The European Union’s (“EU”) Eighth Directive on Administrative Cooperation in the field of taxation, commonly referred to as the DAC8, represents a significant expansion of the EU tax transparency framework into the digital assets sector. DAC8 introduces comprehensive reporting obligations for crypto-asset transactions and seeks to address perceived information gaps that have historically limited tax authorities’ visibility over cross-border crypto activities.
Malta has now transposed DAC8 into its domestic legislative framework, establishing the legal basis for crypto-asset reporting obligations applicable to relevant operators from the 1st January 2026. The introduction of these rules forms part of the wider international trend towards increased tax transparency, aligning the European framework with the Crypto-Asset Reporting Framework (“CARF“) developed by the Organisation for Economic Co-operation and Development (“OECD”).
The Maltese DAC8 Framework
Under the Maltese transposition, the domestic legislation specifically introduces the concept of Reporting Malta Crypto-Asset Service Providers (“Reporting Malta CASPs”), which encompasses both Crypto-Asset Service Providers authorised under EU Markets in Crypto-Assets Regulation (“MiCA“) (“MiCA-authorised CASPs”) and any Crypto-Asset Operator (“CAO”) that conducts one or more crypto-asset services effectuating exchange transactions for or on behalf of a Reportable User, being a crypto-asset user who is a reportable person resident in an EU Member State.
The Maltese transposition of DAC8 introduces reporting obligations for qualifying CASPs and other entities that fall within the definition of Reporting Crypto-Asset Service Providers’ (“RCASPs”) under the new regime. The framework is intended to facilitate the automatic exchange of information between EU tax authorities concerning reportable crypto-asset transactions and users.
Under the new rules, reporting entities may be required to collect, verify and report information relating to reportable users, including identifying details, tax residence information, wallet addresses, transaction values and other data prescribed by the legislation. The reporting obligations extend across a broad range of crypto-assets and are designed to capture activities involving both retail and institutional participants.
The regime operates alongside existing EU digital finance legislation, including the MiCA, creating an increasingly interconnected regulatory landscape where prudential, conduct, anti-money laundering and tax reporting obligations collectively apply to crypto-asset operators.
Registration and Compliance Considerations
Although the transposition of DAC8 into Maltese law establishes a clear legal foundation for crypto-asset tax reporting from 1 January 2026, several practical aspects of implementation remain under development.
In particular, the Malta Tax and Customs Administration (“MTCA”) has not yet published detailed guidance regarding the registration process applicable to Reporting Malta CASPs and CAOs. Market participants are currently awaiting clarification concerning the manner and timing of registration as a reporting entity, the reporting channels that will be made available, the prescribed reporting formats and the broader procedural framework governing ongoing compliance obligations.
This uncertainty is not unusual during the early stages of implementation of significant EU reporting regimes. Similar transitional challenges were observed following the introduction of previous administrative cooperation measures, including the Directive on Administrative Cooperation 7 (“DAC7“), where supplementary guidance and operational procedures were issued closer to the commencement of reporting obligations.
Nevertheless, entities potentially falling within scope should not regard the absence of procedural guidance as a reason to delay preparations. The identification of reportable users, customer due diligence enhancements, tax residence verification processes, data governance arrangements, record-keeping procedures and reporting infrastructure may require substantial lead time, particularly for businesses operating across multiple jurisdictions.
Interaction with MiCA and Anti-Money Laundering and Counter-Financing of Terrorism (“AML/CFT”) Obligations
For Malta’s digital assets sector, DAC8 introduces an additional layer of regulatory compliance that will operate alongside existing obligations arising under MiCA, the Transfer of Funds Regulation (“TFR“), and anti-money laundering legislation.
Many operators will already be collecting significant amounts of customer information for Know Your Customer (“KYC“), Customer Due Diligence (“CDD“) and Travel Rule purposes. However, DAC8 introduces distinct tax reporting requirements which may necessitate additional data collection, reconciliation procedures and internal controls. Firms should therefore carefully assess whether existing compliance frameworks adequately support the new reporting obligations or whether operational enhancements will be required before the commencement date.
The increasing convergence of tax transparency, AML/CFT supervision and digital asset regulation reflects a broader regulatory policy objective of reducing anonymity, improving cross-border information exchange and strengthening oversight of crypto-asset markets throughout the European Union.
Looking Ahead
The Maltese DAC8 framework has been in force since the 1st of January 2026, transposed via Legal Notice 162 of 2026 (the Cooperation with Other Jurisdictions on Tax Matters (Amendment) Regulations, 2026). The first reporting cycle covers calendar-year 2026 transactions, with affected operators required to submit their first reports within nine months of year-end, by 30 September 2027. The current period is therefore not a preparation window but the substantive reporting period itself: every reportable transaction executed during 2026 falls within the scope of the inaugural filings.
Despite the regime being legally operative, the MTCA has not yet published detailed guidance on registration procedures, reporting formats, technical specifications or the broader compliance mechanics. Affected operators are accordingly executing the regime against an incomplete administrative backdrop, building internal data collection, due diligence and record-keeping processes on the basis of the Directive and the Regulations alone. Continued monitoring of forthcoming Commissioner guidance, alongside engagement with industry working groups, is essential to ensure that current operational practices align with the procedural framework once it is finalised.
In particular, no guidance has yet been issued on the specific registration pathway for CAOs a category of obliged entity introduced by the Maltese transposition specifically for operators that are not MiCA-authorised CASPs but nonetheless conduct reportable crypto-asset exchange transactions. This gap is of particular practical significance for businesses that fall outside the MiCA authorisation perimeter.
How Promethean Can Assist
Promethean advises CASPs, fintech operators, investment structures, family offices and other digital asset businesses on the implications of DAC8, CARF and related EU tax transparency initiatives. Our team assists clients in assessing DAC8 applicability, conducting reporting readiness reviews, designing governance and data management frameworks, and preparing for registration and reporting obligations under the evolving Maltese regime. We also support clients in navigating the interaction between DAC8, MiCA, AML/CFT requirements and broader regulatory compliance obligations. For further information on how the Maltese DAC8 framework may affect your operations, please contact us.
