EU Crypto Surveillance Challenge
Bull Bitcoin Challenges EU's DAC8 Crypto Rules in France, Citing Privacy and Security Risks
Key Points
First reports for DAC8 covering 2026 transactions are due by September 30, 2027, establishing a concrete deadline beyond the initial reform.
DAC8 mandates automatic data collection and cross-border sharing of customer identities and transaction histories among EU tax authorities, regardless of any suspicion of wrongdoing, expanding beyond prior targeted data requests.
Bull Bitcoin is positioned as the world’s oldest Bitcoin-only, non-custodial exchange and has recently been licensed under MiCA by France’s financial markets regulator AMF.
Bull Bitcoin launched the dac8.com portal, described as a public, fully sourced resource for citizens, journalists and policymakers to understand the DAC8 objections.
Security and safety concerns tied to centralized crypto data are underscored by figures on wrench attacks: France has seen at least 77 crypto-related kidnappings/extortions since early 2026, with France among the most affected; global wrench attacks rose about 75% in 2025 to 72 cases.
Bull Bitcoin has filed a petition with France's Conseil d'État — the country's highest administrative court — to annul the French decree implementing the EU's DAC8 crypto reporting rules, according to Bitcoin Magazine. The company calls the framework a "mass surveillance database" and warns it could put millions of crypto holders at physical risk.
DAC8 requires crypto service providers to collect detailed customer identities and full transaction histories, then share that data automatically with tax authorities across all EU member states — with no suspicion of wrongdoing required, Crypto Briefing reported. First reports covering 2026 transactions are due by September 30, 2027.
"Kill Your Customer": Why Bull Bitcoin Is Fighting Back
Bull Bitcoin, described by Bitcoin Magazine as the world's oldest Bitcoin-only, non-custodial exchange, says DAC8 goes far beyond tax reporting. The company argues that building a centralized database of crypto holder identities and balances creates a ready-made target for hackers and criminals. It coined the phrase "Know Your Customer turned Kill Your Customer" to capture that danger.
The company also launched dac8.com, a public website with sourced information for citizens, journalists, and policymakers. Crypto Times reported that Bull Bitcoin holds a MiCA license from France's financial markets regulator, the AMF — making its legal challenge unusual for a fully regulated firm.
Centralized Crypto Data Linked to Real-World Violence
Bull Bitcoin's safety argument rests on hard numbers. France has seen at least 77 crypto-related kidnappings and extortions since early 2026, making it one of the worst-affected countries in Europe, according to Bitcoin Magazine. Globally, so-called "wrench attacks" — physical assaults to steal crypto — rose roughly 75% in 2025, reaching 72 known cases.
The company argues that a government database naming who holds crypto, and how much, hands criminals an easy target list. Forcing providers to store and share that data centrally, Bull Bitcoin says, turns a tax compliance tool into a physical security threat for ordinary holders.
What DAC8 Actually Requires — and Who It Affects
Under DAC8, any qualifying crypto asset service provider must collect and automatically exchange customer identities and transaction records with tax authorities across EU member states. Unlike earlier rules that required a specific reason to request data, DAC8 sweeps up all users by default, Crypto Briefing reported. Bull Bitcoin estimates the rules could affect up to 135 million Bitcoin holders in Europe.
Coin Tribune noted that Bull Bitcoin's challenge targets Decree No. 2025-1276 — the specific French law that brought DAC8 into national effect. The company says it will pursue every legal avenue available, including potential action at the EU level, to suspend, amend, or overturn the rules before the 2027 reporting deadline.
A Legal Test Case That Could Reshape EU Crypto Privacy
MEXC reported that Bull Bitcoin is one of the first regulated crypto firms to mount a direct legal challenge to DAC8 in any EU member state. A ruling from France's Conseil d'État could set a precedent that ripples across Europe and forces a rethink of how the directive balances tax enforcement against privacy rights.
The outcome matters beyond Bitcoin. If Bull Bitcoin wins even a partial suspension, it could delay or reshape reporting requirements for every crypto provider operating in the EU. With the first deadline still two years away, the legal window is open — but narrow.
Sentiment
Mostly NegativePublishers
15
Articles
2
Reach
17
