IRS Crypto Audit: Process, Records, Response and Appeal Rights

An IRS examination is a review of whether a return reports income, deductions, credits and tax correctly. It is not proof of fraud and may end with no change. Crypto can make the record request broader because a sale on one platform may depend on basis from another wallet. The safest response is a deadline-controlled, transaction-level reconciliation supported by source records and the taxpayer’s rights—not guesses about secret audit triggers or an unexplained software total.

Short answer: what happens in an IRS crypto audit?

The IRS first contacts a taxpayer about an examination by mail. The letter identifies the return or issue and explains what to provide and when. The examination may continue by correspondence or through an office or field interview. The IRS says it will issue a written request for the specific records it wants to see.

A digital-asset examination can test whether sales and exchanges were complete, whether Form 1099-DA proceeds reconcile, whether basis and holding periods are supported, whether rewards or service receipts were reported as income and whether business expenses are substantiated. The exact scope comes from the notice and later Information Document Requests, not from a generic online checklist.

What can lead to review, and what is not a published trigger?

The IRS says returns can be selected through computer scoring, related examinations and third-party information that does not match the return. Form 1099-DA, Form 1099-B, Form 1099-MISC, Form 1099-NEC, bank data and other statements can therefore reveal inconsistencies. That does not mean every mismatch automatically produces a full audit or that every audit was selected for one disclosed reason.

The IRS does not publish a dependable list saying that a specific trade count, wallet balance or gain percentage automatically triggers a crypto audit. Claims such as “high volume with low gain always gets flagged” should not be presented as established rules. A market maker can have high gross proceeds and a small net result; the issue is whether the reported economics and records are correct.

Common reconciliation risks—not guaranteed audit triggers

• Broker gross proceeds do not appear in the return reconciliation.
• Transferred-in coins have no supported acquisition date or basis.
• A self-transfer is reported as both a sale and new income.
• Staking, mining or service receipts are absent from income schedules.
• Form 8949 totals do not agree with Schedule D.
• Business expenses lack invoices, business purpose or payment evidence.
• DeFi, NFT or bridge activity remains unexplained in the ledger.
• The Form 1040 digital-asset answer conflicts with the return’s actual transactions.

The digital-asset question is not a command to answer “Yes” for any activity whatsoever. The 2025 instructions generally permit “No” when the taxpayer only held, bought with US dollars or transferred between owned wallets and had no listed receipt or disposition. The answer must follow the current instructions and agree with the return.

How an IRS examination usually proceeds

1. Initial letter: verify the notice through official IRS channels and identify the tax year, return, issues and deadline.
2. Scope and records: the letter or Form 4564 requests documents. Ask for clarification when a term, period or format is unclear.
3. Correspondence or interview: provide indexed records and explanations by the authorized method. The IRS may accept electronic records.
4. Follow-up: the examiner can ask questions, request additional items or expand the examination to related issues or years with notice.
5. Proposed findings: the examiner explains any changes. Verify tax, penalty and interest calculations separately.
6. Resolution: the case closes no-change, agreed or disagreed. Disagreement can lead to managerial review, Appeals and potentially court.

Do not send original records unless specifically required; keep a complete copy of every submission. Use delivery confirmation or the IRS Document Upload Tool when the notice authorizes it. Keep a response log with date, method, file list and confirmation.

How far back can the IRS examine?

The IRS says examinations generally include returns filed within the last three years and usually do not go back more than six years. The assessment period is generally three years, but statutory exceptions can extend it to six years or remove the limit, including substantial omissions, failure to file and fraudulent returns. Rules are fact-specific, and the examiner may ask a taxpayer to consent to extend the assessment period.

Property basis records should be retained until the limitations period expires for the year of the taxable disposition. That can require keeping a crypto purchase record much longer than three years because the asset may be held for years before sale.

Crypto records an examiner may need

The actual IDR controls. For a digital-asset gain or income issue, a defensible production often connects source evidence to each reported number rather than sending an unstructured data dump.

The IRS’s digital-asset record checklist identifies timestamp, transaction type, asset description, amount, USD value, transaction fees and adjusted basis as core records. Final digital-asset broker regulations also require brokers in relevant cases to retain transaction IDs and digital-asset address information for examination use even though those details were removed from routine Form 1099-DA reporting.

Build a transaction-level evidence chain

1. Start with the exact Form 8949 sale or questioned income item.
2. Link it to the raw exchange fill or on-chain transaction.
3. Trace the disposed units back to their acquisition.
4. Document all owned-wallet transfers in between.
5. Show the valuation and fee calculation.
6. Tie the item to the category subtotal and filed return.

The crypto tax records checklist gives a reusable evidence structure. For missing broker basis, use the Form 1099-DA correction guide. The Form 8949 crypto instructions show how that evidence connects to the filed sales schedule.

How to respond to an IRS crypto audit

1. Verify the letter number, IRS contact information and response deadline.
2. Separate a matching notice, correspondence audit, office audit and field audit.
3. Download the filed return and reproduce the original calculation before changing anything.
4. List each requested item and the issue it addresses.
5. Assign a source document and explanation to every material number.
6. Reconcile exchanges, wallets, broker forms and bank movements.
7. Identify errors honestly and quantify any corrected result.
8. Prepare a concise cover letter and indexed exhibits.
9. Submit through the method authorized in the notice and retain proof.
10. Track follow-up requests, calls, meetings and deadlines.

“Only provide what was requested” is not a substitute for complete substantiation. Respond directly and proportionately to the stated scope, but include the records needed to make the evidence understandable. If an IDR is ambiguous or burdensome, discuss scope and format with the examiner or representative rather than silently omitting relevant support.

When representation can help

Taxpayers have the right to retain representation. An attorney, CPA or enrolled agent with relevant federal and digital-asset experience can communicate with the IRS under Form 2848, frame disputed legal issues and protect deadlines. Representation is especially useful for multiple years, business activity, large missing-basis adjustments, foreign reporting, summonses, possible fraud indicators or a proposed penalty.

Do not assume every preparer understands wallets, bridges, per-account basis and contract interactions. Give the representative an account map, data provenance, unresolved-item list and reconciliation workpapers.

FBAR and foreign crypto accounts: correct the old shortcut

The ordinary FBAR rule covers certain foreign financial accounts when aggregate maximum value exceeds $10,000. However, FinCEN Notice 2020-2 states that an account holding only virtual currency is not reportable under the then-current FBAR regulations unless it also holds other reportable assets. FinCEN stated that it intended to amend the rules, so taxpayers must check current status for the year under examination.

Therefore, “foreign crypto exchange balance above $10,000 always requires FBAR” is not a reliable blanket statement. The account’s assets, legal structure, location and current regulations matter. Form 8938 has a separate statute and definitions and should not be treated as identical to FBAR.

Penalties are issue- and fact-specific

An examination does not automatically impose a 20% or 75% penalty. The accuracy-related penalty, civil fraud penalty, failure-to-file additions, information-return penalties and foreign-reporting penalties have different legal elements, bases, maximums and defenses. Interest is generally statutory and separate.

• Ask which Code section and factual conduct support each proposed penalty.
• Verify whether the penalty base is calculated correctly.
• Provide reasonable-cause and good-faith evidence when legally relevant.
• Do not label a documentation error “fraud” without the required intent evidence.
• Review supervisory-approval and procedural requirements with qualified counsel where applicable.

Audit outcomes, disagreement and appeal rights

A no-change result means the examined items were substantiated. An agreed result means the taxpayer accepts the proposed changes and signs the applicable report. A disagreed result preserves a dispute for further review rather than forcing immediate agreement.

The IRS says a taxpayer can request a manager conference, may have access to mediation and can appeal eligible proposed changes. Publication 556 describes a 30-day letter and administrative protest process. If unresolved, a statutory notice of deficiency generally gives a limited period—usually 90 days, or 150 days for certain notices addressed outside the United States—to petition the US Tax Court. Follow the exact notice; missing a deadline can change available remedies.

The Taxpayer Bill of Rights includes the rights to be informed, pay no more than the correct tax, challenge the IRS position, appeal in an independent forum, finality, privacy, confidentiality and representation.

Common IRS crypto audit mistakes

• Ignoring or misclassifying the initial IRS notice.
• Responding with a tax-software total and no source evidence.
• Sending an unindexed wallet dump that does not tie to the return.
• Using zero basis for all transferred-in assets.
• Failing to reconcile Forms 1099-DA with Form 8949.
• Calling every foreign crypto-only account automatically FBAR-reportable.
• Applying a universal seven-year record rule instead of the relevant limitations periods.
• Signing proposed changes before recalculating tax and penalties.
• Missing the 30-day or 90-day response date.
• Assuming audit selection proves fraud or underpayment.

Frequently asked questions

Official and primary sources

• IRS: audit selection, process, records and outcomes
• IRS Publication 556: examinations, appeal rights and refund claims
• IRS Publication 3498: The Examination Process
• IRS: Taxpayer Bill of Rights
• IRS Independent Office of Appeals: considering an appeal
• IRS Topic 305: recordkeeping and limitations periods
• IRS: must-have digital-asset records
• IRS/Treasury final digital-asset broker regulations and retained transaction data
• FinCEN Notice 2020-2: virtual currency and current FBAR regulation statement

Procedure status: September 2, 2026. The taxpayer’s actual notice, current law and current IRS instructions control. This guide describes a federal civil examination workflow and is not a substitute for representation in a specific case.

Disclaimer: This article is for general informational purposes only and does not constitute tax advice. For individual tax advice, consult a licensed tax professional.