Crypto Scam And Theft Loss Tax Guide (2026): How To Claim Losses With The IRS

A photo of our CEO, Chris Herbst who has degrees in both in accounting and computer science - the very tools needed to handle crypto tax reporting correctly.
By Chris Herbst

Guides

Managing Director at global crypto tax reporting firm, CountDeFi & CH Consulting
GTP, CIBA
Category:
Updated:
Update Due:
Fraud & Scams
May 5, 2026
July 1, 2027
If you’ve lost crypto to a scam, hack, or fraud, you may be able to claim a tax deduction with the IRS.

But the rules for claiming a tax loss off the back of a scam are narrower than most guides suggest, and getting it wrong can invalidate the claim entirely.

Here at CountDeFi, this is one of the most common situations we see. Clients come in assuming the loss is deductible, only to find the IRS tax code is far stricter than expected.

The recovery path depends on three things:

  • The type of loss
  • Whether it qualifies under IRS rules
  • The quality of your documentation

Crypto tax is not forgiving on any of them.

Can You Claim Crypto Losses From Scams, Hacks, Or Fraud?

Sometimes, yes.

The answer depends on how the loss is classified:

  • Capital loss from selling at a loss
  • Theft loss tied to a profit-motive transaction
  • Ponzi-scheme loss under IRS safe harbor rules

What most traders miss is that personal theft loss deductions were suspended under the Tax Cuts and Jobs Act through 2025.

That changed the playing field.

How The IRS Treats Cryptocurrency Losses

As I've outlined in my guide on U.S. crypto taxes, the IRS treats crypto as property.

Losses fall into two categories, and they are not interchangeable.

Capital Losses

A capital loss occurs when you sell or trade crypto for less than your cost basis.

The rules are straightforward:

  • Losses offset capital gains
  • Up to 3,000 USD can offset ordinary income per year
  • Excess losses carry forward indefinitely

You report these on Form 8949 and Schedule D.

Theft And Fraud Losses

This is where things get more complex.

Personal theft losses are largely disallowed under current law.

However, losses tied to a transaction entered into for profit may still qualify under Section 165(c)(2).

Crypto held as an investment typically falls into this category.

That keeps the door open, but the documentation bar is high.

Claiming A Crypto Theft Loss Under Section 165(c)(2)

To qualify, you need to meet all of the following:

  • The loss qualifies as theft under applicable law
  • The crypto was held for investment or profit
  • The loss occurred in the year claimed
  • There is no reasonable prospect of recovery

That last point is where most claims fail.

At CountDeFi, this is one of our data analysts’ favorite challenges. Not the tax rule itself, but proving the absence of recovery.

If you cannot prove that recovery is unlikely, the IRS will not allow the deduction in that year.

What You Need To File

You report theft losses on Form 4684 and include:

  • Transaction history and cost basis
  • Wallet addresses and transaction hashes
  • Fair market value at the time of loss
  • Communications with the scammer or platform
  • Law enforcement reports such as FBI IC3 filings
  • Evidence showing no realistic recovery path

Safe Harbor For Ponzi Scheme Losses

If your loss comes from a Ponzi-style fraud, you may qualify under IRS safe harbor rules.

These are defined in Revenue Procedure 2009-20.

This is the same framework used in cases like Bernie Madoff Ponzi scheme and applied to crypto schemes such as BitConnect.

Under the safe harbor:

  • You can deduct 95 percent if you are not pursuing recovery
  • You can deduct 75 percent if you are

The deduction is taken in the discovery year, not when the fraud began.

The key requirement is a triggering event such as an indictment or regulatory action. Without that, you fall back to the stricter Section 165 route.

Common Crypto Loss Scenarios We See

At CountDeFi, the same patterns come up repeatedly:

  • Phishing attacks draining self-custody wallets
  • Rug pulls and fraudulent tokens
  • Ponzi-style schemes
  • Exchange hacks
  • SIM swap attacks targeting accounts

Each requires a different treatment. There is no one size fits all solution.

Documenting Crypto Losses For IRS Claims

This is where most cases are won or lost.

You need:

  • Full transaction history
  • Wallet addresses and hashes
  • Cost basis records
  • Evidence of the scam or theft
  • Exchange statements where applicable
  • Law enforcement filings

Crypto tax accounting is a data problem before it is a tax problem.

At CountDeFi, we rebuild this layer first. Then we map it to the IRS requirements.

Reporting A Crypto Scam To Authorities

If you intend to claim a theft loss, reporting is not optional.

You should file with:

  • FBI Internet Crime Complaint Center
  • Federal Trade Commission

These reports become part of your documentation.

They also support any future recovery if enforcement action occurs.

Civil Recovery And Legal Options

If the perpetrator of a crypto scam is identifiable, recovery may be possible through:

  • Civil lawsuits
  • Class actions
  • Cross-border legal action

This interacts with your tax position.

If you pursue recovery, it can reduce the deductible portion of your loss under safe harbor rules.

Insurance And Exchange Recovery

Crypto insurance is limited, but worth checking out:

  • Exchange coverage for custodial assets
  • Cyber insurance policies
  • Specialized crypto coverage

If funds are recovered, the tax benefit rule applies. Any recovery is taxable up to the amount previously deducted.

Common Mistakes That Kill Crypto Loss Claims

  1. Treating personal theft losses as deductible under current law
  2. Failing to prove no reasonable prospect of recovery
  3. Filing without a valid safe harbor trigger
  4. Skipping FBI or FTC reporting
  5. Ignoring the tax impact of later recoveries

We see these mistakes every week.

When To Hire A Crypto Tax Specialist

If your loss from a crypto scam or theft is simple and contained to one exchange, you may be able to handle it yourself.

If it involves:

  • Multiple wallets
  • Scams or fraud
  • Missing data
  • Cross-chain activity

This becomes a reconstruction problem.

That is exactly where clients come to us.

We trace the transactions, rebuild the dataset, and produce audit-ready reports that hold up when reviewed.

If your loss is more complex than a single form, that is exactly the kind of problem CountDeFi was built to solve. Get in touch with out team to see what your options are.

Chris Herbst is the founder of CountDeFi, a crypto tax specialist with degrees in both accounting and computer science, and a registered Tax Professional (GTP, CIBA). This article is for educational purposes only and does not constitute tax, legal, or investment advice. Consult a qualified tax professional for guidance specific to your situation.

Let's get your crypto taxes done.

Book a free, no-obligation exploratory call with us.