Crypto Theft Losses: When Casualty Deductions Apply in 2026

You clicked a phishing link. You sent funds to a fraudulent exchange. Or maybe you simply lost your seed phrase and can't access your wallet anymore. In any of these scenarios, the immediate question is often the same: "Can I write this off on my taxes?" The short answer for most people in 2026 is no. But for a specific group of investors who fell victim to scams involving profit-motivated transactions, there is still a narrow path to deducting those losses.

The landscape for crypto theft loss deductions has changed drastically since 2018. If you are trying to navigate the Internal Revenue Code (IRC) after losing digital assets, you need to understand exactly where the law stands today, especially with recent changes like the One Big Beautiful Bill Act (OBBBA). This guide breaks down when you might qualify for a deduction, what documentation you need, and why most personal losses remain non-deductible.

The Post-TCJA Reality for Personal Crypto Losses

To understand where we stand in 2026, we have to look at how the rules shifted. Before 2018, individuals could generally deduct casualty and theft losses that exceeded a certain threshold. However, the Tax Cuts and Jobs Act (TCJA) of 2017 suspended these deductions for tax years 2018 through 2025. Under IRC §165(h)(5), personal-use casualty and theft losses became deductible only if they were attributable to a federally declared disaster.

This suspension was recently made permanent by the One Big Beautiful Bill Act (OBBBA) passed in 2025. What does this mean for you? It means that if you lost cryptocurrency due to a hack, a misplaced private key, or a simple error, it is treated as a personal casualty or theft loss. Since a crypto hack is not a federally declared disaster under the Stafford Act, these losses are effectively non-deductible for individual taxpayers filing as personal-use property owners.

The key takeaway here is strict: routine personal losses do not qualify. The IRS treats virtual currency as property. If that property is stolen from your personal holding without a connection to a profit-seeking transaction, the deduction door is closed.

The Exception: Profit-Motivated Transactions Under IRC §165(c)(2)

There is one significant exception that keeps many tax attorneys busy: IRC §165(c)(2). This section allows deductions for losses incurred in transactions entered into for profit. While the TCJA eliminated personal casualty losses, it did not repeal the ability to deduct theft losses related to investment activities.

If you invested in a crypto project, a lending protocol, or an exchange with the genuine intent to make a profit, and that entity turned out to be a fraud, you may qualify for a theft-loss deduction. This applies to scenarios like "pig-butchering" scams, where victims are lured into fraudulent investment platforms, or hacks of centralized exchanges where user funds were commingled and misappropriated.

To claim this deduction, you must meet three strict conditions:

• Profit Motive: You must prove the transaction was entered into for profit, not just as a gift or personal transfer.
• Theft Definition: The loss must constitute "theft" under applicable state law. This includes fraud, swindling, and embezzlement, not just market fluctuations.
• No Reasonable Prospect of Recovery: You must demonstrate that there is no reasonable chance of getting your money back. This is usually determined by the end of the tax year in which the loss was discovered.

If these conditions are met, you can deduct the loss in the year you discover the theft. However, the deduction is capped at your cost basis. For example, if you invested $10,000 in a fraudulent platform that promised high returns, and the platform collapsed before you could withdraw, your deductible loss is limited to the $10,000 you put in, not the $50,000 in unrealized gains you expected.

Documentation Requirements for Claiming a Theft Loss

The IRS is skeptical of crypto theft claims. To substantiate a deduction under §165(c)(2), you need more than just a screenshot of a zero balance. You need a robust paper trail that proves the elements of theft and lack of recovery.

Here is what you should gather:

1. Criminal Complaints: File reports with the FBI’s Internet Crime Complaint Center (IC3) and local law enforcement. These official records help establish that a crime occurred.
2. Transaction Records: Keep detailed logs of all deposits, withdrawals, and communications with the fraudulent entity. Blockchain explorers can provide immutable proof of where the funds went.
3. Legal Analysis: A letter from a qualified attorney stating that the loss qualifies as theft under state law can be crucial. Many CPAs will not file a §165(c)(2) claim without this support.
4. Evidence of No Recovery: Documentation showing that the platform is insolvent, shut down, or that legal proceedings have failed to recover assets.

Without this documentation, the IRS may disallow the deduction during an audit, arguing that the loss was merely a bad investment or a personal casualty event.

How to Report Crypto Theft Losses on Your Tax Return

If you believe you qualify for a theft-loss deduction under IRC §165(c)(2), you cannot simply list it on Schedule D like a capital loss. The reporting process is more complex and requires itemizing deductions.

First, you must calculate the amount of the loss using Form 4684, which covers casualties and thefts. Specifically, you will use Section B of the form to detail the theft. The calculated loss from Form 4684 then flows to Schedule A (Itemized Deductions).

This creates a significant hurdle for many taxpayers. Because the standard deduction is relatively high, you must have enough total itemized deductions (including mortgage interest, state taxes, charitable contributions, etc.) to exceed the standard deduction for the theft loss to provide any tax benefit. If your total itemized deductions are lower than the standard deduction, claiming the theft loss won’t reduce your tax bill.

Additionally, unlike capital losses, which can offset ordinary income up to $3,000 per year, theft losses reported on Schedule A are subject to different limitations and do not directly offset ordinary income in the same way. This makes the math even more critical-you need to run the numbers to see if itemizing actually saves you money compared to taking the standard deduction.

Common Pitfalls and Misconceptions

Many crypto users fall into traps when trying to claim these deductions. Understanding these pitfalls can save you from audits and rejected claims.

Confusing Market Loss with Theft: If a coin drops 90% because of poor performance or market sentiment, that is a capital loss, not a theft loss. You realize this loss by selling the asset. You cannot claim a theft deduction for a price drop unless there was criminal intent involved in the devaluation.

Romance Scams: If you send crypto to someone you met online who turns out to be a scammer, the IRS often views this as a personal gift or a personal casualty loss, not an investment. Unless you can prove you were investing in a business venture with them, these losses are rarely deductible under §165(c)(2).

Timing Errors: The loss is deductible in the year you discover the theft, provided there is no reasonable prospect of recovery by December 31st of that year. If you discover a hack in January 2026 but wait until 2027 to confirm no recovery, you claim it on your 2026 return, not 2027. Getting the timing wrong can lead to penalties.

Overvaluing the Loss: Remember, the deduction is limited to your cost basis. Do not include unrealized gains, promised yields, or interest that never materialized. The IRS wants to know what you actually paid for the asset, not what you hoped it would become.

Alternatives to Theft Loss Deductions

Since the bar for §165(c)(2) is so high, many investors find better relief through traditional capital loss harvesting. If you hold tokens that have become worthless or are severely depressed in value, selling them realizes a capital loss. This loss can offset capital gains elsewhere in your portfolio and up to $3,000 of ordinary income per year, with any excess carried forward to future years.

For assets that are truly worthless (e.g., a token with no liquidity, no active development, and no hope of recovery), you may be able to claim a worthless security loss on Schedule D. This is often simpler than proving theft, though it still requires strong evidence that the asset has zero value.

Tax software providers like Koinly, ZenLedger, and CoinLedger now emphasize these strategies over casualty deductions. Their guidance suggests that for most retail users, focusing on accurate gain/loss calculations for actual trades and disposals is more beneficial than pursuing the complex and risky theft-loss route.

Looking Ahead: The Future of Crypto Loss Deductions

As of mid-2026, there are no signs that Congress plans to reverse the OBBBA’s permanent suspension of personal casualty losses. The focus remains on narrowing deductions and closing loopholes. However, the IRS continues to issue guidance on specific types of fraud, particularly pig-butchering scams and Ponzi schemes, acknowledging that some crypto losses do fit the definition of investment theft.

If you are considering a theft-loss claim, consult a tax professional who specializes in digital assets. Generalist CPAs may not be familiar with the nuances of IRC §165(c)(2) in the context of blockchain transactions. Given the potential for audits and the complexity of the documentation required, professional advice is worth the investment.