Hong Kong CARF and Amended CRS Bill 2026 Reaches LegCo
Hong Kong's Inland Revenue Department has confirmed that the Inland Revenue (Amendment) (Crypto-Asset Reporting Framework and Amended Common Reporting Standard) Bill 2026 has been gazetted and introduced into the Legislative Council (LegCo) for its First Reading and Second Reading. For accounting firms, auditors, and CFOs with Hong Kong-nexus operations or clients, this is the clearest signal yet that automatic exchange of crypto-asset account data between Hong Kong and partner jurisdictions is no longer a distant regulatory concept. It is a legislative reality in motion, and the preparation window is now.
What the Bill Proposes
The bill gives domestic legal effect to the OECD's Crypto-Asset Reporting Framework (CARF) and to the Amended Common Reporting Standard (ACRS). CARF was developed by the OECD to close the information gap that existed because traditional CRS rules, designed for banks and brokers, did not capture crypto-asset transactions. The amended CRS extends the original standard to cover electronic money products and certain indirect investments in crypto assets, ensuring the two regimes work in tandem.
The Core Reporting Obligation
Under CARF, entities classified as Reporting Crypto-Asset Service Providers (RCASPs) must identify their users, determine tax residency, and report transaction-level data to the local tax authority, which then exchanges that data automatically with the relevant foreign tax administration. The categories of reportable transactions include exchanges between crypto assets and fiat currencies, exchanges between different crypto assets, and transfers of crypto assets above defined thresholds.
How the Amended CRS Fits In
The Amended CRS updates the definitions and procedures within the existing Common Reporting Standard to capture financial products that were not contemplated when CRS was first adopted. This includes certain tokenised instruments and indirect exposures to crypto assets held through investment vehicles. For Hong Kong reporting financial institutions that already operate CRS compliance programs, the amendment creates an obligation to review and extend their due-diligence and reporting procedures rather than build a wholly separate system from scratch.
The Legislative Timeline So Far
The IRD press release confirms two distinct procedural steps: the bill was first gazetted, placing it on the official public record, and then introduced into LegCo for its First and Second Readings. In Hong Kong's legislative process, the First Reading is a formal introduction with no debate; the Second Reading opens the substantive debate on the bill's principles. A bills committee typically scrutinises the detail before a Third Reading and passage. The bill has not yet passed. However, once a bill of this nature reaches LegCo, substantive amendments to the core reporting architecture are uncommon, and firms should treat the proposed framework as the working compliance target.
Who Is Caught: Identifying Your RCASP Status
The OECD CARF guidance defines an RCASP as any entity that, as a business, provides services effectuating exchange transactions in crypto assets for, or on behalf of, customers. In Hong Kong's context, this maps closely onto entities licensed or seeking licensing under the Securities and Futures Commission's virtual asset trading platform regime, as well as over-the-counter desks, custodians, and certain DeFi interface operators depending on how the local implementation legislation defines the boundary cases.
Entities That Need to Act Now
Virtual asset trading platforms licensed or applying for a licence under the SFC regime are the most direct targets. However, the scope extends further. Corporate treasury functions that hold and transact in crypto assets on behalf of group entities, family offices investing in digital assets through Hong Kong-incorporated vehicles, and fund administrators servicing crypto funds should all assess whether their activities bring them within the RCASP definition as it will be enacted locally. Accounting firms advising any of these clients should flag the issue proactively rather than waiting for implementing guidance.
Entities Likely Outside the Scope
Purely passive holders, such as a company that simply holds Bitcoin on its balance sheet without facilitating third-party exchange services, are generally not the primary target of CARF. However, the amended CRS may still affect their existing CRS reporting obligations if they are already classified as reporting financial institutions. This is not a binary safe harbour, and legal advice on the precise scope of the local enactment will be essential once the bill is passed.
Accounting and Reporting Implications
CARF reporting is fundamentally a data problem before it is a tax problem. An RCASP must be able to produce, for each reportable user in each reportable period, the aggregate gross proceeds from crypto-to-fiat exchanges, the aggregate value of crypto-to-crypto exchanges, and net transfer amounts above the threshold. Producing those figures accurately requires transaction-level records that many firms currently do not hold in the structured format the standard demands.
System Readiness and Crypto Accounting Software
Firms and their clients that rely on generic crypto accounting software or manual spreadsheets are likely to find that their current setup cannot produce a CARF-compliant report without significant rework. The data fields required under CARF, including wallet addresses, transaction hashes, asset types, and the fiat-equivalent values at the time of each transaction, go well beyond what most accounting general ledgers capture by default. Now is the right time to audit the technology stack and identify gaps, so that remediation can be completed before the bill passes and a commencement date is set.
Classification Under Hong Kong GAAP and IFRS
For entities preparing financial statements under Hong Kong Financial Reporting Standards (which align closely with IFRS), the classification and measurement of crypto assets remains a live issue. CARF reporting does not change the accounting standards, but it will surface transaction volumes and valuations that must be reconciled with what appears in the financial statements. Auditors should anticipate that CARF data submitted to the IRD will eventually be cross-referenced against disclosed figures, raising the stakes for consistent treatment across reporting obligations.
Tax Compliance Considerations
Hong Kong operates a territorial profits tax system. Gains on crypto assets are taxable only where they arise from a trade or business carried on in Hong Kong, and there is no capital gains tax. However, CARF is an information-exchange mechanism, not a new tax. Its purpose is to give tax authorities in partner jurisdictions the data they need to assess whether their own residents have disclosed crypto income correctly. Hong Kong residents using overseas platforms will face equivalent scrutiny from those jurisdictions once their own CARF regimes are live. Conversely, non-residents using Hong Kong-based platforms will have their data shared with their home authorities.
Implications for Dual-Jurisdiction Clients
Clients with tax residency in a jurisdiction that has already committed to CARF implementation, including many OECD members, should be advised that their Hong Kong crypto-asset activity will become visible to their home tax authority once the exchange relationship is activated. Any historic under-reporting of crypto gains or income in those jurisdictions is a risk that needs to be assessed now, before the data flows begin. Voluntary disclosure windows in various jurisdictions typically offer more favourable treatment than post-exchange enforcement.
What Accounting Firms and CFOs Should Do Before the Bill Passes
Waiting for Royal Assent and implementing regulations before beginning preparation is the highest-risk approach. The legislative timeline from Second Reading to commencement can be shorter than firms expect, particularly for a bill that implements an internationally agreed standard. The following steps are practical and can begin immediately.
Immediate Actions
First, map your client base and your own operations against the RCASP definition and flag every entity that could plausibly fall within scope. Second, conduct a data-readiness audit: identify what transaction data is currently captured, in what format, and whether it can produce the fields CARF requires. Third, engage with the digital asset accounting software or crypto bookkeeping software your clients use and ask vendors directly whether their roadmap includes CARF reporting templates for Hong Kong. Fourth, review existing CRS compliance procedures to understand the delta that the amended CRS creates, because the two work together and a combined review is more efficient. Fifth, brief senior clients and audit committees now, because CARF compliance will require board-level sign-off on data-handling policies and potentially on user due-diligence procedures that go further than current KYC requirements.
Hong Kong's move to implement CARF is consistent with the global adoption timeline the OECD has been coordinating. Several jurisdictions have already legislated or are in advanced consultation. For context on how similar cross-border information obligations are developing in other markets, the trajectory described in FATF's seventh targeted update on virtual assets provides useful background on the direction of international standards. Firms advising clients across multiple jurisdictions should also review how licensing exits reshape crypto accounting obligations to understand the cascading compliance consequences when a platform changes its jurisdictional footprint.
Frequently Asked Questions
What is CARF and why does it matter for Hong Kong?
CARF stands for Crypto-Asset Reporting Framework. It is an OECD standard that requires reporting crypto-asset service providers to collect and automatically exchange transaction data with partner tax authorities. Hong Kong's bill would give this standard domestic legal effect, meaning Hong Kong-based platforms will be required to report user data to the IRD for onward exchange with foreign tax administrations.
How does this differ from the existing Common Reporting Standard?
The original CRS was designed for traditional financial accounts, such as bank deposits and brokerage accounts, and did not capture direct crypto-asset holdings. The Amended CRS extends CRS to cover electronic money products and indirect crypto exposures through investment vehicles. CARF handles direct crypto transactions. Together they are intended to cover the full spectrum of digital asset activity.
Which entities in Hong Kong will be classified as RCASPs?
Any business that facilitates exchange transactions in crypto assets for customers is the primary target. SFC-licensed virtual asset trading platforms are the clearest example, but the scope can extend to OTC desks, custodians, and certain fund structures. Passive holders are generally not RCASPs, but they should still review how the amended CRS affects any existing CRS obligations.
Does CARF create a new tax in Hong Kong?
No. CARF is an information-exchange mechanism, not a new tax. Hong Kong's territorial profits tax rules apply as before. The framework gives overseas tax authorities data on their residents' crypto activity, which those authorities may then use under their own domestic tax rules.
What should firms do right now if they are not sure whether they are in scope?
Begin with a scoping exercise against the OECD's published CARF guidance and the bill's definitions once the full text is available from the IRD. Engage legal and tax advisers familiar with Hong Kong's virtual asset regime. Do not wait for implementing regulations before starting the data-readiness audit, because remediation of technology gaps typically takes longer than the legislative timeline allows.