Invest1 publisher3 min readPublished Updated
81,000 nudge letters now, matched records in 2027: crypto's privacy premium is being repriced
HMRC's crypto warning letters are up 25% to 81,000 and still largely guesswork. From 2027, CARF replaces the guessing with matched account data, and waiting stops being cheap.
The Investor · Invest desk
What happened
- HMRC sent more than 81,000 crypto warning letters over the past year, a 25% rise on the year before.
- The number came out of a Freedom of Information request by accountancy firm UHY Hacker Young, published on 20 August.
- The OECD's Cryptoasset Reporting Framework starts in the UK in 2027, with 29 further jurisdictions expected in 2028.
- The EU's DAC8 directive has been in force since 1 January 2026, with the first exchanges of 2026 crypto data due by 30 September 2027.
Compiled by The InvestorSomething wrong?How this is made
Why it matters
- cost Delay now has a posted price: a voluntary disclosure capped at 30% of unpaid tax against 70% to 100% once HMRC moves first, a 40 to 70 point spread paid by the holder.
- constraint Once account and transaction data moves between authorities automatically, picking a venue by jurisdiction no longer limits what a home tax office can see, so residency becomes the binding fact.
- precedent With the United States outside the framework until 2029, whatever privacy premium survives will concentrate in venues sitting outside the first two waves, and it has a known expiry date.
- decision Anyone holding DeFi lending or market-making positions has a timing choice, because from April 2027 those arrangements stop generating disposals until an actual economic exit.
A nudge letter carries no legal force. It opens nothing, proves nothing, and works by inviting the recipient to disclose before HMRC decides to pursue the matter [c5a]. What HMRC actually holds today is what UK platforms hand over, and its access widens in 2027 [17].
The scale of the campaign hints at who is in the crosshairs. HMRC framed its crypto data push in January as an effort to recover around 300 million pounds, against a capital gains tax-free allowance of 3,000 pounds [15]. Spread across 81,000 letters [1], that is roughly 3,700 pounds of expected tax per recipient [4], which is a campaign aimed at people just over the allowance rather than at a handful of large evaders. The base it grew from was 27,714 letters in 2023-24 [3], so volume is up about 2.9 times in two years [1], all of it achieved before a single automatic feed was switched on.
What changes in 2027 is the unit cost of a case, not the appetite. Participating tax authorities begin automatically exchanging crypto account and transaction data [7], and in the UK those records are expected to arrive with names, addresses and National Insurance numbers attached [9]. Neela Chauhan of UHY Hacker Young, the firm that obtained the letter figures, says that once HMRC has the data, investigations will be "like shooting fish in a barrel" [10]. A letter asks. A matched record asserts, and the recipient no longer sets the terms of the conversation.
The reporting perimeter is not settled, which is the part worth watching if you are deciding whether a given venue is in scope. The OECD's June commitment list counts 46 jurisdictions for the 2027 start [6]. Chauhan's firm expects 52 jurisdictions to be feeding HMRC data on UK residents in 2027, including the Channel Islands, Cayman Islands, Ireland and Liechtenstein, with Switzerland, Singapore and Gibraltar among 15 more in 2028 [8]. Six jurisdictions of difference between the official roster and the practitioner estimate [2] is not a rounding error to anyone choosing a platform on the basis of who reports.
Much of the exposure underneath all this is definitional rather than evasive. Swapping one token for another can be a taxable disposal, and so can spending crypto or giving it away, while lending and staking income may fall under separate income tax rules [13]. UK residents are generally taxed on worldwide gains, so moving activity to a foreign platform relocates the record, not the liability [14]. Chauhan's read is that tax authorities expect crypto investment to be rife with tax evasion [11]. The letter volumes suggest HMRC is testing that expectation with postage while it waits for the data that will make postage unnecessary.
What to watch
- Whether the OECD's 2027 roster grows beyond 46 before the first exchange, and whether UHY's 52-jurisdiction figure gets reconciled with it.
- Whether the next FOI release shows letter volumes still climbing or plateauing near 81,000 as automatic data replaces manual nudges.
- Whether the April 2027 no-gain, no-loss treatment for lending and market-making survives into final UK legislation with its scope intact.