What Happens When the IRS Comes Knocking

There is a particular kind of fear that circulates in the crypto community — a low-grade anxiety about the IRS that sits somewhere between healthy caution and paralyzing dread. We are not interested in either extreme. What we are interested in is accuracy. The IRS is a real institution with real enforcement capacity, and its attention to cryptocurrency has increased substantially over the past several years. Understanding what that enforcement looks like, what triggers it, and what your rights are within it is not fearmongering. It is preparation, which is what sovereignty requires.

This article is about the mechanics of IRS enforcement as they apply to cryptocurrency holders. Not the rumors, not the worst-case fantasies, not the overconfident claims that the IRS will never find you. The actual process: what they know, how they find it, what happens when they contact you, and what you can do about it.

What the IRS Knows

The IRS knows more about your cryptocurrency activity than it did five years ago, and the trajectory is toward knowing more still. This is not speculation; it is the result of specific legislative and enforcement actions.

The Infrastructure Investment and Jobs Act, signed into law in November 2021, included provisions requiring cryptocurrency brokers to report transactions to the IRS on Form 1099. The definition of “broker” and the specific reporting requirements have been phased in over subsequent years. As of early 2026, major centralized exchanges — Coinbase, Kraken, Gemini, and others — report user transactions to the IRS . If you bought, sold, or traded crypto on a major exchange, the IRS has received a record of those transactions.

The IRS has also used John Doe summonses — legal demands for customer records issued to exchanges without naming specific taxpayers. Coinbase received one in 2016, resulting in the disclosure of approximately 13,000 user accounts. Kraken, Circle, and others have received similar summonses in subsequent years . These summonses are not fishing expeditions; they are targeted legal instruments approved by federal courts, and they produce actionable data.

Beyond exchange data, the IRS has contracted with blockchain analytics firms — Chainalysis and CipherTrace among them — to trace on-chain transactions . These tools can follow funds across wallets, identify patterns, and in many cases link pseudonymous addresses to real identities through exchange on-ramps and off-ramps. The blockchain is a public ledger. Every transaction you have ever made on a transparent chain is visible to anyone with the tools to read it. The IRS has those tools.

None of this means the IRS is watching your specific wallet in real time. The agency has finite resources, and the vast majority of individual crypto users will never be personally examined. But the information asymmetry that once favored crypto users — the sense that transactions were invisible to the tax authority — has eroded substantially and continues to erode.

What Triggers Scrutiny

IRS enforcement resources are finite. The agency does not audit randomly in any meaningful proportion; the overall individual audit rate has been well below 1% in recent years, though it rises significantly at higher income levels . Understanding what elevates your risk of scrutiny helps you make proportional decisions about compliance.

Unreported exchange income. This is the most straightforward trigger. If an exchange sends the IRS a 1099 showing that you had $50,000 in proceeds, and your tax return does not include those transactions, the IRS computers will notice. This is not a sophisticated enforcement action; it is a simple data match that happens automatically. The resulting notice — typically a CP2000 — proposes additional tax based on the unreported income.

Discrepancies between reported income and observable lifestyle. The IRS has used lifestyle analysis in tax enforcement for decades. If your reported income is $60,000 but you purchased a $400,000 property with cryptocurrency proceeds, the gap is visible. This is more labor-intensive than automated data matching, so it tends to apply at higher dollar amounts, but it is a real tool in the agency’s kit.

Large or unusual transactions.Financial institutions file Currency Transaction Reports (CTRs) for transactions over $10,000 and Suspicious Activity Reports (SARs) for transactions that appear unusual. These reports flow to the Financial Crimes Enforcement Network (FinCEN), not the IRS directly, but the data is accessible to law enforcement including IRS Criminal Investigation .

Random selection.A small number of returns are selected for audit by statistical algorithms — the Discriminant Information Function (DIF) system — that flag returns with characteristics associated with underreporting. Having cryptocurrency activity does not automatically flag your return, but the IRS has indicated it is incorporating digital asset questions into its selection models .

Voluntary disclosure by others. If someone you transacted with is audited or investigated, your information may surface in their records. This is particularly relevant for peer-to-peer transactions and business arrangements involving cryptocurrency.

Types of IRS Contact

Not all IRS contact is created equal, and understanding the different types helps you calibrate your response.

The CP2000 notice. This is the most common form of contact for crypto-related discrepancies. It is an automated notice, not an audit. The IRS computers have identified a mismatch between information received from a third party (an exchange, typically) and what you reported on your return. The notice proposes additional tax, interest, and possibly a penalty. You have the right to agree, partially agree, or disagree and provide documentation. Many CP2000 notices are resolved by mail without ever speaking to an IRS employee. They are serious but manageable, particularly if you have good records.

Correspondence audit. A step up from a CP2000. The IRS requests specific documentation — records of transactions, proof of cost basis, explanation of particular items — by mail. You respond with documentation. If the documentation is satisfactory, the matter is closed. If not, it can escalate. Correspondence audits are the most common form of actual audit for individual taxpayers.

Office or field audit. Less common for individuals, more common for businesses and high-income taxpayers. An IRS examiner reviews your records in person, either at an IRS office or at your home or business. These are more intensive and more serious. If you receive notice of an office or field audit, you should have professional representation.

Criminal investigation.This is the far end of the spectrum, conducted by IRS Criminal Investigation (CI), a separate division from the examination function that handles civil audits. Criminal investigation is reserved for cases involving suspected willful tax evasion, fraud, or money laundering. The CI division is small — roughly 2,000 special agents nationally — and its resources are focused on the most egregious cases. If you are contacted by IRS CI, you need a criminal tax attorney immediately. But for context: the IRS initiates roughly 2,000-3,000 criminal investigations per year across all tax categories, and only a fraction involve cryptocurrency .

Your Rights

The IRS is a powerful institution, but its power is bounded by law, and you have specific rights in any interaction with it. The Taxpayer Bill of Rights, formally adopted in 2014, codifies these protections. They are worth knowing before you need them.

The right to be informed. You have the right to know what you need to do to comply with tax laws, and to receive clear explanations of IRS decisions about your accounts.

The right to quality service. You are entitled to prompt, courteous, and professional assistance from the IRS.

The right to pay no more than the correct amount of tax. You are only obligated to pay the amount of tax legally due, including interest and penalties, and the IRS must apply all payments properly.

The right to challenge the IRS’s position and be heard. If you disagree with an IRS determination, you have the right to raise objections and provide documentation. This includes the right to appeal within the IRS and, if necessary, to challenge a determination in court — either the U.S. Tax Court (before paying) or federal district court or the Court of Federal Claims (after paying and filing a refund claim).

The right to representation. You can authorize an attorney, CPA, or enrolled agent to represent you before the IRS. During an examination, you generally do not need to speak to the IRS directly if you have authorized representation. This right is particularly important: for any matter beyond a simple CP2000 response, professional representation is strongly advisable.

The right to finality.You have the right to know the maximum amount of time you have to challenge the IRS’s position and the maximum amount of time the IRS has to audit a particular tax year. The standard statute of limitations for assessment is three years from the date you filed your return. If the IRS believes you underreported income by more than 25%, the statute extends to six years. There is no statute of limitations for fraud or failure to file .

Penalties

Understanding the penalty structure helps you assess the real cost of different levels of non-compliance. Penalties are not arbitrary; they are specified by statute and vary by severity.

Failure to file.If you do not file a return by the due date (including extensions), the penalty is 5% of the unpaid tax for each month or partial month the return is late, up to a maximum of 25% .

Failure to pay.If you file but do not pay the tax due, the penalty is 0.5% of the unpaid tax for each month or partial month it remains unpaid, up to a maximum of 25%. Interest also accrues on unpaid tax at the federal short-term rate plus 3 percentage points .

Accuracy-related penalty.If the IRS determines that you underpaid tax due to negligence or a “substantial understatement” (generally, the greater of 10% of the correct tax or $5,000), the penalty is 20% of the underpayment .

Civil fraud penalty.If the IRS can prove that an underpayment was due to fraud, the penalty is 75% of the portion of the underpayment attributable to fraud. The burden of proof is on the IRS for the fraud penalty, and it must be established by clear and convincing evidence .

Criminal penalties.Willful tax evasion is a felony, punishable by up to five years in prison and fines of up to $250,000 for individuals . Criminal prosecution requires proof of willfulness — a voluntary, intentional violation of a known legal duty. Honest mistakes, even significant ones, are not criminal. The line between a civil penalty and a criminal charge is intent.

What to Do If You Receive a Notice

The first rule is simple: do not ignore it. IRS notices have deadlines. Missing them reduces your options and can result in default assessments — the IRS simply imposing the tax it believes you owe, without your input.

The second rule: do not panic. A CP2000 notice is not an audit. A correspondence audit is not a criminal investigation. Read the notice carefully, understand what it is asking, and respond within the stated timeframe.

The third rule: assess the stakes. If the notice involves a small discrepancy — a few hundred dollars — you may be able to resolve it yourself by providing documentation. If it involves a significant amount, or if you are unsure about your position, get professional help. An enrolled agent, CPA, or tax attorney who handles IRS disputes can evaluate your situation and represent you. The cost of representation is almost always less than the cost of handling a complex matter poorly.

The fourth rule: gather your records. If you have been maintaining good transaction records — as discussed earlier in this series — you are in a strong position. If you have not, start reconstructing what you can. Exchange records, blockchain transaction histories, wallet activity — all of it is still available if you look for it. The time to gather records is before you respond, not after.

For those who have failed to report cryptocurrency income in prior years, the IRS offers several paths to come into compliance. Amended returns (Form 1040-X) can be filed for prior years. In more serious cases, a voluntary disclosure through the IRS Criminal Investigation division may be appropriate — this is a formal process that generally protects against criminal prosecution in exchange for full disclosure and payment of taxes, interest, and penalties .

The Prevention Approach

The most effective defense against IRS enforcement is not a clever strategy after the fact. It is accurate reporting from the beginning. A well-documented tax return, prepared with good records and defensible positions, is difficult for the IRS to challenge successfully. The agency’s resources are limited, and it generally does not expend them on taxpayers whose returns are internally consistent and supported by documentation.

This means tracking every transaction, maintaining records for at least six years, using appropriate tax software, working with a knowledgeable professional for complex situations, and making reasonable, documented choices where the guidance is unclear. It means filing on time, paying what you owe, and extending when you need more time. It is not glamorous. It is not even interesting. But it is the practice that keeps the IRS at a distance — not through concealment, but through compliance.

The sovereign posture here is clear-eyed: the IRS is a real institution with real authority, and pretending otherwise is not sovereignty but recklessness. Understanding the enforcement landscape, knowing your rights, and maintaining the documentation to defend your positions — that is the deliberate approach. You cannot navigate a system you refuse to understand, and you cannot protect yourself with ignorance.

This article is part of the Tax Strategy for the Sovereign series at SovereignCML. Content reflects enforcement landscape as of March 2026. This is education, not tax advice.

Related reading: Crypto Tax Basics: What the IRS Actually Requires, Reporting DeFi Income: The Current (Messy) Reality, Building Your Tax Strategy: A Sovereign Framework