Spain has clarified a simple but important point: if you truly hold your own private keys, your crypto may fall outside Form 721’s overseas reporting rules. The tax line is custody, not whether the wallet is hot or cold.
- Key control is the main test
- Foreign custodians can still trigger reporting
- Hot vs. cold wallet type is not decisive
- EU rules are tightening transparency around crypto
Spain’s Directorate General of Taxes laid that out in binding consultation V0848-26, issued on April 21. The guidance says Form 721 depends on who controls and safeguards the private cryptographic keys. If the taxpayer keeps the keys in self custody, and no foreign third party is safeguarding the assets, the holdings are treated differently under this overseas reporting regime.
Form 721 is Spain’s declaration for qualifying virtual currency held abroad. It was built for crypto sitting with foreign platforms or custodians that maintain, store, or transfer assets on behalf of customers. In plain English: if someone else controls the keys, Spain wants the paperwork. If you alone control them, the reporting result may be different.
That distinction matters because tax law cares a lot more about substance than labels. A wallet can be online or offline, connected or unplugged, and still not tell the full story. A hot wallet can be self-custodied. A cold wallet can still involve a third party. The real question is who can actually move the funds and who safeguards the keys.
The consultation’s logic also reinforces a broader crypto truth that gets lost in all the marketing fluff: self custody is not a vibe, it is a real legal and technical condition. If you hold the private keys yourself, including through a physical hardware device, that points toward self custody. If a foreign custodian safeguards those keys, the assets may still fall within Form 721 if the rest of the conditions are met.
The example discussed by Spanish tax authorities shows how this plays out in practice. A Spanish resident created a US limited liability company in 2025 to hold crypto for the long term, then transferred assets from a personal wallet to the company. The tax authority’s position was that if the taxpayer stored the private keys themselves, the holdings would not be subject to the foreign virtual currency reporting requirement. The wallet could be hot or cold; that part did not change the outcome.
That sounds neat on paper. Real life is messier. Company structures, shared access, multisignature setups, estates, beneficiaries, authorized persons, and delegated custody can blur the line fast. Tax authorities rarely reward vibes, and “it’s basically mine” is not a serious compliance strategy.
Spain’s broader regulatory backdrop helps explain why this distinction exists. Spanish authorities partly draw on the EU’s Markets in Crypto Assets (MiCA) framework when defining custody and administration. MiCA is the bloc’s attempt to put structure around crypto-asset service providers, including how they hold client assets and interact with them.
That shift is showing up in the market too. In June, Spanish banking group Cecabank launched a regulated custody platform after securing authorization for crypto custody, transfers, and reception and transmission of orders under MiCA. Renta 4 Banco was among the first institutions using that infrastructure. Cecabank had also secured authorization from Spain’s securities regulator, the CNMV, and was registered with the Bank of Spain as a crypto asset service provider.
That does not mean self custody is going away. It means regulated custody is becoming more normal in Europe, while self custody remains the choice for users who do not want a bank, exchange, or custodian sitting between them and their assets. Both models exist for a reason. Pretending they are the same is nonsense.
There is also a bigger reporting machine moving around crypto. The EU’s DAC8 tax reporting regime took effect on Jan. 1, 2026, requiring crypto asset service providers to collect information on reportable users and transactions. Under DAC8, service providers can gather transaction data when assets move between regulated platforms and external addresses, including self-custody wallets.
That is the part some people like to forget. Self custody may keep certain holdings outside Form 721, but it does not make crypto invisible. Moving assets from an exchange to your own wallet is not the same as disappearing into the mist. If a regulated service provider touches the flow, there may still be data trails available under separate reporting rules.
Form 721 also reaches beyond people who still hold qualifying assets on Dec. 31. Taxpayers who were owners, beneficiaries, authorized persons, or otherwise had disposal rights during the year may still have to provide information corresponding to the date their status ended, even if they no longer held the assets by year-end. Inheritance cases can also bring reporting obligations into play, including dormant estates under Article 35.4 of Spain’s General Tax Law. Heirs and legatees become subject to the relevant reporting requirement once an inheritance has been accepted expressly or tacitly.
That is where casual crypto thinking often falls apart. People like to ask, “Do I hold it now?” The better question is often, “Did I control it at any point, and in what legal capacity?” Spain’s rules are built around that kind of control-based analysis, not social-media slogans.
For regular users, the practical takeaway is straightforward. If you truly self-custody your coins, and no foreign entity is safeguarding your keys, Spain’s Form 721 regime appears to treat that differently from assets held with a third-party custodian abroad. That is a win for privacy and self-sovereignty, which are still worth defending in a world that would happily outsource everything to a compliance dashboard.
But it is not a free pass. If your setup involves a company, a custodian, an executor, a trustee-like arrangement, or some “technically it’s mine, but…” structure, expect questions. The taxman is not impressed by clever phrasing.
Key questions and takeaways
-
Does self-custody crypto need to be reported on Form 721?
Spain’s guidance suggests that if the taxpayer controls the private keys and no foreign third-party custodian is safeguarding the assets, Form 721 may not apply. The answer can change with the full facts, especially in complex legal structures. -
Does a hot wallet count differently from a cold wallet?
No. The wallet’s temperature is not the deciding factor. What matters is who controls the keys and who can actually move the assets. -
Can foreign custodians still trigger reporting?
Yes. If a foreign entity holds or safeguards the keys on behalf of the user, the holdings may fall within Form 721 if the other conditions are met. -
Is self custody the same as being invisible to tax authorities?
Not even close. DAC8 and platform-level reporting can still capture transaction information when crypto moves through regulated service providers, even if the destination is a self-custody wallet. -
Why does this matter beyond paperwork?
Because it reinforces a core crypto principle: control matters. Spain is recognizing that holding your own keys is materially different from leaving assets with a custodian, and that difference has legal and tax consequences.
Spain is not banning self custody. It is doing something more useful: drawing a real line between assets you control yourself and assets handed to someone else. That is sensible, even if it annoys people who hoped a hardware wallet would magically erase every reporting duty. It won’t. But it can still keep your coins under your control, not someone else’s.
Further reading
A few related pieces on Europe’s tightening crypto rules and custody split are worth a look.
