Which cards will report you to your tax office?
Start with MiCA, because people fear it for nothing. MiCA is just permission to operate in Europe: with a licence you can legally serve EU clients, without one you cannot, since 1 July 2026. It has nothing to do with your taxes.
Reporting is a different thing called DAC8. It is the rule under which a service hands your data to the tax office of your own country: who you are, where you are resident, and how much moved through you in a year. Collection started on 1 January 2026, and this year is the first reporting period. So here is who sits where.
Educational only, this is not advice to do anything.
1. Who will definitely report, meaning they already hold a CASP licence. Country of the licence in brackets:
Revolut (CY), Bybit EU (AT), KuCoin EU (AT), OKX EU (MT), Kraken (IE), Coinbase (LU), Deblock (FR), Trade Republic (DE), Nexo (through its partner DLT Finance, DE), Bleap (LV), Brighty (MT), Nebeus (ES), Bridge (LU), Due (ES), LHV Bank (EE)
Over 320 licences are out there, these are just the notable ones. Binance is not among them.
2. Fintechs running on Bridge or Due: KAST, Tuyo, Etherfi, Plasma One
Bridge and Due are BaaS, the plumbing: they give fintechs accounts and IBANs and hold the CASP licence, while the fintech itself holds none. Those fintechs do not report on their own. The question only appears if you opened an account with them on EU documents, because then the data comes from whoever issued the account. If your account is not on EU documents, this does not touch you.
3. Who falls outside DAC8:
- COCA, a non-custodial wallet with no EU licence
- Wirex One, non-custodial after the switch and working the same way, with fiat accounts from Openpayd under its own EMI licence
- PAYY, no EU licences
- Gnosis Pay, no licences of its own, accounts run through LHV Bank, which did get a CASP
- RedotPay, no CASP licence, card programmes in Hong Kong and Singapore
The takeaway is simple. A fintech without a licence is basically a crypto wallet with a card, and on its own it reports nowhere. The people in question are those who onboarded on EU documents. And the one murky part is the IBAN: if you use it, the report will most likely come from the partner that issued it.
Is this the kind of breakdown you want more of?