Crypto Tax Audit: What Triggers One and How to Prepare

The IRS has spent years building the tools and data partnerships needed to scrutinize crypto activity, and the era of assuming transactions go unnoticed is over. The good news: a crypto audit is far less frightening when your records are clean and your return is consistent with what the IRS already knows. Here is what actually triggers a crypto audit and how to be ready.

How the IRS Knows About Your Crypto

Audits don't happen at random when crypto is involved. They are usually driven by a mismatch between what you reported and the data the IRS already has. That data comes from several sources:

• Exchange reporting. U.S. exchanges issue information returns, and the new Form 1099-DA for digital asset proceeds is rolling out, giving the IRS direct visibility into your activity.
• John Doe summonses. The IRS has compelled major exchanges to hand over user records in bulk.
• Blockchain analytics. The agency contracts with chain-analysis firms that can trace wallet activity across public ledgers.
• The digital asset question. Every Form 1040 asks whether you received, sold, or disposed of digital assets — answering it untruthfully is a serious problem.

The Most Common Audit Triggers

1. Reporting Mismatches

The single biggest trigger is a discrepancy between a 1099 the exchange sent to the IRS and what appears on your return. If an exchange reports $40,000 in proceeds and your return shows nothing, an automated notice is almost guaranteed.

2. Large or Unexplained Deposits

Moving significant sums between exchanges and bank accounts, especially round numbers or rapid in-and-out activity, can attract attention — particularly when the income reported on your return doesn't plausibly support the cash flow.

3. Answering the Digital Asset Question "No" Incorrectly

Checking "No" on the Form 1040 digital asset question while exchange data shows you traded is a direct contradiction that examiners look for.

4. High-Volume Trading With Round-Number Gains

Hundreds of transactions reported with suspiciously clean numbers, or gains that don't reconcile with the underlying trade data, suggest estimates rather than real records.

What an Audit Actually Looks Like

Most crypto audits begin as correspondence audits — a letter asking you to explain or substantiate specific items by mail. More complex cases can become office or field audits, where an examiner reviews your full records. In either case, the burden is on you to prove your reported numbers, especially your cost basis.

An examiner will typically want to see, for each disposal:

1. The date you acquired the asset and what you paid (cost basis)
2. The date you disposed of it and the proceeds received
3. The resulting gain or loss and its holding period
4. Supporting records: exchange exports, wallet histories, transaction hashes

How Far Back the IRS Can Look

The standard audit window is three years from when you filed. But there are important extensions:

• If you substantially understate income (omitting more than 25% of gross income), the window extends to six years.
• If a return is fraudulent or never filed, there is no time limit at all.

This is why keeping records for the full life of your holdings — not just three years — is essential. You may need basis records from many years ago to support a sale today.

How to Prepare and Reduce Your Risk

Concretely, you should:

• Reconcile against your 1099s. Make sure the proceeds and transactions on your return line up with what each exchange reported.
• Answer the digital asset question honestly. If you had any taxable crypto activity, check "Yes."
• Keep complete basis records. Track every purchase, including the date, amount, and fees, across every wallet and exchange.
• Document transfers between your own wallets. A transfer between wallets you control is not a taxable event, but you need records to prove it.
• Report everything, including small amounts. Staking rewards, airdrops, and DeFi income are all reportable.
• Respond to IRS letters promptly and consider professional help for anything beyond a simple correspondence notice.

If You Already Have Unreported Crypto

If you realize you failed to report past crypto activity, the worst move is to wait and hope. Filing amended returns to correct the record, before the IRS contacts you, generally puts you in a far stronger position and can reduce penalties. A qualified tax professional can advise on whether amending or another approach is appropriate for your situation.

Conclusion

Crypto audits are driven by data, not bad luck. The IRS increasingly knows what you traded before you file, so the surest way to avoid trouble is to make your return consistent with that data and to keep records that can stand on their own.

Report honestly, reconcile against your 1099s, and preserve your cost basis for the full life of every holding. Do that, and even an audit notice becomes a manageable formality rather than a crisis.

This article is for informational purposes only. Tax laws can change; consult a qualified tax professional for personalized advice.