Australia has taken a concrete legislative step toward the global surveillance of crypto asset holdings, releasing a draft bill designed to embed the Organisation for Economic Co-operation and Development's Crypto-Asset Reporting Framework — known as CARF — into domestic law. The move positions Australia within a coalition of 77 jurisdictions that have collectively committed to the framework, with the first cross-border exchanges of crypto tax data scheduled to begin in 2028. For crypto holders and exchanges operating in Australia, the message is unambiguous: the era of regulatory opacity is closing.
What CARF Actually Does
CARF is the OECD's answer to a growing consensus problem: as crypto asset markets matured and capital flows across borders became routine, traditional tax reporting infrastructure — built around banks and brokers — was simply not equipped to track digital asset activity. The framework mandates that crypto asset service providers collect and report user transaction data to their home tax authority, which then shares that data with the tax authorities of other participating jurisdictions. It is, in structural terms, the crypto equivalent of the Common Reporting Standard that already governs offshore banking disclosures across much of the developed world.
The architecture is deliberately multilateral. A single participating jurisdiction reporting in isolation would capture only a fraction of the relevant activity. But with 77 jurisdictions aligned — including major financial centres — the framework is designed to create an interlocking web of disclosure obligations that leaves very few places for undeclared crypto income to hide. Australia's draft bill is not a unilateral initiative; it is one node in a coordinated international system.
Why the 2028 Date Matters
The target year of 2028 for first international data exchanges is not arbitrary. It reflects the time required for participating jurisdictions to pass enabling legislation, build the technical infrastructure for standardised data collection, and establish the bilateral or multilateral competent authority agreements needed to actually transmit the information across borders. Australia's decision to release draft legislation now — in 2026 — suggests the government is taking the deadline seriously and is seeking to give industry sufficient lead time to build compliant reporting systems.
That lead time is genuinely necessary. Crypto exchanges and other service providers operating in Australia will need to overhaul or significantly extend their know-your-customer and transaction monitoring systems to capture the specific data points CARF requires. Identifying which users are tax residents of which jurisdictions, tracking the nature and value of each transaction, and submitting that data in the standardised format the OECD prescribes is a non-trivial technical undertaking. Firms that treat 2028 as a distant abstraction do so at their own risk.
The Broader Regulatory Momentum
Australia's move fits within an accelerating global pattern. The European Union's Markets in Crypto-Assets regulation introduced sweeping disclosure obligations for crypto service providers operating in the bloc. In the United States, the Internal Revenue Service has steadily expanded broker reporting rules to encompass digital asset transactions. Meanwhile, the Financial Action Task Force has continued to push its Travel Rule — requiring the transfer of originator and beneficiary information with crypto transactions — across member states. CARF sits atop this regulatory stack, adding a layer specifically designed for international tax information exchange rather than domestic compliance alone.
For Coinbase, Binance, and other internationally active exchanges that serve Australian customers, the compliance calculus is becoming increasingly complex. Each new jurisdiction that adopts CARF adds reporting obligations, data handling requirements, and potential audit exposure. The industry argument that crypto regulation was too fragmented to enforce coherently is eroding in real time as 77 jurisdictions move in the same direction on the same timeline.
Sovereignty, Privacy, and the Infrastructure Question
The draft bill will almost certainly generate pushback from privacy advocates and segments of the Australian crypto community who view mandatory transaction reporting as an overreach. Those concerns are not frivolous — the scope of data collection envisioned under CARF is substantial, and questions about data security, storage, and potential misuse by recipient jurisdictions are legitimate. However, from a pure policy trajectory standpoint, the direction is set. Australia has committed to CARF, the draft legislation exists, and the 2028 exchange date anchors a firm implementation timeline. Debate over the bill's specifics may refine the margins, but is unlikely to reverse the fundamental course.
What the Australian draft bill ultimately signals is that crypto tax compliance is no longer a matter of individual jurisdictional willpower — it is becoming a coordinated international infrastructure project. The 77-jurisdiction commitment is the political foundation; the 2028 data exchange target is the operational deadline; and Australia's draft legislation is the legal scaffolding being erected to meet it. For anyone who assumed that the decentralised nature of crypto assets would permanently outpace regulatory coordination, the architecture taking shape suggests otherwise.
Written by the editorial team — independent journalism powered by Bitcoin News.