you to US IRS as a non-resident. The reporting destination depends on declared tax residency. Most Indian residents using this structure ultimately face exposure when their declared address is verified or when they move funds to a clearly India-linked off-ramp. Action needed: Recognise the structure is fragile; voluntary disclosure preferable.
Profile 4 — Self-custody Ledger user, no exchange accounts
CARF impact: indirect. Your hardware wallet is not CARF-reportable directly. But your acquisition of the crypto likely went through a CARF-reporting venue at some point. Any future on-ramp or off-ramp will be CARF-reported. Action needed: ensure Schedule VDA properly captures all sales — even sales from self-custody to fiat on-ramp.
See crypto wallet India hardware custody guide for the self-custody framework.
Profile 5 — NRI holding on foreign exchange, returning to India
CARF impact: complex. Crypto bought when NRI and held when returned to resident status is generally not retroactively reportable in India for years when you were non-resident. But once you become resident, holdings become Indian-resident foreign assets requiring Schedule FA disclosure. Action needed: Plan timing of return carefully, document NRI period activity, file Schedule FA from first resident year.
The Exchanges Most Affected — Reporting Status Quick Reference
| Exchange | Jurisdiction | CARF-reporting Indian residents? | Practical implication |
|---|---|---|---|
| Coinbase | US | Yes (via Form 1099-DA + CARF exchange) | Direct reporting to IT dept |
| Kraken | US + EU entities | Yes | Direct reporting |
| Gemini | US | Yes | Direct reporting |
| Bitstamp | Luxembourg (EU) | Yes via DAC8 | Direct reporting |
| Binance | Multiple jurisdictions including CARF signatories | Mostly yes | Reporting through the user’s KYC jurisdiction |
| KuCoin | Seychelles | Uncertain — Seychelles signing pending | Likely reporting by 2028 |
| Bybit | Dubai/Singapore | Yes from 2026 | Direct reporting |
| OKX | Multiple jurisdictions | Yes in most | Reporting depends on user account jurisdiction |
| Bitfinex | BVI | Uncertain | Likely reporting by 2028 |
| Bitvavo | Netherlands (EU) | Yes via DAC8 | Direct reporting |
| Coinbase Wallet (non-custodial) | n/a | Not directly reportable | But on-chain trail visible to chain analytics |
The handful of “not yet reporting” exchanges are mostly in jurisdictions joining CARF in 2027-2028. The window of “safe non-reporting” is closing.
For the broader exchange comparison including FIU and security factors see the crypto exchange comparison. For Binance India specifically see the Binance India ban analysis.
What Indian Tax Authority Has Already Done Pre-CARF
The IT department has been ramping crypto enforcement since 2023:
- 70,000+ crypto notices issued in AY 2024-25 based on AIS mismatches (per CBDT statements)
- Survey actions on top Indian crypto traders — high-volume traders identified through TDS data
- PMLA investigation of WazirX users post-July 2024 hack — recovery process flagged certain user IDs
- ED freeze actions on exchange-linked bank accounts — multiple incidents through 2024-2026
- Section 285BB data requests to exchanges — Indian exchanges required to share transaction-level data on demand
Pre-CARF, this enforcement was domestic exchange-focused. CARF gives the same scrutiny to foreign exchange activity from 2027.
The 18-Month Preparation Playbook
Now to September 2026 — Reconcile and quantify
- List every crypto exchange account you have opened (lifetime)
- List every wallet address derived from your seed phrases
- Download annual statements from each exchange where possible
- Compute approximate capital gains for each FY using FIFO cost basis
- Identify which FYs have undisclosed activity
October 2026 to March 2027 — Decide and file
- For under Rs 1L undeclared per year: self-correct via revised ITR-2 with Schedule VDA + Schedule FA
- For Rs 1-10L undeclared per year: consult a CA specialising in crypto + foreign assets
- For above Rs 10L undeclared per year: consult a Black Money Act tax lawyer (Rs 25K-1.5L cost, dwarfs the potential penalty exposure)
- File revised returns for FY 2023-24 (deadline March 2027) covering all foreign exchange holdings
April 2027 to mid-2027 — Monitor and respond
- CARF data starts flowing to IT department mid-2027
- AIS may update with foreign crypto activity reported by CARF-signatory exchanges
- Watch for Section 143(1) intimations matching CARF data against filed returns
- Respond to any notices within statutory time limits (typically 30 days)
Mid-2027 onwards — Live compliance mode
- File Schedule FA every year for foreign crypto holdings, even if no transactions
- File Schedule VDA for any sale activity
- Maintain trade-level documentation for cost basis traceability
- Accept that “hide on foreign exchange” no longer functions as a strategy
Special Cases Indians Often Ask About
”My friend in US holds my crypto for me, in his name”
This is a beneficial ownership structure. CARF and Indian tax law look at beneficial ownership, not legal ownership. If you are the beneficial owner (you funded the purchase, you direct trades, you receive proceeds), the holdings are yours for tax purposes. Your friend is acting as a nominee. Schedule FA reporting requires disclosure of beneficial-owner holdings. This structure does not provide tax shelter and creates secondary legal exposure for your friend (proxy holder issues).
”I bought BTC abroad and brought it back”
If purchased while NRI, the cost basis transfers to your resident period at the value when you became resident (in most interpretations). Future sale is taxable in India at 30% Section 115BBH. CARF will eventually report the foreign exchange activity for both NRI and resident periods — disclosure is cleanest.
”I have crypto on DeFi (Uniswap, Aave) only, no exchange account”
You acquired the crypto somewhere — if from an Indian exchange and self-custodied, that on-ramp is reported. If from a foreign exchange and self-custodied, the foreign exchange reports. Pure DeFi activity (swaps on Uniswap, lending on Aave) without any exchange touchpoint is rare for retail Indians. When the activity exits to fiat (off-ramp), that off-ramp is CARF-reportable.
”I have only stablecoins, not real crypto”
Stablecoins (USDT, USDC, DAI) are VDAs under Indian definition. Gains from stablecoin holdings — including INR depreciation against USD — are taxable at 30% under Section 115BBH. CARF treats stablecoins identically to other crypto assets. Holding USDT does not provide any tax exemption.
What CARF Does NOT Cover
To be accurate about the boundary:
- Self-custody with no on-ramp/off-ramp touch. Pure self-custody (mining, airdrops to your own wallet) with no exchange interaction is not directly reportable. But sales eventually touch some on-ramp.
- DEX swaps in isolation. Uniswap, Curve, dYdX swaps are not CARF-reportable since there is no central operator. But each chain-analytics firm sells data to tax authorities and the trails are visible.
- NFTs below thresholds. Small NFT transactions may not be reportable, though CARF has lower thresholds than FATCA/CRS.
- Pre-2026 historical balances on non-CARF-signatory exchanges. The first reporting period is calendar 2026. Activity from 2017-2025 is not retroactively reported by CARF — but it is still subject to Indian tax law and may be discovered through other means.
The first three are operationally tight. The fourth is the real escape hatch for activity before 2026, which is why voluntary disclosure of pre-2026 activity is much cheaper than post-2027 notice response.
Bottom Line
CARF starts flowing data from foreign crypto exchanges to the Indian IT department from mid-2027 covering calendar year 2026 onwards. Coinbase, Kraken, Bitstamp, Binance (in CARF jurisdictions), and most other meaningful foreign exchanges will report Indian-resident user activity to CBDT automatically.
The “hold on foreign exchange and don’t disclose” strategy has 18 months left. Black Money Act penalty exposure for undisclosed foreign crypto holdings runs to Rs 10L per year of non-disclosure plus tax-with-penalty up to 120% effective rate. Voluntary disclosure through revised ITR-2 with Schedule FA and Schedule VDA before any notice is issued typically dispenses with the heavier penalties.
Plan now, file revised returns through March 2027 for FY 2023-24, and move into clean compliance mode from FY 2025-26 onwards. The cost of getting this right is Rs 25K-1.5L in professional fees. The cost of getting it wrong is the penalty stack — typically 5-20x larger. The arithmetic is simple; the operational discipline is not.