An IRS cryptocurrency audit is no longer a theoretical concern for active traders, NFT participants, DeFi users, or anyone who has held digital assets through one of the bull cycles of the past decade. It is an active risk. And the agents conducting these examinations are increasingly trained, equipped, and supported by the agency’s data resources to develop adjustments that can carry into six and seven figures of assessed tax, penalties, and interest.

This article explains what an IRS cryptocurrency audit actually looks like from the inside — how returns are selected, what agents are trained to examine, what data the IRS already has, and where defense actually matters. The perspective is informed by Kugelman Law attorney Otto Bosch, a former Revenue Agent in the IRS Global High Wealth Group within the Large Business and International (LB&I) Division, paired with founder Alex Kugelman‘s nearly two decades of federal tax controversy experience and one of the country’s earliest dedicated cryptocurrency tax practices.

How the IRS Is Building Its Crypto Enforcement Capability

Understanding an IRS cryptocurrency audit starts with understanding what the IRS now knows — and how it knows it.

Exchange data through John Doe summonses. The IRS has used John Doe summonses to compel major U.S. cryptocurrency exchanges to produce account holder data, including identification information and transaction histories. The summonses served on Coinbase, Kraken, Circle, and others have produced datasets covering significant numbers of U.S. taxpayers. That data sits in IRS systems and is matched against filed returns.

Form 1099 reporting and digital asset broker rules. Expanded broker reporting rules require digital asset platforms to report transaction information directly to the IRS on information returns. The result is a steadily improving stream of third-party data that the IRS uses to identify reporting gaps, in much the same way W-2s and traditional 1099s are used.

The Form 1040 digital asset question. Every Form 1040 filed since 2019 has required the taxpayer to answer a yes-or-no question about digital asset activity. Answering that question incorrectly — particularly answering “no” when the taxpayer had reportable activity — is a fact the IRS pays attention to. It can support penalty positions, including in some circumstances civil fraud.

Blockchain analytics partnerships. The IRS works with blockchain analytics firms — Chainalysis among them — to trace transactions across the public blockchain, link wallet addresses to identified taxpayers, and reconstruct activity that occurred outside reporting exchanges. The blockchain is public; identifying who controls a particular address is the harder part, and the analytics tools the IRS has access to are increasingly capable of doing it.

Operation Hidden Treasure and successor initiatives. Beginning with Operation Hidden Treasure, the IRS has run dedicated training and enforcement programs focused on cryptocurrency. Revenue Agents working these cases receive specialized training. Specialized criminal investigation resources within IRS-CI focus on digital assets. And large-case examinations within LB&I increasingly include cryptocurrency-specific issue identification.

The cumulative effect is that an IRS cryptocurrency audit in 2026 is not the same examination it was five years ago. Agents arrive with significantly more information than taxpayers tend to assume.

Who Gets Selected for an IRS Cryptocurrency Audit

Crypto returns reach Revenue Agents through several paths, and the path tells the defense team something about the IRS’s interest in the case. As a general matter — and consistent with how returns are selected for examination across the IRS, which is covered in more depth in our guide to what IRS Revenue Agents do — crypto cases tend to be selected through:

• Information matching mismatches. When exchange-reported data shows reportable activity that does not appear on the taxpayer’s return, the gap is flagged for review. This is one of the most common entry points for crypto examinations.
• The Form 1040 digital asset question. Returns answering “no” while exchange data shows otherwise are high priority. So are returns answering “yes” with implausibly small reported activity relative to known holdings.
• John Doe summons follow-up. Account data produced through John Doe summonses is reviewed against filed returns; significant unreported activity surfaces examination candidates.
• Project initiatives. The IRS has run and continues to run focused enforcement projects on specific crypto issues — high-volume traders, NFT activity, DeFi transactions, and offshore exchange usage among them.
• Related-return pickups. When one taxpayer’s audit surfaces crypto activity involving counterparties — peer-to-peer transactions, partnership distributions of digital assets, business payments in crypto — the related taxpayer’s return can be opened for examination.
• Whistleblower referrals. The IRS Whistleblower Program receives, and acts on, referrals involving crypto activity.

The path matters because it shapes the examination. A mismatch-driven case usually starts narrow and follows the data. A project-driven case is concentrated on the project’s target issue. A John Doe summons follow-up may already include significant data the agent has reviewed before contacting the taxpayer.

What Revenue Agents Are Trained to Look For in a Cryptocurrency Audit

An IRS cryptocurrency audit covers a defined set of issues that Revenue Agents are trained to develop. Knowing what those issues are — before the first Information Document Request lands — is one of the most important advantages a defense team can bring to the table.

Unreported Disposition Income

The most common issue is straightforward: dispositions that should have been reported as taxable events were not. Every sale, trade, and use of cryptocurrency to purchase goods or services is generally a taxable event, and the gain or loss is calculated against the asset’s basis. Crypto-to-crypto trades are taxable. Spending Bitcoin on a meal is taxable. Swapping ETH for an NFT is taxable. Many taxpayers — and even some preparers — have historically missed these dispositions, and reconstructing them is the heart of most crypto examinations.

Basis and Holding Period Reconstruction

Once dispositions are identified, the next question is basis. What did the taxpayer pay for the asset, when, and how is the cost allocated across multiple acquisitions? Crypto basis is uniquely difficult because it spans years, exchanges, wallets, and methods of acquisition. Agents trained on these cases know that taxpayer-prepared crypto records are often incomplete, that exchange CSV exports do not always reconcile cleanly, and that an undocumented basis position will be challenged. Holding periods — long-term versus short-term — drive significant differences in tax rate and are scrutinized.

Income From Mining, Staking, Airdrops, and Hard Forks

Income items that arise outside of dispositions are a separate audit category. Mining and staking rewards are generally taxable as ordinary income at fair market value when received, and they create a basis carried into any later disposition. Airdrops and hard forks have IRS guidance — including Revenue Ruling 2019-24 — that agents apply. These items are routinely under-reported, and they are routinely raised in cryptocurrency examinations.

NFT-Specific Issues

Non-fungible tokens introduce their own audit issues: characterization questions (collectible versus capital asset versus inventory), royalty income, gas fees, the treatment of mints, and platform-specific reporting peculiarities. Revenue Agents working NFT tax compliance matters are trained on the issues that NFT activity tends to produce — and they tend to produce a lot of them.

DeFi Activity and Wrapped Tokens

DeFi protocols — lending, liquidity provision, yield farming, wrapping and unwrapping tokens — generate transactions that may or may not be taxable events depending on facts and characterization, and the area is technically nuanced. Agents look for the obvious — unreported income from yield farming and lending — and increasingly for the more sophisticated — characterization of liquidity pool entries and exits, and the tax consequences of wrapping transactions.

Foreign Exchange Use and FBAR Exposure

Use of foreign-domiciled cryptocurrency exchanges raises issues that go beyond the tax return itself. Foreign accounts holding cryptocurrency may trigger FBAR (FinCEN Form 114) and Form 8938 reporting obligations, and the IRS’s position on these obligations has evolved. Penalties for non-filing of FBARs and information returns can be severe and are independent of any income tax owed. Resolution typically involves streamlined offshore procedures, delinquent FBAR submissions, or other voluntary disclosure pathways depending on the facts.

The Form 1040 Digital Asset Question

Agents are specifically trained to examine the digital asset question on Form 1040. A “no” answer in a year of significant activity is a finding agents log and use — supporting accuracy-related penalties, in appropriate cases supporting fraud penalties, and in the most serious cases supporting referrals to IRS Criminal Investigation.

Pig Butchering and Investment Scam Losses

A growing area of crypto audit activity involves taxpayers who lost significant funds to pig butchering and similar crypto investment scams. The tax treatment of these losses is technical, the documentation challenges are significant, and the available deductions are narrower than many taxpayers and preparers assume. Audits in this area frequently turn on whether the taxpayer can substantiate the loss and characterize it correctly.

The Anatomy of an IRS Cryptocurrency Audit

Once an examination opens, a cryptocurrency audit follows the general arc of any IRS examination — but with crypto-specific document requests and analytical steps layered in. The early stages are often the most consequential.

The opening Information Document Request typically asks for, among other things: a complete list of every exchange and wallet ever used; CSV exports or transaction histories from each exchange; lists of self-custody wallet addresses and their public keys or transaction logs; mining and staking records; any tax software output (such as files from CoinTracker, Koinly, ZenLedger, or similar) used to prepare the return; and any third-party reports received. The first IDR is broad by design. It is the agent’s tool for understanding the universe of activity before drilling into specific issues.

How that first IDR is responded to often determines how the audit proceeds. Volunteering wallets the IRS does not appear to know about, providing reconciliations that reveal previously undisclosed activity, or producing records that contradict the return are decisions that should never be made without strategic review. They cannot be unmade later.

From there, the agent reconciles taxpayer-produced data against exchange records the IRS has received independently, runs blockchain analytics where appropriate, and develops issues. Specialists may be brought in for technical questions. The case proceeds through the same internal review and managerial sign-off architecture that governs any IRS examination, and closes with either a no-change, an agreed adjustment, or a Revenue Agent’s Report and 30-day letter setting up Appeals.

Why Crypto Audits Are Especially High-Stakes

An IRS cryptocurrency audit can quickly produce assessment exposure that surprises taxpayers. Several factors compound:

• Multi-year scope. Crypto audits frequently look at multiple years simultaneously. The statute of limitations is generally three years, but it extends to six years for substantial omissions and is unlimited for fraud or non-filed returns.
• Penalty stacking. Accuracy-related penalties (typically 20%) can be combined with FBAR penalties (which can reach the greater of $10,000 or 50% of account value per willful violation), Form 8938 penalties, and in serious cases civil fraud penalties (75%).
• Basis disputes that move large numbers. An undocumented basis position can convert what the taxpayer considered a modest gain into a much larger one. Where the taxpayer assumed $100,000 in basis and cannot prove it, the agent may treat basis as $0 — and the assessment moves accordingly.
• Foreign account exposure. Use of offshore exchanges or foreign-held wallets can trigger reporting obligations entirely separate from the income tax — with their own penalty regimes that can dwarf the underlying tax.
• Eggshell and reverse-eggshell concerns. Where significant activity was unreported and the digital asset question was answered “no,” civil examinations carry the possibility of referral to IRS-CI. Reading that risk correctly is critical.

This combination of factors is why a former IRS revenue agent attorney on the defense team is particularly valuable in cryptocurrency examinations. The technical issues are unfamiliar to most general tax practitioners. The risks compound quickly. And the IRS’s training, tooling, and posture in this space continue to evolve in ways most taxpayers cannot see from the outside.

How Kugelman Law Defends IRS Cryptocurrency Audits

Kugelman Law has defended cryptocurrency tax matters since the practice area existed. Alex Kugelman has been featured nationally on the Bitcoin.tax podcast and The Mark Milton Show discussing IRS digital asset enforcement, and he has built one of the country’s earliest dedicated cryptocurrency accounting and IRS crypto audit defense practices. Otto Bosch brings the inside-the-IRS perspective developed during his time as a Revenue Agent in the Global High Wealth Group within LB&I.

The combination matters in a crypto audit. Crypto fluency without IRS-insider perspective leaves the defense reading blind on the agent’s posture and the agency’s internal calculus. IRS-insider perspective without crypto fluency leaves the defense unable to engage the technical issues that drive the case. Both are necessary. Few firms offer both under one roof.

Representative outcomes from the firm’s controversy practice include a $365,000 tax debt reduced to a zero-dollar liability, a multi-year audit and non-filing matter resolved with minimal payment, and ten years of unfiled returns brought into compliance with a successful outcome. Results depend on specific facts. Past results do not guarantee future outcomes.

Frequently Asked Questions

Can the IRS see my crypto wallet?

The blockchain is public. Anyone can see transactions associated with a wallet address. What is not always public is who controls a particular address. The IRS uses blockchain analytics tools, exchange data obtained through John Doe summonses, expanded information reporting, and other techniques to associate addresses with identified taxpayers. Self-custody wallets are not invisible to the IRS — and the assumption that they are has produced significant exposure for taxpayers who relied on it.

What triggers an IRS cryptocurrency audit?

Common triggers include mismatches between exchange-reported data and the filed return, a “no” answer to the Form 1040 digital asset question paired with known activity, John Doe summons data, project-based enforcement initiatives, related-return pickups from another taxpayer’s audit, and whistleblower referrals. Selection paths shape the scope of the resulting examination.

Do I have to report crypto-to-crypto trades?

Yes. Under current IRS guidance, exchanges of one cryptocurrency for another are taxable events that produce gain or loss measured against the disposed asset’s basis. This is true even when no fiat currency is involved. Failure to report crypto-to-crypto trades is one of the most common issues identified in IRS cryptocurrency audits.

What if I used a foreign cryptocurrency exchange?

Use of foreign-domiciled exchanges can trigger FBAR and Form 8938 reporting obligations separate from the income tax return. Penalties for non-filing of these information returns can be severe. Resolution typically involves streamlined offshore procedures, delinquent FBAR submissions, or other voluntary disclosure programs depending on the specific facts and the willfulness analysis.

Can I just amend my returns to fix unreported crypto?

Sometimes — but the answer depends heavily on the facts. Amending returns can be the right approach in some cases and exactly the wrong approach in others, particularly where there is potential criminal exposure or where the taxpayer is already under examination. Decisions about amending, voluntarily disclosing, or simply waiting should be made with experienced controversy counsel — not unilaterally by the taxpayer or a preparer without controversy expertise.

Speak With Kugelman Law

If you are facing an IRS cryptocurrency audit, have received an IRS notice involving digital assets, or have unreported crypto activity you are trying to resolve correctly, schedule a paid privileged consultation with Kugelman Law. Call (415) 968-1780 or visit our contact page. All consultations are fully protected by attorney-client privilege.