SARS does not see your Bitcoin holding in real time. What it sees is a structured annual report of your transaction history on licensed exchanges, submitted under the Common Reporting Standard for crypto assets (CARF). That report covers what you bought, what you sold, the dates and the rand amounts. It does not show what you currently own unless you declare it elsewhere.
The distinction matters. A lot of tax anxiety around Bitcoin is caused by a vague assumption that everything is visible immediately. It is not. But that does not mean nothing is visible.
| Key point | What this means |
|---|---|
| SARS gets annual CARF data | Transaction history from licensed SA exchanges, submitted around June each year |
| SARS does not see self-custody | Bitcoin in a private wallet has no automatic reporting path |
| Foreign licensed platforms report through AEOI | Data from most developed-country exchanges eventually reaches SARS, with a 1 to 2 year lag |
| CARF reports transactions, not holdings | If you bought and never sold, SARS knows about the purchase but not that you still own it |
| Your own records are the defence | If CARF data and your records differ, you must explain the gap |
The Onboarding Data
When you open an account with SimplB or any FSCA-licensed Bitcoin provider, you go through FICA Know Your Client (KYC) onboarding. This captures your legal identity, residential address, tax file number and beneficial ownership status. For transactions above certain thresholds, you also declare your source of funds.
Nothing is reported to SARS at onboarding.
FICA requires the exchange to hold this data, not to share it with SARS immediately. The exchange is your counterparty in the transaction at that point. It is not SARS’s agent. What changes later, through CARF, is a separate obligation that runs annually.
There is one exception worth knowing. Exchanges are required to report suspicious transactions to the Financial Intelligence Centre. If your activity pattern looks unusual relative to your declared source of funds, the exchange flags it. Most onboarding goes without incident. But the obligation exists and it catches both deliberate fraud and poorly documented legitimate money.
For larger purchases, enhanced due diligence applies. A R500,000 lump-sum purchase will require proof of source. A bank statement showing the transfer from your salary account is typically sufficient. An inheritance not yet documented, or a cash deposit without a paper trail, will trigger further questions. This is not unique to Bitcoin. It is standard practice for any regulated South African financial institution.
The Holding Period
Once your account is open and you hold Bitcoin, the exchange knows your position. SARS does not.
There is no daily or monthly report sent to SARS about what clients own. The reporting happens annually through CARF. If you buy Bitcoin in January and hold it through December without selling, SARS knows about the purchase when the CARF file is submitted, but it does not automatically know you still own it. Your declared tax return is where that visibility gap closes or stays open.
Self-custody pushes the gap further. If you withdraw your Bitcoin from an exchange into a personal wallet, SARS’s visibility effectively ends. The exchange reports the withdrawal as an outflow. It does not know what you do with the Bitcoin after that. Only you know what you hold.
This is the point of self-custody from a privacy perspective. It removes the intermediary. For investors who hold Bitcoin entirely in self-custody, SARS’s knowledge is limited to what surfaces through other channels: a voluntary disclosure, a disposal that creates a capital gain, or an estate assessment when they die.
What CARF Reports Each Year
CARF (the Crypto Asset Reporting Framework) is the South African adaptation of the OECD’s Common Reporting Standard applied to crypto assets. On or around June each year, every FSCA-licensed exchange submits a structured data file to SARS covering all South African clients.
That file includes your name, your tax number, every buy and sell transaction during the year, the dates, the rand amounts and the Bitcoin quantities. SARS then runs this against your submitted tax return.
Did you declare the gains? Did you report income from staking or yield? If the CARF data shows transactions that do not appear on your return, SARS flags the discrepancy. That flag does not automatically mean an audit, but it does mean the return is queried.
The reporting is annual, not real-time. If you sell Bitcoin in March, SARS does not see that transaction for months. It learns about it when the exchange submits its CARF file. This delay means you have a window between the transaction and the reporting. That window should be used to correct errors or file accurate returns, not to assume the transaction went unnoticed.
One practical note: CARF data is only as accurate as the exchange’s records. If the exchange miscalculates your cost basis, the error flows to SARS. Keep your own records independent of the exchange. They become the defence if any reconciliation dispute arises.
What SARS Cannot See
SARS cannot see Bitcoin held in self-custody. No intermediary is reporting your holding to anyone. Only you and whoever you tell know what you own.
SARS also cannot see peer-to-peer transactions between individuals. If you sold Bitcoin directly to another person and neither of you reported it to any exchange or service provider, there is no automatic visibility. SARS can assess you on income you should have declared, but detection depends on your disclosure or on a later cost-basis mismatch that surfaces in an audit.
Bitcoin on unregistered foreign platforms sits in a grey area. If the platform is not regulated, it does not submit CARF data. However, SARS participates in Automatic Exchange of Information (AEOI) with roughly 50 countries. If the platform operates in one of those jurisdictions and that country’s own reporting framework captures it, your data may reach SARS indirectly.
The practical implication: unregistered platforms are riskier than licensed ones, not because they are inherently criminal, but because they create a compliance record that depends on another country’s enforcement and information-sharing arrangements. If SARS requests data through the OECD AEOI network and the platform is based in Germany or Canada, that data will likely be provided. If the platform is in an uncooperative jurisdiction or has since collapsed, SARS’s visibility is limited and your records are your only defence.
Licensed vs Unlicensed Providers
The difference between a licensed South African provider and an unlicensed foreign platform shapes your compliance footprint fundamentally.
With a licensed SA provider, three things follow: FICA compliance (your identity is verified), CARF reporting (SARS receives the data automatically each year) and local recourse (if the provider fails or acts wrongly, FSCA oversight applies). Your record is integrated with the South African tax system. If SARS queries you, you can point to the CARF report and your own records and they should match.
With an unlicensed foreign provider, none of those protections apply. Your identity verification may be minimal. The provider is not required to report to SARS, though some jurisdictions compel their own reporting through AEOI. If the provider is hacked or fails, you have no local regulatory recourse. Your tax record depends on what you self-report.
From an enforcement perspective, the licensed SA provider creates the cleanest outcome. SARS can easily reconcile your declared gains against the CARF submission. There is less friction, fewer unexplained gaps.
Self-Custody and Your Tax Record
Self-custody holds Bitcoin outside the reporting system. That appeals to privacy-conscious investors. But it concentrates the compliance burden entirely on you.
When you eventually sell self-custody Bitcoin, your own records of cost basis become critical. SARS will assess you on the gain. You must be able to prove your acquisition cost and date. If you bought the Bitcoin on an exchange three years ago and withdrew it to a hardware wallet, the exchange’s CARF report may contain the original purchase data. But if you made several subsequent purchases in self-custody, no one is keeping records for you.
The estate problem is more serious. If you die without documenting your private keys or leaving clear recovery instructions, your Bitcoin is inaccessible. Your heirs may never know it existed. SARS can still assess estate duty on the presumed value of your assets, but the Bitcoin itself will be lost. There is no recovery path. This is the irreversibility of self-custody handled without documentation.
For this reason, many advisors recommend keeping a portion of a Bitcoin holding on a licensed exchange or in professional custody. It creates a trail for executors and a clear record for SARS. The trade-off is that the exchange account is visible to SARS in a way a hardware wallet is not. Whether that trade-off is rational depends on your priorities and the size of the holding.
Foreign Platforms and AEOI
If you hold Bitcoin on a foreign licensed exchange, your visibility to SARS depends on whether that exchange’s jurisdiction participates in AEOI.
Most developed-country jurisdictions do. The United States, European Union, Canada and Australia all have AEOI agreements with South Africa. When you open an account on a foreign licensed exchange, you provide identity and tax information. That exchange reports your activity to its local tax authority. That authority then shares it with SARS through the OECD framework. The data typically arrives with a lag of one to two years.
The lag creates a different compliance timeline. Unreported Bitcoin activity on a foreign licensed platform may not be visible to SARS immediately. But the absence of immediate visibility should not be confused with permanent invisibility. The data will arrive. The question is only when.
Practical Documentation
For every Bitcoin transaction, keep a record that shows: the date, the Bitcoin amount, the rand value at the time, your cost basis and the source of funds if the amount is significant.
If you use a licensed SA provider, download your transaction history regularly and keep it backed up. If you use a foreign platform, take the same approach. For self-custody Bitcoin, you must maintain these records yourself, because no one else is doing it for you. That is laborious, but it is the cost of operating outside the automatic reporting system.
The core principle is this: SARS’s visibility increases over time and across jurisdictions. From local exchange transactions, it sees relatively quickly through CARF. From foreign licensed exchanges, it sees within one to two years through AEOI. From self-custody, it sees only what you disclose or what forces disclosure through an audit, a disposal or an estate.
A balanced approach works for most investors: hold a portion on a licensed local provider to create a clear compliance record, and hold the remainder as you choose. The licensed holding is transparent and integrated with SARS. It makes the rest of your position defensible by showing that you are engaged with the regulated system rather than avoiding it.
Frequently Asked Questions
Does SARS know about my Bitcoin if I bought it before CARF started?
CARF reporting in South Africa applies to transactions from the date it became mandatory. Transactions before that date are not automatically reported under CARF, but that does not mean they are invisible. SARS can request records from licensed exchanges for prior periods as part of an audit or investigation. If you have unreported prior-year gains, a voluntary disclosure is the appropriate route.
If I hold Bitcoin on a self-custody wallet, does SARS know about it?
Not automatically. Self-custody Bitcoin has no reporting intermediary. SARS sees only the withdrawal from the exchange when you moved the Bitcoin off, not what you hold in the wallet. However, when you eventually sell or transfer the Bitcoin, the transaction may create a taxable event that you are required to declare.
What does SARS actually receive in the CARF report?
SARS receives your name, South African tax number, each buy and sell transaction during the year, the dates, the rand amounts and the Bitcoin quantities. It does not receive a snapshot of what you currently own. It receives a history of what you transacted on the licensed exchange during the reporting year.
Can SARS see my Bitcoin on a foreign exchange like Coinbase or Kraken?
Potentially yes, through AEOI. Coinbase operates in the United States and Kraken in the United States and Europe, both of which have AEOI arrangements with South Africa. If you provided a South African tax number when opening the account, your transaction data may reach SARS through international information exchange, typically with a lag of one to two years.
Should I keep my own transaction records if my exchange is already reporting to SARS?
Yes. The exchange’s CARF report covers what the exchange knows. If you made additional purchases in self-custody, if there were errors in the exchange’s records, or if the exchange closes and its records become inaccessible, your own independent records are what you rely on in a SARS query. Keep a complete log of every acquisition, the price paid, the date and any disposals.
Sources
- SARS — Income Tax Act: primary legislation covering capital gains tax and income tax treatment of Bitcoin in South Africa
- OECD — Crypto-Asset Reporting Framework (CARF): the CARF standard specifying the data fields and reporting format that SARS receives from licensed exchanges
- FSCA — Crypto Asset Regulatory Framework: FSCA licensing framework that determines which platforms report under CARF
- SARS — Crypto Assets Tax Guidance: SARS published guidance on the tax treatment of crypto asset transactions for South African taxpayers
Uncertain about your Bitcoin compliance position?
SimplB helps South African investors structure compliant Bitcoin records and self-custody. If your tax position is uncertain, a short call is a good place to start.
Book a Bitcoin Compliance CallWritten by James Caw, Founder of SimplB. James has helped South Africans understand, buy and secure Bitcoin since 2015. SimplB operates as a Juristic Representative of CAEP Asset Managers, FSP 33933. Last updated: May 2026.
This article is for general educational purposes only and does not constitute financial, legal, tax or exchange control advice. The information reflects the regulatory position as at the date of publication. Your individual circumstances may differ and you should seek qualified professional advice before making any decisions.
