Hong Kong passes CARF crypto-asset tax reporting rules

The Legislative Council passed the Inland Revenue (Amendment) (Crypto-Asset Reporting Framework and Amended Common Reporting Standard) Bill 2026 on 4 November 2026, writing the Organisation for Economic Co-operation and Development Crypto-Asset Reporting Framework (CARF) into the Inland Revenue Ordinance, chapter 112, with reporting duties timed for 1 January 2027 and the amended Common Reporting Standard (CRS) timed for 1 January 2028.

The Council voting record for 4 November 2026 shows the Second Reading carried at 14:26:49 and the Third Reading at 14:38:45, after the committee of the whole Council adopted the Secretary's amendments. Those amendments include the nil-return change set out in LC Paper CB(1)1376/2026. The two-page sheet records each question as Passed and leaves the division tally off the page. The Inland Revenue Department (IRD) CARF page, read after the vote, still presented the text as a bill awaiting enactment.

Key facts

• The bill was gazetted on 22 May 2026, received its First Reading on 3 June 2026, and passed its Third Reading on 4 November 2026 at 14:38:45, according to the LegCo voting results and Legal Service Division Report LS26/2026.
• CARF provisions take effect on 1 January 2027, aside from clause 8 on executor liability, and amended CRS provisions take effect on 1 January 2028, according to LC Paper CB(1)1376/2026.
• The first automatic exchange of crypto-asset tax information is planned for 2028, according to the IRD press release of 20 May 2026.
• Portal registration falls on or before 31 January of the year after the year a Hong Kong nexus is first met, according to IRD CARF guidance.
• Due-diligence and reported-information records are kept for six years after the return's due date, under proposed section 50S as described in Bills Committee report CB(1)1327/2026.
• A knowingly or recklessly misleading self-certification draws a level 3 fine of HK$10,000 under proposed section 80(2ZE), and other Part 8B offences run up to a level 6 fine and imprisonment for up to three years, according to LS26/2026 clause 11.
• The public consultation ran from 9 December 2025 to 6 February 2026 and drew 43 written submissions, and the Bills Committee chaired by Johnny Ng Kit-chong held four meetings, according to LS26/2026 and CB(1)1327/2026.

Sources behind the reading of the bill

The reading uses primary documents from December 2025 through 4 November 2026 on Hong Kong's CARF and amended CRS. Core texts are the IRD CARF guidance, the note on the amended CRS, the 20 May 2026 press release, LS26/2026, the Bills Committee report of 28 October 2026, LC Paper CB(1)883/2026(01) and the voting results for 4 November 2026. The IRD treats the OECD crypto-asset reporting standard as part of the local pack. Comparator facts come from SI 2025/744 and the IRAS CARF e-Tax Guide of 11 August 2026.

Related:Taxonomy KPI advice would narrow mandatory OpEx reporting

What the reporting duties actually require

Clause 3 adds a new Part 8B, proposed sections 50M to 50Y, to the Inland Revenue Ordinance. Under proposed section 50M(1), a reporting crypto-asset service provider effectuates exchange transactions for customers as a business. The IRD's examples are dealers, brokers, exchanges and automated-teller operators. Relevant crypto-assets leave out central bank digital currencies, specified electronic money products, and crypto-assets closed to payment and investment use, and the Bills Committee report gives closed-loop loyalty points, confined to one airline or retail group, as the Administration's example.

A Hong Kong reporting crypto-asset service provider is the person on whom the Inland Revenue Ordinance, once the Crypto-Asset Reporting Framework provisions take effect, places registration, due diligence and an annual return, and the test is nexus under proposed section 50N rather than a Securities and Futures Commission licence. Any one of four links is enough: tax residence in Hong Kong, incorporation or organisation under Hong Kong law, management from Hong Kong, or a regular place of business, including a branch. Proposed section 50N(10) treats an individual as resident where the individual ordinarily resides in Hong Kong, stays more than 180 days in a year of assessment, or stays more than 300 days across two consecutive years of assessment. The Inland Revenue Department requires a portal account on or before 31 January of the year after the year the nexus is first met, where the file is full and where it is empty. Proposed section 50P requires a self-certification checked against records the provider already holds.

Proposed section 50Q(4)(b)(iii), as introduced, limited a provider whose relationships were confined to a reportable population of zero to a simplified return. Citing a later OECD clarification, the Administration amended the bill so that a provider which effectuates relevant transactions for a reportable population of zero during the specified information period files a nil return. That change is item B of the 40 amendments in LC Paper CB(1)1376/2026, and the voting record shows the Secretary's amendments carried.

The amended CRS, written into Part 8A and Schedules 17C and 17D from 1 January 2028, pulls central bank digital currencies, specified electronic money products, derivatives that reference relevant crypto-assets, and investment entities that invest in those assets into the financial-account regime. Where the same gross proceeds would otherwise appear on both returns, the institution reports them under CARF and may elect to report them again under the amended CRS, as the IRD amended-CRS note summarises.

How Hong Kong, Britain and Singapore time the same standard

Sources: Bills Committee report CB(1)1327/2026, SI 2025/744, HMRC guidance, UK Budget 2025, IRAS CARF overview, the IRAS e-Tax Guide of 11 August 2026, and section 105M of the Income Tax Act 1947. The table reflects sources checked on 4 November 2026.

SI 2025/744, made on 24 June 2025 and in force on 1 January 2026, requires UK reporting cryptoasset service providers to collect user and transaction data, and the Budget 2025 document places the first reports to HM Revenue and Customs (HMRC) in 2027, including domestic users. Hong Kong and Singapore both start the domestic duty on 1 January 2027, with Singapore's first exchange in September 2028. Hong Kong's registration date falls two months before Singapore's 31 March date.

The nil return is the filing a platform makes where its reportable-customer population for the period is empty. Under the committee-stage amendment the Council passed, a Hong Kong reporting crypto-asset service provider files a nil return where, during the specified information period, it effectuates relevant transactions for a reportable-user population of zero and for a population of zero users whose controlling persons are reportable persons. Singapore's CARF e-Tax Guide, paragraph 13.1.4, requires the same nil file where a reporting Singaporean provider's reportable-user population is zero. Hong Kong registration falls on or before 31 January of the year after nexus first arises, and Singapore's Regulation 7 sets registration at 31 March, with a miss treated as an offence under section 105M(1) of the Income Tax Act 1947, whose fine is capped at S$5,000. Britain's regulation 11 prices a missed self-certification at up to £300 a user, against Hong Kong's flat level 3 fine of HK$10,000 on the customer.

"Hong Kong has been supporting international efforts in enhancing tax transparency and combating cross-border tax evasion. To fulfil our international obligations and support international efforts in combating cross-border tax evasion, we propose amending the Inland Revenue Ordinance (Cap. 112) for implementing CARF and the amended CRS. This is of paramount importance in maintaining Hong Kong's reputation as an international financial and commercial centre."

Christopher Hui, Secretary for Financial Services and the Treasury, gave that account in the Inland Revenue Department press release of 20 May 2026.

What a summons already showed about crypto tax records

On 28 November 2017, United States Magistrate Judge Jacqueline Scott Corley granted in part a petition to enforce an Internal Revenue Service (IRS) John Doe summons in the Coinbase case, docket 17-cv-01431-JSC. The narrowed summons covered accounts with at least US$20,000 in any one transaction type in any one year from 2013 to 2015. Coinbase told the court the request reached 8.9 million transactions and 14,355 account holders, set against the 800 to 900 taxpayers a year who had reported bitcoin gains. The order compelled identity fields and transaction logs, and it stopped short of a money penalty on the platform.

Proposed section 51B(1AAA) lets an authorised officer seek a magistrate's warrant on reasonable grounds to suspect a due-diligence failure, and proposed section 82E offers a financial penalty in lieu of prosecution. The Administration kept a per-user measure for false-information offences, and Singapore's framework likewise runs uncapped. Section 113C of the Criminal Procedure Ordinance, chapter 221, in the text current to 14 May 2026, places fines from HK$50,001 to HK$100,000 in the level 6 band paired with imprisonment for up to three years.

The Coinbase order covered three historical years at one United States platform. CARF produces a return every year for every reportable jurisdiction on the Commissioner's list. Partner jurisdictions are published under proposed section 50M(13) and (14) as administrative lists, while the CRS list in Schedule 17E moves by gazette notice under section 50J.

What the duties mean for platforms, funds and compliance teams

For an exchange, broker or automated-teller operator with any of the four Hong Kong nexuses, the CARF clock starts on 1 January 2027 and the amended CRS clock on 1 January 2028, subject to gazettal, with registration on or before 31 January of the following year and due diligence on pre-existing users inside 12 months. The conduct perimeter is a different statute from the tax file. The FCA CP26/34 transaction-reporting switch and the FCA cryptoasset gateway show conduct and reporting calendars moving on separate clocks in Britain.

An investment entity that invests in relevant crypto-assets becomes a financial institution for amended CRS purposes from 1 January 2028, and a manager that effectuates exchange transactions also files under CARF from 1 January 2027. Gross proceeds reported under CARF stay off the CRS return unless the institution elects to report them twice. After dissolution, every former director, or a trustee where the director's seat was empty, keeps the records for six years, and section 758(2) or (4) of the Companies Ordinance, chapter 622, can amount to a reasonable excuse under proposed section 80U.

Compliance work covers nexus mapping, a self-certification refresh against know-your-customer records, and aggregation of acquisitions, disposals and transfers in the OECD schema. CP26/36 cryptoasset exclusion tests show how a conduct statute decides what sits outside a permission, a different question from the tax-reporting net. The FinCEN assessment on UBS wire records shows transaction data already functioning as evidence in a financial-crime file. The wider map sits on the regulation desk.

"The summons as narrowed by the Court serves the IRS's legitimate purpose of investigating Coinbase account holders who may not have paid federal taxes on their virtual currency profits."

Jacqueline Scott Corley, United States Magistrate Judge for the Northern District of California, wrote that sentence in the order of 28 November 2017 enforcing the IRS summons against Coinbase.

What remains after the third reading

Passage through the Council is separate from gazettal. LC Paper CB(1)1376/2026 times miscellaneous amendments to the day the new Ordinance is published in the Gazette. The 2026 automatic-exchange ordinance was passed on 17 June 2026 and comes into operation on 1 January 2027, and clause 8 on executor liability takes effect once that ordinance has commenced. CARF duties and the amended CRS keep the voting paper's dates, 1 January 2027 and 1 January 2028.

The Commissioner publishes partner jurisdictions on the IRD website, outside negative vetting. Until those names appear, the set of reportable residences stays unpublished. The Secretary said on 20 May 2026 that exchange starts from 2028, on confidentiality and on reciprocity, so a 2027 domestic return can sit at the IRD before any outbound exchange.

The Bills Committee recorded a plan to issue guidance and a self-assessment tool after passage, with the tool's result marked as reference only. The Secretary for Financial Services and the Treasury may amend Schedule 17EA by gazette notice subject to negative vetting under section 34 of the Interpretation and General Clauses Ordinance, chapter 1.

TL;DR

The Legislative Council voting record for 4 November 2026 shows the crypto-asset reporting bill passed its Third Reading at 14:38:45 after a Second Reading at 14:26:49. CARF duties are timed for 1 January 2027 and the amended Common Reporting Standard for 1 January 2028, with the first information exchange planned for 2028. Providers register on the Inland Revenue Department portal, collect self-certifications and file aggregated transaction data, or a nil return where the reportable population is empty. The Legal Service Division puts the offence range at a level 3 fine of HK$10,000 through to a level 6 fine and three years' imprisonment. Singapore's regulations take effect on the same January 2027 date, with a first exchange in September 2028.

Frequently asked questions

Who must file crypto-asset transaction data under Hong Kong's new reporting duties?

A Hong Kong reporting crypto-asset service provider is an individual or entity that, as a business, effectuates exchange transactions in relevant crypto-assets and meets any one of four nexuses under proposed section 50N: tax residence, Hong Kong incorporation or organisation, management from Hong Kong, or a regular place of business, including a branch. Portal registration is due on or before 31 January of the year after the year the nexus is first met, where the file is full and where it is empty.

Which crypto-asset transactions go into the Hong Kong annual return?

The Inland Revenue Department describes three classes of relevant transaction: an exchange between a relevant crypto-asset and fiat currency, an exchange between relevant crypto-assets, and a transfer, including a reportable retail payment and a transfer to an external wallet. Relevant crypto-assets leave out central bank digital currencies, specified electronic money products, and crypto-assets the provider has adequately determined are closed to payment and investment use. For each asset, proposed section 50R calls for the gross amount or fair market value, the number of units and the number of transactions, plus identity and tax-residence fields.

What nil return does a Hong Kong reporting platform file?

Item B of the amendments in LC Paper CB(1)1376/2026, which the Council adopted on 4 November 2026, provides that a Hong Kong reporting crypto-asset service provider files a nil return where, during the specified information period, the population of reportable users for whom it effectuated a relevant transaction is empty, as is the population of users whose controlling persons are reportable. The gazetted text at proposed section 50Q(4)(b)(iii) had spoken of a simplified return tied to relationships. The later OECD clarification, which the Administration accepted, ties the slim file to transactions. Portal registration remains due in either case.

When do Hong Kong's crypto-asset reporting duties start, and when does information leave the city?

On the voting-arrangement paper, CARF amendments in Part 2, Division 1, take effect on 1 January 2027, aside from clause 8 on executor liability, which follows commencement of the 2026 automatic-exchange ordinance. Amended CRS provisions take effect on 1 January 2028. The Secretary for Financial Services and the Treasury said on 20 May 2026 that automatic exchange with suitable partners is planned from 2028, on a reciprocal basis and subject to confidentiality. The Commissioner names partner jurisdictions on the department's website under proposed section 50M(13).

What penalties attach to a missed file or a misleading crypto-asset self-certification?

Legal Service Division Report LS26/2026 puts the Part 8B offence range at a level 3 fine, stated as HK$10,000, through to a level 6 fine and imprisonment for up to three years. The Bills Committee report fixes the offence of knowingly or recklessly providing a materially misleading self-certification, proposed section 80(2ZE), at that level 3 amount, aligned with sections 80(2E) and 80(2F). Certain false-information offences scale with the number of users and controlling persons. Proposed section 82E allows a financial penalty in lieu of prosecution, with an appeal to the Board of Review.

Does a passed third reading put the crypto-asset reporting Ordinance into force?

The voting record for 4 November 2026 shows the Third Reading carried at 14:38:45, after the Second Reading at 14:26:49 and after the Secretary's amendments were adopted. The Inland Revenue Department's CARF page, read after the vote, still described the measure as a bill awaiting enactment. LC Paper CB(1)1376/2026 holds the main CARF duties to 1 January 2027 and the amended CRS to 1 January 2028, while miscellaneous provisions take effect on the day of publication.

The discussion is informational analysis only, and the Inland Revenue Ordinance, Inland Revenue Department guidance and qualified legal and tax advice supersede it for any decision a firm or an individual takes.