DAC8

DAC8: secure the reporting obligations of your crypto-asset services

Since January 1, 2026, crypto-asset service providers must identify their users and report their transactions every year. We support you on both the tax and the technical side.

Law firmDedicated to VAT
Paris Bar103 rue La Boétie
Initial feedbackWithin 24 business hours
No decisionwithout financial impact

Crypto-asset service providers

report their users' transactions every year

The DAC8 directive (Directive (EU) 2023/2226), transposed by the 2025 Finance Act into Articles 1649 AC bis to 1649 AC sexies of the French Tax Code (Code général des impôts, hereafter "FTC") and detailed by Decree No. 2025-1276 of December 19, 2025, requires crypto-asset service providers to:

  • register with the tax authorities;
  • identify and verify their users' information;
  • report every year, by June 15 at the latest, the transactions of the previous year: the first return is due on June 15, 2027, for 2026;
  • inform users of the data transmitted.

Reporting failures can cost up to €2,000,000 per year.

Scope and obligations

Who is concerned?

Crypto-asset service providers with a link to France: authorized by the French authorities (or notified, in the case of credit institutions), tax resident in France, incorporated under French law, or managed from France or with their usual place of business in France. Staking and crypto-asset lending services fall within the scope.

Which transactions and which users?

The return covers exchanges between crypto-assets or against fiat currency, and transfers of crypto-assets from or to a user's account or address. Reportable users are residents of France or of a partner jurisdiction, as well as certain entities they control. Excluded are, in particular, listed companies, public entities and financial institutions other than investment entities.

Due diligence

Collection and verification of each user's identification information, retention of the data and of the steps taken, prior notice to users that their data will be transmitted. A user who fails to provide their information after two reminders and a 60-day period must no longer be able to carry out transactions. The provider may entrust these procedures to a third party but remains liable for them.

Penalties

  • Failure to file, omissions or inaccuracies: €15 per transaction, capped at €2,000,000 per provider and per year (Article 1736 of the FTC).
  • Breach of due diligence obligations: fine of up to €50,000.

For platforms connecting sellers and buyers, the DAC7 directive sets out comparable obligations. To learn more, read our article on the transposition of DAC8.

Schedule a free consultation →
Response from a lawyer within 24 hours
How we help

Compliance that is both tax and technical

DAC8 requires cross-referencing customer data, transaction data and tax rules. Our experience with DAC7 reporting obligations allows us to cover both sides.

search_3_fill

Audit and roadmap

  • Analysis of your services and of the scope of DAC8.
  • Identification of reportable users and transactions.
  • Timeline for collection, verification and reporting.
code_fill

Compliance implementation

  • User identification and verification procedures.
  • Extraction of transactions and generation of the reporting files.
  • User notification and filing of the return.
check_circle_fill

Ongoing support

  • Responses to requests from the tax authorities.
  • Assistance in the event of a tax audit.
  • Monitoring of European and OECD developments.
Let's discuss your project

First DAC8 return due June 15, 2027: are you ready? Let's take stock.

Why trust us?

  • Experience with regulatory reporting: we already support operators with their DAC7 obligations.
  • Dual expertise: tax and IT, for compliant and automated returns.
  • A specialized firm: our lawyers are dedicated to indirect taxation and the reporting obligations that come with it.
  • A quick response: initial feedback within 24 hours.

Let's book an appointment

Describe your situation in a few lines: a lawyer will respond within 24 hours.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Call
Free quote within 24 hours
Frequently asked questions

Everything you need to know

Can't find the answer you're looking for? Get a direct response from a lawyer.

Ask a question

What is the DAC8 directive?

Directive (EU) 2023/2226, known as DAC8, extends administrative cooperation between Member States to crypto-assets. It brings the OECD Crypto-Asset Reporting Framework (CARF) into EU law and requires crypto-asset service providers to report their users' transactions, this information then being exchanged between tax authorities.

Which providers are concerned?

Crypto-asset service providers authorized in France, or with their tax residence, registered office or management there, including for staking and lending services. The providers concerned must register with the tax authorities.

Which transactions must be reported?

Exchanges between crypto-assets, exchanges between crypto-assets and fiat currency, and transfers of crypto-assets to or from a user's account or address, carried out from January 1, 2026.

When must the DAC8 return be filed?

Every year, by June 15 at the latest, for the transactions of the previous year. The first return is due on June 15, 2027 for 2026 transactions.

What are the penalties for non-compliance?

A fine of €15 per transaction not reported, reported late or reported inaccurately, capped at €2,000,000 per year, and a fine of up to €50,000 for breaches of due diligence obligations.

How do DAC7 and DAC8 relate?

DAC7 targets platforms that connect sellers and buyers (sales, services, rentals); DAC8 targets crypto-asset service providers. Both follow the same logic: identify users, verify their information and report annually to the tax authorities.