IRS Crypto Tax Audit: What to Expect & How to Prepare

How the IRS Tracks Crypto

The days of "the IRS doesn't know what I hold" are over. The agency uses multiple tools:

• Form 1040 question: Every return now asks "At any time, did you receive, sell, exchange, or dispose of a digital asset?" Lying on this question is perjury. The IRS cross-checks your answer against exchange 1099-DA data.
• 1099-DA reporting: Starting 2025, exchanges like Coinbase, Kraken, and Binance.US report trades directly to the IRS, including proceeds, cost basis, and acquisition dates. Kraken's 2025 rollout was plagued by errors — if you received an incorrect 1099-DA, keep your own records as the definitive source.
• Blockchain analytics: The IRS contracts with Chainalysis and other firms to trace on-chain activity. They can follow funds from exchanges (where they have your identity) to any wallet address.
• John Doe summons: The IRS has obtained court orders forcing exchanges to hand over records of all customers who transacted above certain thresholds. Kraken, Coinbase, and SFOX have all been targeted.

What Triggers a Crypto Audit

These patterns are most likely to draw IRS attention:

• Mismatched reporting: If the IRS has a 1099-DA showing you received $100K from Coinbase but your return shows zero crypto activity, you will get a letter.
• Large transactions without explanation: Deposits of $10K+ trigger Bank Secrecy Act reporting. The IRS compares these against your tax return.
• History of non-filing: If you filed in 2021 but skipped 2022-2024 and now have exchange records showing activity, expect a CP2000 notice.
• DeFi activity without reporting: Yield farming, staking rewards, airdrops, and LP token trading are all taxable events. Many users do not report them because they are complex — the IRS knows this and targets suspected unreported DeFi income.
• Random selection: Some audits are simply random. Be prepared regardless.

Types of IRS Notices and Letters

CP2000 Notice (Underreported Income)

The most common crypto-related notice. It means the IRS's Automated Underreporter (AUR) system found a mismatch between what you reported and what third parties (exchanges) reported. You typically have 30 days to respond. Do not ignore it — the IRS will assess the tax, plus penalties and interest.

Letter 6174 / 6174-A (Soft Warning)

A "friendly reminder" that you may have unreported crypto activity. These often go to people who answered "Yes" to the digital asset question but reported zero income. Respond by amending your return if you owe tax, or explaining why no tax is due.

Form 4564 (Information Document Request)

A formal audit has begun. The IRS will request specific records: exchange statements, wallet addresses, transaction histories, cost basis documentation, and explanations of specific trades. You have a deadline — usually 30 days.

Summons

If you do not comply with an IDR, the IRS can subpoena records directly from exchanges and wallet providers. By this point, you should have a tax attorney.

How to Prepare Your Records

The single most important thing you can do is maintain complete, accurate records before an audit happens. During an audit, reconstructing years of trading from blockchain data is extremely difficult.

• Use crypto tax software: Tools like CoinTracker, Koinly, TaxBit, and Cointelli import your exchange and wallet history and calculate gains. Keep the exported reports as your audit trail.
• Document cost basis: For every trade, you need: date acquired, date sold, proceeds, cost basis, and gain/loss. If you use Specific ID method, you must be able to identify which specific units were sold.
• Track transfers, not just trades: Moving crypto between your own wallets is not taxable, but you need to document it to avoid the IRS treating wallet-to-wallet transfers as disposals.
• Document forks and airdrops: You need the transaction hash, the date received, and the fair market value at receipt.
• DeFi records: LP deposits, yield farming, lending interest — every interaction needs to be tracked. This is the hardest area to reconstruct after the fact.

Responding to an Audit

1. Do not panic. Most crypto audits are correspondence audits — you respond by mail, not in person.
2. Do not respond alone. If the amount at issue is significant, hire a CPA or tax attorney who specializes in crypto. The complexity of cost basis methods, DeFi transactions, and multi-chain activity is well beyond what most generalist CPAs understand.
3. Respond by the deadline. Missing a deadline causes the IRS to assess the tax automatically. Extensions are available if you request them before the deadline.
4. Only answer what is asked. Do not volunteer additional information. If the IRS asks about your 2023 Coinbase trades, do not send them your 2022 MetaMask activity unless they ask for it.
5. Amend if necessary. If you discover errors in prior returns, file amended returns (Form 1040-X) proactively before the IRS finds them. This reduces penalties.

Penalties and How to Reduce Them

If you owe tax from unreported crypto:

• Failure to file: 5% per month up to 25% of the tax due.
• Failure to pay: 0.5% per month up to 25%.
• Accuracy-related penalty: 20% of the underpayment if the IRS determines negligence or substantial understatement.
• Fraud penalty: 75% — only if the IRS proves intentional fraud.

Penalties can be reduced or waived if you show reasonable cause (e.g., you relied on professional advice, or the error was due to the complexity of crypto tax rules). The IRS has a First-Time Penalty Abatement policy for taxpayers with clean compliance history.

Key Deadlines

• April 15: Tax filing deadline (standard).
• June 15: FBAR filing deadline (foreign accounts over $10K).
• October 15: Extension deadline.
• 3 years: Statute of limitations for IRS to audit your return.
• 6 years: Extended statute if unreported income exceeds 25% of reported gross income.
• No limit: If fraud is involved.