EU Tightens Cross-Border VAT Fraud Data-Sharing: What ECOFIN's Agreement Means for Firms
The Council of the EU reached a general approach on 5 May 2026 on a proposed amendment that would give the European Public Prosecutor's Office (EPPO), the European Anti-Fraud Office (OLAF), and the Eurofisc network significantly easier access to VAT transaction data held by member states. The move directly targets carousel fraud and Customs Procedure 42 abuse, two schemes that collectively drain tens of billions from EU public budgets each year. For accounting firms, auditors, and CFOs with cross-border EU exposure, this signals a structural tightening of the enforcement environment that will reshape how VAT compliance risk is assessed.
What the Council Position Actually Changes
The problem the reform addresses
Until now, EPPO and OLAF had no direct channel into the Eurofisc data network. Investigators wanting VAT transaction records had to run bilateral requests to each relevant member state separately, a slow and repetitive process that gave fraudulent traders time and room to operate. The reform closes that gap by creating a direct data-sharing pathway, largely preserving the Commission's original proposal with some clarifications agreed by member states at ECOFIN.
Where the file stands procedurally
The European Economic and Social Committee has already issued its opinion. The European Parliament is still preparing its own position. The ECOFIN general approach is therefore a significant milestone, but the legislative process is not complete. Firms should treat this as a signal of direction, not yet final law.
The Scale of the Problem Being Targeted
The Commission's proposal cites carousel VAT fraud alone as costing member states up to 32.8 billion euros annually. The mechanics are well understood: fraudulent actors exploit the fact that intra-EU business-to-business transactions are zero-rated for VAT, while domestic sales carry VAT. A chain of companies is constructed, VAT is charged to end buyers or claimed as a refund, and the funds are never remitted to the tax authority. Add eCommerce fraud and Customs Procedure 42 abuse (importing goods VAT-free by falsely declaring onward sale to another member state) and the total exposure runs considerably higher.
These are not niche edge cases. EPPO and OLAF have both been active in recent cross-border investigations, and the data bottleneck has been a documented constraint on how quickly cases can be built.
Compliance Implications for Firms
Heightened scrutiny of intra-EU transaction chains
When EPPO and OLAF gain direct Eurofisc access, the speed and depth of cross-border VAT investigations will increase. Firms that act as intermediaries in complex intra-EU supply chains, or that advise clients who do, need to ensure their VAT accounting records are precise, complete, and defensible. Any gap between reported intra-community supplies and the underlying transaction data becomes far more visible once investigators can cross-reference Eurofisc intelligence without going through bilateral exchanges.
Customs Procedure 42 exposure
CP42 abuse is specifically called out in the reform's scope. Firms involved in import logistics, bonded warehouse arrangements, or advising clients on EU customs entry points should revisit whether their VAT treatment of goods imported under CP42 is fully documented and supportable. The reform signals that this scheme is a priority enforcement target.
The role of crypto accounting software in audit-ready record-keeping
As enforcement infrastructure becomes more connected across member states, the standard for what constitutes an audit-ready VAT ledger rises with it. Firms using crypto accounting software or digital asset accounting software to manage client portfolios that include tokenised goods, NFT sales, or crypto payment flows need to ensure those records map cleanly to VAT reporting obligations. A fragmented ledger that cannot be reconciled to declared intra-EU supplies is a liability when investigators have faster access to cross-border data. Good crypto bookkeeping software should produce VAT-compatible transaction records, not just capital gains summaries. That distinction matters now more than it did twelve months ago.
For a broader view of how EU VAT digitalisation is evolving alongside this enforcement push, see our coverage of the EU ViDA implementation roadmap and what it means for VAT reporting.
What Firms Should Do Now
Practical steps before final adoption
The reform is not yet law, but the direction is clear and the ECOFIN vote reflects strong member state consensus. Three actions are worth taking now:
- Map intra-EU transaction exposure: Identify which client engagements or internal operations involve intra-community supplies, CP42 imports, or multi-jurisdictional VAT registrations. These are the areas where Eurofisc data will be most relevant to any future investigation.
- Review data quality standards: Ensure your VAT ledgers can produce a clean audit trail at the transaction level, not just period totals. Cross-border investigations increasingly rely on granular data matching. Our piece on how blockchain analytics data quality affects AML due diligence sets out the kind of rigour that is becoming the baseline expectation across financial crime disciplines.
- Update client risk assessments: If you advise businesses operating across multiple EU member states, the enforcement risk profile for VAT non-compliance has materially increased. That should be reflected in engagement risk assessments and client communications.
Frequently Asked Questions
What is Eurofisc and who participates in it?
Eurofisc is a decentralised network of national tax authority officials from EU member states who share and analyse VAT-related information to detect cross-border fraud. It operates outside standard bilateral exchange channels and is specifically designed for rapid, multilateral intelligence sharing on VAT fraud patterns.
Does ECOFIN's general approach mean the regulation is now in force?
No. A general approach means member states have agreed their negotiating position. The European Parliament must still adopt its position, after which trilogue negotiations between the Parliament, the Council, and the Commission will produce the final text. Only after that process concludes and the regulation is published in the Official Journal does it become law.
What is carousel VAT fraud and why is it so difficult to detect?
Carousel fraud involves a chain of companies, typically spread across multiple member states, that exploit the VAT exemption on intra-EU business transactions. Goods or services move through the chain, VAT is charged at one point and reclaimed at another, but the VAT collected is never remitted to the relevant tax authority. Detection is difficult because the fraud is distributed across jurisdictions, and until now investigators had to gather data through slow bilateral requests rather than a single coordinated channel.
How does Customs Procedure 42 fraud work?
CP42 allows goods to be imported into the EU VAT-free on the condition that they will be transported to another member state where VAT will be applied. Fraudsters exploit this by falsely declaring the onward destination, keeping the goods in the import country or diverting them elsewhere, and never paying the VAT that should have been due. The reform specifically targets improved data-sharing to catch these schemes faster.
What should firms with digital asset or crypto payment flows consider in relation to this reform?
Crypto and digital asset transactions that involve the sale of goods or services within the EU can create VAT obligations, particularly where the buyer is a non-taxable person. As Eurofisc's data access expands, firms whose crypto accounting software or digital asset accounting software does not produce VAT-compatible records face greater exposure. The priority is ensuring that every taxable supply, whether settled in fiat or crypto, appears correctly in the VAT ledger and can be cross-referenced to the on-chain or off-chain transaction record.
Source: European Commission DG TAXUD