Singapore implemented the OECD's Crypto-Asset Reporting Framework by regulations gazetted on 11 August 2026. From 1 January 2027, exchanges, brokers and platforms with a Singapore nexus must collect tax residency, taxpayer identification number and date of birth from every new user at onboarding; existing users have until 31 December 2027 to file the same self-certification. From 1 January 2028, platforms are legally barred from executing trades for anyone without a valid certification on file. And from 2028, IRAS begins exchanging the collected data with foreign tax authorities. No rate changes. No new levy. The tax treatment stays exactly as it was — what changes is who can see it.
What this is — and is not
For Singapore-resident investors the domestic picture barely moves: gains stay outside the net, income events stay taxable, and the regulations are explicitly an information mechanism, not a tax. The audience of this machinery is elsewhere: foreign tax residents using Singapore platforms. Their identities, balances and transaction flows will travel to their home authorities — the Hacienda, the Agenzia, the Finanzamt, the NTA — through automatic exchange, matched against whatever those authorities' own forms show. The city-state's message has always been clarity rather than secrecy; the regulations just put a certification form and a hard deadline on it.
Eleven jurisdictions on this site built their transparency on taxing you first and reporting you second. Singapore inverted it: nothing new to pay — but from 2028, nowhere to trade without saying who you are. The lightest tax regime in the matrix now carries one of its strictest identity gates.
Who feels it, in order
First, foreign residents on Singapore platforms: their data flows home from 2028, to be crossed against their own jurisdictions' returns and holdings forms — the arithmetic of Madrid, Paris and Rome works on Singaporean data too. Second, Singapore residents with foreign platform accounts: partner jurisdictions report inbound, and income-nature receipts that never reached a YA return acquire a delivery date. Third, everyone at onboarding: the certification is now the door to the market itself — an unanswered form does not mean privacy, it means no trading.
The honest read
- Certify early, accurately. Residency, TIN, date of birth — the form is mandatory by 31 December 2027 for existing accounts, and the market closes without it.
- Singapore residents: reconcile income events now. Inbound data will be matched against YA returns — receipt logs should already agree with them.
- Foreign residents: read your home schedule. The data goes to your authority, on their timetable — and their disclosure windows price by date.
- Undeclared income-nature years: the VDP before the first exchange. The grace-period arithmetic of voluntary disclosure works best before 2028 makes discovery mechanical.
Why the line stays "watch"
The first certification cycle and the first exchange have not yet run; operational practice, platform handling of edge cases and IRAS' use of inbound data are forecast, not record. The dates stand; the practice follows. Updates flow through the change log.
A position note on a reporting system before its first cycle. It is not advice on your affairs, and reading it creates no professional relationship.