CARF 2027: What Every Indian Trading Crypto on Binance, Bybit or OKX Must Do in the Next 11 Months

73 Out of Every 100 Rupees of Indian Crypto Trading Happens Offshore. The IT Department Is About to Find Out.

Here is a number that should make you stop for a moment.

According to KoinX's analysis of over 670,000 users in FY25, about 72.7% of India's crypto trading volume happened on offshore platforms like Binance, KuCoin, Bybit, and OKX. That is roughly Rs 51,252 crore traded offshore in a single year. Most of those traders paid no TDS. Many did not report anything in their ITR.

Most of them believe the Indian government cannot see what they do on a foreign exchange.

That belief is about to be proven wrong.

On April 1, 2027, India goes live with CARF, the OECD's Crypto-Asset Reporting Framework. From that date, every crypto exchange in a participating country must automatically send your transaction data to Indian tax authorities. This includes Binance. This includes Bybit. This includes Coinbase and Kraken.

You have 11 months.

This guide covers everything the other articles skip. Your actual risk level by platform. Why your VPN does not help. Which 52 countries will share your data. What happens if your offshore holdings cross Rs 20 lakh. And exactly what to do right now.

Something Quietly Changed on March 5, 2026. Almost Nobody Noticed.

Before we talk about 2027, you need to know what already happened two months ago.

On March 5, 2026, the Finance Ministry uploaded a gazette notification with a dry title: Income Tax (First Amendment) Rules, 2026, Notification No. 19/2026. No press briefing. No social media post. No journalist tip-off.

That notification amended Rules 114F, 114G, and 114H of the Income Tax Rules. What it did was classify crypto-assets as financial assets under India's FATCA and CRS (Common Reporting Standard) framework, effective January 1, 2026.

Let me tell you what that means in simple terms.

Before this change, the government tracked foreign bank accounts under FATCA and CRS. After this change, your Binance account is legally treated the same as a foreign bank account under Indian tax law.

This is not a future event. It already happened. The analysis by CryptoTimes notes this was seismic for offshore traders. It means the existing FATCA data-sharing machinery, already in place between India and 100+ countries, now covers crypto assets too.

CARF in 2027 adds another, broader layer on top of this.

Your Risk Level Depends on Which Exchange You Use

Not all offshore exchanges carry the same risk right now. Here is the honest breakdown.

Platform Risk Levels for Indian Traders

Exchange	FIU-IND Status	Data Sharing Now?	CARF Country	Risk Level
Binance	Registered (after Rs 18.82 crore fine)	Yes, ongoing	Cayman Islands (CARF signatory)	High
Bybit	Registered (after Rs 9.27 crore fine)	Yes, ongoing	UAE (CARF signatory from 2027)	High
Coinbase	Registered	Yes, ongoing	USA (own parallel system)	High
KuCoin	Registered (after enforcement)	Yes, ongoing	Seychelles / regional offices	High
OKX	Exited India	Partial	Multiple jurisdictions	Medium-High
Kraken	Not FIU-registered	No domestic reporting yet	USA	Medium (CARF 2027)
Unregistered platforms via VPN	Not registered	No domestic reporting yet	Varies	High (CARF 2027)

The key point: Binance and Bybit are already registered with FIU-IND. They are already sharing data. The idea that offshore equals invisible is over for these platforms right now, before CARF even starts.

If you are on an unregistered platform via VPN, you are not safer. You are just getting a short delay.

Your VPN Does Not Protect You. Here Is Why.

This is the biggest myth in Indian offshore crypto trading.

Many Indian traders use a VPN to access Binance or other offshore platforms. They believe a VPN hides their identity from the exchange, so the exchange cannot report them to Indian authorities.

This is wrong. Here is why.

CARF requires exchanges to verify user residency using KYC documents. That means your PAN card. Your Aadhaar. Your address proof. Not your IP address.

When you completed KYC on Binance, you submitted your actual Indian identity documents. Binance knows you are an Indian resident because your PAN card says so. A VPN changes what your internet traffic looks like. It does not change what your PAN card says.

When CARF goes live, Binance will report your trades to the Cayman Islands tax authority. The Cayman Islands will share that data with India. India will match it with your PAN number. Your Indian identity is already tied to your Binance account through the KYC you already completed.

The VPN was never protecting you. It was just making you feel protected.

The 52 Countries That Will Share Your Crypto Data With India

Here is where it gets specific. Most people assume CARF is a vague future threat. It is not. The countries are named. The exchanges in those countries are listed.

As of October 2025, 52 jurisdictions have committed to CARF data exchange starting 2027. Look at which ones are on that list:

UAE. Signed the CARF Multilateral Competent Authority Agreement on July 21, 2025. Bybit is based in Dubai. If you trade on Bybit, the UAE will share your data with India from 2027.

Cayman Islands. On the list. Binance's holding structure runs through the Cayman Islands. Data flows to India.

Singapore. On the list. Multiple exchanges have Singapore entities.

Gibraltar, Guernsey, Isle of Man, Jersey. All on the list. These were the classic "crypto-friendly" jurisdictions people trusted for privacy. They signed the agreement.

All 27 EU member states. The EU enforced its version of CARF, called DAC8, from January 2026. If you trade on any exchange with an EU licence, your data is already being collected for 2027 reporting.

United Kingdom. On the list. Coinbase has a UK entity.

The Coincub analysis puts it plainly: "The classic idea of offshore equals silent is outdated as of 2025. Even better, the commitments document names exactly who is not yet committed. It is a short list."

The Black Money Act: The Risk Most Offshore Traders Do Not Know About

Here is the part that almost every Indian crypto guide misses. And it is the most important part.

Most traders think the worst case is: pay 30% tax on profits plus a penalty of 50 to 200% of the tax due. That is the standard framework under Section 115BBH.

But that is not the framework that applies to undisclosed foreign assets.

If your total crypto holdings on offshore exchanges exceed Rs 20 lakh and you have not reported them in Schedule FA (Foreign Assets) of your ITR, you are not under the standard Income Tax penalty framework. You are under the Black Money (Undisclosed Foreign Income and Assets) and Imposition of Tax Act.

The Black Money Act penalties are completely different:

• 30% tax on the full value of the asset (not just your profit, the full value)
• 90% penalty on top of that tax
• Minimum Rs 10 lakh penalty per undisclosed asset
• Criminal prosecution with possible imprisonment of 3 to 10 years

Let me give you a real example.

You hold 0.5 ETH on Binance worth Rs 25 lakh. You never reported it. You never reported the trades. Under the Black Money Act:

• 30% tax on Rs 25 lakh = Rs 7.5 lakh
• 90% penalty = Rs 6.75 lakh
• Minimum Rs 10 lakh fine
• Total exposure before prosecution: Rs 24.25 lakh, almost the full value of your holding

And this is before CARF gives the IT Department the actual transaction data.

The Rs 20 lakh threshold is the number that matters. Check your offshore holdings right now.

P2P Traders: You Have the Highest Risk of Anyone

If you trade crypto on peer-to-peer platforms like Binance P2P, you need to read this section carefully.

In early 2025, KoinX reported that several Indian investors received income tax notices for P2P transactions on foreign exchanges. One case stands out.

A trader made a profit of Rs 1,500 on a P2P trade. He could not furnish the verified PAN details of the P2P buyer. The Income Tax Department classified the entire transaction value as undisclosed income. He was asked to pay Rs 78,000 in penalties, on a Rs 1,500 profit.

This is not an edge case. It is how the law works for P2P.

When you do a P2P trade on any platform, you are the buyer and seller. Under Section 194S, the buyer is responsible for deducting 1% TDS and depositing it via Challan 281. If you cannot verify your counterparty's PAN, the IT Department may treat the full transaction value as unexplained cash credit and tax it at 60% under block assessment, not just the 30% VDA rate.

P2P offshore traders have two specific problems regular offshore traders do not:

1. No automatic TDS trail. On a regular exchange trade, TDS is at least recorded. On P2P, there is no automatic record unless you deposit TDS yourself.
2. Anonymous counterparties. Most P2P trades happen with people you cannot verify. That makes your counterparty documentation almost impossible to produce if you receive a notice.

If you have done P2P trades on Binance P2P or any other platform, document them now. Download every trade record. Note the counterparty details if any exist. Talk to a CA before you file this year's ITR.

CARF Can Look Back at Your Past Trades. Not Just Future Ones.

Here is what many people get wrong about CARF.

They assume CARF only covers trades made after April 1, 2027. So they think: just stop trading offshore now, and I am safe.

That is not how it works.

Tax experts quoted in Bitcoin Ethereum News warn that once CARF is implemented, the regime will apply retrospectively. Officials can issue notices for prior undeclared gains.

Here is the mechanism. CARF requires exchanges to collect and report annual transaction data. In 2027, they will report the data from the previous year, meaning FY 2026-27. But the data they already hold on you goes back to when you opened your account. A data request from Indian tax authorities to Binance after CARF goes live can cover your transaction history, not just your 2027 trades.

The Income Tax Department already has powers to reopen assessments for up to 6 years for cases involving income likely to have escaped assessment. If CARF data reveals Rs 50 lakh in offshore trades in FY 2022-23 that you did not report, a notice under Section 148 can cover that year.

The Rs 888.82 crore in undisclosed VDAs already detected by the IT Department shows this is not a theoretical risk.

Your 11-Month Checklist: What to Do Right Now

Let me stop explaining the problem and start giving you the steps. Here is what you do, in order.

Step 1: Calculate your offshore holdings today

Go to every offshore exchange you have used. Write down your current balance in INR. Add it up across all platforms. If the total is above Rs 20 lakh, you are in Schedule FA territory. If it is above that and undisclosed, you are in Black Money Act territory.

Step 2: Download your full transaction history from every offshore exchange

Do this now, not later. Exchanges sometimes restrict history exports after regulatory requests.

• Binance: Go to Wallet, then Transaction History, then Export. Select the longest date range available.
• Bybit: Go to Orders, then Transaction Records. Export as CSV.
• Coinbase: Go to Reports, then Statements. Download transaction history.
• OKX: Go to Trade History in your account. Export CSV.
• KuCoin: Go to My Orders, then download trade records.

Save every file. Back them up to Google Drive or a hard drive.

Step 3: Use a crypto tax tool to calculate what you actually owe

Manual calculation across three years of offshore trades is nearly impossible. Use one of these:

• KoinX: Best India-specific tool. Supports Binance, Bybit, Coinbase, and 50+ exchanges via CSV import. Auto-generates Schedule VDA for ITR.
• Kryptos: Good for DeFi and multi-chain activity.
• Koinly India Guide: Supports Indian tax rules with Schedule VDA output.

Step 4: Check if you need to file ITR-U for past years

ITR-U (Updated Income Tax Return) lets you correct your past ITR filings. The window is two years from the end of the assessment year. Right now you can file ITR-U for FY 2023-24 (AY 2024-25) and FY 2024-25 (AY 2025-26).

If you had offshore crypto income you did not report in those years, ITR-U is your path to correction before CARF exposes it.

Step 5: Hire a CA who specifically understands crypto and offshore assets

This is not optional. A standard CA who does not know the difference between Schedule VDA and Schedule FA will make errors that cost you more than their fee. Look for a CA with specific VDA experience. KoinX has a network of vetted crypto-specialist CAs across India.

Step 6: File your current year ITR correctly

For FY 2025-26 (AY 2026-27), the ITR deadline is July 31, 2026. You must use ITR-2 or ITR-3. You must fill Schedule VDA for every trade. If your offshore holdings exceed Rs 20 lakh, you must also fill Schedule FA.

Do not miss this deadline. A missed filing triggers automatic scrutiny.

How ITR-U Works: The Voluntary Disclosure Path

ITR-U is the most important tool available to an offshore trader who has past undisclosed income. Most people do not know how it works.

Here is the simple version.

You go to the Income Tax e-filing portal. Select "File Income Tax Return." Choose "Updated Return (ITR-U)." Select the assessment year you want to correct.

Calculate the additional tax you owe on your previously unreported income. Add 25% on top of that tax if you are filing within 12 months of the end of the relevant assessment year. Add 50% on top if you are filing between 12 and 24 months after the assessment year ends.

Pay the calculated tax plus the extra amount. Submit the ITR-U.

That is it. You have disclosed. You have paid. The notice risk drops significantly.

ITR-U cost example:

Say you had Rs 5 lakh in unreported Binance gains in FY 2023-24.

• Tax at 30% plus cess = Rs 1,56,000
• Plus 50% additional tax = Rs 78,000
• Total to pay = Rs 2,34,000

Compare that to the Black Money Act path: 30% on full asset value, 90% penalty, Rs 10 lakh minimum. ITR-U is far cheaper.

The window for FY 2023-24 closes on March 31, 2027. File before CARF opens your data.

What Your Tax Filings Must Include for Offshore Activity

Filing ITR for offshore crypto is more involved than for domestic exchange trades. Here is what you need.

Schedule VDA: Lists every trade. Coin name, purchase date, sale date, purchase price in INR, sale price in INR, and gain or loss. Aggregated totals are rejected by the portal. Each trade needs a separate entry.

Schedule FA (Foreign Assets): Required if your total offshore crypto value exceeds Rs 20 lakh at any point during the year. Lists the exchange name, country, account details, and value at year-end.

TDS on P2P trades: If you bought crypto via P2P on an offshore platform, you were responsible for deducting 1% TDS from the seller and depositing it via Challan 281. If you did not do this, calculate the undeducted TDS amount. A CA can advise on how to handle this.

Foreign currency conversion: Convert every offshore trade amount to INR using the RBI reference rate on the date of each trade. Do not use a single average rate for the year. The portal validates this.

Resources You Should Use Right Now

• OECD CARF Framework official documentation: Understand exactly what data gets shared
• India Income Tax e-filing portal: File ITR-U and access AIS
• KoinX India tax guide: Best starting point for calculating offshore crypto tax
• FIU-IND registered exchanges list: Check if your exchange is already registered and reporting
• RBI reference rate archive: Get historical INR conversion rates for every trade date
• Challan 281 TDS payment: For depositing P2P TDS you may have missed

Who Does This Apply To?

This applies to you if any of the following are true:

• You have traded crypto on Binance, Bybit, KuCoin, OKX, Coinbase, Kraken, or any other foreign exchange
• You hold crypto in a foreign wallet and submitted Indian KYC documents when creating the account
• You have done P2P trades on any exchange
• You hold more than Rs 20 lakh in crypto on foreign platforms
• You have earned yield, staking rewards, or referral income on foreign platforms
• You used a VPN to access any offshore exchange but still completed KYC with your PAN

This does not apply to you if you have only ever traded on FIU-registered Indian exchanges (CoinDCX, CoinSwitch, ZebPay, Mudrex) and have filed Schedule VDA correctly each year.

The Bottom Line

India has built a very complete system. From April 2026, Indian exchanges report all your trades to the IT Department. From 2027, 52 countries will send your offshore data too. The IT Department already uses Project Insight and the Non-Filer Monitoring System to flag mismatches. And 400 traders are already under audit.

The offshore evasion window is not closing slowly. It has already mostly closed.

The people who act now have options. ITR-U is available for FY 2023-24 and FY 2024-25. A CA can help you calculate, disclose, and file. The cost of disclosure is real but manageable.

The people who wait until after April 2027 will face the full set of consequences: tax plus penalties plus potential prosecution, based on data that India's IT Department received automatically from exchanges those traders thought were private.

I would rather write an article you find uncomfortable than one you wish you had read 11 months earlier.

CoinTakeOn tracks India's crypto regulation changes as they happen. Check back for updates as CARF implementation details are confirmed.

---

Disclaimer: This article is for educational purposes only. It is not legal or tax advice. Tax rules can change. The analysis of CARF, the Black Money Act, and ITR-U in this article reflects publicly available information as of May 2026. Consult a qualified CA who specialises in crypto taxation and a legal advisor before making any compliance decisions. The author is not a tax professional.