From 1 January 2026, DAC8 – the EU directive aligning crypto-asset reporting with the OECD's Crypto-Asset Reporting Framework (CARF) – applies across all member states, including the Netherlands, requiring crypto-asset service providers to collect and report detailed account and transaction data to the Belastingdienst (Dutch Tax and Customs Administration). Although the Netherlands had not completed its formal national transposition by the time the European Commission opened infringement procedures on 30 January 2026, the directive's substantive obligations are already shaping enforcement posture, audit priorities and voluntary disclosure decisions for Dutch-resident holders and internationally mobile investors alike. For businesses, funds and individuals with crypto exposure in the Netherlands, understanding the layered interaction of DAC8, DAC9 and existing Dutch tax rules is no longer optional – it is a core compliance requirement.
The Netherlands-Specific Context: Why This Jurisdiction Demands Attention
The Netherlands occupies a distinctive position in European crypto markets. Amsterdam hosts a significant concentration of crypto-asset service providers registered with the De Nederlandsche Bank (DNB) under the EU's AML registration regime, and the Autoriteit Financiële Markten (AFM) exercises conduct supervision over a growing range of digital-asset activities following Markets in Crypto-Assets Regulation (MiCA) implementation. This regulatory density means that Dutch-registered providers are simultaneously subject to MiCA compliance obligations, DNB anti-money laundering registration and, from 2026 onwards, the mandatory DAC8 reporting infrastructure.
Unlike some EU jurisdictions that enacted DAC8 transposition legislation well before the 1 January 2026 application date, the Netherlands has proceeded through its regular parliamentary process. The Commission's infringement action of 30 January 2026 signals that Brussels is monitoring transposition timelines closely, and Dutch entities should not interpret any legislative delay as an exemption from the directive's underlying obligations. The Belastingdienst has consistently indicated that it will apply incoming EU exchange data regardless of the precise domestic implementing instrument's status.
DAC8: What the Framework Actually Requires
Directive (EU) 2023/2226 – DAC8 – extends the EU's automatic exchange of information architecture to crypto-assets. At its core, it imposes obligations on Reporting Crypto-Asset Service Providers (RCASPs) to collect, verify and transmit to the relevant national tax authority data on every reportable user's transactions, balances and identifying information. The Belastingdienst then exchanges that data with the competent authorities of other member states where users are tax-resident.
The key operational parameters, as established at EU level, include:
- Scope of assets: Crypto-assets that can be used for payment or investment purposes, including exchange tokens, utility tokens with investment characteristics and certain stablecoins – broadly aligned with OECD CARF definitions.
- Reporting period: Calendar-year data; annual information returns due by 31 May of the year following the reportable period. The first returns covering 2026 data are therefore due by 31 May 2027.
- Due diligence: RCASPs must apply self-certification procedures to determine each user's tax residency, consistent with Common Reporting Standard (CRS) methodology.
- Penalties for non-compliance: DAC8 requires member states to adopt effective, proportionate and dissuasive penalties; the Dutch implementing legislation is expected to reflect and potentially expand upon the increased penalty framework established at EU level.
- Retroactive data exposure: Belastingdienst will begin receiving and cross-referencing 2026 transaction data in the second half of 2027 – but investigators may use that data to scrutinise earlier years' tax returns where inconsistencies arise.
It is important to note that DAC8 does not alter tax rates or the characterisation of crypto gains. Whether a Dutch-resident individual's gains are taxed under Box 1 (progressive income tax on active trading), Box 3 (the deemed-return regime on savings and investments) or another category remains a question of Dutch domestic law and, increasingly, of Hoge Raad (Supreme Court) jurisprudence on Box 3 reform. DAC8 changes the information landscape, not the underlying tax liability rules.
DAC9 and Pillar Two: The Parallel Layer for Larger Groups
Directive (EU) 2025/872 – DAC9 – extends the EU's automatic exchange framework to the GloBE information returns required under the OECD/G20 Pillar Two global minimum tax rules. For multinational enterprise groups with a Dutch BV or other Dutch-incorporated entity within scope (broadly, groups with annual consolidated revenues above the Pillar Two threshold), DAC9 means that GloBE information exchanged with the Belastingdienst will be shared automatically with competent authorities in other member states where group entities are established.
For crypto-native businesses structured through Dutch holding or operating companies – a common pattern given the Netherlands' historically favourable participation exemption and treaty network – this creates a new dimension of information exposure. A Dutch-incorporated group entity participating in a crypto business with operations or revenues across multiple EU jurisdictions should anticipate that its GloBE data will be visible to multiple tax authorities simultaneously. Corporate counsel advising on group structures involving a Dutch corporate entity registered with the KvK should build DAC9 data flows into their compliance mapping from the outset.
Dutch Tax Treatment of Crypto Assets: The Box 3 Tension
The Belastingdienst's approach to crypto assets under Dutch domestic law has long been contested. Under the pre-2026 Box 3 regime, crypto holdings were in principle included as assets subject to the deemed-return tax on the basis of their value on 1 January of the tax year. The Hoge Raad's rulings on Box 3's compatibility with property rights under the European Convention on Human Rights created significant uncertainty about whether crypto holders assessed under the old flat-rate deemed-return system may seek restitution or correction.
The Netherlands has been legislating a revised Box 3 system intended to base taxation more closely on actual returns. The interaction between that reform and incoming DAC8 data is consequential: once the Belastingdienst holds granular transaction-level data, it will be considerably better positioned to identify whether an individual's crypto activity exceeds the threshold for Box 1 treatment (active, entrepreneurial trading) rather than passive investment under Box 3. Taxpayers who have self-assessed under Box 3 while conducting frequent or sophisticated trading activity face heightened audit risk from 2027 onwards, when the first DAC8 data sets become available.
The applicable withholding tax position on distributions or proceeds involving crypto assets remains dependent on the nature of the instrument and the applicable double tax treaty where a cross-border element is present. The rate depends on the applicable treaty; there is no single Dutch statutory withholding rate applicable to all crypto-related income streams.
Cross-Border Implications: Tax Residency and Information Exchange
For internationally mobile individuals – founders, fund managers and employees who have relocated to or from the Netherlands – DAC8 raises acute tax residency questions. The Belastingdienst will receive reports from RCASPs identifying users as Dutch tax residents on the basis of self-certification. Where an individual's self-certified residence differs from their actual fiscal domicile, or where they have changed residence during the reporting year, inconsistencies will surface when Dutch exchange data reaches foreign authorities and vice versa.
Key scenarios requiring careful analysis include:
- Individuals who held Dutch tax residency during part of 2026 and relocated mid-year – partial-year residency allocation under Dutch domestic rules and applicable treaty tie-breaker provisions will determine each authority's claim to tax.
- Non-resident investors accessing Dutch-registered exchanges or DeFi protocols who are reported to the Belastingdienst but are tax-resident elsewhere – they may face enquiries from their home authority if the Netherlands also reports the income as sourced domestically.
- Dutch-resident holders of crypto assets on platforms registered outside the EU – DAC8 does not capture those transactions directly, but the OECD CARF framework, once adopted by non-EU partners, will extend equivalent data exchange globally. In the interim, unexplained discrepancies between Dutch-reported holdings and foreign platform activity remain an audit risk.
- Structures using multiple jurisdictions where one member state has transposed DAC8 and another has not yet done so – the Commission's infringement action of 30 January 2026 suggests that gaps will narrow rapidly, and planning premised on uneven transposition is fragile.
Investors and advisers seeking a comparative view of how another EU jurisdiction is approaching these same dynamics may find useful context in our analysis of crypto taxation after DAC8 in Italy, which examines a jurisdiction with a similarly complex interaction between domestic capital gains rules and EU reporting obligations.
If your situation involves cross-border residency, non-EU platforms or questions about how Dutch and foreign tax claims interact, we encourage you to reach out at info@ferrazwhitmore.com or visit our contacts page to discuss the specifics.
Audit Risk and Enforcement: What to Expect from the Belastingdienst
The Belastingdienst has invested materially in data analytics and cryptocurrency tracing capabilities in recent years. Its cooperation with the Dutch Fiscal Intelligence and Investigation Service (FIOD) means that serious cases of undisclosed crypto income may escalate beyond civil tax assessment to criminal investigation. DAC8 data will substantially lower the evidentiary threshold for initiating an audit: where previously the Belastingdienst relied on indirect evidence or voluntary disclosure by platforms, it will from 2027 receive structured, verified data covering transactions, counterparties and asset values.
Areas of heightened scrutiny are likely to include:
- Inconsistency between Box 3 declarations and transaction volumes: High-frequency or high-value trading reported by an RCASP but declared by the taxpayer as passive investment will attract attention.
- Unreported foreign exchange accounts: Dutch residents with holdings on non-EU platforms that are captured by CARF once bilateral agreements are in place, or platforms operating under MiCA that begin DAC8 reporting mid-stream.
- DeFi and staking income: The characterisation of staking rewards, liquidity provision fees and yield-farming returns under Dutch tax law remains an area of active interpretive development. DAC8 data on on-chain activity will prompt Belastingdienst to form a position.
- Corporate structures using a BV or foundation: Where a Dutch entity holds crypto assets on behalf of beneficial owners, the interaction between entity-level reporting and the underlying beneficial owner's tax position requires careful mapping.
Voluntary Disclosure: The Strategic Case for Acting Now
Dutch tax law provides a mechanism for voluntary disclosure of previously unreported income and assets. Making use of this framework before the Belastingdienst independently identifies a discrepancy through DAC8 data is likely to produce materially different outcomes in terms of penalties and, in appropriate cases, the distinction between civil and criminal proceedings. The window for strategic voluntary disclosure is finite: once DAC8 data flows begin in 2027 and the Belastingdienst starts matching returns, the opportunity to approach the authority proactively on undetected positions will narrow.
A well-structured voluntary disclosure in the Netherlands typically involves a careful analysis of the relevant tax years, the applicable Box classification for each year, the interaction with any foreign tax paid on the same income, and the correct calculation of interest and penalty exposure under Dutch rules. It is not a process that should be approached without specialist advice.
If you are considering voluntary disclosure or want to understand your current exposure before DAC8 data exchange begins, our team is available to advise. Please contact us at info@ferrazwhitmore.com or through our contacts page.
Strategic Recommendations for Entities and Individuals
Against this backdrop, the following steps are advisable for clients with Dutch crypto exposure:
- Map your RCASP relationships: Identify every platform, exchange or custodian that is likely to classify itself as an RCASP and report your data to the Belastingdienst from 2027. This includes EU-registered platforms and, prospectively, non-EU platforms subject to CARF.
- Review self-certifications: Confirm that your tax residency self-certifications on all relevant platforms accurately reflect your current and historic domicile. Inconsistent certifications filed across multiple platforms create reconciliation problems when data is exchanged.
- Assess Box classification: In light of the Hoge Raad's ongoing Box 3 jurisprudence and the Belastingdienst's likely use of transaction-level data to challenge passive-investment characterisations, review whether your current Box classification is defensible.
- Audit corporate structures: If you hold crypto through a Dutch BV or other corporate vehicle, ensure that the entity's own tax reporting is consistent with the data that its platform relationships will generate under DAC8. Advice on the corporate law dimension is available through our corporate law practice for the Netherlands.
- Consider voluntary disclosure proactively: Where earlier tax years contain undisclosed positions, a structured disclosure before DAC8 data exchange begins is likely to produce better outcomes than waiting.
- Monitor Pillar Two obligations: For groups within DAC9 scope, integrate GloBE information return preparation with your wider Dutch tax compliance calendar and ensure that the Belastingdienst's receipt of that data is reflected in intercompany pricing and PE risk assessments.
Outlook: A Shifting Compliance Environment
The introduction of DAC8 and DAC9 marks a structural shift rather than a temporary compliance burden. The OECD CARF framework, once adopted bilaterally by major non-EU crypto jurisdictions, will extend equivalent automatic exchange globally, closing the information gap that currently shields non-EU platform activity from EU tax authorities. Simultaneously, the Netherlands' own domestic Box 3 reform will produce a tax base more responsive to actual crypto returns, and the Belastingdienst's analytical capacity will grow as it accumulates years of structured RCASP data.
For advisers and clients, the practical implication is that compliance strategies built on information asymmetry – on the assumption that foreign platforms are invisible to Dutch tax authorities – are becoming untenable on a predictable timeline. Proactive structuring, accurate disclosure and defensible tax characterisation are the durable responses.
Our tax law practice in the Netherlands advises on the full range of issues discussed in this analysis, from voluntary disclosure and audit support to cross-border residency questions and corporate structure review. To discuss how DAC8 and related developments affect your specific situation, please write to info@ferrazwhitmore.com or visit our contacts page.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.