What Triggers an IRS Crypto Audit, and How Far Back Can They Look?

05 October 2026

The IRS can audit crypto transactions going back at least six years, and in cases of suspected fraud, there is no time limit. Audits are triggered by red flags in your tax return that the IRS’s automated systems catch: unreported income, mismatched reporting between exchanges and your return, large or frequent transactions, or patterns that suggest wash sales or cost-basis errors. The IRS has also sent targeted warning letters to crypto holders whose exchange data doesn’t match what they filed.

How the IRS identifies crypto transactions

The IRS obtains data from centralized exchanges under court orders and from the Coinbase, Kraken, and other major platforms that voluntarily report customer information. They also use blockchain analysis tools - Chainalysis is the most commonly cited - to trace transactions on public ledgers like Bitcoin and Ethereum. If you transferred crypto from a reported exchange to an unreported wallet, the trail can still be followed.

Your tax return is compared to the IRS’s records of your crypto activity. Discrepancies are flagged by the Automated Underreporter (AUR) system, which sends a notice asking you to explain. If you ignore or can’t explain it, the case may escalate to an audit.

Specific triggers that increase audit risk

Mismatched or missing forms

• You received a Form 1099-B or 1099-MISC from an exchange but did not report the transaction on your return.
• Your reported cost basis doesn’t match what the exchange reported - common when you use a different accounting method (like FIFO) than what the exchange provided.

Large or suspicious transactions

• Single trades over $10,000 in value. The IRS receives Currency Transaction Reports from exchanges for these.
• Frequent trades or high volume relative to your reported income - the IRS may assume you are trading as a business, which changes how gains are taxed and requires self-employment tax.

Wash Sale Patterns

Though crypto wash sales are not legally prohibited for retail traders (as of 2025), the IRS may examine wash-sale-like patterns if you repeatedly buy and sell the same asset at a loss around the same time. This is a red flag for potential tax avoidance even if it is technically allowed.

Staking and airdrop reporting gaps

• You received staking rewards or airdrops but did not report them as ordinary income.
• You reported staking income but did not track the cost basis of the rewards when you later sold them.

Claiming like-kind exchange treatment

If you reported crypto-for-crypto trades as like-kind exchanges on pre-2018 returns, the IRS may audit those years because the IRS has consistently stated that crypto is not eligible for like-kind treatment.

How far back the IRS can audit

The standard statute of limitations for an IRS audit is three years from the date you filed your return or its due date (whichever is later). For example, a 2021 return filed by April 2022 can be audited until April 2025.

But there are exceptions:

• Six years if you underreported your income by more than 25% of the gross amount shown on your return. This is common with crypto: if you sold a significant amount and reported only part of the gain, the IRS can go back six years.
• No limit if you never filed a return, or if the IRS can prove fraud. Filing a false return with deliberate omissions - such as not reporting any crypto income at all when you had thousands of transactions - qualifies as fraud.

The IRS also has access to exchange data going back many years. They may not audit every old year, but they can request records for any year still open under the above rules.

What to do if you are audited

1. Do not ignore the notice. Reply by the deadline, even if you need more time.
2. Gather all records: transaction histories from exchanges, wallet exports, CSV files from tax software, and any correspondence with exchanges or CPAs.
3. Reconcile your records with what the IRS has. Use a crypto tax tool to generate a complete report covering the audited years.
4. Correct mistakes voluntarily. If you find you underreported, file an amended return (Form 1040-X) before the audit concludes. This can reduce penalties.
5. Consider hiring a crypto-specialist CPA or tax attorney if the audit involves complex transactions, large sums, or potential fraud allegations.

Practical steps to reduce audit risk going forward

• Use crypto tax software that integrates with exchanges and wallets, and generate a report for each tax year before filing.
• Report all taxable events: trades, sales, staking rewards, airdrops, and income from DeFi lending or liquidity pools.
• Keep your own records: download transaction CSVs from every exchange and wallet at least once per year. Exchange accounts can be closed or data can become inaccessible.
• If you use multiple wallets and exchange accounts, track cost basis consistently across all of them using a single accounting method (FIFO is simplest but not always optimal).
• Do not rely on the exchange’s reported cost basis - it may use a method different from yours. Reconcile before filing.

Back to crypto tax