Stolen Crypto From a Hacked Wallet: How It Is Treated for Tax in Australia

Having crypto stolen from a hacked wallet is a genuinely stressful experience, and the tax implications are usually the last thing on anyone’s mind in the moment. They matter regardless. Under Australian tax law, theft of a crypto asset can, in the right circumstances, be treated as a CGT event that allows a capital loss to be claimed, even though nothing was voluntarily sold or exchanged. The rules around exactly when this applies, what evidence is required, and how the loss is calculated are specific, and getting them wrong either means missing out on a legitimate deduction or making a claim that will not hold up under scrutiny.

 

Can You Actually Claim a Loss on Stolen Crypto

The ATO’s general position treats the loss of a crypto asset through theft as a CGT event, specifically a disposal, which means it can potentially generate a capital loss in the same way any other disposal can generate a gain or loss. This is meaningfully different from crypto that simply falls in value while still sitting in your wallet, which is an unrealised loss with no tax consequence until an actual disposal occurs. Theft is treated as a forced, involuntary disposal, and understanding how a capital loss is treated in Australia generally is the necessary starting point before applying it to a theft scenario specifically.

To support a claim, you generally need reasonable evidence that the crypto was genuinely stolen rather than simply lost through your own error, misplaced, or sent to the wrong address by mistake. This typically means being able to demonstrate unauthorised access occurred, such as wallet drain transactions signed without your authorisation, alongside your own timeline of events. The distinction between theft and simple loss matters considerably, and is covered in more detail in the broader guidance on crypto lost through missing transaction history, which deals with a related but distinct scenario.

The value of the claimed loss is generally based on the AUD market value of the stolen crypto at the time of the theft, less your original cost base, following the same underlying logic as any other capital gains tax calculation. If the crypto had appreciated significantly before being stolen, the loss claim reflects the cost base position, not simply the current market value, which is an important distinction many people get wrong when estimating what they are entitled to claim.

 

Documenting the Theft Properly Before You Claim

Because a theft claim is inherently harder to verify than a voluntary sale with a clean exchange record, documentation matters enormously. This starts with reporting the incident. Filing a report through the appropriate channels, as covered in how to report a crypto scam, creates an official record with a timestamp that supports your tax position, independent of whether the stolen funds are ever recovered.

Beyond the initial report, useful supporting evidence includes on-chain transaction records showing the unauthorised transfer out of your wallet, any communication with the platform or wallet provider if the theft involved a hosted service, and a clear personal account of how the breach occurred. If the theft happened through a phishing attack, a compromised seed phrase, or a broader wallet security failure, understanding how to check whether a wallet has been compromised and gathering that evidence promptly makes a real difference to how credible the eventual tax position looks.

Some theft scenarios involve more sophisticated attack vectors, such as a SIM swap or account takeover, or targeted manipulation through wallet address poisoning. Regardless of the specific method, the documentation principle is the same: capture as much verifiable detail as possible close to the time of the event, rather than attempting to reconstruct the circumstances from memory when preparing a tax return months later.

It is also worth attempting recovery where realistically possible before finalising a tax position, both because recovered funds change the actual loss amount and because the recovery process itself often generates useful documentation. Reviewing the practical steps around recovering stolen crypto and the broader process of recovering from a crypto scam is a sensible first step before assuming the funds are permanently gone.

 

Theft Through an Exchange or Custodial Platform

Stolen crypto does not always originate from a personal wallet breach. Crypto held on an exchange or custodial platform that suffers a hack introduces additional complexity, because the loss may sit with the platform rather than directly with you until it is confirmed that your specific holdings were affected and are unrecoverable. This overlaps with the broader considerations covered in exchange collapse and its tax treatment, where the timing of when a loss can actually be claimed often depends on administrative and legal processes outside your control, such as liquidation proceedings.

Understanding the underlying custodial risk involved in holding crypto on any third-party platform is relevant background here, since the tax treatment of a platform-level breach can differ meaningfully from a direct personal wallet theft, particularly around when the loss is considered final rather than merely probable. Reviewing the history of major crypto hacks is a useful reminder that platform-level theft is not a rare or hypothetical scenario, and that clear personal record-keeping of your holdings on any platform strengthens your position regardless of where a breach originates.

In every case, the underlying principle from the ATO’s broader crypto reporting framework still applies: a loss needs to be substantiated, not simply asserted, and the more contemporaneous evidence exists, the more defensible the eventual claim.

 

Reporting the Loss and What Happens Next

Once a theft-related capital loss has been established and properly documented, it is reported through the capital gains section of your tax return in the same way any other capital loss would be, following the process outlined in how to declare cryptocurrency on an Australian tax return. The specific mechanics of claiming losses more broadly are covered in how to report crypto losses on an Australian tax return, which applies directly to theft-related losses alongside standard trading losses.

That loss can then be used to offset capital gains realised elsewhere in the same financial year, or carried forward indefinitely if there are no gains to offset it against in the current year, consistent with the general approach to tax loss harvesting. It cannot be used to reduce ordinary income such as salary or wages, only capital gains, which is an important distinction for anyone hoping a large theft-related loss will meaningfully reduce their overall tax bill outside the capital gains context.

Given the scrutiny theft claims can attract, and the broader visibility the ATO has into crypto activity through its data matching capability, it is worth treating a theft-related capital loss claim with the same rigour as any other significant, evidence-dependent tax position, rather than as an informal footnote on an otherwise standard return.

 

Key Takeaways

Crypto stolen from a hacked wallet can generally be claimed as a capital loss, calculated against your original cost base at the AUD value when the theft occurred. A credible claim requires solid documentation, including an official report and evidence of unauthorised access, gathered as close to the event as possible. Theft is treated differently to simple loss or misplacement, and the distinction matters for what can legitimately be claimed. Losses from theft can offset capital gains and carry forward, but cannot reduce ordinary income. Platform-level theft through an exchange introduces additional timing complexity tied to recovery and liquidation processes.

Shepley Capital provides education and market insights, not financial advice. Always conduct your own research before making any investment decisions.