TLDR
The EU adopted a new crypto data?sharing regime under Implementing Regulation (EU) 2025/2263, expanding DAC8 to mandate standardized reporting by crypto service providers from 1 Jan 2026 %%CKPROTECTED0%%.
- Standardized reports on customer holdings and transactions will be automatically shared among EU tax authorities overview.
- A Crypto?Asset Operator register assigns unique 10?digit IDs (ISO country prefix) and retains removed entries up to 12 months summary.
- The rules align with the travel rule (ID required above 1,000, including self?hosted wallets) and MiCA, raising privacy concerns context.
Deep Dive
1. What Changed
The EU formalized a bloc?wide, uniform reporting format for crypto?asset service providers (exchanges, wallet operators), expanding DAC8 and requiring automatic exchange of reported data among member states starting 1 Jan 2026. This includes new standard forms and a unified computerized format Implementing Regulation (EU) 2025/2263.
Member states must file annual updates to the European Commission using standardized templates. The aim is consistent visibility into crypto flows to counter tax fraud, financial crime and market abuse CoinJournal explainer.
Expect more uniform, frequent reporting from EU?facing platforms and tighter cross?border data sharing for compliance checks.
2. Registers, IDs, and Retention
The framework introduces a Crypto?Asset Operator register. Each operator receives a unique 10?digit ID beginning with an ISO country code. Even after an operator is delisted, the register must retain information for up to 12 months, supporting supervisory continuity across borders policy outline.
These technical levers support automated matching between operators, jurisdictions and reported transactions, reducing gaps in oversight policy outline.
Onboarding and offboarding operators will leave clearer audit trails. Platforms should plan for ID issuance, register maintenance and data retention obligations.
3. Interplay With Travel Rule, MiCA, and Privacy
The regime dovetails with the EUs travel rule extension to crypto, which requires identifying both sender and recipient for transfers above 1,000 and can include verifying ownership of self?hosted wallets. It also aligns with MiCA and upcoming AML rules that raise due?diligence and reporting duties for large operators travel rule context.
The Commission is also exploring stronger, centralized oversight of major cross?border exchanges via ESMA, which supporters say would reduce fragmentation but smaller hubs warn could raise compliance costs and centralize risk oversight debate.
Users and platforms should anticipate deeper KYC/monitoring across EU venues. Privacy trade?offs will be more visible, particularly around self?custody interactions.
Conclusion
In short, the EU just locked in a standardized, bloc?wide crypto reporting system that broadens tax and compliance visibility. The package connects to the travel rule and MiCA, and may move supervision toward greater centralization, trading some privacy and operational flexibility for uniform oversight and enforcement across the single market.
