Home

Crypto Education

Crypto Tax Audit Red Flags: What Increases Scrutiny and How to Be Ready

Spot the edge. Swoop in.

Most crypto-related IRS contact is not a dramatic field audit — it is a mailed notice asking for documentation. This guide explains why the IRS added a direct digital-asset question to Form 1040, what actually increases audit risk, what records protect a taxpayer when questions arise, and what the ordinary IRS crypto notice process looks like in practice.

By Swoopr Editorial Team

Published · Updated

AI-assisted content · Swoopr is responsible for the final published article.

Educational-use notice

This guide provides general U.S. federal tax information, not individualized tax, legal, accounting, or investment advice. Whether a specific transaction, notice, or return creates audit exposure depends on the taxpayer's own facts. Consult a qualified tax professional before responding to any IRS notice or making decisions based on this content.

Key Takeaways

Why Does Form 1040 Ask a Digital-Asset Question?

Since the 2020 tax year, Form 1040 has placed a digital-asset question directly on page one, just below the taxpayer's filing status and personal information. The wording has been refined over several years, but the current version asks whether, at any time during the tax year, the taxpayer received digital assets as a reward, award, or payment, or sold, exchanged, or otherwise disposed of a digital asset or a financial interest in one.

Placing the question at the top of the return, and requiring every individual filer to answer it, is a deliberate design choice. It is not a technical formality buried in a schedule that only crypto-active taxpayers would encounter. Every taxpayer sees it and must answer it under penalty of perjury, whether or not they engaged in any digital-asset activity.

The practical effect is that a taxpayer who engaged in digital-asset activity and checked "no" can no longer plausibly claim they did not realize the activity might be reportable. The question itself creates a paper trail of awareness. This is widely understood among tax practitioners as one of the IRS's primary tools for eliminating the good-faith-ignorance defense that was more viable in the earlier years of crypto taxation, before the question existed and before broker reporting expanded.

Answering the question accurately does not, by itself, create audit exposure. The IRS's own guidance is that digital-asset activity must be reported whether or not a payee statement was received. A taxpayer who checks "yes" and then correctly reports the resulting income, gain, or loss has done exactly what the form asks. The risk sits with inaccurate answers and unreported activity — not with truthful "yes" answers followed by complete reporting.

What Actually Increases Crypto Audit Risk?

"Audit risk" is often discussed loosely, as if any crypto activity increases scrutiny. In practice, the factors that increase risk are specific and mostly relate to mismatches, gaps, and unsupported figures — not to the underlying decision to hold or trade digital assets. The table below summarizes the factors that meaningfully raise scrutiny and the factors that commonly get blamed but do not, by themselves, do much.

FactorActually raises scrutiny?Why
Unreported 1099 figures not matching the returnYes — the leading factorThe IRS's Automated Underreporter program compares third-party reporting (Form 1099-B, 1099-MISC, and increasingly Form 1099-DA) against the return and flags differences automatically
Answering the digital-asset question inaccuratelyYesAn inaccurate answer, especially "no" when records show activity, undermines the taxpayer's credibility on the rest of the return and removes the good-faith defense the question was designed to close off
Large or round-number transactions with no supporting recordsYes, when undocumentedA sizable transaction that cannot be traced to a trade confirmation, wallet history, or basis record is harder to defend if it is ever questioned — the risk comes from the missing documentation, not the size or roundness itself
Broker-reported figures not matching self-reported figures once 1099-DA basis reporting is fully phased inYes, going forwardAs basis reporting on Form 1099-DA expands, the IRS gains a second, independent figure to compare against the taxpayer's own basis calculation, making unexplained differences more visible than in prior years
Simply owning or trading cryptocurrencyNo, on its ownHolding or trading digital assets is not itself a risk factor; accurate reporting of that activity is treated the same as any other property transaction
Filing Form 8949 with digital-asset transactionsNo, on its ownForm 8949 is the expected and correct place to report capital transactions in digital assets; using it as intended does not raise scrutiny
Using a self-custody walletNo, on its ownSelf-custody is a storage choice, not a reporting evasion strategy; the taxpayer's obligation to report taxable activity is the same regardless of custody arrangement
A single large transaction that is fully documentedNo, on its ownA well-documented transaction — trade confirmation, basis trail, contemporaneous valuation — is not inherently more likely to be flagged than a well-documented small one
Reporting a loss instead of a gainNo, on its ownLosses are a normal and expected outcome of property transactions; a documented loss is treated the same as a documented gain

The common thread across every genuine risk factor is a gap between what the IRS already knows (from a broker form or prior filing) and what the return shows, or a gap between an activity and the documentation that supports it. Neither gap is created by trading crypto — both are created by incomplete records or inaccurate reporting.

How Does Form 1099-DA Change the Picture?

Beginning with transactions on or after January 1, 2025, certain digital-asset brokers — primarily centralized exchanges and custodial platforms — are required to file Form 1099-DA reporting gross proceeds from covered transactions. Cost-basis reporting for most covered assets is being phased in on a later timeline. Until basis reporting is fully in place, many 2025-era Form 1099-DA statements will show gross proceeds without a matching basis figure.

This creates a specific, well-documented failure mode. The IRS's automated matching process may see gross proceeds reported by a broker with no offsetting basis and, absent other information, treat the full proceeds figure as if it were entirely gain. A taxpayer who sold crypto at a modest gain — or even at a loss — can receive a notice proposing a tax bill calculated as though the entire sale price were profit, simply because the broker form did not carry basis data forward.

This is not a sign of wrongdoing, and it is not unique to crypto — the same zero-basis mismatch has long affected other property types when basis reporting lags proceeds reporting. It is, however, a very good reason to keep independent purchase records rather than relying on the broker form to tell the full story. The taxpayer's own basis records are what resolve this kind of notice, typically by supplying the actual purchase price, date, and fee history for the units sold.

As basis reporting on Form 1099-DA becomes more complete in future years, a second failure mode becomes more relevant: a broker-reported basis figure that differs from the taxpayer's own reconstructed basis, for example because assets were transferred in from another platform or from self-custody without basis data following them. Reconciling broker figures against an independent ledger — rather than assuming either source is automatically correct — remains the safest practice regardless of which failure mode applies in a given year.

What Documentation Actually Protects You?

Not all crypto records carry equal weight if a transaction is ever questioned. The table below summarizes what tends to hold up and why, based on the kinds of documentation tax professionals commonly request when responding to a crypto-related notice.

Record typeWhat it establishesWhy it holds up
Exchange account statementsTrade dates, quantities, prices, fees, and counterparties for platform-handled activityGenerated by a third party at the time of the transaction, independent of the taxpayer's later recollection
Wallet addresses with ownership documentationThat a specific address belongs to the taxpayer, distinguishing self-transfers from third-party transactionsBlockchain data alone cannot prove ownership; a taxpayer's own labeling, done contemporaneously, fills that gap
Transaction hashesThe objective, independently verifiable on-chain facts of a transfer: assets, quantities, timestampsPublicly verifiable against a block explorer, unaffected by later disputes about what happened
Contemporaneous fair-market-value recordsThe USD value used for an income or gain calculation at the actual time of the eventValue looked up after the fact, especially using current prices, does not reflect what was actually receivable at the time and is far weaker evidence
Purchase confirmations and cost-basis recordsWhat was actually paid for the units later soldDirectly resolves the zero-basis mismatch that drives many CP2000-style notices
A 1099-DA-to-ledger reconciliationThat broker-reported figures have been checked against the taxpayer's own records, with differences explainedShows the return was prepared with the broker data in view rather than in conflict with it
Records created only after a notice arrivesLimited — mainly the taxpayer's explanation, not independent proofReconstructed-from-memory records carry far less weight than records generated at the time of the transaction, and gaps are more visible in hindsight

The pattern across every strong record type is the same: it was created independently, at or near the time of the transaction, by a system or process the taxpayer did not control after the fact. That is what makes documentation persuasive rather than merely asserted. See Crypto Taxes and Recordkeeping for the complete framework for building this kind of ledger before it is ever needed.

What Actually Happens in an IRS Crypto-Related Notice or Audit?

The scenario many taxpayers imagine — an examiner requesting an in-person meeting to go through years of trading history line by line — is uncommon for the kind of income mismatch that crypto activity typically produces. The realistic process is calmer, slower, and handled almost entirely by mail.

The correspondence audit is the default path

Most IRS contact related to income mismatches, including crypto-related ones, happens through the correspondence-audit process: a mailed notice describing the discrepancy the IRS's systems identified, with a response deadline and instructions for how to reply. This is different from a field audit, which involves in-person meetings with a revenue agent and is reserved for more complex or higher-dollar examinations, often involving businesses or more unusual fact patterns.

The CP2000 notice is the common form this takes

For a crypto-related mismatch specifically, the notice a taxpayer is most likely to receive is a CP2000, generated by the IRS's Automated Underreporter program. This program compares the income reported on a filed return against the third-party information the IRS has on file — historically Form 1099-B and 1099-MISC from exchanges, and increasingly Form 1099-DA. A CP2000 is not a bill and not, technically, an audit in the traditional sense; it is a proposed adjustment based on a computer-identified difference, and the taxpayer is given the opportunity to agree, partially agree, or disagree with an explanation and supporting documentation.

What a typical response looks like

Responding to a CP2000 or a similar notice generally involves: reading the notice to identify exactly which transactions or years are at issue; pulling the relevant exchange statements, wallet records, and basis documentation for those specific items; preparing a written response, often including a corrected Form 8949 or a basis worksheet, that explains the difference; and submitting the response by the stated deadline. Many notices can be resolved entirely through this written exchange, without any phone call or in-person meeting.

When it escalates

A correspondence notice can escalate to a more formal audit when the proposed adjustment is large, the taxpayer's response raises new questions, the activity involves a business or self-employment component, or the case involves indicators of intentional underreporting rather than a good-faith gap in records. These situations are the minority. For the ordinary case — a taxpayer who traded on one or more exchanges, sold at a gain or loss, and either omitted a transaction or reported a basis that does not match a broker figure — a documented written response is usually sufficient.

The reassuring version, accurately stated

The realistic risk from typical crypto trading activity is not a dramatic investigation. It is the administrative cost of responding to a mailed request for documentation, and the outcome of that response depends almost entirely on whether the taxpayer kept records at the time of each transaction. Good contemporaneous records generally resolve these notices in the taxpayer's favor or close to it; missing records are what turn a routine notice into a prolonged, costly dispute.

Common Misconceptions About Crypto Audits

MisconceptionMore accurate framing
"Answering 'yes' to the digital-asset question invites an audit."Answering accurately and reporting the activity correctly is the intended, expected outcome. The risk is in answering inaccurately or in not reporting activity the question asked about.
"A crypto audit means an IRS agent examines your whole financial life."Most crypto-related IRS contact is a narrow correspondence notice about a specific mismatch, not a broad field examination.
"If I use a self-custody wallet, the IRS can't see my activity, so I'm safe."Self-custody affects what a broker can report, not the taxpayer's underlying obligation to report taxable activity. It also does not prevent activity from being questioned if it later intersects with reported activity, such as a sale on an exchange of assets that originated in self-custody.
"A CP2000 notice is a final bill I have to pay."A CP2000 is a proposed adjustment, not a final assessment. Taxpayers can respond with documentation to agree, partially agree, or disagree with an explanation.
"If my exchange sends a 1099-DA, I don't need my own records."The form is a reconciliation input, not a replacement for the taxpayer's independent ledger, particularly while basis reporting is still being phased in.
"Losses don't get scrutinized, only gains do."A documented loss is not inherently riskier or safer than a documented gain — the documentation, not the direction of the result, is what matters.
"Only large traders need to worry about this."Notices are generated by computer matching against whatever third-party data exists for a given taxpayer; the process does not require a large portfolio to trigger, only a mismatch.

Audit-Readiness Checklist: The Full Recordkeeping Lifecycle

This is the capstone checklist for the recordkeeping lifecycle — from the moment an account is opened through what to do if a notice actually arrives.

Before or when opening any account, wallet, or protocol relationship

At the time of every transaction

On an ongoing basis throughout the year

Before filing

If a notice arrives

Ongoing retention

Crypto Tax Audit FAQs

Does answering "yes" to the digital asset question on Form 1040 increase my audit risk?

Not by itself. The question exists so the IRS can establish that a taxpayer engaged in digital-asset activity and cannot later claim they were unaware reporting was required. Answering accurately based on your actual activity, and then reporting the resulting income, gain, or loss correctly, is the lowest-risk path. Answering "no" when records or a broker form show activity is a far larger risk factor than answering "yes" and reporting the transactions.

What is the single most common trigger for a crypto-related IRS notice?

A mismatch between third-party reporting the IRS already has — historically Form 1099-B or 1099-MISC from an exchange, and increasingly Form 1099-DA — and the amounts reported on the taxpayer's return. The IRS's Automated Underreporter program compares these automatically and generates a notice, commonly a CP2000, when they do not match.

Is a CP2000 notice the same as an audit?

Not formally, though it is often experienced the same way. A CP2000 is an underreporter notice generated by computer matching, not a traditional field audit opened by an examiner. It proposes an adjustment and asks the taxpayer to agree, partially agree, or disagree with an explanation and supporting documentation. Most crypto-related IRS contact happens through this correspondence process rather than an in-person audit.

Why do crypto CP2000 notices often show a much larger amount owed than expected?

Exchange-reported proceeds frequently arrive without matching cost-basis data, particularly for 2025 transactions where basis reporting on Form 1099-DA was not yet fully phased in. When the IRS's matching system has gross proceeds but no basis figure, its proposed adjustment can default to treating the full proceeds as gain. Supplying the actual purchase records and basis calculation is usually what resolves this kind of notice.

Are round-number or large crypto transactions automatically audited?

No. Size and round numbers do not by themselves trigger an audit. What increases risk is a large or round-number transaction that lacks supporting documentation — no trade confirmation, no wallet history, no basis trail — when the return is otherwise examined or matched against a broker form. Well-documented large transactions are not inherently more likely to be flagged than well-documented small ones.

What documents actually help if the IRS questions a crypto transaction?

Exchange account statements and trade confirmations, wallet addresses with ownership documentation, transaction hashes for on-chain events, contemporaneous records of fair market value at the time of each transaction, and a reconciliation showing how any Form 1099-DA figures were matched to the taxpayer's own ledger. Records created after the fact, from memory, or reconstructed only once a notice arrives are far weaker than records kept at the time of the transaction.

Does Form 1099-DA mean the IRS now sees everything I do with crypto?

No. Form 1099-DA reporting applies to transactions handled by covered brokers, primarily centralized exchanges and certain custodial platforms. It does not capture self-custody wallet activity, most DeFi protocol interactions, peer-to-peer transfers, or many foreign platforms. The form increases visibility into broker-handled activity; it does not create complete visibility into every digital-asset transaction a taxpayer makes.

What should I do first if I receive an IRS letter about crypto?

Read the notice carefully to identify what type it is and what response deadline applies, gather the transaction records and basis documentation relevant to the specific items identified, and avoid ignoring the deadline even if you plan to dispute the proposed amount. Most notices allow a written response with supporting documentation rather than requiring an in-person meeting. Consult a qualified tax professional promptly when the proposed adjustment is material, when cost basis is missing, or when the notice is unclear.

Related Reading

Sources and Methodology

This guide is based on publicly available IRS guidance and regulatory materials as of August 2026. Key sources include:

This content was reviewed by the Swoopr Markets Education Team in August 2026 and reflects U.S. federal tax guidance available at that time. Tax law and IRS enforcement priorities change; verify current guidance before relying on any information in this guide.