Crypto Audits in 2025: What the IRS Already Knows About You

The IRS’s ability to trace cryptocurrency transactions has grown dramatically since 2017. If you have traded on a major exchange or moved significant funds on-chain, the IRS likely has more data about you than you think. Here is what the Service actually knows — and how to build a defense posture before a notice arrives.

John Doe Summons: The Original Data Grab

In 2017, the IRS obtained a John Doe summons against Coinbase, compelling the exchange to produce records for approximately 13,000 accounts with more than $20,000 in transactions between 2013 and 2015. This was the first major signal that the IRS was treating crypto noncompliance as a systematic enforcement priority, not a one-off audit.

Similar summonses followed against Kraken (2021, accounts with >$20,000 in transactions from 2016–2020), Circle/Poloniex, and others. The John Doe summons process does not require the IRS to identify a specific taxpayer — it is a blanket data request that the exchange must comply with under IRC §7609(f).

“The John Doe summons data is now in the IRS system. If your exchange activity was above the threshold and you didn’t report it, the question is not whether they know — it’s when they match the data to your SSN.”

— Saim Akif, CPA

1099-K History: The Gross Proceeds Problem

Several major exchanges issued 1099-K forms to high-volume users before the 1099-DA rollout. The 1099-K reports gross proceeds without cost basis — leading many taxpayers to over-report income (if they filed) or be flagged for under-reporting (if they didn’t). The IRS AUR system matched 1099-K gross proceeds to Schedule D totals and generated CP2000 notices for the discrepancies.

If you received a 1099-K from Coinbase between 2017 and 2022 and didn’t report corresponding income or file a matching Schedule D, the IRS may still be processing those discrepancies. The statute of limitations is generally 3 years from filing (or 6 years for >25% understatement). The clock has not expired for many of these years.

The 1099-DA Rollout: A New Era of Matching

Starting with tax year 2025, IRC §6045 requires brokers (including major centralized exchanges) to file Form 1099-DA reporting digital asset proceeds and, where available, cost basis. This creates a systematic matching infrastructure similar to the W-2 and 1099-B matching that has long existed for stock and wage income.

The IRS will receive 1099-DA data, match it to your Schedule D, and flag discrepancies automatically. Unlike the 1099-K era (where only gross proceeds were reported), 1099-DA includes per-transaction detail. Visit our 1099-DA Hub and Readiness Playbook for preparation guidance.

Chain Analysis: What Chainalysis and TRM Labs Do for the IRS

The IRS Criminal Investigation (CI) division and the DOJ contract with blockchain analytics firms — most notably Chainalysis, TRM Labs, and Elliptic — to trace on-chain transactions. These tools can:

• Link a wallet address to a KYC’d exchange account
• Trace funds across mixers, bridges, and privacy protocols (with varying success)
• Identify cluster addresses likely controlled by the same entity
• Flag transactions with darknet markets, sanctioned entities, or known illicit wallets

The IRS sees what it can prove from on-chain data, cross-referenced with exchange KYC records and John Doe summons data. Self-custody alone does not make activity invisible — every on-chain transaction is public and permanent.

Defense Posture: What to Do Now

• Voluntary disclosure: If you have unfiled or under-reported crypto income, the IRS’s Voluntary Disclosure Practice (IRM 9.5.11) allows taxpayers to come in proactively, typically with reduced criminal exposure. This window closes once the IRS contacts you first.
• Amended returns: Filing Form 1040-X for prior years with unreported crypto income — before receiving an IRS notice — is a strong defense posture signal.
• Documentation assembly: Build a complete transaction history for all open tax years (2021–present) from exchanges and on-chain sources before a notice arrives.
• Representation: If you receive any IRS correspondence related to crypto, engage a CPA or tax attorney before responding.

See our Audit Defense service for how Saim structures proactive and reactive crypto audit engagements.

Need Help?

Whether you are preparing proactively or have already received an IRS notice, Saim Akif, CPA builds the documentation, response, and defense strategy for crypto audits. Schedule a 30-minute intake with Saim.