From 1 January 2026, DAC8 – the EU directive on crypto-asset reporting (Directive (EU) 2023/2226, aligned with the OECD CARF framework) – applies across all EU member states, and the Federal Central Tax Office (BZSt) in Germany is the designated authority for receiving the resulting information exchanges. German holders, traders and intermediaries dealing with crypto-assets face materially heightened reporting obligations, cross-border data flows and a considerably more acute audit risk than existed under prior rules. Individuals and structures that have not assessed their historic and ongoing tax position in light of DAC8 should do so without delay.
Germany's Position in the DAC8 Rollout
DAC8 entered into force EU-wide on 1 January 2026. The European Commission opened infringement procedures on 30 January 2026 against member states that had not completed transposition by that date. Germany's national implementation status should be verified against the current legislative register, as secondary implementing measures may still be working through the Bundesrat and Bundestag process; clients should not assume that an absence of published national rules creates any gap in the underlying reporting obligation, because the directive's core requirements are binding and the BZSt is operationally prepared to receive data.
Germany entered the DAC8 era with an already mature crypto-tax framework. Private disposals of crypto-assets held for less than one year have long been subject to income tax as miscellaneous income (sonstige Einkünfte) under § 22 No. 2 in conjunction with § 23 EStG, while assets held longer than one year have generally benefited from the tax-free holding period rule. DAC8 does not alter these substantive rules; what it fundamentally changes is the tax authority's ability to verify compliance with them.
What DAC8 Actually Requires: The Reporting Mechanics
Under the DAC8 framework, crypto-asset service providers (CASPs) – exchanges, custodians, brokers and certain DeFi platforms – are required to collect and report transaction data on their users who are tax-resident in EU member states. This data is then automatically exchanged between the tax authority of the CASP's jurisdiction and the BZSt (for German-resident clients). The scope covers transfers, disposals, conversions between crypto-assets, and exchanges into fiat currency.
For German taxpayers, the practical consequence is straightforward: the BZSt will receive structured records of transactions that many filers have historically not disclosed, partially disclosed or valued inconsistently. The reporting covers both retail and institutional account holders, and thresholds for de minimis exclusion are subject to national implementing rules that remain to be confirmed in their final form. Prudent planning should not rely on any assumed de minimis treatment.
- Reporting entity: the CASP (not the taxpayer directly), but the taxpayer bears ultimate tax liability for the underlying gains.
- Data shared: account identification, aggregate transaction values, asset types, and in cross-border cases, tax identification numbers.
- Receiving authority in Germany: Federal Central Tax Office (BZSt), which then distributes relevant data to the Länder tax offices (Finanzämter) handling individual assessments.
- First reporting cycle: covers data from the 2026 tax year; annual information returns are due by 31 May of the following year, meaning the first substantive exchange will occur around mid-2027.
It is worth noting that increased penalties for non-compliance are embedded in the DAC8 framework and transposing legislation across member states. Germany's existing penalty regime for tax evasion – including the criminal provisions of § 370 AO – already carries serious consequences; DAC8 layering amplifies enforcement capacity without necessarily requiring new substantive penalties to produce a deterrent effect.
DAC9 and Pillar Two: The Parallel Layer for Larger Structures
DAC9 (Directive (EU) 2025/872) runs alongside DAC8 and governs the automatic exchange of Pillar Two / GloBE information returns among EU member states. For international groups with a German entity – whether a GmbH, a holding structure or a fund vehicle – DAC9 means that the BZSt will receive or transmit top-up tax data relevant to the global minimum tax framework. While DAC9's direct interface with crypto-asset taxation is indirect, multinational groups that hold digital assets at scale within their corporate treasury or investment portfolios need to account for both reporting regimes simultaneously.
Groups that use a German GmbH as part of a crypto investment or treasury structure, and that meet the Pillar Two consolidated revenue threshold, should review their GloBE information reporting obligations in parallel with their DAC8 CASP compliance review. Failure to coordinate these two streams can produce inconsistent positions across jurisdictions.
For corporate and structuring questions related to German entities in cross-border digital asset strategies, our corporate law practice in Germany works closely with the tax team to ensure coherent advice across both dimensions.
Audit Risk: Why Germany Is a High-Priority Jurisdiction
Germany has one of the EU's most active tax audit cultures for high-net-worth individuals and corporate entities. The Finanzämter have demonstrated a consistent willingness to pursue crypto-related assessments, and several Länder – notably Bavaria and North Rhine-Westphalia – have dedicated units that have previously obtained transaction data from exchanges through domestic court orders and mutual assistance requests even before DAC8. With automated data inflows from DAC8 beginning in 2027 for 2026 transactions, the cost and difficulty of identifying discrepancies between declared income and reported transactions will fall dramatically for the authorities.
The Bundesgerichtshof has addressed the legal characterisation of crypto-assets in various contexts, and German courts have generally treated them as assessable economic assets. BaFin's classification decisions regarding specific tokens and platforms also have downstream tax implications: assets regulated as financial instruments may be subject to different tax treatment than unregulated utility tokens, and that distinction matters for both characterisation and penalties.
Key audit triggers that are likely to become more common post-DAC8 include:
- Discrepancies between CASP-reported transaction volumes and declared income in annual tax returns (Einkommensteuererklärung).
- Positions in foreign-registered CASPs that were not previously reachable via domestic data requests but are now caught within the EU-wide reporting net.
- DeFi and staking income that was self-assessed at zero or not assessed at all, where on-chain data can be correlated with CASP account activity.
- Changes in tax residency timed around large disposal events, which German authorities examine for Wegzugsteuer (exit tax) obligations under § 6 AStG.
- Corporate structures – including GmbH holding entities – used to defer personal-level tax on crypto gains, where the substance of operations will face scrutiny.
Voluntary Disclosure: Mechanics and Strategic Considerations
German tax law provides a mechanism for voluntary self-correction (strafbefreiende Selbstanzeige) under § 371 AO. A successful voluntary disclosure must be complete, timely – meaning filed before the authority has commenced an audit or otherwise obtained knowledge of the specific offence – and accompanied by payment of the outstanding tax and interest. An incomplete disclosure, or one filed after an audit has already been triggered by DAC8 data, will not achieve the criminal law immunity that is the central benefit of the process.
The DAC8 timeline creates a narrowing window. Data for the 2026 tax year will be exchanged around mid-2027. However, historic years prior to 2026 are not covered by DAC8 reporting directly; they remain assessable under ordinary limitation periods and subject to existing data-sharing treaties and domestic enforcement tools already in use. Taxpayers with undisclosed positions in years prior to 2026 should not treat the DAC8 cut-off as a safe harbour for past conduct.
A well-structured voluntary disclosure in Germany typically involves:
- A complete reconstruction of all crypto transactions across all platforms and wallets for all open assessment years.
- Consistent valuation methodology (generally the market price at the moment of each taxable event).
- Simultaneous assessment of whether any GmbH or other structure was used in a manner that creates additional corporate-level filing obligations.
- Filing through a qualified tax adviser or lawyer, given that procedural errors in the self-disclosure document itself can negate the criminal law protection.
- Coordination with the relevant Finanzamt and, where the BZSt is involved in a cross-border element, managing both channels consistently.
Where crypto holdings span multiple EU jurisdictions – for example, a German-resident individual operating through a Portuguese or Irish CASP – the disclosure must account for all jurisdictions' reporting obligations. For clients with exposure in more than one country, our analysis of the French crypto-tax landscape post-DAC8 provides useful comparative context on how parallel obligations are structured differently across member states.
If you are uncertain whether a voluntary disclosure is appropriate for your situation, or whether your current reporting position adequately reflects your DAC8 obligations, we recommend a confidential preliminary discussion with our team. You can reach us at info@ferrazwhitmore.com or through our contacts page.
Cross-Border Implications: Tax Residency, Exit Tax and Treaty Interaction
DAC8 is not a tax on crypto-assets; it is an information-sharing mechanism. But the information it generates will be used by member states to apply their domestic tax rules, and Germany's domestic rules are among the most technically demanding in the EU for individuals and structures with cross-border connections.
For individuals who have relocated – or are considering relocation – out of Germany, the interaction between DAC8 reporting and German exit tax rules under § 6 AStG is particularly significant. Where a taxpayer held crypto-assets with unrealised gains at the point of departure, Germany may assert a deemed disposal. DAC8 data will allow the BZSt to cross-reference departure dates with CASP-reported transaction histories, making post-departure disposals more visible than they were previously. Any taxpayer who relocated in recent years without a formal exit tax assessment should consider their exposure.
Germany's extensive network of double tax treaties does not, as a general rule, prevent DAC8 reporting; the directive operates at the level of administrative cooperation, not treaty override. Where a taxpayer is resident in a non-EU treaty partner state, the relevant exchange of information article in the applicable treaty governs what the BZSt can share outbound; but inbound data flowing from EU CASPs to the BZSt about German-resident account holders is not constrained by those treaties in the same way.
Withholding tax considerations may arise where crypto-asset income is structured through entities rather than held personally. The applicable rate and treaty reduction, if any, depends on the structure, the nature of the income and the applicable bilateral treaty – a detailed analysis that must be conducted on a case-by-case basis.
Practical Steps for German-Based and Germany-Exposed Clients
Given the convergence of the DAC8 reporting cycle, heightened audit activity and the Pillar Two overlay for larger structures, the following actions are operationally relevant for clients with German crypto-tax exposure:
- Transaction audit: Commission a full reconstruction of all crypto transactions for all open German assessment years, covering centralised exchanges, decentralised protocols, staking, lending and NFT-related activity.
- Residency mapping: Confirm each year's tax residency position precisely, particularly where there were relocations, extended absences or use of structures that may complicate the personal nexus question.
- CASP compliance review: If you operate or hold a significant interest in a CASP that has German-resident clients, assess your own entity's reporting obligations under the DAC8 framework as implemented or being implemented in Germany.
- Corporate structure review: Where a GmbH or other German entity is used as part of a crypto investment or treasury vehicle, assess whether its activities create additional filing obligations, particularly under Pillar Two if the group meets the revenue threshold.
- Voluntary disclosure assessment: If there are years where income was not fully declared, take legal advice on whether a § 371 AO self-disclosure is still available and whether it is strategically preferable to awaiting an audit.
- Mahnverfahren awareness: Be aware that German creditors – including the tax authorities – can initiate the expedited debt-collection procedure (Mahnverfahren) for assessed but unpaid tax debts; outstanding liabilities identified through DAC8 data can move quickly from assessment to enforcement.
Our tax law team in Germany advises on the full range of crypto-related tax matters, from individual income tax assessments through to corporate structuring and regulatory interface with BaFin. Details of our German tax practice are available at ferrazwhitmore.com/services/tax-law/germany/. To discuss your specific situation in confidence, please write to info@ferrazwhitmore.com or visit our contacts page.
Outlook: What to Expect Through 2027
The first CASP reporting cycle under DAC8 covers 2026 data, with returns due by 31 May 2027. This means that German tax authorities will begin receiving systematically structured, cross-border crypto transaction data in the summer of 2027 for the first time under the new framework. Between now and then, the BZSt and the Länder Finanzämter are likely to continue using existing data-gathering tools – including treaty-based information requests, domestic court orders and voluntary data from Handelsregister-registered entities – while building out their DAC8 data-processing capacity.
DAC9's GloBE information exchange adds a further dimension from 2026 for qualifying multinational groups. The combined effect of DAC8 and DAC9 is a materially denser information environment for the BZSt, operating across both the individual and the group levels simultaneously.
For clients with existing or prospective exposure in Germany, the period before mid-2027 represents the most clearly defined window for proactive compliance review. The relevant question is not whether the data will eventually reach the BZSt, but whether a client's tax position will withstand scrutiny once it does.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.