Skip to content
Bull Bitcoin
en
Menu
Resources

Physical Risks

DAC8 impact on crypto users

What DAC8 changes for users: automatic tax visibility, sensitive crypto data and exposure of relatives.

Updated

Short answer

For users, DAC8 means that activity through a reporting crypto provider can be reported automatically to a tax authority, and then exchanged with other authorities where relevant. The directive does not, in itself, create a new tax: it sets up a reporting infrastructure that lets authorities cross-check their information against taxpayers’ declarations. The concern is not only a tax audit: crypto data can be more sensitive than a simple financial statement and, once linked to a civil identity and leaked, it can expose the user and the people close to them.

Key facts

  • DAC8 does not create a new tax: it is a reporting infrastructure with automatic exchange between authorities.
  • What can become visible: identity, tax residence, transaction types, values, dates and transfer-related information, as well as holdings, addresses, counterparties and behavior.
  • Crypto data can be more sensitive than a financial statement: an address or a transfer can be linked to public on-chain information.
  • Paradoxical effect: the most prudent or best-informed users leave the regulated perimeter, while ordinary users stay in scope and bear the main risk.
  • Drift toward harder-to-supervise channels: departures weaken the European regulated market.
  • Risk to relatives: they can become targets or pressure levers without ever having used a crypto platform.

What becomes visible

Depending on the case, reporting can reveal identity, tax residence, transaction types, values, dates and transfer-related information. It can also expose a user’s holdings, addresses, counterparties and behavior.

In a crypto context, this data can be more sensitive than a simple financial statement. An address or a transfer can be linked to public on-chain information. The concern is therefore not limited to a possible tax audit: once linked to a civil identity and then disclosed, this information can expose the user as well as those around them.

The risk for ordinary users

Sophisticated users may try to reduce their exposure by leaving regulated providers. Ordinary users, by contrast, are likely to stay in scope and bear the main risk.

The result can be paradoxical: the most prudent or best-informed people leave the regulated system, while the others become the most exposed. Those departures also weaken the European regulated market and push activity toward channels that are harder to supervise.

The risk for relatives

A crypto data leak can help target a person, but also the people around them. Relatives can become pressure levers even if they have never used a crypto platform.

Physical security must therefore be part of the tax analysis. A mechanism that creates a database exploitable by criminals cannot be assessed on administrative grounds alone.