CARF went live in South Africa on 1 March 2026.
As of that date, every FSCA-licensed Bitcoin exchange must report every client’s transactions to SARS automatically, and SARS exchanges that data with tax authorities in 50+ countries through the OECD’s information-sharing framework. It is the largest structural change in Bitcoin tax transparency since FSCA licensing began.
The question most South African investors are asking is straightforward: does this mean a crackdown is coming?
No. Not for compliant investors.
CARF is data infrastructure, not enforcement. For investors who have declared their Bitcoin holdings, paid their taxes and kept their records in order, it changes almost nothing. For investors whose records are incomplete or whose tax position is uncertain, the window to address that is narrowing.
| Key point | What it means |
|---|---|
| CARF live from 1 March 2026 | Every licensed exchange now reports your transactions to SARS automatically |
| Compliant investors are not at risk | If your records match your tax returns, CARF adds clarity, not exposure |
| Non-compliant window is narrowing | The Voluntary Disclosure Programme is available now. An audit changes the options. |
| Self-custody is outside CARF | Hardware wallets and peer-to-peer transactions are not reported through CARF |
| Three steps to take now | Reconcile records, consolidate platforms, consult a tax professional |
What CARF Actually Is
CARF is an OECD standard for the automatic exchange of cryptocurrency transaction data between tax authorities. South Africa adopted it through amendments to the Tax Administration Act, effective 1 March 2026, and it applies to all Crypto Asset Service Providers licensed by the FSCA, which means every regulated Bitcoin exchange operating in the country.
The data is specific and standardised. When you buy Bitcoin on an FSCA-licensed exchange, the platform captures your name, tax identification number, transaction amount in rand, the rand-equivalent value at time of purchase, the date and counterparty information. That data is reported to SARS annually, without a court order, without a tip-off and without you doing anything to trigger it.
SARS then sends it to tax authorities in 50+ jurisdictions. Those jurisdictions send equivalent data back.
The structure is identical to FATCA and the Common Reporting Standard that already applies to offshore bank accounts and foreign investment holdings. Bitcoin is now in the same reporting framework as the rest of the financial system.
What Changed on 1 March 2026
Before CARF, SARS had to actively investigate Bitcoin tax compliance. Exchange data required a court order to access. Most South African investors had no formal reporting mechanism at all, and detection relied on voluntary disclosure, audit luck or a tip-off. In practice, Bitcoin sat outside the normal compliance infrastructure.
That changed on 1 March 2026.
SARS now receives annual transaction reports directly from every major licensed exchange. The data is structured and reconcilable against your ITR12. If you bought R500,000 of Bitcoin on an FSCA-licensed exchange and declared zero capital gains, SARS can see the discrepancy without opening an investigation.
The cross-border dimension matters just as much. SARS now exchanges this data with tax authorities in 50+ countries, so if you bought Bitcoin on a foreign platform, that exchange reports you to its home authority and that authority sends the data to SARS. The networks are joined in a way they were not before.
What This Means for Compliant Investors
If your Bitcoin holdings are properly documented, your cost basis is recorded and your income and capital gains have been declared on your ITR12, CARF creates clarity rather than risk. Your records and SARS’s data will match. There is no hidden exposure.
An audit, if it happens, moves faster because SARS’s data already aligns with your return.
For family offices and corporate structures holding Bitcoin, the same logic applies. A trust holding Bitcoin, properly documented with the trustee’s tax file number, will appear in SARS’s data with consistent cost basis and transaction records. If you are using SimplB or another licensed provider, the compliance footprint is clean.
Many investors have expressed anxiety about CARF, as though it were a crackdown mechanism. It is not. CARF makes compliance visible and non-compliance visible. That distinction is the whole point: the structure now gives investors a clear reason to do things formally, because the formal record is provably there when anyone asks for it.
What This Means for Investors with Gaps
For investors whose Bitcoin history is not fully documented, or whose tax positions are uncertain, CARF represents a narrowing window.
SARS has had structured data about your exchange-based transactions since 1 March 2026. If your declared tax position does not match that data, the mismatch will be apparent when SARS reconciles its records. The question is not whether the data exists. It does. The question is whether your ITR12 reflects it.
SARS operates a Voluntary Disclosure Programme (VDP) which allows taxpayers to voluntarily disclose previously undeclared income, assets or tax positions. You lodge a disclosure application identifying the years and amounts involved, pay the tax owing plus interest and pay an administrative penalty. The VDP provides legal closure for the disclosed periods.
The key point is timing. The VDP is available now. Once SARS cross-references CARF data with your tax history and identifies a discrepancy, you are no longer in voluntary disclosure territory. The cost and complexity of that path is substantially higher than acting before contact.
This is not legal or tax advice. It is a factual observation about how the compliance system works. The VDP mechanics are published by SARS. Some investors with incomplete records will benefit from understanding how it operates.
What SARS Cannot See
Self-custody Bitcoin is not reported by any exchange because it is not held on an exchange. If you hold Bitcoin in a hardware wallet, SARS has no transaction visibility into those holdings unless you voluntarily declare them.
Peer-to-peer Bitcoin transactions between individuals are also outside CARF. Neither party is a licensed CASP, so nothing flows to SARS through the reporting framework.
Bitcoin held on unregistered foreign platforms creates a more complex picture. If the platform is not regulated, it does not report directly to SARS. However, if that platform is based in a country that participates in the OECD’s Automatic Exchange of Information framework and has a data-sharing agreement with SARS, the data can flow indirectly. This is not guaranteed. But the number of participating countries is growing, and treating a foreign unregulated platform as invisible to SARS is an increasingly unreliable assumption.
Three Steps to Take Now
Reconcile your exchange records with your tax history. Download your full transaction history from every FSCA-licensed exchange you use. Compare it against the declarations on your ITR12 for previous years. Identify any gaps before SARS does.
Consolidate your records if you use multiple platforms. CARF data arrives from each exchange separately. A common source of confusion is holding Bitcoin across several exchanges without a master record. You need a complete picture of your holdings and gains to reconcile your tax position properly.
Consult a tax professional who understands Bitcoin if you are uncertain about your tax position. The technical aspects of Bitcoin taxation are relatively straightforward. The interaction with personal circumstances (trust vs company holding, multiple years of gains, cross-border elements) often requires professional guidance. The cost of proper advice now is minimal compared to the cost of a SARS query later.
The Broader Point
CARF is not a raid on Bitcoin holders. It is a compliance layer being added to an asset class that was already taxable.
Bitcoin moves into the same data infrastructure that applies to offshore bank accounts, foreign shares and international income. For South African investors using a licensed local provider, the acquisition is documented, the tax has been paid and the holding is defensible to any authority that asks: SARS, an executor, or a bank.
For investors who have used unregulated foreign platforms or kept Bitcoin outside any formal record, the incentive has shifted. The friction of using a formal provider is now lower than the risk of remaining outside the system.
The regulatory direction in South Africa is toward reporting and taxation of Bitcoin, not prohibition. Whether that direction is welcome or not, the practical question is the same: are your records in order?
What CARF Means for Companies and Trusts
CARF applies to the legal entity that holds the exchange account, not just to individuals. A company buying Bitcoin through an FSCA-licensed exchange is reported under the company’s tax registration number. A trust buying Bitcoin is reported under the trust’s tax number. These are not the same as the personal income tax position of the director or trustee involved, and confusing the two creates a compliance problem.
For companies, Bitcoin on the balance sheet raises questions that go beyond CARF. The acquisition needs to match the company’s accounting records. The rand value at the time of purchase matters for both CARF reporting and IFRS treatment, and if the company disposes of Bitcoin at a gain, that gain flows through the company’s tax return rather than the director’s personal ITR12. Directors who buy Bitcoin personally through company funds without proper authorisation create a different and more serious problem.
Trusts are more complex still. The trustee is typically the CARF-reportable person because the trustee holds the exchange account. The beneficiaries may have a separate tax exposure depending on how distributions are treated. A trust holding Bitcoin without a clear record of acquisition value, trustee authorisation and beneficiary entitlement is a compliance problem waiting to surface.
If your Bitcoin is held through a company or trust, the compliance check is not just your personal ITR12. It is the entity’s full tax and governance position.
What Records to Keep
SARS requires taxpayers to keep records for five years. For Bitcoin, that means every transaction, not just the ones that generated a gain.
For each purchase, keep the date, the rand amount paid, the rand-equivalent value of Bitcoin at the time of purchase, the exchange used, the account reference and the wallet address the Bitcoin was sent to. For each disposal, keep the same details plus the gain or loss calculation in rand.
Self-custody adds a layer. SARS cannot see self-custody transactions through CARF, but if you are ever audited, you will need to explain the movement of funds from an exchange to a wallet and account for the cost basis correctly. Keep a record of the wallet addresses, the hardware device used and when Bitcoin moved between addresses.
For companies and trusts, the records need to match the accounting entries. A Bitcoin purchase should appear in the entity’s books at the rand value on the date of acquisition, and an annual revaluation may be required depending on the accounting policy applied.
A simple spreadsheet covering every transaction is enough for most individual investors. For larger holdings, companies and trusts, a more structured approach is worth the effort before a SARS query forces it.
Frequently Asked Questions
Does CARF apply to Bitcoin I bought before 1 March 2026?
CARF reporting starts from 1 March 2026 but your tax obligations on Bitcoin purchased before that date have not changed. If you bought Bitcoin in 2019 and sold it in 2025, that disposal was taxable then. CARF does not create a new tax event for past transactions. It creates a new reporting mechanism that makes existing obligations more visible going forward.
What if I hold Bitcoin on a foreign exchange that is not FSCA-licensed?
That exchange does not report directly to SARS through CARF. However, if the exchange is based in a country that participates in the OECD’s Automatic Exchange of Information framework and that country has a data-sharing agreement with SARS, the data can flow indirectly. The number of countries in that framework is growing. Treating foreign exchange holdings as invisible to SARS is an increasingly unreliable assumption.
Does CARF apply to stablecoins and altcoins?
CARF applies to all crypto assets held on FSCA-licensed exchanges, not only Bitcoin. If your exchange account holds stablecoins, Ethereum or other tokens, those balances and transactions are also captured in the CARF reporting data. The tax treatment of different crypto assets may vary but the reporting obligation applies broadly.
How does CARF data interact with my ITR12?
SARS receives your CARF transaction data from the exchange and your declared income and capital gains from your ITR12. The two are reconciled. A significant discrepancy between exchange activity and declared gains is the most likely trigger for a SARS query. Keeping your ITR12 in line with your exchange records is the practical answer.
What happens if SARS contacts me about a discrepancy?
A SARS query about Bitcoin is not automatically an audit. It is typically a request for supporting documentation. If your records are in order, a query resolves straightforwardly. If your records are incomplete or your declared position cannot be supported, the query can escalate. Getting your records in order before any contact from SARS is the better path. After contact, the options narrow.
Sources
- SARS — Income Tax Act: primary legislation governing Bitcoin tax treatment and reporting obligations in South Africa
- FSCA — Crypto Asset Regulatory Framework: FSCA licensing requirements for crypto asset service providers under the FAIS Act
- OECD — Crypto-Asset Reporting Framework (CARF): full CARF standard governing cross-border data exchange on crypto transactions from 1 March 2026
- National Treasury — 2026 Budget Documentation: 2026 Budget materials covering crypto asset regulation and exchange control updates
Uncertain about your Bitcoin compliance position?
SimplB helps South African investors structure compliant Bitcoin records and self-custody. If CARF has raised questions about your position, a short call is a good place to start.
Book a Bitcoin Compliance CallWritten by James Caw, Founder of SimplB. James has helped South Africans understand, buy and secure Bitcoin since 2015. SimplB operates as a Juristic Representative of CAEP Asset Managers, FSP 33933. Last updated: May 2026.
This article is for general educational purposes only and does not constitute financial, legal, tax or exchange control advice. The information reflects the regulatory position as at the date of publication. Your individual circumstances may differ and you should seek qualified professional advice before making any decisions.
