Bahamas Joins OECD CARF: Advancing Crypto Asset Transparency

Sources last verified: 28 October 2026

Official sources cited at the end of this page.

At an industry briefing on 5 March 2026, the Ministry of Finance put a date on the Bahamas’ part in the OECD’s Crypto-Asset Reporting Framework: first exchanges of crypto-asset information by 30 September 2028. The Bahamas had already signed the CARF multilateral agreement on 19 November 2024, and the Global Forum lists it among the jurisdictions committed to first exchanges by 2028.

What does not yet exist is a Bahamian CARF law. As at 28 October 2026, the Competent Authority’s legislation page lists no CARF act or regulations, so no Bahamian crypto business is under a CARF reporting or due diligence duty today, and every rule described below is the OECD standard the Bahamas has committed to, not enacted Bahamian law.

The timetable still matters now. Information for a calendar year is exchanged within nine months of its end, so an exchange by September 2028 points to 2027 as the first year whose transactions are reported. That is an inference from the timetable, not a date any Bahamian instrument has set.

There are two ways to prepare for Bahamian CARF. One waits for the law and then collects self-certifications from an existing customer base within the twelve months the OECD rules allow after the rules take effect. The other builds the self-certification into onboarding now, so the users who join before the law arrives are already documented. Only the second avoids a remediation exercise once the rules take effect.

01 · Bahamas CARF at a Glance

Our regulatory compliance engine builds the CARF due diligence record as each user signs up, before the law requires it. It collects and checks the self-certification, runs the TIN, reasonableness and other required due diligence checks, resolves discrepancies automatically instead of by your compliance team, and prepares the validated report, with zero remediation.

02 · International Context and Strategic Rationale

The OECD approved the CARF and amendments to the Common Reporting Standard over 2022 and 2023 and published them together on 8 June 2023. The CARF brings crypto-asset exchanges, brokers and other intermediaries into automatic exchange; the amended CRS adds specified electronic money products and central bank digital currencies to financial account reporting. The Bahamas is committed to both: it signed the CARF agreement on 19 November 2024 and the Addendum to the CRS agreement on 14 April 2025.

The Global Forum’s list of 14 September 2026 places 46 jurisdictions in the first exchange wave of 2027 and 27, the Bahamas among them, in 2028, together with Bermuda, the British Virgin Islands and the United Arab Emirates. The Cayman Islands is in the 2027 wave and has applied the CARF since 1 January 2026; our Cayman Islands article covers its rules, which show what a regional implementation looks like in practice.

03 · Scope and Applicability

Under the OECD rules, a reporting crypto-asset service provider is any person that, as a business, provides a service effectuating exchange transactions in relevant crypto-assets for or on behalf of customers, including by making available a trading platform. Relevant crypto-assets exclude central bank digital currencies, specified electronic money products and crypto-assets that cannot be used for payment or investment. A provider reports where it is tax resident, incorporated or organised (with legal personality or a tax filing obligation there), managed or has a regular place of business, and through branches.

In the Bahamas, the population that definition would reach already has a regulator. The Digital Assets and Registered Exchanges Act, 2024 (No. 40 of 2024) bars anyone from carrying on digital asset business in or from within the Bahamas without registration (s. 7), and requires a legal entity to apply to the Securities Commission for it (s. 9). Its list of digital asset business (s. 6(1)) includes operating an exchange, exchanging digital assets for fiat currency or other digital assets, transfer, custody and staking services. A Bahamian CARF law would need to define its own scope, but the register of DARE Act firms is the obvious starting point.

04 · Due Diligence and TIN Verification

The OECD rules require a self-certification when the relationship with a user is established, and from users already on the books within twelve months of the rules taking effect (Section III(A)(1) and (B)(1)). The provider must confirm its reasonableness against what it holds, including the documents collected under anti-money-laundering rules, and, if a change of circumstances makes it unreliable, obtain a new one or a reasonable explanation and, where appropriate, documents supporting the original (Section III(A)(2) and (B)(3)).

A valid self-certification for an individual is signed or otherwise affirmed and dated, and gives first and last name, residence address, every jurisdiction of tax residence, the TIN for each reportable jurisdiction, and date of birth (Section III(C)(1)). An entity’s self-certification gives its legal name, address, jurisdictions of residence and TINs, and, where it claims to be an active entity or excluded person, the criteria it meets; otherwise it also gives each controlling person’s details, unless that person self-certifies, and their roles (Section III(C)(2)).

The live version of this page said a code such as NOTIN could be used whenever a TIN is unavailable. That is too broad. The OECD’s CARF XML Schema does use NOTIN, with its Unknown flag set to true, but only where the user’s jurisdiction does not issue a TIN or its domestic law does not require one to be collected (Sections II(B) and III(C)(3)). In every other case, the absence of a TIN is a gap in the self-certification.

05 · Transaction Capture and Reporting

A CARF report does not list individual trades. For each reportable user and each type of relevant crypto-asset, it gives annual aggregates: the gross amount paid and received in acquisitions and disposals against fiat currency; the fair market value of acquisitions and disposals against other crypto-assets; reportable retail payment transactions, which are transfers for goods or services worth more than USD 50,000; other transfers to and by the user, broken down by transfer type where the provider knows it; and transfers to wallet addresses not known to belong to a virtual asset service provider or financial institution (Section II(A)(3)).

Each aggregate carries the number of units and, except for transfers to unhosted wallets, of transactions (Section II(A)(3)). Fiat legs are reported in the currency actually paid or received, converted into one currency if several were used; fair market values in a single fiat currency at the time of each transaction, applied consistently; and every amount names its currency (Section II(D) to (F)). The OECD’s CARF XML Schema is the exchange format between tax administrations, and jurisdictions may require providers to report in it. The model rules leave the reporting date to each jurisdiction (Section II(G)); the Cayman Islands, for example, chose 30 June.

06 · Implementation Timeline

The CRS side shows how the Bahamas is legislating. Act No. 7 of 2026 made registration of every financial institution mandatory, added nil returns and replaced the administrative penalty regime, with penalties of up to $300,000 (s. 15B). Whether the CARF law will follow that model remains to be seen; our Bahamas CRS 2.0 article covers the CRS rules in force.

07 · Operational and Compliance Considerations

Three decisions can be taken before the law arrives. The first is the onboarding form: a self-certification that meets the OECD validity rules costs nothing extra to collect at sign-up, and every user who joins without one becomes a 2027 remediation case if 2027 is indeed the first reportable year. The second is the data model: the report needs a residence and TIN per user, a classification for each entity and its controlling persons, and transactions tagged by type and valued in fiat at the time of each transaction. The third is reliance: a provider may rely on a third party for due diligence, but the obligations remain its own (Section III(D)(2)), and records are kept for at least five years after the reporting deadline (Section III(D)(3)).

A provider that is also a financial institution under the CRS may rely on the new-account due diligence it completed under Sections IV and VI of the CRS, and on a self-certification collected for another tax purpose if it meets the CARF requirements (Section III(D)(1)). For a Bahamian entity that is both a bank or fund and a digital asset business, one self-certification can serve both regimes; across separate group entities, sharing depends on the third-party reliance rule and on the Bahamian law to come.

At onboarding, step by step

TaxDo runs CARF due diligence inside onboarding, from the first user self-certification to the validated report, in five steps.

Step 1 · Collect the self-certification. Guided, one question at a time, for individuals and entities, with a digital signature; controlling persons are collected in the same flow where the entity requires them.

Step 2 · Validate the identity. Every TIN is checked in real time against official sources in 130+ countries, and the business against registries in 120+.

Step 3 · Run forensic due diligence with Verify+. Our Verify+ forensic engine runs 20+ checks on an individual and 30+ tax-native checks across eight areas on an entity, testing each self-certification against the data already held.

Step 4 · Cure the gaps, without the compliance team:

4a · New users. Discrepancies are resolved in the same session, before the first trade.

4b · Existing users. One click starts remediation for the existing book through a link in your own brand, with every answer checked by Verify+ and each case closed by a signed self-certification and an audit-ready certificate.

Step 5 · Report, and keep the evidence. Schema-validated CARF XML from one data layer, prepared and validated for your firm to submit once the Bahamian rules apply. Our team can also submit it on your behalf on request, as an additional service.

From Day-1 self-certification to CARF reporting, with zero remediation. Every user is cleared at onboarding.

Our CARF compliance software · Crypto exchanges and CASPs

Where this sits, and what it does not touch

It runs beside the KYC process anti-money-laundering rules already require, not in place of it. The reporting obligation, and the responsibility for what is reported, stays with the provider, including where TaxDo submits the report on its behalf at its request.

08 · Recent Changes and What’s Next

The next milestone is the Bahamian CARF instrument itself: watch the Competent Authority’s legislation page for an act or regulations, and the date from which due diligence starts. In the EU, DAC8 has applied since 1 January 2026, and a provider within its scope reports its EU-resident users under it; see our DAC8 compliance software. The UK’s rules, in force since the same date, are in our UK CARF article.

09 · Related Reading

Framework articles: CARF and crypto tax transparency · CRS 2.0 compliance guide for banks · Self-certification under CRS 2.0, DAC8 and CARF · Bahamas CRS 2.0 · Cayman Islands CARF and CRS 2.0

Product: Regulatory compliance engine · CRS compliance software · Day 1 onboarding validation