Key Takeaway
IRS virtual currency audits are typically initiated through four pathways: (1) the Form 1040 digital asset question answered incorrectly or left blank; (2) Form 1099-B, 1099-K, or 1099-DA exchange reporting mismatches; (3) John Doe summons data matching against known wallet addresses; and (4) Operation Hidden Treasure referrals based on blockchain analysis. The short version is that the IRS knows more than most taxpayers think. In our experience, the 1040 digital asset checkbox is the single most common trigger because a “No” answer with any on-chain activity creates an automatic red flag. IRC §6201 authorizes assessment; Treas. Reg. §1.6011-4 governs reporting.1
Crypto audit notice? A 15-minute consultation is free.
Four pathways the IRS uses to initiate virtual currency audits.
The Four Audit Initiation Pathways
Checkbox1040 Question1099Exchange ReportsSummonsJohn Doe DataHidden TreasureBlockchain Ops
| Pathway | Mechanism2 |
|---|---|
| Form 1040 Question | Digital asset checkbox answer |
| 1099 Mismatches | Exchange reports vs. return |
| John Doe Summons | Coinbase, Kraken, Circle data |
| Operation Hidden Treasure | IRS-CI blockchain unit |
Quick Reference
Jump to: 1040, 1099s, summons, or Hidden Treasure.
1. Form 1040 Digital Asset Question
The checkbox is the single most common audit trigger.
If this is you: You answered “No” on the digital asset question but had on-chain activity, or you left the box blank entirely. The IRS computer systems flag both scenarios against 1099 data and blockchain records.
Checkbox Response Strategy
- Pull filed 1040s for all open years.
- Identify activity that required a “Yes” answer.
- Evaluate whether amendment is advisable.
- Preserve wallet and exchange records.
- Engage counsel before responding to any IRS contact.
2. Form 1099 Reporting Mismatches
Exchanges report gross proceeds; unreported amounts get flagged.
If this is you: Coinbase, Kraken, Gemini, or another exchange issued you a 1099-B, 1099-K, or 1099-DA, and the IRS Automated Underreporter system (AUR) matched the total against your return. Any mismatch generates a CP2000 or audit notice.
3. John Doe Summons Data
Exchange customer data obtained through court-approved summonses.
If this is you: Your wallet traces back to Coinbase (2016 summons), Kraken (2021), Circle (2021), sFOX (2022), or M.Y. Safra Bank (2023). The IRS has your transaction history. Non-filing or underreporting typically triggers audit or CI referral.
4. Operation Hidden Treasure
IRS-CI blockchain analysis unit actively identifies unreported activity.
If this is you: Large on-chain transfers, mixer usage, DeFi activity, or NFT sales not reported. Chainalysis and CipherTrace data feed case selection. Criminal referrals possible for willful non-reporting.
Got a crypto audit letter? Book a free 15-minute call before you respond.
Crypto Audit Notice Lookup
| Notice | Meaning |
|---|---|
| CP2000 | AUR mismatch — typically 1099 vs. return |
| Letter 566 / 525 | Field or correspondence audit opened |
| Letter 6173 / 6174 / 6174-A | Soft-touch compliance letter |
| Letter 4564 | IDR — information document request |
| Form 4549 | Examination changes report |
Audit Statute
- 3-year standard assessment statute (IRC §6501).
- 6-year for 25%+ underreporting.
- Unlimited for fraud or non-filing.
- Foreign asset FBAR implicates 6-year statute.
Crypto Audit Patterns
| Trigger | Typical Outcome |
|---|---|
| 1040 checkbox “No” + 1099 issued | CP2000 within 18 months |
| Coinbase summons data | Audit or CI referral |
| Unreported mining / staking | AUR match on 1099-MISC |
| Large DeFi activity | Hidden Treasure referral |
Crypto Audit Escalation
Initial Notice
CP2000 or Letter 566. Response window typically 30 days.
Examination
IDRs for wallet addresses, exchange records, cost basis documentation.
Appeals / CI
Appeals office or IRS-CI referral if fraud indicators present.
First 48 Hours After Notice
- Do not respond until counsel engaged.
- Pull exchange statements for all years.
- Export wallet transaction histories.
- Preserve all records — do not delete anything.
- Engage counsel familiar with crypto audits.
★Brotman Law represents taxpayers in IRS virtual currency audits. Based in San Diego.
The ROI Question
Crypto audits routinely involve six- and seven-figure adjustments. Professional representation typically pays for itself on the first IDR response.
Cryptocurrency Tax Issue You’re Not Sure How to Handle?
The IRS treats virtual currency as property — which means every transaction is potentially taxable, exchanges report to the IRS, and audit exposure is real. Whether you have unreported gains, missed cost basis, or a notice related to digital assets, the analysis starts with understanding exactly what you have and when.
Discuss My Crypto Tax Situation → Or call: (619) 378-3138
When to Engage
- Any IRS crypto notice received.
- Unreported crypto activity being considered for amendment.
- John Doe summons data potentially implicates you.
- CI agent has made contact.
Crypto audit question?
15-min consultation free.
Guide Chapters
Have questions?
Free 15-minute call. No obligation. We'll tell you exactly where you stand.
Frequently Asked Questions
How does the IRS find out about crypto?
Four main channels — Form 1040 digital asset question, exchange 1099 reporting, John Doe summonses served on Coinbase / Kraken / Circle / sFOX, and Operation Hidden Treasure blockchain analysis. The IRS has far more visibility than most taxpayers realize.
What is the 1040 digital asset question?
Since 2020, Form 1040 asks whether you received, sold, exchanged, or otherwise disposed of digital assets. A “No” answer with any on-chain activity creates automated mismatch risk. Leaving it blank is treated as “No” for flagging purposes.
What is a John Doe summons?
Court-approved summons for customer records of persons not yet identified. Coinbase (2016), Kraken (2021), Circle (2021), sFOX (2022), and M.Y. Safra Bank (2023) have all been served. The IRS obtained transaction histories covering millions of accounts.
What is Operation Hidden Treasure?
IRS Criminal Investigation initiative launched in 2021 pairing CI agents with civil examiners. Uses Chainalysis, CipherTrace, and other blockchain analytics to identify unreported activity, particularly involving mixers, DeFi, and large transfers.
Did I get a Letter 6173 or 6174?
Soft-touch compliance letters. 6173 requires response; 6174 is informational; 6174-A warns of potential examination. All three signal the IRS has crypto data on you. Response strategy matters — we recommend engaging counsel before replying.
Can the IRS trace my wallet?
Often yes. Public blockchain transactions are permanently recorded. Chainalysis maps wallet clusters to exchange KYC data. Mixer usage is itself a red flag that can increase audit priority.
What triggers a CP2000 on crypto?
Form 1099 from an exchange reporting gross proceeds that don’t appear on your return. The Automated Underreporter system flags the mismatch automatically. Response window is typically 30 days.
Do I report if I only bought crypto?
Buy-and-hold with no sale, exchange, or income event — answer the 1040 digital asset question truthfully (yes if you received any crypto including via purchase, per 2024 form instructions). No taxable event for pure purchase. Check current year instructions.
What if I used a DEX or DeFi?
Each swap, loan, liquidity deposit, and reward can be a taxable event. No 1099 is typically issued, which doesn’t eliminate the reporting obligation. Hidden Treasure specifically targets DeFi non-reporting.
What if I just didn't know?
Good-faith non-willfulness matters for penalty negotiation. Voluntary disclosure before contact is almost always better than response after notice. We evaluate whether amendment or voluntary disclosure is the right path.
Can crypto non-reporting be criminal?
Yes. Willful failure to report can support IRC §7201 evasion, §7203 failure to file, or §7206 false return charges. Criminal referrals are rare relative to civil audits but not unheard of — particularly for large dollars and willfulness indicators.
What records should I keep?
Exchange statements, wallet transaction exports, cost basis documentation, mining / staking income records, and proof of transfers between your own wallets. Hold records for at least 7 years; longer if foreign reporting implicated.
Should I amend before I get a notice?
Generally yes, when warranted. Voluntary disclosure or qualified amended return filed before contact typically draws lower penalties than post-notice response. Facts-and-circumstances analysis required.
Next Steps
Crypto audit question? 15-min consultation free.
- Assessment authority: IRC §6201. Reporting: Treas. Reg. §1.6011-4.
- Initiation pathways drawn from IRS Notice 2014-21, Operation Hidden Treasure public statements, and Brotman Law practice.
As Featured In & Recognized By
Get Started Today
Book Your Free 15-Minute Call
- Completely confidential — protected by attorney-client privilege
- Every situation is different — you'll receive a custom assessment tailored to yours
- Same-day and next-day appointments available