A plain reading of the OECD CARF text for individual holders, checked against the State Secretariat for International Finance FAQ, which is clearer than most coverage about how much of the framework Switzerland actually switched off.
Most coverage of CARF focuses on the timeline: when will data cross borders, which countries are included, what does the Swiss delay actually mean. Those are reasonable questions, and I have written about them separately.
What this field note covers is a different question: when CARF does operate, exactly what does it report about you?
That question matters more than the timeline. The timeline tells you when. The data tells you what your exchange already knows — and what tax authorities will eventually receive.
What CARF Is Actually Designed to Collect
CARF was published by the OECD in 2022 and modelled structurally on the Common Reporting Standard that has governed traditional bank account reporting since 2014. The design logic is the same: identify the institution holding the data, require that institution to collect standardized information, and create a mechanism for sharing it automatically between tax authorities.
For traditional banking under CRS, the relevant institution is the bank and the relevant data is account balances. For CARF, the relevant institution is the Reporting Crypto-Asset Service Provider — your exchange, your custodian, your Swiss crypto bank — and the relevant data is transaction activity.
This is the first structural difference from what most people expect. CARF is not primarily about what you hold. It is about what you do.
A common misreading
A common assumption is that CARF works like a crypto version of CRS: report the balance, share the balance. The actual framework is more transactional. It is your trading history, your transfers, your proceeds — not a static snapshot of holdings — that ends up in the report. That distinction has real implications for how you think about compliance planning.
The Four Categories of Data Collected About You
Under the CARF framework, RCASPs must collect and retain four categories of information about individual account holders.
Category 1: Identity data. Your full legal name, date of birth, current residential address, and jurisdiction of tax residence. For individuals, this is the KYC data your exchange already collects — CARF formalizes which elements must be verified and retained.
Category 2: Tax identification. Your Taxpayer Identification Number (TIN) in each jurisdiction where you are tax-resident. For Swiss residents, that is your AHV number. If you are a foreign national with obligations in another jurisdiction, RCASPs must collect the TIN for that country too. Entities must also provide their global intermediary identification number or equivalent.
Category 3: Transaction data — by type, not individually. This is the category that surprises most people. CARF does not require your exchange to submit a line-by-line record of every trade you made. Instead, it requires aggregate reporting by transaction category and by crypto-asset type. The categories are:
- Exchanges of crypto for fiat currency (gross proceeds, by asset)
- Crypto-to-crypto swaps (fair market value of assets disposed of, by asset)
- Transfers to external wallets not associated with another RCASP (fair market value of assets transferred)
- Retail payments made in crypto (fair market value)
Each category is reported on an annual aggregate basis — total amount received, total fair market value disposed of, for each relevant asset type across the full reporting year.
Category 4: Transfer destination indicators. When you transfer crypto out of your exchange to a wallet not held by another RCASP, the service provider must indicate whether the destination is your own self-hosted wallet or a third-party wallet. This “transfer wallet” element exists specifically to flag movements to self-custody — not to penalize self-custody (which is legal and common in Switzerland), but to allow tax authorities to trace the data trail when assets move off-exchange.
What CARF Does Not Report
The framework has clear limits, and understanding them is as important as understanding the scope.
DeFi and decentralized protocols are out of scope. If you interact directly with a decentralized exchange, a lending protocol, or a yield farm — without a Swiss-supervised intermediary involved — there is no RCASP to report on your behalf. CARF’s reporting obligation falls on institutional service providers. Peer-to-peer transactions and direct smart contract interactions remain outside the framework as currently written — a category that includes the ordinary wallet-to-wallet USDT transfer on TRON, where no RCASP is involved at any step.
Self-custodied assets held without service provider involvement are out of scope. If you acquired crypto outside Switzerland, hold it in a hardware wallet, and have never transferred it through a Swiss exchange or custodian, no Swiss RCASP has collected information on those holdings. CARF reporting would not apply. This does not affect your Swiss wealth tax obligations, which exist independently.
Non-tradable digital collectibles are excluded. The framework covers assets that “can be used for payment or investment purposes.” NFTs with no secondary market, limited-use gaming tokens, and similar assets fall outside the definition of relevant crypto-assets.
Account balances are not the primary reporting element. Unlike CRS, which reports ending balances, CARF focuses on transaction flows. A holder who buys Bitcoin through a Swiss exchange and does nothing else for a year would have limited reportable activity — the acquisition event itself, and potentially a fair market value figure for any fiat-to-crypto exchange.
Individual vs. Entity: How CARF Treats Them Differently
This distinction is often collapsed in general coverage but matters practically for people with corporate holding structures.
For individuals, CARF reporting is triggered when an individual holds a reportable account — meaning they hold crypto-assets through an RCASP and are tax-resident in a reportable jurisdiction. The data collected is personal: name, address, TIN, and transaction aggregates on their behalf.
For entities (companies, foundations, trusts, partnerships), the reporting obligation is more layered. RCASPs must look through the entity to identify its controlling persons — the natural individuals who ultimately own or control the entity. This is the same beneficial ownership standard used under CRS. An entity that holds crypto through a Swiss exchange triggers reporting on both the entity itself and on its controlling persons, if those persons are tax-resident in reportable jurisdictions.
| Individual Holder | Entity Holder | |
|---|---|---|
| Primary reportable person | The individual directly | The entity + controlling persons |
| Identity data required | Name, address, DOB, tax residency | Entity name, registration, jurisdiction + controlling person details |
| TIN required | Individual TIN | Entity TIN + individual TIN of controlling persons |
| Transaction data | Aggregated by asset type and category | Same, at account level |
| Look-through obligation | N/A | Yes — RCASP must identify beneficial owners |
| Passive NFI rule | N/A | Entities with primarily passive income must identify controlling persons |
The practical implication: if you hold crypto through a Zug-registered foundation or GmbH rather than personally, CARF does not let the entity structure shield you from personal identification. The look-through rule exists precisely to prevent that.
How CARF Compares to FATCA and CRS
Readers who have followed the older international tax transparency frameworks will recognize the structural DNA. CARF was designed to extend and complement — not replace — the existing system.
CRS (Common Reporting Standard, 2014): The multilateral framework that Switzerland and 100+ countries use to exchange traditional financial account information. CRS reports account balances, interest and dividend income, gross proceeds from sales of financial instruments. It covers bank accounts, securities accounts, and similar. CARF is the crypto extension of CRS — same multilateral architecture, same exchange mechanism, different asset class and reporting logic (transactions, not balances).
FATCA (2010): The US law that requires non-US financial institutions to identify and report on US-person account holders. Unlike CRS and CARF, FATCA is bilateral — it runs between the US and individual countries through intergovernmental agreements, rather than through a multilateral exchange network. Switzerland has a FATCA IGA in place. How crypto held at a foreign platform sits inside FATCA’s “specified foreign financial asset” definition is a question the IRS has not answered with a dedicated rule, so US persons with Swiss crypto positions are working from general principles and their advisers’ reading of them rather than from a bright line.
The interaction between the three frameworks is formally managed to avoid duplication: where a transaction is already reportable under CRS, CARF is designed to turn off overlapping reporting. The deduplication logic is built into the framework.
| CARF | CRS | FATCA | |
|---|---|---|---|
| Primary asset class | Crypto-assets | Bank accounts, securities | All foreign financial accounts |
| Architecture | Multilateral (OECD) | Multilateral (OECD) | Bilateral (US-driven) |
| What is reported | Transaction aggregates | Account balances + income | Account balances + income |
| Who reports | RCASPs | Financial institutions | Foreign financial institutions |
| Effective for Switzerland | Legal basis in place, provisions not applicable in 2026; 2027 at the earliest | Active, ongoing | Active (FATCA IGA since 2014) |
| DeFi coverage | No (no RCASP involved) | No | No |
The key insight from this comparison: CARF is not a rupture with the existing transparency system. It is a logical extension. Countries that have already adapted to CRS — which includes Switzerland, which has been a CRS participant since 2017 — already have the institutional infrastructure for CARF. The new piece is crypto-specific reporting at the RCASP level.
The Swiss Postponement: What It Switches Off and What It Does Not
Switzerland has the legal basis for CARF on its statute book — Parliament approved the multilateral agreement in its final vote of 26 September 2025. But the Federal Council can only ratify that agreement once Parliament has approved the partner states, and in November 2025 the National Council’s Economic Affairs and Taxation Committee suspended exactly that bill, by 18 votes to zero with four abstentions, pending clarity on how other states are proceeding and how the standard is read internationally. On 26 November 2025 the Federal Council confirmed the consequence.
The postponement is wider than “delayed exchange,” which is how most of the coverage framed it.
Nothing at the RCASP level is running. The State Secretariat for International Finance states plainly that the due-diligence provisions relating to CARF “will not apply in 2026” and that “reporting providers of crypto services will not be required to exercise due diligence under Swiss law in 2026.” There is no CARF registration duty this year either, and Switzerland will not receive crypto-asset data from abroad for the 2026 calendar year in return. Implementation can start on 1 January 2027 at the earliest, on a date Parliament sets.
The practical implication for privacy-conscious holders is not the one the January coverage suggested. There is no pool of CARF data sitting in Swiss institutional hands waiting for a border to open, because 2026 generated none. What your exchange holds is the KYC and transaction history it kept anyway, for its own AML and commercial purposes — the same material it held before CARF was drafted. Some providers have voluntarily aligned their self-certifications with the OECD format from January 2026, which SIF explicitly permits; that is a commercial decision, not a legal duty, and it varies by platform.
What this means in practice
It is tempting to read the postponement as relief. Read against the SIF FAQ, it is narrower than that. Nothing is being collected under CARF now, which makes the window genuinely quiet — but it closes on a date Parliament has not announced, and the twelve-month self-certification clock for existing users only starts the day before activation. The time is for reviewing your holding structure and checking that your domestic filings are accurate, not for assuming the system went away. Those are different things, and conflating them is the easiest planning error to make.
The Privacy and Compliance Trade-Off: A Plain Read
CARF is a transparency framework. Its stated purpose is to close the gap that allowed crypto-asset holders to hold and transact in ways that were invisible to tax authorities who relied on traditional financial reporting.
Whether that is a good thing depends on your starting position.
For holders with clean filing histories — Swiss residents who declare their crypto portfolios in the annual wealth tax return, who report staking income as capital income, who have not used foreign exchanges specifically to avoid domestic reporting — CARF adds a reporting layer at the institutional level but does not change their legal position. They are already in compliance. CARF confirms what their filings already reflect.
For holders with material unreported crypto positions — in any jurisdiction, not just Switzerland — CARF represents a genuine shift in risk. The window is the period before Switzerland activates the framework with a first partner state, which cannot happen before 1 January 2027 and needs a parliamentary decision that has not been taken. Self-disclosure mechanisms exist in Switzerland (Nachdeklaration) and in most other jurisdictions. The mechanics and timelines vary by country; professional advice specific to your situation is the relevant first step, not general reading.
For holders in jurisdictions not on the reportable list — countries that are not CARF partner states — the distinction only starts to matter on the day Switzerland switches the framework on. From that point, a Swiss RCASP will collect and hold your data under its due-diligence duties like anyone else’s, but there is no partner state for it to be exchanged with, so it stays in Switzerland. Before that day — which includes all of 2026 — nothing is being collected under CARF at all, for residents of partner and non-partner countries alike. This is a meaningful distinction for holders in the US (which has FATCA but is not a CARF exchange partner in the conventional multilateral sense), in China, and in Saudi Arabia. Inside the US, the domestic counterpart is a broker form rather than a data exchange between states: Form 1099-DA, explained box by box.
What to Do With This Information
The purpose of understanding CARF’s reporting scope is not to find gaps to exploit — most gaps in the current version will not survive the next update cycle. The purpose is to understand what information already exists at your exchange or bank, what will eventually reach foreign tax authorities, and whether your current filing practices reflect that accurately.
Three practical questions worth working through:
Is your tax residency information current at every Swiss institution you use? RCASPs are required to collect self-certifications from account holders confirming tax residency. If you have moved countries, changed your primary residence, or have dual obligations, your exchange’s records may not reflect your current situation. CARF will create a formal self-certification obligation once Switzerland activates the framework, and for accounts that already exist on the day before activation the provider gets a twelve-month window to collect it — so the request will land in your inbox some time after the switch, not before it. Outdated residency information at the institutional level creates compliance risk regardless: your domestic filing duty does not wait for CARF.
Are your foreign tax filings consistent with what your Swiss exchange holds? The transaction data your exchange reports — aggregate exchanges, gross proceeds, transfer amounts — should be consistent with what you have declared to your domestic tax authority. Where there are gaps, the exchange between Switzerland and your home country (when it begins) will create an audit trail that did not exist before.
Do you hold crypto through an entity structure? If so, the look-through rules matter. The controlling person identification at your Swiss custodian should reflect accurate beneficial ownership. Entity structures do not create opacity under CARF — they create a second layer of reporting.
Related field notes: Switzerland’s CARF Delay Explained covers the 2027 timing question in detail — what the delay actually means for the exchange schedule and why Switzerland paused. The Swiss Crypto Tax Advantage covers the wealth tax and capital gains regime that operates independently of CARF — the tax obligations that exist whether or not any data is exchanged. Declaring Crypto on Your Swiss Tax Return walks through the annual declaration process that CARF data is ultimately designed to cross-reference.