Until recently, crypto reporting lived in a grey zone where only major exchanges worried about filing deadlines. DAC8 (the 8th amendment to the EU Directive on Administrative Cooperation) erases that distinction. It expands crypto reporting scope to include all financial intermediaries, which includes your firm if you serve clients with any crypto exposure, no matter how small.
The clock is ticking. MiCA full enforcement arrives July 1, 2026, and DAC8 is the reporting layer sitting directly beneath it. Your clients need you to collect the data. AEAT will expect you to file it. And penalties for missing deadlines or filing incomplete reports start at €5,000 and climb from there.
What is DAC8 and Why It Hits Your Desk
DAC8 is the EU's response to crypto proliferation. It requires automatic exchange of information about crypto asset holdings and transactions between national tax authorities. The directive doesn't just target crypto exchanges anymore. It includes custodians, wallet providers, DeFi platforms, staking providers, and any entity that facilitates crypto transactions.
Here's the gap most gestorías miss: financial intermediaries, including accounting firms and tax advisors, are now considered "relevant persons" under DAC8 if you handle client crypto data or advise on crypto transactions. If a client tells you about their crypto holdings while you prepare their tax filing, you may have an obligation to collect, verify, and report that data to AEAT.
The directive does not exempt small clients or minor transactions. A client with €2,000 in Bitcoin sitting in a personal wallet still needs to be reported. The practical reality: gestorías are expected to implement internal processes to systematically gather crypto asset information from clients, validate it, and ensure it reaches AEAT before deadlines.
The Data You Need to Collect: A Practical Checklist
For each client with crypto exposure, you need:
- Full name and tax ID (NIF)
- All crypto assets held (Bitcoin, Ethereum, stablecoins, altcoins, NFTs)
- Wallet addresses or exchange accounts where assets are held
- Acquisition date and cost basis (in EUR) for each holding
- Current market value as of reporting date
- How assets are held (personal wallet, exchange, custodian, DeFi protocol)
- Any income generated (staking rewards, lending interest, mining, airdrops)
- Transaction history for the reporting year (buys, sells, transfers, custody changes)
Build a simple client template. Use it consistently. Document everything your client provides and when they provided it. This creates a paper trail if AEAT questions your reporting later.
How Spain's Crypto Tax Models Fit with DAC8
Spain has three reporting models tied to crypto:
- Modelo 172 reports crypto holdings above €3,000. This is your asset disclosure foundation. Before DAC8, many gestorías treated it as low-priority. Now it's mandatory groundwork.
- Modelo 173 reports crypto transactions — buys, sells, transfers, and any transaction generating taxable income.
- Modelo 721 applies to foreign crypto assets. Residents with foreign financial assets exceeding €50,000 must report them. Crypto held on non-Spanish exchanges often triggers this.
DAC8 doesn't replace these models — it sits on top of them and expands scope to all crypto assets and transactions, not just those above thresholds. It also requires automated reporting via XML file submission to AEAT rather than manual forms. Your data collection process feeds all three models and the DAC8 submission.
Deadline: Modelos 172 and 173 must be filed by April 20 each year for the prior calendar year.
Deadlines and Penalties
Filing late incurs a 3% penalty on unreported amounts, minimum €300. Incomplete or inaccurate reporting starts at €5,000 per offense. Deliberate misreporting can escalate to €10,000 plus criminal referral.
For gestorías the risk is amplified. If a client's crypto holdings are not reported because you failed to collect the data, and AEAT later discovers undisclosed assets, both you and your client are liable. Your professional liability insurance may not cover negligence in crypto compliance.
Target date: implement your crypto data collection process by May 1, 2026. That gives you 60 days before June 30 to gather client data, validate it, and prepare filings.
Building Your Compliance Process
You don't need to be a crypto expert. You need systems.
- Step 1: Add crypto to your client intake questionnaire as a required field — even if the answer is "none."
- Step 2: For clients with crypto exposure, request exchange statements, wallet transaction histories, and custodian account statements.
- Step 3: Convert this data into your existing Modelo 172/173 reporting structure.
- Step 4: Submit on the standard AEAT timeline.
- Step 5: Prepare for DAC8 automated reporting via XML. Check if your tax software already supports this.
- Step 6: Keep records of all client communications, data requests, and documentation received.
Tools designed for gestorías now include DAC8-compliant reporting modules. SENTINEL by MiCA Ready tracks DAC8 deadlines, provides client data templates, and covers regulatory changes specifically for Spanish advisory firms — micaready.eu.
Moving Forward
DAC8 is a compliance obligation today. Spanish AEAT expects gestorías to have processes in place by June 2026.
Start small: audit your current client base for crypto exposure. Build a collection template. Train your team to ask the right questions. The gestorías that act now will avoid the panic filing many will face in May and June — and will position themselves as the trusted advisor for a client segment that's growing fast.
Your clients have crypto. AEAT expects you to know about it. Make sure you're ready.