IRS Crypto Audit 2026: What Triggers One and What to Do
The IRS issued over 320,000 CP2000 notices to cryptocurrency holders in 2025 — the most ever. With Form 1099-DA reporting live for the first time, the era of flying under the radar with crypto taxes is definitively over. Here is what actually triggers a crypto audit and what to do if the IRS contacts you.
Why crypto audits are increasing in 2026
The IRS has been building its crypto enforcement infrastructure for years. Several developments in 2025 and 2026 dramatically expanded its ability to identify unreported crypto income:
- Form 1099-DA is live. For the first time, U.S. centralized exchanges (Coinbase, Kraken, Gemini, and others) are issuing Form 1099-DA for 2025 transactions. The IRS receives a copy. If your Form 8949 does not reconcile with the 1099-DA your exchange filed, expect a CP2000 notice automatically.1
- John Doe summonses produced 85,000+ accounts. Starting with Coinbase in 2016 (covering 2013–2015 users with $20,000+ in transactions) and continuing with Kraken and Circle in 2021 (covering 2016–2020), the IRS has obtained detailed account histories from major exchanges without needing to name specific taxpayers.2
- Blockchain analytics contracts. The IRS has retained firms including Chainalysis and CipherTrace to trace transactions across public blockchains. A wallet address linked to your identity through a KYC exchange is not anonymous to an IRS revenue agent with these tools.
- Operation Hidden Treasure. A joint initiative between the IRS Office of Fraud Enforcement and Criminal Investigation division trains agents specifically in virtual currency tracing and civil and criminal crypto tax evasion.3
- The digital asset question on Form 1040. Every taxpayer has answered — under penalty of perjury — whether they received, sold, exchanged, or otherwise disposed of a digital asset during the year. A "No" answer that is contradicted by exchange data creates a fraud exposure, not just a math error.4
The practical result: the IRS now has more data on crypto transactions than most holders realize. Whether that data produces an audit depends on what your return says versus what the IRS already knows.
What triggers a crypto tax audit
Most crypto audits are not random. They are driven by mismatches between what the IRS knows and what your return reports. The most common triggers:
Form 1099-DA mismatch
Starting with 2025 transactions, exchanges file a 1099-DA showing gross proceeds from covered sales. If the proceeds on your Form 8949 do not match, the IRS system flags it automatically and generates a CP2000 notice. This is not a full audit — it is a proposed change — but ignoring it escalates the matter. Note that 2025 forms show proceeds only (not cost basis), so mismatches may also arise from transfers reported as sales. You will need to document which line items were transfers, not disposals.1
Falsely answering "No" to the digital asset question
Form 1040 asks: "At any time during the tax year, did you receive (as a reward, award, or payment) or sell, exchange, or otherwise dispose of a digital asset?" Answering "No" when you traded, mined, staked, or received airdrops — and then filing a return the IRS's exchange data contradicts — creates willful misrepresentation risk, which removes the statute of limitations protection and opens civil fraud penalty exposure (75% of underpayment).4
Large unreported income from staking, mining, or airdrops
Under Rev. Rul. 2023-14, staking rewards are ordinary income when received. Mining income is ordinary income at receipt (Rev. Rul. 2014-21). Airdrop income is ordinary income at fair market value when you gain access to the tokens (Rev. Rul. 2019-24). None of these come with W-2s, but exchange data, blockchain records, and 1099-DAs now give the IRS visibility into these income streams. A large staking or mining position that does not appear on Schedule C or as other income is a significant mismatch signal.
High transaction volume with no Form 8949
Active DeFi users — swapping on Uniswap, providing liquidity on Curve, or trading on a centralized exchange hundreds of times per year — generate hundreds of taxable events. Filing a return with no Form 8949 when the IRS has exchange records showing hundreds of transactions is a direct trigger. Aggregation on Form 8949 (grouping trades by asset class) is acceptable; omitting the form entirely is not.
Prior-year letters not resolved
If you received and ignored a Letter 6173, 6174, or 6174-A from the IRS in a prior year without amending your return or responding, the IRS flags your account for follow-up. A subsequent return that still does not report the income in question escalates the matter to examination.
Data from John Doe summonses
The IRS obtained detailed account histories from Coinbase covering 2013–2015 and from Kraken and Circle covering 2016–2020. If you transacted with $20,000 or more on those platforms during those years and did not report the gains, the IRS may have your records and not yet acted. That data does not expire with the standard statute of limitations if the omission was large.
IRS letters and notices: what they mean
Not every IRS letter is the same. The type of letter determines what action is required and how much time you have.
| Notice | What it means | Response required? |
|---|---|---|
| Letter 6174 | Educational notice. IRS believes you may have unreported crypto income but is not demanding a response. No immediate action required — but if your return was wrong, this is your low-pressure window to amend. | No, but consider amending |
| Letter 6174-A | Same as 6174 but with a note that the IRS may follow up. More serious than 6174. Amending before follow-up reduces exposure. | No, but recommended |
| Letter 6173 | Requires a signed response within 30 days certifying compliance — or explaining any inaccuracies. Ignoring this letter is not an option. | Yes — within 30 days |
| CP2000 | Proposed assessment based on a mismatch between your return and third-party data. IRS proposes additional tax, penalties, and interest. You can agree, partially agree, or dispute with documentation. | Yes — respond by the deadline |
| 30-day letter | IRS has completed an examination and proposes changes. You can appeal to IRS Appeals within 30 days or agree to the adjustments. | Yes — within 30 days |
| 90-day letter (Notice of Deficiency) | The IRS is assessing additional tax. You have 90 days to file a petition with Tax Court before the assessment becomes final without court review. | Yes — within 90 days |
The critical mistake most taxpayers make is treating Letters 6174 and 6174-A as if they can be ignored indefinitely. They can — until the IRS follows up with something that cannot. Each educational letter is also a clock reset opportunity: if your return was wrong, amending before a formal examination preserves the right to use the standard statute of limitations and avoid accuracy penalties.
What to do if you receive an IRS notice about crypto
- Do not ignore it. Every IRS crypto notice has a response deadline. Missing it forfeits your right to dispute or negotiate and typically accelerates the matter to a more formal examination or assessment.
- Do not respond without professional help. A CP2000 response that concedes items you did not owe — or that does not properly document cost basis, transfers, and timing — can result in paying more than you owe. A response that is inconsistent with your return can create new issues. Engage a CPA experienced in crypto tax matters and, for Letter 6173 or anything beyond a CP2000, a tax attorney before responding.
- Pull your complete transaction history from all platforms. The IRS notice will identify specific years and income amounts. You need every exchange statement, wallet transaction export, mining pool record, staking report, and DeFi transaction log for those years to reconstruct your actual gain and loss position. Exchanges typically allow CSV or PDF exports of full histories.
- Do not destroy or delete records. If the IRS has initiated contact, destruction of records at this point is a separate legal problem regardless of what the underlying tax issue turns out to be.
- Check whether an amended return reduces your exposure. If the IRS is proposing a figure based on gross proceeds without cost basis (common with early 1099-B and 1099-DA forms that lacked basis data), your actual tax owed may be substantially lower with documented cost basis. An amended Form 1040X with a detailed Form 8949 often resolves CP2000 notices for significantly less than the proposed amount.
Documents you need for a crypto audit
Revenue agents examining a crypto audit now use a standardized examination document called the Historical Digital Asset Form (HDAF) — a detailed information document request (IDR) covering every aspect of your digital asset activity. Be prepared with:
- Complete transaction history from every exchange account (buys, sells, transfers, fees), for each year under examination
- Wallet records: addresses used, all inbound and outbound transactions, with dates and values
- Mining records: pool payouts, pool account statements, hash rate logs
- Staking records: validator or delegator statements showing reward amounts and dates received
- Airdrop receipt records: dates, token quantities, FMV at the time of receipt
- DeFi activity: DEX trade history, LP entry/exit records, lending/borrowing activity
- Cost basis documentation: purchase records, exchange confirmations, or reconstructed records showing acquisition date, amount paid, and exchange used
- Bank and brokerage statements showing fiat flows in/out of exchanges (to corroborate exchange records)
- Prior-year returns for all years under examination
- Any prior IRS correspondence
The record-keeping problem is real for many crypto holders: early exchange CSV exports may not include all required fields, DeFi activity on-chain may require manual reconstruction, and historical price data for obscure tokens at the date of receipt may need to come from archived market data providers. A crypto tax specialist or CPA builds this reconstruction before responding — not during the audit.
Common crypto audit findings
Based on IRS examination guidance and practitioner experience, these are the most common issues revenue agents find in crypto audits:
- Unreported ordinary income. Staking rewards, mining income, airdrop income, and token compensation (including vested founder tokens under IRC §83) are ordinary income at receipt — not capital gains and not deferred until sale. Missing these from Schedule C or as other income is the most common finding.
- Cost basis errors. Using exchange default FIFO when specific identification or HIFO would have been more favorable — or when the exchange defaulted to FIFO without explicit instruction. Also: failing to include exchange fees in basis, which increases reported gain.
- Transfers reported as sales. Moving Bitcoin from Coinbase to a Ledger hardware wallet is not a sale. Many taxpayers received 1099-Ks or early exchange statements that reported transfers as proceeds and mistakenly reported them as taxable sales, overpaying. Others received similar forms and did not report them at all, underpaying. The correct treatment requires identifying each transaction.
- Crypto-to-crypto swaps not reported. Trading ETH for SOL on a centralized exchange, or swapping tokens on Uniswap, is a taxable disposal of the token surrendered. Each swap is a separate Form 8949 line item. Holding-only mentality causes many active traders to miss these entirely.
- Basis not carried over from wallet to wallet. Moving coins from an exchange to a cold wallet does not reset basis. Selling from cold storage without properly carrying the basis from the original purchase date produces an incorrect high gain. This requires coin tracking software or manual reconstruction.
- Incorrect Form 1040 answer. Answering "No" to the digital asset question in a year when the taxpayer received staking rewards, mined coins, or received a token airdrop — even if they did not sell — is an error. Receipt is a taxable event for rewards and ordinary income; the question covers receipt, not just sales.
Statute of limitations for crypto audits
The IRS generally has three years from the filing date (or due date, whichever is later) to assess additional tax on a return.5 Two important exceptions apply to crypto:
| Situation | Statute of limitations |
|---|---|
| Standard (accurate return) | 3 years from filing date or due date, whichever is later (IRC §6501(a)) |
| Substantial omission (25%+ of gross income omitted) | 6 years from filing date (IRC §6501(e)) |
| Fraud or willful evasion | No limit (IRC §6501(c)(1)) |
| No return filed | No limit (IRC §6501(c)(3)) |
The six-year window is the most commonly triggered exception for crypto. A taxpayer with $500,000 in mining income who reported $100,000 of it on a return showing $400,000 in total gross income has omitted more than 25% of gross income — triggering the six-year window on that return. For the 2019 tax year, that window would not close until at least 2026.
The "no return filed" situation applies to the years before the IRS's virtual currency guidance was well-publicized (2013–2016 for many early adopters). If you never filed a return for those years, the clock has not started.
Foreign exchange accounts and reporting
Many crypto holders used foreign exchanges — Binance (offshore entities), BitFinex, Bitmex, or others — during years when U.S. exchange options were limited. The reporting status of crypto held on foreign exchanges has been in flux.
As of 2026, FinCEN's position under Notice 2020-2 is that accounts holding only virtual currency at foreign financial institutions are not currently required to be reported on FinCEN Form 114 (the FBAR). This exemption remains in place while FinCEN completes a proposed rulemaking (NPRM) that would expand FBAR coverage to include foreign crypto accounts. That rule has not been finalized as of the date of this guide.6
However, Form 8938 (Statement of Specified Foreign Financial Assets, filed with your Form 1040) has different rules. Consult a tax professional regarding whether your foreign exchange positions require 8938 reporting under FATCA based on their structure and value.
Separately: using a foreign exchange to conceal taxable U.S. income is not insulated by the current FBAR exemption. The IRS has used John Doe summonses and international data-sharing agreements to obtain foreign exchange records in criminal investigations.
Amending returns and voluntary disclosure
If you have unreported crypto income from prior years and have not yet received an IRS notice, amending your returns proactively is almost always less costly than waiting for the IRS to find you.
Amended return (Form 1040-X): You can file an amended return for any open year (within the three-year window, or six-year window if the original omission was large). Filing before an IRS notice typically eliminates the 20% accuracy-related penalty and demonstrates good faith. You will still owe the tax plus interest (currently around 7–8% per year on unpaid balances).
Voluntary Disclosure Practice (VDP): For willful non-compliance — intentional underreporting, hiding exchange accounts, or falsely answering the digital asset question — the IRS Voluntary Disclosure Practice provides a pathway to resolve the matter civilly rather than criminally. VDP requires full disclosure before the IRS has identified you, full cooperation, and payment of tax and penalties. It closes the criminal exposure window in exchange for a defined civil resolution. Eligibility requires a tax attorney to manage the process.
- No penalty: Amended return before IRS contact, accurate return
- 20%: Accuracy-related penalty (negligence or substantial understatement)
- 75%: Civil fraud penalty (willful underpayment)
- Criminal exposure: Willful failure to file, tax evasion, false statements
- FBAR (when applicable): Up to $10,000 per year non-willful / greater of $100,000 or 50% of account balance per violation for willful
How a crypto-aware financial advisor fits into this
A crypto audit is first a tax matter, and the immediate team is a CPA experienced in digital assets and — for serious matters — a tax attorney. A financial advisor's role is different but connected.
The audit or notice typically surfaces because of past decisions that were not coordinated: which lots were sold, whether basis was documented, whether income was reported. After the immediate matter is resolved, those structural problems need to be fixed going forward — and that is where the advisor comes in.
A crypto-aware fee-only financial advisor helps you:
- Build a documented, defensible cost basis record before the next sale — using specific identification rather than exchange-default FIFO
- Plan the timing and sizing of future disposals across tax years to reduce gain, minimize NIIT exposure, and maximize loss harvesting
- Coordinate with your CPA so that staking income, mining income, and DeFi activity are reported correctly each year — not reconstructed after the fact
- Design a custody and record-keeping policy that produces clean transaction history for every future sale
- Model the tax cost of various diversification scenarios so that a decision to sell is made with full knowledge of the bill — not discovered afterward
The most expensive moment in a crypto audit is usually not the tax itself — it is the reconstruction cost, the penalties, and the interest on years of underpayment. An advisor who coordinates planning before you transact eliminates most of that exposure from future gains.
Get matched with a crypto financial advisor
Whether you received a notice and need to understand how to prevent future exposure — or you are planning a significant sale and want to do it right the first time — we match you with fee-only advisors who work with crypto positions and coordinate directly with CPAs.
Back to homepage · Run the tax reserve calculator · Crypto capital gains tax 2026 · Form 1099-DA guide
- IRS, Form 1099-DA (Digital Asset) — new information return issued by covered brokers starting with 2025 transactions; shows gross proceeds; cost basis coverage expanded in 2026.
- National Law Review, IRS John Doe Summonses for Crypto Account Holders — Coinbase summons (2016, covering 2013–2015 with $20K+ transactions); Kraken/Circle summonses (2021, covering 2016–2020); 85,000+ accounts obtained in 2021.
- Decrypt, IRS Operation Hidden Treasure: What It Means for Crypto Holders — joint initiative of IRS Office of Fraud Enforcement and Criminal Investigation division; agents trained in blockchain tracing and crypto tax enforcement.
- IRS, Determine How to Answer the Digital Asset Question — Form 1040 question covers receipt, sale, exchange, or disposal of digital assets; answering "Yes" triggers Form 8949 reporting requirement.
- IRS, Publication 556 — Examination of Returns, Appeal Rights, and Claims for Refund — statute of limitations: 3 years standard (IRC §6501(a)); 6 years for 25%+ omission (IRC §6501(e)); unlimited for fraud.
- FinCEN, Notice 2020-2: Virtual Currency Reporting on the FBAR — foreign accounts holding only virtual currency not currently required to be reported on FinCEN Form 114; pending proposed rulemaking.
Tax values and enforcement information verified as of July 2026. IRS notice types and response requirements based on IRS Publication 556 and practitioner guidance. FBAR status reflects FinCEN Notice 2020-2, which remains in effect pending finalization of proposed rulemaking. This guide describes general information; individual situations require a qualified tax professional.