What Happens in an ATO Crypto Tax Audit
A formal audit is a more serious and structured process than the routine prompts or letters covered in the broader guidance on what to do if you receive an ATO crypto letter, and understanding what an actual audit involves helps separate genuine cause for concern from the more common, lower-stakes compliance communications most crypto investors are more likely to encounter.
As of 1 July 2027, CGT rules in Australia are set to change. Please visit this page for the revised tax rules.
How a Crypto Audit Typically Begins
An audit generally follows either a significant, specific discrepancy identified through the ATO’s data matching program that was not adequately resolved through an initial, lower-stakes inquiry, or a broader risk-based selection reflecting patterns the ATO has identified as warranting closer review. Understanding how the ATO actually tracks crypto transactions provides useful context for what kind of information the ATO already holds before an audit even formally begins, since much of the underlying data has typically already been received directly from exchanges.
A formal audit notice will generally specify the scope, which financial years and which aspects of the taxpayer’s crypto activity are under review, and will typically request specific documentation and explanations rather than a general, open-ended inquiry. Reading this scope carefully, and responding to exactly what has been asked rather than either under or over-sharing, is an important first step.
What the ATO Typically Requests
A crypto-specific audit generally requests complete transaction history across every relevant wallet and exchange, evidence supporting the cost base claimed for disposals, and explanations for how specific transactions were classified, for example distinguishing a genuine transfer between the taxpayer’s own wallets from an actual disposal. This is exactly why disciplined record-keeping throughout the year matters so much, since an audit tests whether a taxpayer’s original position can actually be substantiated with real evidence, not just recalled from memory.
Taxpayers with activity across multiple wallets and exchanges or multiple jurisdictions should expect an audit to request a genuinely complete, consolidated picture, and gaps or inconsistencies between platforms are exactly the kind of thing an audit is designed to surface. Where genuine gaps exist, for example due to lost transaction history, being upfront about the limitation and demonstrating a genuine, reasonable attempt at reconstruction is generally a stronger position than presenting an incomplete picture as if it were complete.
Professional Representation and What Happens Next
Given the genuine stakes involved in a formal audit, engaging a specialist accountant, and potentially a tax lawyer for anything involving a significant sum or a genuine dispute, along the lines discussed in choosing the right crypto tax accountant, is strongly advisable rather than managing a formal audit independently. A professional representative can help ensure responses are accurate, complete, and appropriately scoped to what has actually been requested.
Following an audit, the ATO will generally issue findings, which may confirm the original position was correct, identify adjustments needed with associated tax, interest and penalties along the lines covered in the broader guidance on penalties for undeclared crypto gains, or in some cases lead to further investigation if serious concerns are identified. Taxpayers generally have review and objection rights if they disagree with an audit’s findings, and understanding these rights, alongside the general legal risks of crypto investing in Australia, is worth doing with proper professional guidance rather than navigating alone. All ongoing obligations, both during and after an audit, still flow through the standard process in how to declare cryptocurrency on an Australian tax return for future years.
Key Takeaways
A formal ATO crypto audit is a more structured, higher-stakes process than a routine data matching letter, generally following a significant unresolved discrepancy or risk-based selection. Audits typically request complete transaction history, cost base evidence, and explanations for how specific transactions were classified. Genuine gaps in records should be disclosed honestly with a demonstrated reasonable reconstruction effort, rather than presented as a complete picture. Professional representation is strongly advisable given the genuine stakes, and taxpayers generally retain review and objection rights if they disagree with the findings.
Shepley Capital provides education and market insights, not financial advice. Always conduct your own research before making any investment decisions.
Frequently Asked Questions
What happens in an ATO crypto tax audit?
A formal audit is a more serious and structured process than the routine prompts or letters covered in the broader guidance on what to do if you receive an ATO crypto letter, and understanding what an actual audit involves helps separate genuine cause for concern from the more common, lower-stakes compliance communications most crypto investors are more likely to encounter.
How a Crypto Audit Typically Begins?
An audit generally follows either a significant, specific discrepancy identified through the ATO's data matching program that was not adequately resolved through an initial, lower-stakes inquiry, or a broader risk-based selection reflecting patterns the ATO has identified as warranting closer review. Understanding how the ATO actually tracks crypto transactions provides useful context for what kind of information the ATO already holds before an audit even formally begins, since much of the underlying data has typically already been received directly from exchanges.
What the ATO Typically Requests?
A crypto-specific audit generally requests complete transaction history across every relevant wallet and exchange, evidence supporting the cost base claimed for disposals, and explanations for how specific transactions were classified, for example distinguishing a genuine transfer between the taxpayer's own wallets from an actual disposal. This is exactly why disciplined record-keeping throughout the year matters so much, since an audit tests whether a taxpayer's original position can actually be substantiated with real evidence, not just recalled from memory.
When should you engage professional representation for an audit?
Given the genuine stakes involved in a formal audit, engaging a specialist accountant, and potentially a tax lawyer for anything involving a significant sum or a genuine dispute, along the lines discussed in choosing the right crypto tax accountant, is strongly advisable rather than managing a formal audit independently. A professional representative can help ensure responses are accurate, complete, and appropriately scoped to what has actually been requested.
What are the key points about an ATO crypto audit?
A formal ATO crypto audit is a more structured, higher-stakes process than a routine data matching letter, generally following a significant unresolved discrepancy or risk-based selection. Audits typically request complete transaction history, cost base evidence, and explanations for how specific transactions were classified. Genuine gaps in records should be disclosed honestly with a demonstrated reasonable reconstruction effort, rather than presented as a complete picture.
What are the ATO reporting requirements for What Happens in an ATO Crypto Tax Audit?
During an audit the ATO typically requests complete transaction histories from every exchange and wallet used, the cost base method applied and evidence supporting it, and records of all ordinary income from staking, lending or airdrops. Records must reconcile across platforms and be expressed in AUD at the date of each transaction. Where the original return understated the position, the correct response is an amendment for each affected year rather than adjusting the current one.
How likely is an ATO crypto audit for an ordinary investor?
Formal audits are relatively uncommon and generally follow an unresolved discrepancy rather than arriving unprompted, so most Australian investors will encounter a data matching letter long before an audit. What raises the likelihood is a persistent gap between exchange-reported activity and what appears in the return, large unexplained disposals, or no response to earlier ATO contact. Accurate reporting and prompt engagement with routine letters are what keep a discrepancy from escalating.
What records should I keep for What Happens in an ATO Crypto Tax Audit in Australia?
The ATO requires you to keep detailed records for all crypto transactions, including dates, amounts in AUD, wallet addresses, and the purpose of each transaction. Good records are essential for accurately calculating your tax obligations.
WRITTEN & REVIEWED BY Chris Shepley
UPDATED: SEPTEMBER 2026
Choose your next topic from our Cryptopedia
