Hong Kong legislature approves CARF into law; RCASPs must collect data from Jan. 1, 2027

Opening — what happened

On Nov. 4, 2026 the Hong Kong Legislative Council approved the Inland Revenue (Amendment) (Crypto‑Asset Reporting Framework and Amended Common Reporting Standard) Bill 2026, according to the government press release reproduced by the Inland Revenue Department (IRD) and reported by crypto.news (info.gov.hk; ird.gov.hk; crypto.news).

The amendment incorporates the OECD’s Crypto‑Asset Reporting Framework (CARF) into Hong Kong law and updates the Common Reporting Standard (CRS) in parallel, the IRD’s guidance explains (ird.gov.hk).

Essential facts from government materials

Start of data collection: Reporting Crypto‑Asset Service Providers (RCASPs) that meet nexus rules must begin collecting required customer and transaction information from 1 January 2027 (ird.gov.hk).

Registration and portal: The IRD will publish a CARF reporting portal and XML data schema; RCASPs that meet nexus criteria must register in the CARF portal by 31 January following the first calendar year they meet nexus rules, per IRD guidance (ird.gov.hk).

Automatic exchange timetable: The IRD’s materials reproduce the government’s timing: automatic exchange of CARF data between Hong Kong and partner jurisdictions is scheduled to begin in 2028. The amended CRS changes take effect with the first international exchanges under the amended CRS scheduled for 2029 (ird.gov.hk; crypto.news).

Scope and exclusions: The IRD reproduces the OECD/CARF functional scope — obligations apply to businesses that effect exchange transactions as a business (exchanges, brokers, certain wallet services, crypto ATMs). The law also defines exclusions, for example central bank digital currencies, specified electronic money products and crypto‑assets that cannot be used for payment or investment are excluded from CARF coverage (ird.gov.hk).

Confirmed details on compliance mechanics

Due diligence and reporting rules: The IRD text describes due diligence, reporting formats, recordkeeping and penalty provisions (including administrative penalties as an alternative to prosecution) that will apply to RCASPs (ird.gov.hk).

Operational support: The IRD said it will publish technical materials — a reporting portal and XML schema/data structure — and provide implementation guidance and technical assistance to affected businesses, as stated in the government release and IRD pages (info.gov.hk; ird.gov.hk).

Policy rationale: Government statements cite alignment with OECD international tax‑transparency standards, emphasise reciprocal exchanges and note confidentiality and data‑security requirements for partner jurisdictions (crypto.news; ird.gov.hk).

Known limits and outstanding details (unconfirmed)

Partner jurisdictions: The supplied materials do not list the specific jurisdictions with which Hong Kong will exchange CARF data in 2028.

Portal timing and onboarding: The IRD has not published an exact portal launch date, registration URLs, or a detailed operational timeline for onboarding RCASPs in the supplied documents.

Decentralised flows and borderline cases: Both the IRD and secondary coverage note practical limits — CARF will capture transactions that pass through regulated service providers but may not practically cover many decentralised or peer‑to‑peer on‑chain flows. How the IRD will address borderline cases in practice (certain non‑custodial services, unhosted wallets, DeFi protocols) is not detailed in the supplied materials (crypto.news cites Chainalysis context; ird.gov.hk gives high‑level scope).

Why this matters

For regulated crypto firms: Exchanges, brokers and other service providers in Hong Kong that meet the legal nexus must put in place customer identification, transaction data capture and reporting processes ahead of the 1 January 2027 collection start date. The IRD’s portal and schema will dictate technical reporting formats (ird.gov.hk).

For cross‑border tax transparency: Bringing CARF into law aligns Hong Kong with an OECD standard intended to enable automatic exchange of crypto‑asset transaction information, with exchanges planned to begin in 2028 — a step the government frames as reciprocity and alignment with global tax transparency norms (crypto.news; ird.gov.hk).

For non‑custodial and decentralised activity: The framework targets transactions through regulated intermediaries; many pure on‑chain peer‑to‑peer flows may remain outside practical coverage, raising enforcement and coverage questions for policymakers and businesses (crypto.news; ird.gov.hk).

Analysis (labelled interpretation and speculation)

Interpretation: The law’s timetable is phased: collection from 2027 gives firms a narrow implementation window and signals the government prioritises early data capture; exchanges beginning in 2028 indicate Hong Kong expects partner jurisdictions to be ready to receive CARF files within a year. This reflects the government’s stated aim to align with OECD timelines (info.gov.hk; ird.gov.hk).

Speculation (clearly unconfirmed): The identity of exchange partners and the IRD’s operational readiness will strongly shape the practical impact. If major counterparties delay or limit reciprocal intake, cross‑border exchange volumes could be affected. How the IRD will treat borderline business models (wallet‑only services, some DeFi facilitators) in audits or administrative enforcement is not yet published and will shape compliance burdens for firms operating on the margin.

Practical next steps for firms (based on confirmed guidance)

Prepare to collect CARF data from 1 Jan 2027: Firms that meet nexus tests should review their onboarding and transaction‑logging systems now to capture required identifiers and transaction descriptors according to the IRD’s forthcoming schema (ird.gov.hk).

Monitor IRD publications: The IRD’s CARF page will publish the portal, schema and further implementation guidance; businesses should watch ird.gov.hk for the portal URL and XML specification (ird.gov.hk).

Assess scope and legal status: Firms should determine whether their activities fall within the IRD’s reproduced functional scope for RCASPs (exchanges, brokers, certain wallet services, crypto ATMs) and document recordkeeping practices to meet due diligence and reporting requirements (ird.gov.hk).

Reader questions and current status

When does collection begin? Confirmed: 1 January 2027 (ird.gov.hk).

Who must collect and report? Confirmed: RCASPs that meet nexus rules — exchanges, brokers and certain wallet services as reproduced from OECD/CARF guidance in the IRD materials (ird.gov.hk).

When will exchanges start? Confirmed: CARF exchanges planned to begin in 2028; amended CRS exchanges planned for 2029 (ird.gov.hk; crypto.news).

What remains unknown? Unconfirmed: the list of partner jurisdictions for 2028 exchanges, the exact IRD portal launch date and how the IRD will handle borderline decentralised cases in enforcement or clarification documents.

Primary sources cited

Hong Kong Government press release: 'Government welcomes passage of Inland Revenue (Amendment) (Crypto‑Asset Reporting Framework and Amended Common Reporting Standard) Bill 2026' (info.gov.hk).

Inland Revenue Department — CARF guidance and technical notes (ird.gov.hk).

Crypto.news coverage summarising passage and context (crypto.news).