What Crypto Exchanges Report to the CRA, and What the CRA Does With It

The comfortable assumption that crypto activity is invisible to the CRA has been wrong for several years and is now decisively wrong. There are three separate channels through which transaction data reaches the agency, they operate independently, and only one of them requires the CRA to ask.

Understanding what actually gets reported matters, because the shape of the data determines the shape of the problem you will have if your own records are thin.

Channel one: the international reporting framework

The OECD developed the Crypto-Asset Reporting Framework to bring crypto transaction data into the same automatic exchange machinery that already covers bank accounts under the Common Reporting Standard.

Canada committed to implementing it domestically in a joint international statement in November 2023. The published timeline targets first domestic returns and first exchanges of information in 2027, covering the 2026 calendar year.

Two features of that design matter to an ordinary investor:

It is reciprocal and international. Canadian service providers report on their users, and partner jurisdictions report Canadian residents to the CRA. Using an exchange outside Canada is not a way around it, and the jurisdictions that have signed on include the ones most Canadians actually use. Those jurisdictions are also tightening the perimeter at the same time, which is the real lesson of the FCA’s crypto enforcement push: the offshore venue and the reporting gap are closing from both ends.

2026 is the first covered year. The activity being reported is happening now, not at some future date after a grace period.

Channel two: unnamed persons requirements

This one is already in use and it does not depend on any new framework.

An unnamed persons requirement is a legal instrument that compels a third party to hand over information about customers the CRA cannot yet name. The agency describes the tool on its unnamed persons requirements page, and has confirmed it has issued them to intermediaries in the crypto-asset, real estate, e-commerce and construction sectors.

The information sought includes client names, addresses, dates of birth, phone numbers, and books and records of purchases and sales. A requirement issued to one platform captures every Canadian user of it, not a named individual.

Channel three: anti-money-laundering reporting

Platforms dealing in virtual currency are registered as money services businesses and carry their own reporting obligations to FINTRAC, including identity verification and reports of large transactions. That regime exists for different reasons, but the records it forces platforms to build are the records that get produced when a tax authority asks.

The thing to understand about the data

Here is the point that decides how much trouble any of this causes you.

The CRA receives proceeds and transaction data. It does not receive your adjusted cost base.

An exchange knows what you sold and for how much. It does not reliably know what you paid for the asset, particularly where the asset was bought on a different platform, received as staking income, acquired in a swap, or transferred in from a self-custody wallet. Canada pools cost base across venues by asset, so no single exchange has the full picture, as explained in crypto ACB and record keeping.

The practical consequence: the default reconstruction of your gain from third-party data overstates it, sometimes by treating proceeds as if the cost were nil. If you cannot substantiate the cost base yourself, that overstatement is the starting position you are arguing against, and the burden of proof is yours.

This is why record keeping is not administrative housekeeping. It is the only thing standing between reported proceeds and an assessment.

What the CRA can already see without any of this

Independently of reporting frameworks, an audit gives the CRA access to your bank records. Fiat on-ramps and off-ramps are visible there. A pattern of transfers to and from a known exchange, with no corresponding entries on a tax return, is not subtle.

Public blockchains add the rest. Once one address is tied to an identified person through a platform’s know-your-customer file, the transaction graph around it is permanently and publicly available. Chain analysis is a mature commercial industry and tax authorities are customers of it.

Export, reconcile, and use the VDP before the CRA calls

Export everything, from every platform, immediately. The CRA’s own guidance to exchange users makes the point bluntly: platforms have different record-keeping standards, and if a platform ceases operating you may simply lose access to your own history. You are required to keep records for six years from the end of the last tax year they relate to, and that obligation does not soften because a platform went dark.

Reconcile your holdings to your records. If the tokens your spreadsheet says you hold do not match what is actually in your wallets, something is missing: usually an unrecorded transfer, a forgotten wallet, or an airdrop nobody logged.

Fix earlier years before the CRA raises them. The Voluntary Disclosures Program can provide relief from penalties and partial interest relief on unreported income, but it is only available before the CRA contacts you about the issue. A requirement served on your exchange counts as the CRA having the information. The window closes quietly.

Be consistent about characterisation. Reporting on capital account in a gain year and business account in a loss year is one of the clearest audit invitations available, and the factors that actually decide it are set out in trader or investor.

Treat crypto tax software output as a draft. It is genuinely useful and it consistently misclassifies transfers, DeFi interactions and anything unusual. How to evaluate the tools is covered in choosing crypto tax software.

What this is not

This is not a reason to panic, and it is certainly not a reason to move assets somewhere quieter. Moving funds to evade reporting after becoming aware of it converts an administrative problem into a much more serious one, and the regulatory direction is set out in crypto regulation in Canada.

The overwhelming majority of crypto files I see are not aggressive. They are disorganised. The gap is between what someone genuinely owes and what they can prove, and it closes with a weekend of exports and a proper reconciliation, done before somebody else brings the subject up.

If that weekend keeps not arriving, the reconciliation and the filings behind it can be done for you, including the earlier years that are still open to adjustment.

If your reporting history has gaps, or you have never reconciled cost base across the platforms you have used, it is worth sorting out while the disclosure route is still open.