Maybe you sold some Bitcoin in 2021, took the rand, and moved on. Maybe you swapped one coin for another a handful of times when the market was running, and never once thought of those swaps as sales. Either way, the gain never made it onto a tax return, and now it surfaces quietly every filing season. If that sounds familiar, read this calmly. There is a proper, legal way to put it right, and it has a name: the SARS Voluntary Disclosure Programme.
The VDP is not a loophole and it is not an amnesty. It is a standing SARS process for taxpayers who want to come forward about something they should have declared and did not. Crypto sits squarely inside its scope, because SARS treats crypto gains and earnings as taxable like any other income or capital gain.
Who this is really for
This is for anyone who had a crypto disposal or crypto earnings in a past year that never reached a return. The classic case is the person who says, "I only cashed out once, back in 2021." That single cash-out may not have been your only taxable event.
Under SARS's rules, more counts as a disposal than most people realise:
- Selling crypto for rand is a disposal.
- Swapping one crypto for another is a disposal too, valued in rand at the market price on the day of the swap.
- Spending crypto on goods or services is treated as a barter transaction, which is also a disposal.
Earning crypto is a separate trigger. Mining rewards, staking rewards, airdrops, interest-like yield, or crypto you were paid for work all count as income at their rand value on the day you received them.
So the person who "only cashed out once" may in fact have had a dozen taxable moments spread across a few busy months, without ever selling back to rand a second time. If none of that was declared, the VDP is the route back.
What the VDP fixes, and what it doesn't
Here is the honest version, because the value of the programme is easy to overstate.
A valid disclosure gives you two real things. It waives the understatement penalties SARS would otherwise raise on the amount you left out. Without a VDP, those penalties can climb steeply, reaching up to 200% of the tax in the worst cases of intentional or repeated default. It also protects you from criminal prosecution for the specific default you disclose.
What it does not do is make the bill disappear. The tax on the gain or the income is still owed, in full. Interest on the amount that was paid late is not remitted either. So a VDP turns an open-ended risk into a defined, payable number. That is worth a great deal, but it is not a discount on the tax itself.
| Covered by a valid VDP | Not covered |
|---|---|
| Understatement penalties, which can otherwise reach up to 200% | The tax on the gain or income, still payable in full |
| Criminal prosecution for the default you disclose | Interest on the tax that was paid late |
The rules that make a disclosure valid
A VDP only works if it meets every one of SARS's requirements. Miss one and the relief can fall away. In plain terms:
- It has to be voluntary. This is the one that matters most. Your disclosure has to reach SARS before they discover the default themselves, and before they notify you of an audit or investigation that would have found it. Once that letter lands, the door is effectively shut.
- It has to be full and complete in all material respects. A partial disclosure, or one that quietly leaves out the awkward year, is not valid.
- The behaviour has to be the kind the law covers, meaning conduct listed in section 223 of the Tax Administration Act. Ordinary undeclared gains fit here.
- There must be no similar default in the previous five years. If you have already used the VDP for the same sort of thing recently, you cannot lean on it again.
- It cannot produce a refund. The programme is for settling what you owe, not for engineering money back.
- It has to be on the prescribed form.
One point people often get wrong: there is no automatic five-year cut-off on how far back you go. You have to reach back to when the default first began. If your first undeclared disposal was in 2019, that is where the disclosure starts, even if it means rebuilding six years of history.
How you actually apply
The mechanism itself is straightforward. You apply through SARS eFiling using the VDP01 form. SARS reviews the application, and if it qualifies, you end up with a VDP agreement that settles the tax and confirms the relief.
The paperwork is the easy part. Getting the numbers right underneath it is not. For anything beyond a couple of small trades, get a tax practitioner involved before you file. This is genuinely one of those situations where professional help earns its fee. A practitioner will frame the disclosure correctly, deal with SARS on the technical points, and make sure "full and complete" actually holds up. That is not a hedge. A botched VDP can leave you worse off than doing nothing.
Why the clock genuinely matters now
There is a timing argument here, and it is real without being a reason to panic.
South Africa switched on the Crypto-Asset Reporting Framework, or CARF, on 1 March 2026. From that date, South African crypto platforms have to collect reportable information on their users and transactions. The first reporting period runs to 28 February 2027, and providers must submit their first CARF returns to SARS by 31 May 2027. The first automatic exchange of this information between countries, which sweeps in South Africans using offshore platforms, is set for September 2027.
Be precise about what that means, because plenty of articles overstate it. It is not that SARS already has a full feed of everything you have ever traded. Under CARF the first provider returns only reach them by 31 May 2027. What is true today is that the data is being collected right now, that SARS already obtains exchange information through other channels, and that the direction of travel is fixed.
That is exactly why the word voluntary carries the weight. A VDP only counts while the default is still yours to disclose. Every month that more reporting infrastructure comes online, the odds shift toward SARS finding it first. You do not need to file tomorrow morning. You also should not treat 2027 as comfortably far away.
The hard part is your history
For most people the blocker is not the decision to come forward. It is the reconstruction.
A VDP has to be full and complete, and that means genuinely accounting for every disposal and every bit of crypto income going back to the start. Almost nobody can do that by hand across five or more years of activity, spread over exchanges they have half-forgotten, wallets they barely used, and CSV files sitting in an old email. That is the actual hard part, and it is where a disclosure usually stalls.
This is where Coinfig fits. It rebuilds your transaction history from read-only exchange connections (Luno, VALR, and Kraken) and from CSV imports for anything else, then runs a completeness check that flags missing history, unmatched transfers, and balance changes that do not add up. The output is a set of reports, capital gains summaries, income breakdowns, and transaction schedules with the assumptions shown, that hand your tax practitioner the numbers and the workings behind them.
To be clear about the boundary: Coinfig does the calculation and the reporting, and it does not act as your tax adviser or lodge the VDP for you. You or your practitioner still decide the treatment and file the form. A full crypto tax report is free for up to 100 transactions. The kind of multi-year history a VDP needs usually runs well past that, and the paid tiers lift the volume cap when it does.
If you want the groundwork first, the South African crypto tax guide walks through how SARS treats each type of transaction, which is the same logic a disclosure has to follow. Start with your records, get them complete, and the disclosure stops being a vague worry and becomes a task you can finish.
This article is general information, not tax advice. Crypto tax outcomes depend on your specific circumstances. For complex situations, consult a qualified tax practitioner.