Tax Deduction for Lost or Stolen Cryptocurrency

After the 2017 Tax Cuts and Jobs Act (TCJA), the path to claiming a lost or stolen cryptocurrency tax deduction narrowed considerably. Crypto stolen in a hack, lost to a scam, or irretrievably inaccessible from a failed wallet may qualify as a casualty loss, but only if the loss meets strict statutory tests—and for most individuals, a personal casualty loss deduction is no longer available absent a federally declared disaster.

The 2017 TCJA and Personal Casualty Loss Deductions

For tax years 2018–2025, the TCJA effectively suspended personal casualty loss deductions for most taxpayers. Before 2018, if your wallet was hacked or crypto stolen, you could file Form 4684 and claim the loss on your personal return, subject to a 10% of adjusted gross income (AGI) floor and a $100 floor per loss event.

The TCJA did not eliminate casualty losses outright—it restricted them to losses occurring in a federally declared disaster area during the disaster year. For most crypto owners, unless their loss occurred in a jurisdiction affected by a presidential disaster declaration (hurricane, wildfire, flood, etc.), the loss is not deductible on a personal return for tax purposes.

When Crypto Losses Might Be Deductible

Federally declared disaster. If you were holding crypto and lost access or it was stolen during a period when your state or locality was under a federal disaster declaration, you may have grounds to claim a casualty loss. Examples: crypto lost during Hurricane Helene (2024, North Carolina, South Carolina, Tennessee, Florida), wildfires in California, etc. You would file an amended return and claim the deduction for that year.

Business use. If you were engaged in a for-profit business that held cryptocurrency—a trading operation, a DeFi platform, or a crypto lending business—a casualty or theft loss related to that business might be deductible separate from personal casualty rules. You would report it on Schedule C (Profit or Loss from Business) rather than Form 4684. The IRS would expect evidence that the loss was tied to business assets, not personal holdings.

Embezzlement or structured theft. If crypto was embezzled by a trusted employee or advisor, the loss might qualify as an ordinary business loss (not a casualty) if you can establish a fiduciary relationship and fraud. This is narrower than simple theft.

What Qualifies as “Theft”

The IRS defines theft to include:

• Hacking or unauthorized access to exchange accounts or self-custodied wallets
• Phishing scams that trick you into revealing private keys or seed phrases
• Compromised exchange or custodian failure where a platform closes and funds vanish (though this is often characterized as an insolvency claim rather than theft)
• Private key loss due to device theft (the device was stolen; the keys were on it)
• Smart contract vulnerabilities that drain funds (if the loss occurred due to a flaw you did not author, the legal characterization as “theft” is murkier)

What does not qualify as theft:

• Poor investment decisions that cause the crypto to decline in value
• Voluntary transfer to a scammer without coercion (though some arguments for fraud exist, the IRS treats this as a voluntary loss)
• Lost passwords or seed phrases without external theft (characterizable as negligence, not theft)
• Failed or insolvent exchanges where no specific theft is identified (a capital loss, if any, is on the taxpayer’s basis)

Documenting a Claim

To support a deduction, you must establish:

1. The date of loss. When did the theft or compromise occur? If unknown, the date you discovered it may be used.

2. Cost basis. How much did you pay for the crypto? Exchange purchase records, Form 1099-K if applicable, or detailed accounting of USD cost per coin.

3. Fair market value at loss date. What was the crypto worth in USD on the date of theft? Use a historical price database (CoinMarketCap, CoinGecko, exchange price history) as reference.

4. Evidence of the theft. Email from the exchange confirming the unauthorized transaction, blockchain evidence (transfer to an unknown address), police report, cyber insurance claim filing, etc.

5. Proof of ownership. Exchange statements or wallet addresses demonstrating you owned the crypto before the loss.

Without contemporaneous written documentation, the IRS is unlikely to allow the deduction on audit.

Capital Loss vs. Casualty Loss

A common mistake is conflating the two. If your cryptocurrency declined in value and you sold it, you have a capital loss—deductible against capital gains, with a $3,000 annual limit against ordinary income. If your crypto was stolen and you never sold it, that is a casualty loss (if deductible at all under current law). The two are separate and often have very different outcomes.

For most individuals today, a crypto theft results in neither deduction: it is not a capital loss (because you did not sell) and not a deductible casualty loss (because you are not in a disaster area). The loss remains personal and non-deductible.

Business vs. Personal Crypto and Section 165

The IRC Section 165 distinction is critical. Section 165(c) limits personal casualty losses to those in federally declared disasters. Section 165(a) allows businesses to deduct losses incurred in a trade or business with no disaster restriction. If you can document that the crypto loss was incurred in a for-profit business activity (not mere investing or hobby), Section 165(a) applies, and deductibility is not dependent on disaster status.

The IRS scrutinizes this classification closely. Simply calling yourself a “trader” does not convert personal crypto holdings into a business loss. The factors are frequency, expertise, profit motive, and business records—similar to the hobby-loss rules.

State and Local Tax Treatment

Some states (e.g., California) have their own casualty loss deductions that may operate independently of federal law. A loss non-deductible federally might be deductible on your state return, or vice versa. Consult a tax professional familiar with your state’s rules if you believe a loss qualifies.

Practical Outlook

For the vast majority of crypto holders who experienced a theft or loss outside a federally designated disaster:

• Federal deduction: Not available
• Capital loss carryforward: Not applicable (no sale occurred)
• Alternative remedies: Tax credits (rare), insurance reimbursement (if you had cyber coverage), and civil litigation (often impractical against anonymous hackers)

The harsh reality is that once crypto is stolen without disaster protection, the loss is typically personal and non-deductible. This underscores the importance of self-custody security (hardware wallets, multi-sig), reputable exchange insurance, and cyber liability coverage for business operations.

See also