Buy a licensed company 
VASPs live data and insights 
Learn about crypto safety 
Read the latest research 
File or Get REKT: HMRC Crypto Tax Penalties for UK Non-Reporting
- HMRC treats crypto as taxable property, with gains above the £3,000 allowance and most rewards falling into Capital Gains Tax or Income Tax.
- Non-reporting covers not registering, not filing, or leaving out wallets and exchanges, and can trigger tax-geared penalties on top of late filing and late payment charges.
- Offshore exchanges and DeFi are no longer “invisible” once CARF data sharing and blockchain analytics feed your activity back to HMRC.
- From 2026, both users and platforms can face up to £300 per user for missing or inaccurate identity and transaction data under the new reporting rules.
- Voluntary disclosure and proper records usually cost less than waiting for a nudge letter and dealing with years of tax, penalties and interest at once.
A lot of UK crypto holders still behave like this space sits outside normal tax. HMRC does not see it that way at all.
Crypto sits in the same system as shares, property and other investments. The difference now is that HMRC has better data, smaller allowances, and new reporting rules coming in. Non-reporting is no longer a loophole. It is a liability with a very clear price tag.
How HMRC Taxes You
HMRC treats Bitcoin, ETH, NFTs and the rest as “cryptoassets”. That means they sit inside existing Capital Gains Tax and Income Tax rules.
For most individuals, it splits into two:
- Capital Gains Tax when you dispose of crypto.
- Selling for fiat, swapping one token for another, gifting (outside a spouse), or spending crypto on goods and services, all count as disposals. Gains and losses are calculated in pounds at the time of each move.
- Income Tax when you earn crypto.
- Mining rewards, most staking and validator rewards, referral bonuses, “earn” products, getting paid in tokens, and some airdrops can be treated as income first. When you later dispose of those coins, there is a second layer under Capital Gains Tax.
There is an annual CGT allowance that used to quietly shelter small portfolios. That era is over. For the 2024-25 tax year, the allowance is £3,000. Anything above that across all assets is taxable. Basic rate taxpayers usually pay CGT at 10% on most gains, higher and additional rate taxpayers at 20%, with specific band tweaks depending on the year and asset type.
Crypto now has its own section inside Self Assessment. That change matters. HMRC expects anyone with material crypto activity and gains above the allowance, or significant income in tokens, to be in the system and declaring it.
If you are UK resident, trade or invest in crypto, and never look at Self Assessment, HMRC already sees that as a problem waiting to be fixed.
How Does “Non-Reporting” Look Like?
Most people think “I didn’t report” means “I didn’t put the number on a form.” HMRC slices it much more narrowly, and penalties follow those labels.
For a UK crypto holder, non-reporting usually shows up in one or more of these ways:
- You never registered for Self Assessment even though your crypto gains or income meant you should.
- You registered but did not file the return for a year with relevant activity.
- Maybe you filed but quietly left out whole exchanges, wallets or DeFi positions that clearly created gains or income.
- You stuck with that position even after you realised it was wrong.
From 2026, you ignore or dodge requests from platforms for your real identity and tax details under the new reporting rules.
Inside HMRC, those behaviours get labelled as:
- Failure to notify if you never registered when you had a liability.
- Late filing if the return did not arrive by the deadline.
- Late payment if the bill was not paid on time.
- Inaccuracy if your return is wrong or incomplete and that costs tax.
- Offshore non-compliance if the missing tax is tied to foreign platforms or structures.
On top of that sits a judgment about intent, such as careless, deliberate, or deliberate and concealed.
The Self Assessment Penalty Ladder
Before you even get to “crypto penalties”, the standard Self Assessment penalty ladder does plenty of damage on its own.
If you miss the 31 January deadline to file an online return:
- You are fined £100 as soon as you are one day late.
- If you are still late after three months, HMRC adds £10 per day up to 90 days. That can add £900 on top of the original £100.
- At six months late, there is another penalty equal to 5% of the tax due or £300, whichever is higher.
- At twelve months late, that same 5% or £300 can be added again.
Those numbers apply even if the tax due for that year is small. People with modest gains can still end up owing four figures purely because the paperwork never went in.
Then you have late payment. If you file but do not pay:
- There is a 5% penalty on unpaid tax roughly 30 days after the due date.
- Another 5% is charged if the amount is still unpaid at six months.
- A further 5% can be added at twelve months.
Interest runs from the day after the payment deadline until the tax is cleared. The rate in 2025 sits in the high single digits and moves when the Bank of England raises or cuts.
Small Crypto Gap = Expensive Problem
Let’s say someone works full-time in the UK, pays tax through PAYE, and never thought of themselves as a trader. In the bull market they bought some coins, did a few swaps, tried a bit of DeFi, maybe minted or flipped a couple of NFTs, then pulled what was left back into pounds and spent it.
Over a couple of tax years, the total real gain in pounds was around £10,000, spread across two years and sitting comfortably above the shrinking CGT allowance each time. None of it went on a tax return.
Years later, HMRC receives data from the main exchange they used. The name, email, address and trade history do not line up with any declared crypto gains. There are also cash movements from that exchange into their UK bank account that do not match what HMRC would expect given their declared income.
At that point, HMRC can send a “nudge” letter. These letters tell you that HMRC believes you may have undeclared crypto gains or income and invite you to review and correct. Tens of thousands of people in the UK have already had them.
If that person engages, they now have to:
- Reconstruct their trading and DeFi history as best they can.
- File late returns for the missing years.
- Pay the Capital Gains Tax that should have been paid then.
- Take on late filing penalties, late payment penalties, interest, and a tax-geared penalty for failure to notify or inaccuracy.
Even if HMRC accepts that the behaviour was careless rather than deliberate, a percentage of the unpaid tax will usually be added as a penalty. On a £10,000 gain that can easily turn into several thousand in extra cost.
None of that includes the price of the coins themselves crashing in the meantime. A lot of people will be paying tax and penalties on gains they have already mentally lost in the next downturn.
DeFi & Offshore No Longer Invisible
For a long time, many UK investors comforted themselves with the idea that activity on foreign exchanges and on-chain protocols lived outside HMRC’s reach. If it never hit a UK exchange and only came back through a bank in dribs and drabs, it felt safe.
International information exchange already gives HMRC data from many foreign financial institutions. On top of that, specialist blockchain analytics can link on-chain wallets to known exchanges and sometimes to real-world identities. Data from banks and payment providers can fill the remaining gaps.
The next big step is the Cryptoasset Reporting Framework (CARF). From 2026, crypto platforms in participating countries will be required to collect standardised identity and transaction data on their users and report it to their local tax authority. That authority then passes information about UK residents back to HMRC.
#Crypto owners!
From 1 Jan 2026, your #cryptoasset service provider must collect and verify your personal details under new UK rules. 📈
Failing to provide accurate info could mean a penalty, additional fines, and account restrictions. ❌
Act now. ⬇️https://t.co/WLwgLYNOqg pic.twitter.com/dCNmegJutt
— HM Revenue & Customs (@HMRCgovuk) November 23, 2025
Once undeclared crypto sits in an offshore context, separate offshore penalty rules can apply. Those rules are harsher than domestic ones. In serious cases of offshore evasion or failure to correct old problems, penalties can go up to double the unpaid tax.
The New £300 Penalty
From 2026, UK-facing providers and other platforms that fall under the rules must collect and verify:
- Your full name, date of birth and address.
- Your country of residence.
- Your National Insurance number or Unique Taxpayer Reference if you are UK resident, or another tax identification number if you are not.
- Summary information on your transactions, including the type of asset, number of units and value of each reportable transaction.
If a platform fails to collect or report that data properly, HMRC can charge them a penalty of up to £300 per user. If you refuse to provide accurate details, you can face the same amount in penalties for each provider you block.
This is a different flavour of non-reporting. You can be penalised before HMRC even looks at your gains, simply because you refused to feed the reporting system the data it needs. Providers have every incentive to freeze accounts or restrict features until you cooperate. From their side, it is cheaper to over-collect than to argue with HMRC later.
Anyone who built their mental model of crypto around the idea that “KYC is optional if you shop around” is going to hit that wall first.
HMRC Is Designing a System
It helps to step back from crypto for a second and look at how the UK treats fraud and online financial crime more generally.
There are far more fraud and scam cases than the police or courts can realistically handle. Most victims never see a prosecution. The state has quietly shifted from a “catch the bad guy” mindset to something closer to a public-health model. Change the environment, add friction, educate, nudge, and let the system blunt the harm for most people.
Crypto tax is being plugged into the same approach.
Instead of relying on a small team of investigators to build bespoke cases against a handful of evaders, HMRC is sharpening thresholds and allowances so more activity becomes visible, building dedicated crypto sections into tax returns so missing entries stand out, plugging in data feeds from exchanges and international reporting networks, automating the first contact stage through standard letters, and backing the whole structure with predictable, formula-based penalties.
People respond to systems more than they respond to moral lectures. If the combination of data and predictable pain makes non-reporting a bad bet, behaviour shifts over time.
The uncomfortable part is that this machinery does not distinguish very well between malicious evasion and confused participation in a fast-moving market. Someone who got wiped out in a rug pull but technically realised gains along the way can still be on the hook for tax they never set aside and penalties for not reporting on time.
If You Have Unreported Crypto, What Now?
There are plenty of UK residents who, if they are honest, have a few years of crypto history that never touched a tax return. The worst move is to freeze and hope the letters go elsewhere.
The first job is to recover as much data as you can. Pull CSV exports from every centralised exchange you used. Look at wallet explorers for self-custody addresses. Gather old statements from banks and payment apps that interacted with those platforms. The goal is to rebuild a timeline of what you bought, sold, swapped, spent or received, in pounds.
Then work out which tax years are affected. The UK tax year runs from 6 April to 5 April. You need to see in which of those periods you crossed the CGT allowance, took income in tokens, or did enough activity that a reasonable person would say Self Assessment was required.
If HMRC has not contacted you yet, there is a formal route to tell them about unpaid tax on crypto. That process expects you to show what years you are correcting, how much tax is due, and how you think your behaviour should be characterised. In return, penalty percentages are usually lower than if HMRC discovers the issue on its own.
If you already have a letter or enquiry, the situation is different. At that point HMRC treats any disclosure as “prompted”, which moves you into higher penalty ranges. It is still better to cooperate and clean things up than to stonewall, but you have less room to negotiate on percentages.
“Reasonable excuse” can help in genuine edge cases, such as serious illness, bereavement, or a clear, documented failure of the system that stopped you filing. General claims like “I didn’t know crypto was taxable” or “I found the forms confusing” are rarely accepted.
This is where people should think seriously about using a tax adviser who understands crypto. A few hours of paid help is cheaper than locking yourself into a penalty category you did not need to be in because of how you phrased things.
Keep Penalties Out of Your PnL
If you are going to use crypto in any serious way, treat record-keeping as part of the activity. Track what you buy, when you sell, what you swap into, how much you transfer between your own wallets, and every source of income. Do it in pounds using sensible historical prices. Crypto tax tools can automate a lot of this if you keep them connected, but even a basic spreadsheet is better than nothing.
If your realised gains are heading towards or over the allowance, you might still be able to manage disposals, harvest losses or change behaviour. Once 5 April passes, the numbers are fixed.
Pay attention when platforms start asking for more identity and tax information under the new reporting framework. Those emails and in-app prompts are not marketing. Ignoring them is how you collect £300 fines and account restrictions you could have avoided by filling in a few fields.
Once you move into derivatives, high-frequency trading, structured products, multi-chain DeFi or a token-based business, the line between “investing” and “trading”, and between capital and income, gets cloudy. That is when a combination of good software and a specialist adviser stops being a luxury.
You have no control over HMRC’s interest rate, allowance levels or data-sharing deals. You do control whether your records are an organised spreadsheet or a pile of missing logins and half-remembered wallets.
The Price of Off-Grid Pretending
UK crypto holders now sit between two hard truths. On one side is market risk, with bad trades, hacks, failed projects, rugs, simple volatility. On the other is an increasingly structured tax system, with tighter allowances, dedicated boxes on the return, international reporting rules, and a penalty regime that assumes silence is a choice.
Non-reporting is no longer a clever workaround. It is a bet that the data will never catch up with you, in a world where the whole point of the new framework is to make sure that it does.
You can’t switch that system off. You can decide whether you walk into it on your own terms, or wait until it knocks with a bill that includes years of tax you never planned for and penalties that grew quietly while you looked the other way.
And hey, we don’t make the rules. None of this is tax advice, but do take taxation seriously, as it is coming for all of us.
Me: I earn £100k
HMRC: That’s nice, we’ll take £45kMe: I bought a car
HMRC: VAT appliedMe: I want to gift my kid £5k
HMRC: TaxedMe: I made money from crypto
HMRC: You mean we made moneyMe: I made £50 profit on Vinted
HMRC: That’s income. Tax itMe: I bought a house
HMRC:…— Aleksandra Huk (@HukAleksandra) November 6, 2025
Frequently Asked Questions (FAQ)
What is the penalty for not reporting crypto to HMRC in the UK?
You can face late filing penalties, late payment penalties, interest and a tax-geared penalty based on the unpaid tax, which can run from a small percentage for careless mistakes up to 100% in serious cases. If offshore non-compliance is involved, the effective percentage can be higher again.
Can HMRC really see my crypto if I don’t cash out to pounds?
Yes. HMRC gets data from many centralised exchanges, will receive standardised reports under CARF from 2026, and already uses blockchain analytics and bank data to spot undeclared activity. Crypto-to-crypto swaps and on-chain moves can still create taxable events even if you never “cash out” in one big lump.
What counts as “non-reporting” for UK crypto tax?
Non-reporting includes never registering for Self Assessment when you should, skipping returns for years where you had taxable crypto, or filing but leaving out wallets, exchanges or DeFi positions that clearly generated gains or income. Ignoring HMRC letters or platform requests for tax details also puts you in the non-compliance bucket.
What is the £300 HMRC penalty I keep hearing about from 2026?
Under the Cryptoasset Reporting Framework, UK-facing platforms and other reporting providers must collect and verify your identity and tax details, and report user and transaction data; if they or you do not play ball, HMRC can charge penalties of up to £300 per user for missing, late or inaccurate reports. That sits on top of any tax and traditional Self Assessment penalties.
Can I go to jail for not reporting my crypto?
Most cases end with tax, penalties and interest, not prison, as long as you engage and correct things. Jail time tends to be reserved for clear, deliberate evasion or cheating the public revenue involving large sums and repeated behaviour.
What should I do if I have unreported crypto from past years?
Start by rebuilding your transaction history in GBP, work out which tax years are affected, and then use HMRC’s disclosure routes or amended returns rather than waiting for a letter. Coming forward unprompted usually lowers the penalty range compared to being caught first.
Do small gains and a bit of staking really matter for HMRC?
Small holdings that never cross the £3,000 CGT allowance and tiny amounts of income may fall below thresholds, but frequent trading, staking, DeFi rewards or NFT flips add up fast. HMRC expects you to track everything, check the thresholds properly and declare when you are over them, not guess and hope for the best.
