CARF in Australia: October 2026 Draft Law, Timeline and ATO Records

Australia has moved from consultation to draft law. On 15 October 2026 Treasury released exposure draft legislation to implement the OECD Crypto-Asset Reporting Framework and a domestic crypto reporting regime; consultation closes on 28 October 2026. Nothing is enacted yet. This guide explains the proposed timeline, what the ATO already receives through data matching and which records users should keep.

Is CARF already operating in Australia in 2026?

No. Australia has moved from consultation to draft law, but nothing is enacted yet. On 15 October 2026 Treasury opened a consultation titled "Crypto asset tax transparency - draft legislation" and released an exposure draft with explanatory materials. Submissions close on 28 October 2026. According to the consultation page, the draft "provides a framework to introduce the OECD Crypto-Asset Reporting Framework into Australian law", introduces a domestic crypto asset reporting regime for transactions involving Australian residents and updates the existing Common Reporting Standard.

The road here was slow. Treasury first consulted from 21 November 2024 to 24 January 2025, and in its March 2025 digital asset statement the Government said it was still considering feedback. The measure itself was announced in the 2025–26 Mid-Year Economic and Fiscal Outlook. Claims that Australian exchanges “automatically report under CARF from 1 July 2026” were never backed by an official instrument and remain wrong.

October 2026: what the draft legislation proposes

The exposure draft is titled "Treasury Laws Amendment Bill 2026: Tax information reporting". It would add a new Subdivision 396-D to Schedule 1 of the Taxation Administration Act 1953. The design is a framework: regulations would prescribe international reporting frameworks such as CARF, and the Minister would make rules on who reports, which information, which periods and which due dates. Those regulations and rules have not been published, so several details below are stated as intentions in the explanatory materials.

For individual users, the domestic regime is the larger change. CARF exchanges information between tax authorities, largely as annual aggregates. The domestic regime would give the ATO transaction-level data from Australian providers: for each transaction, the asset name, the date and time, the value in Australian dollars and transaction IDs, together with user details such as name, address, ABN and bank account details. The explanatory materials say the regime "builds on existing activities by the ATO to collect information about cryptocurrency transactions from certain service providers under a targeted data-matching program", and note that information received under that program "does not include details of crypto-asset transactions or holdings with foreign providers".

The timeline still depends on Parliament. Because commencement is tied to Royal Assent, a 2027 start requires the bill to pass in time. The explanatory materials are also not fully consistent on the domestic start: their overview speaks of information being reported to the ATO in 2028, while quarterly periods from 1 July 2027 would imply earlier reports, so the first actual due date depends on the Commissioner's legislative instrument. The OECD list of CARF commitments, updated on 14 September 2026, records 77 committed jurisdictions and places Australia among those planning first exchanges by 2028.

Draft legislation is not yet law

This distinction matters for both users and providers. A policy commitment can signal future reporting, but software should not display an unverified Australian CARF deadline as a filing obligation. The correct workflow is to monitor Treasury, legislation.gov.au and ATO guidance, then update the report when legislation and operational specifications exist.

What the OECD framework would generally report

If implemented using the OECD model, reporting crypto-asset service providers would perform tax-residence due diligence and report annual information for relevant users. The model covers providers that effect exchange transactions for or on behalf of customers, including certain exchange, broker and platform functions.

• the user's name, address, tax residence and tax identification number;
• fiat-to-crypto acquisitions and crypto-to-fiat disposals;
• crypto-to-crypto acquisitions and disposals;
• reportable retail payment transactions;
• other incoming and outgoing transfers known to the provider;
• transfers to wallet addresses not known to be associated with another financial intermediary;
• aggregate value, units and transaction count by relevant crypto asset and transaction type.

The numbers are primarily annual aggregates. They are not necessarily transaction-level tax schedules and do not automatically contain the user's complete Australian cost base. Australia could also make design choices within the permitted framework, which is why proposed scope should not be described as final domestic law.

What the ATO can receive today

CARF is not the beginning of ATO crypto visibility. The ATO's crypto assets data-matching program protocol covers data obtained from designated service providers for the 2014–15 to 2025–26 financial years. The stated program is used to identify taxpayers and compare crypto activity with tax returns.

Data matching and CARF are different mechanisms. Domestic information gathering can operate without CARF, while CARF is designed for standardised annual reporting and international exchange between participating tax authorities. A taxpayer should therefore not infer that a pending CARF law means exchange activity is unavailable to the ATO.

Equally, a data match is not a completed tax calculation. A provider may record proceeds, deposits and withdrawals without knowing a cost base created on another exchange or wallet. The ATO can raise a discrepancy, but the taxpayer still needs evidence to explain transfers, cost base and classification.

Self-custody, DEX activity and DeFi

A personal self-custody wallet is not itself a reporting intermediary merely because an investor controls it. However, the sending exchange may retain and potentially report the withdrawal address, and the public blockchain records the transfer. Under the OECD model, transfers to addresses not associated with another provider are a specific reporting category.

This does not make a transfer between your own wallets a CGT disposal. The ownership must remain unchanged, and records should link the outgoing and incoming transaction using asset, amount, network, hash, time and fee. If the asset later reaches a new exchange without its original cost base, that evidence prevents the inbound deposit from being treated as unexplained acquisition data.

DEX swaps, liquidity pools, wrapping, bridges, liquid staking and lending can involve more than a simple transfer. Reporting data does not decide whether beneficial ownership or rights changed. Review the Australian staking and DeFi guide and document the protocol terms and tokens received.

CARF reporting would not replace Australian tax rules

Australian tax treatment still depends on how the crypto asset is held and used. An investor may account under the CGT rules; a business or trading activity may treat crypto as trading stock and ordinary income. Staking rewards, airdrops and service income require separate analysis. The Australia crypto tax guide covers the current categories.

A reportable disposal value is not automatically a capital gain. The calculation may require acquisition cost, incidental costs, market value substitutions, cost-base adjustments, prior income amounts and capital loss rules. A provider's annual aggregate also does not establish eligibility for the CGT discount or whether a user is carrying on a business.

Australian tax records generally need amounts in Australian dollars at the relevant time. Keep the source and timestamp of each conversion. Never insert a zero cost or zero price simply because an exchange export is incomplete; flag the item as not calculable until reliable evidence is obtained.

Why a provider aggregate is not your taxable gain

Suppose a future provider statement separately lists a crypto-to-crypto disposal valued at A$4,000 and an outgoing transfer valued at A$4,000. On the underlying facts, you swapped a BTC parcel costing A$1,500 for ETH worth A$4,000, then moved that same ETH to your own hardware wallet with unchanged beneficial ownership. Ignore fees and assume short-held investment BTC in 2025–26. The BTC event creates an A$2,500 capital gain; the ETH starts at A$4,000 acquisition value. The wallet transfer adds no second A$4,000 gain.

Give each provider category its own reconciliation entry: BTC swap, ETH acquisition and linked ETH withdrawal/receipt. Save trade ID, transfer hash, wallet ownership and the AUD valuation source. Do not add A$4,000 disposal value and A$4,000 transfer value into A$8,000 taxable income. Equally, calling the whole sequence an own transfer would omit the genuine BTC disposal.

This is a hypothetical reconciliation using the OECD model, not a claim that Australia has issued such a CARF statement or fixed its reporting period. Even under current domestic data matching, the same evidence explains why gross flows differ from gains. A future statement's calendar-year aggregation would also need to be reconciled to Australia's 1 July–30 June tax year.

CARF-ready record checklist for Australian users

1. Download original CSV and statements from every exchange and broker.
2. Record all wallet addresses, networks and ownership evidence.
3. Match transfers by transaction hash, asset, quantity, time and fees.
4. Preserve opening balances and pre-platform acquisition costs.
5. Record AUD market value and the exchange-rate source at each relevant event.
6. Separate spot disposals, income, derivatives, fees and information-only events.
7. Reconcile exchange statements with the consolidated Australian tax report.
8. Keep unresolved events in a review schedule rather than forcing a tax amount.

When an Australian CARF regime is enacted, add a provider-report reconciliation layer: compare identity, tax residence, assets, annual gross values, units and transfer totals. Differences should be explained, not silently overwritten. Typical explanations include self-transfers, incomplete provider history, fees, timing and assets acquired elsewhere.

What should crypto businesses do?

Australian exchanges, brokers and other providers now have an exposure draft to work from, not only the 2024 consultation options. They can map customer identity, tax residence, transaction types and data lineage against the OECD model, but legal scope, nexus, commencement, due dates, penalties and file format must be validated against final Australian rules.

Investors operating a crypto trading business have a different task: reconcile provider aggregates with accounting records and inventory or trading-stock treatment. The user-facing activity choice should describe actual facts, not a preferred tax result. See the guide to Australian investor versus trader classification.

Frequently asked questions

Official sources

• Australian Treasury: Crypto asset tax transparency – draft legislation (consultation 15 to 28 October 2026)
• Exposure draft: Treasury Laws Amendment Bill 2026, Tax information reporting
• Explanatory materials to the exposure draft
• OECD: CARF commitments, updated 14 September 2026
• Australian Treasury: CARF consultation and next steps
• Australian Government: March 2025 digital asset statement
• ATO: crypto assets data-matching program protocol
• OECD: Crypto-Asset Reporting Framework

Official status checked on 16 October 2026. Recheck after the consultation closes on 28 October 2026 and before relying on any commencement date.

Disclaimer: This article is for general informational purposes only and does not constitute tax advice. For individual tax advice, consult a licensed tax professional.