The Cayman Islands published the Crypto-Asset Reporting Framework Regulations, 2025 (CARF Regulations) and the Common Reporting Standard (Amendment) Regulations, 2025 (CRS Regulations), aligning the jurisdiction with the OECD’s expanded automatic exchange of information standards across both traditional financial accounts and crypto-assets. The measures materially enhance reporting scopes, due diligence expectations and enforcement mechanics, and introduce transitional relief where appropriate.
The CARF Regulations, which took effect from 1 January 2026, establish a comprehensive reporting and due diligence regime for Cayman Reporting Crypto-Asset Service Providers, with an explicit nexus to the Islands and recognition of reporting completed in Partner Jurisdictions. Reporting Crypto-Asset Service Providers must implement written policies and procedures, identify tax residence for Crypto-Asset Users and Controlling Persons, and obtain valid self-certifications. Pre-existing Individual and Entity Crypto-Asset Users require self-certifications within twelve months of commencement; for new users, self-certifications are required at onboarding. Annual returns are due by 30 June each year for the prior calendar year and must include adequate, accurate and current information, accompanied by a declaration. The scope of reportable data is detailed and transaction-focused, covering fiat/crypto exchanges, crypto/crypto exchanges, transfers (including to unhosted wallets where counterparties are unknown to be intermediated), and high-value retail payment transactions, with prescribed currency conversion and valuation rules. Cayman Reporting Crypto-Asset Service Providers must register with the Authority by 30 April 2026 (if in scope before commencement) or by 31 January following the year of becoming in scope, notify changes within thirty days, retain records for at least six years, and may appoint agents while retaining ultimate responsibility. The regime includes statutory anti-avoidance, false self-certification and tampering offences, director/officer liability attribution, and a calibrated penalty framework. The Authority may require production or inspection of information and will publish lists of Partner and Reportable Jurisdictions at least annually.
The CRS Regulations modernise the CRS framework and integrate cross-references to CARF. Most provisions commence 1 January 2026, with the revised return and compliance form obligations commencing 1 January 2027. Cayman Financial Institutions must update due diligence policies and procedures to align with the amended OECD CRS text, including explicit requirements to collect valid self-certifications at account opening (with a limited temporary grace pathway for exceptional circumstances), to keep information adequate, accurate and current, and to retain records for at least six years. The amendments expand the definitional perimeter to address Specified Electronic Money Products, Central Bank Digital Currencies and Relevant Crypto-Assets, adjust classification language for Depository and Investment Institutions, and clarify treatment of certain account types, including legal arrangements and foundation/capital increase accounts subject to safeguards. Reporting granularity increases, including confirmation of valid self-certifications, joint account indicators, account type, and whether an account is pre-existing or new; in addition, Controlling Person role information is required, subject to transitional measures. A new annual compliance form is mandated in addition to the return, both due by 30 June of the following year and each accompanied by a declaration of adequacy, accuracy and currency. Institutions formed in 2025 face a one-time extended registration deadline to 30 April 2026. Institutions already registered but lacking a locally authorised principal point of contact must file a change form by 31 January 2027. Penalty procedures are streamlined.
Both regimes formalise the Authority’s expectations around “adequate, accurate and current” information, strengthen self-certification validity standards, and codify efficient electronic-portal filing presumptions. They also clarify monitoring powers, record-keeping duties and evidentiary shortcuts to support effective supervision and enforcement. Convergence points between CRS and CARF include reliance, where permitted, on AML/KYC procedures aligned with FATF standards, explicit treatment of Controlling Persons, structured transitional relief, and safe but robust penalty architecture. Importantly, the amended CRS confirms that Reporting Financial Institutions need not duplicate reporting of gross proceeds from sales or redemptions of Financial Assets to the extent such amounts are reported under CARF, avoiding double-reporting.
The Cayman Islands published the Crypto-Asset Reporting Framework Regulations, 2025 (CARF Regulations) and the Common Reporting Standard (Amendment) Regulations, 2025 (CRS Regulations), aligning the jurisdiction with the OECD’s expanded automatic exchange of information standards across both traditional financial accounts and crypto-assets. The measures materially enhance reporting scopes, due diligence expectations and enforcement mechanics, and introduce transitional relief where appropriate.
The CARF Regulations, which take effect from 1 January 2026, establish a comprehensive reporting and due diligence regime for Cayman Reporting Crypto-Asset Service Providers, with an explicit nexus to the Islands and recognition of reporting completed in Partner Jurisdictions. Reporting Crypto-Asset Service Providers must implement written policies and procedures, identify tax residence for Crypto-Asset Users and Controlling Persons, and obtain valid self-certifications. Pre-existing Individual and Entity Crypto-Asset Users require self-certifications within twelve months of commencement; for new users, self-certifications are required at onboarding. Annual returns are due by 30 June each year for the prior calendar year and must include adequate, accurate and current information, accompanied by a declaration. The scope of reportable data is detailed and transaction-focused, covering fiat/crypto exchanges, crypto/crypto exchanges, transfers (including to unhosted wallets where counterparties are unknown to be intermediated), and high-value retail payment transactions, with prescribed currency conversion and valuation rules. Cayman Reporting Crypto-Asset Service Providers must register with the Authority by 30 April 2026 (if in scope before commencement) or by 31 January following the year of becoming in scope, notify changes within thirty days, retain records for at least six years, and may appoint agents while retaining ultimate responsibility. The regime includes statutory anti-avoidance, false self-certification and tampering offences, director/officer liability attribution, and a calibrated penalty framework. The Authority may require production or inspection of information and will publish lists of Partner and Reportable Jurisdictions at least annually.
The CRS Regulations modernise the CRS framework and integrate cross-references to CARF. Most provisions commence 1 January 2026, with the revised return and compliance form obligations commencing 1 January 2027. Cayman Financial Institutions must update due diligence policies and procedures to align with the amended OECD CRS text, including explicit requirements to collect valid self-certifications at account opening (with a limited temporary grace pathway for exceptional circumstances), to keep information adequate, accurate and current, and to retain records for at least six years. The amendments expand the definitional perimeter to address Specified Electronic Money Products, Central Bank Digital Currencies and Relevant Crypto-Assets, adjust classification language for Depository and Investment Institutions, and clarify treatment of certain account types, including legal arrangements and foundation/capital increase accounts subject to safeguards. Reporting granularity increases, including confirmation of valid self-certifications, joint account indicators, account type, and whether an account is pre-existing or new; in addition, Controlling Person role information is required, subject to transitional measures. A new annual compliance form is mandated in addition to the return, both due by 30 June of the following year and each accompanied by a declaration of adequacy, accuracy and currency. Institutions formed in 2025 face a one-time extended registration deadline to 30 April 2026. Institutions already registered but lacking a locally authorised principal point of contact must file a change form by 31 January 2027. Penalty procedures are streamlined.
Both regimes formalise the Authority’s expectations around “adequate, accurate and current” information, strengthen self-certification validity standards, and codify efficient electronic-portal filing presumptions. They also clarify monitoring powers, record-keeping duties and evidentiary shortcuts to support effective supervision and enforcement. Convergence points between CRS and CARF include reliance, where permitted, on AML/KYC procedures aligned with FATF standards, explicit treatment of Controlling Persons, structured transitional relief, and safe but robust penalty architecture. Importantly, the amended CRS confirms that Reporting Financial Institutions need not duplicate reporting of gross proceeds from sales or redemptions of Financial Assets to the extent such amounts are reported under CARF, avoiding double-reporting.
In-scope entities should complete impact assessments, update governance and compliance frameworks, refresh onboarding and remediation workflows to meet enhanced self-certification and due diligence requirements, ensure the appointment and notification of a principal point of contact in the Islands, and prepare to meet the 30 June annual filing deadline for returns (and, for CRS, the new compliance form) with the requisite declarations. Early operational dry-runs of CARF transactional data capture, conversion and aggregation rules, and mapping of CRS definitional refinements to product and client taxonomies, are recommended ahead of the 1 January 2026 effective date and the staggered 2026–2027 CRS obligations.
