Book Consultation

Gondaliya CPA

CRA Crypto Audit Guide · Canada · Licensed CPA

CRA Crypto Audits: What to Expect and How to Prepare

Why the CRA audits cryptocurrency, what triggers a review, what records it asks for, how far back it can go, the penalties involved, and how to correct past years before an audit begins. Written by a licensed Canadian CPA who represents crypto clients in CRA audits.

In a CRA crypto audit, expect the CRA to request your full transaction history, exchange statements and wallet addresses, then reconcile them against data it already holds from exchanges and blockchain analysis. It can generally reassess the last three years, and further where it suspects neglect or misrepresentation. Penalties, including gross negligence penalties of up to 50% of understated tax, plus daily compounding interest, can apply. A complete, reconciled record is your best protection, and correcting past years before an audit is far better than waiting.

Why the CRA Audits Crypto

The CRA has made cryptocurrency a compliance priority because it believes many holders under-report gains and income. It runs dedicated crypto audit projects, obtains records directly from Canadian exchanges, participates in international data-sharing, and uses blockchain analysis that can link wallet addresses to individuals. If what you reported does not match the activity it can see, you may be selected. This sits within the wider crypto rules, so if you want the full reporting picture, please read our cryptocurrency tax reporting and planning guide alongside this page.

What the CRA Asks For in a Crypto Audit

What the CRA RequestsWhy
Exchange account statementsTo match your reported activity against exchange records it holds
Wallet addressesTo trace on-chain activity and link it to you
Every buy, sell, swap and transfer in Canadian dollarsTo calculate gains, losses and income
Staking, mining, DeFi and NFT income recordsTo capture income the CRA treats as fully taxable
Cost base support for gains and lossesTo verify the numbers you reported
Source of funds used to buy cryptoTo confirm where the money came from

The audit is essentially a reconciliation of what you filed against what the CRA can see. A complete, reconciled record answers these requests directly, which is what keeps the process manageable.

How Far Back and What It Can Cost

The CRA can generally reassess the three most recent tax years, and further back where it believes there was neglect, carelessness or misrepresentation, which effectively removes the time limit. The financial consequences of an audit that finds unreported income can be significant.

ConsequenceWhat It Means
Reassessed taxTax on the unreported gains or income
Daily compounding interestInterest accrues from the original due date
Gross negligence penaltyUp to 50% of the understated tax where deliberate or careless
ProsecutionReserved for serious, deliberate evasion

Correcting past years before an audit is almost always better. If the CRA has not yet contacted you, the Voluntary Disclosures Program can reduce penalties, provide partial interest relief and protect against prosecution. Once the CRA reaches out, that opportunity is lost. If you are already facing an audit, our CRA crypto audit support service is the next step. Know Your Exact Fee →

How to Handle a CRA Crypto Audit

What you provide and say shapes the outcome, so the order of steps matters. These are the steps we follow when a client is contacted:

  1. Do not send partial figures. Note the deadline but do not respond with guessed or incomplete numbers, because early answers shape the whole audit.
  2. Reconstruct the full history. From your wallet addresses and exchange statements, we rebuild and value every transaction in Canadian dollars.
  3. Classify income versus capital. We document a defensible position for how each part of your activity is classified, because it drives the tax.
  4. Respond and represent. We answer each CRA request completely and manage the correspondence so nothing is conceded unnecessarily.

The most costly mistake is responding alone with incomplete records. Inconsistent or partial answers can expand the audit and increase penalties, and once figures are submitted they are hard to walk back. Please do not send anything to the CRA before your records are complete and reviewed. A reconciled record and a considered response protect you.

A Simple Worked Example

Consider a holder who never reported two years of crypto trading the CRA later queried:

StepWhat Happens
CRA identifies $40,000 of unreported gains from exchange dataIt proposes to reassess the tax on the full amount
Records reconstructed; $9,000 of prior losses and correct cost base foundThe taxable gain is reduced, lowering the reassessed tax
ResultThe reassessment is corrected to the accurate figure, not the CRA's initial estimate

The CRA's opening position is based on what it can see, which is often incomplete. A reconstructed record with the correct cost base and any losses frequently reduces the assessment to the accurate number.

Case Study: Crypto Trader Under Audit, Ontario

An Ontario crypto trader received a CRA letter querying several years of activity after the CRA obtained his exchange records. He had reported little, assuming the gains were not visible. We told him not to respond with partial figures, then reconstructed his full history from his wallet addresses and exchange statements, valued every transaction in Canadian dollars, applied his correct cost base and prior losses, and documented the capital classification for his investment activity. We managed the correspondence throughout, and the final reassessment reflected the accurate figures rather than the CRA's initial estimate. The figures here are illustrative of the outcomes we see, not a specific client file.

Full history reconstructed. Losses and cost base applied. Correspondence managed throughout.

Contacted by the CRA About Crypto, or Behind on Reporting?

We reconstruct your history, correct past years, and represent you through the audit. From $400. AFFORDABLE flat fees. All fees include HST.

Book Free Consultation

Frequently Asked Questions: CRA Crypto Audits

Why is the CRA auditing cryptocurrency in Canada?
The CRA has made crypto a compliance priority because it believes many holders under-report gains and income. It runs dedicated crypto audit projects, obtains data from Canadian exchanges, and uses blockchain analysis to link wallets to individuals. If your reported income does not match the activity it can see, you may be selected. Please keep complete records so your position is defensible if you are reviewed.
What triggers a CRA crypto audit?
Common triggers include a mismatch between exchange data the CRA holds and what you reported, large or frequent transactions, moving significant funds to or from exchanges, claiming losses, and simply being selected in a crypto compliance sweep. Sometimes there is no specific trigger at all. Because the CRA obtains exchange records directly, unreported activity is the most common reason people are contacted.
How does the CRA find out about my crypto?
The CRA obtains information from Canadian cryptocurrency exchanges, participates in international data-sharing, and uses blockchain analysis that can connect wallet addresses to individuals. On-chain activity is permanent and public. It has also required some exchanges to hand over customer records. Assuming your crypto is invisible to the CRA is risky, so please report accurately rather than relying on it not being seen.
What does a CRA crypto audit involve?
The CRA typically requests your complete transaction history, exchange statements, wallet addresses, records of purchases and sales, and support for any gains, losses or income reported. It may send a detailed questionnaire. It then reconciles what you filed against what it can see on-chain and from exchanges. Having a complete, reconciled record ready is what makes the process manageable rather than overwhelming.
What records does the CRA ask for in a crypto audit?
Expect requests for exchange account statements, wallet addresses, the date and Canadian dollar value of every buy, sell, swap and transfer, records of staking, mining or DeFi income, and the cost base support behind your gains and losses. The CRA may also ask about the source of funds used to buy crypto. We reconstruct a complete record from your wallets so these requests can be answered.
How far back can the CRA audit my crypto?
The CRA can generally reassess the three most recent tax years, and further back where it believes there was neglect, carelessness or misrepresentation, which effectively removes the time limit. Crypto cases with significant unreported income can therefore reach back many years. If you have older unreported activity, please address it before an audit, because coming forward voluntarily is treated more favourably.
What happens if I did not report my crypto gains?
If the CRA finds unreported crypto gains or income, it can reassess you for the tax owing, plus interest that compounds daily, and penalties. In serious cases gross negligence penalties of up to 50% of the understated tax can apply, and deliberate evasion can lead to prosecution. Correcting the record before the CRA contacts you is almost always better than waiting to be caught.
Can I go to jail for not reporting crypto in Canada?
Criminal prosecution is reserved for serious, deliberate tax evasion rather than honest mistakes, but it is possible in extreme cases. Most crypto non-compliance is resolved through reassessment, interest and penalties rather than jail. The key is to correct errors before they become deliberate concealment. If you are worried about past non-reporting, please speak with us about coming forward through the proper channel.
What are the penalties in a CRA crypto audit?
Penalties can include a late-filing penalty, a repeated-failure penalty, and a gross negligence penalty of up to 50% of the understated tax where the CRA considers the omission deliberate or careless. Interest compounds daily on the unpaid tax from the original due date. The penalties often exceed the original tax, which is why accurate reporting and early correction matter so much.
What is the Voluntary Disclosures Program for crypto?
The Voluntary Disclosures Program lets you come forward to correct unreported crypto income or gains before the CRA contacts you, and if accepted it can provide relief from penalties and partial interest relief, and protection from prosecution. It must be truly voluntary, so it is not available once the CRA has started to look at you. If you have unreported crypto, please act before an audit begins.
Should I use the Voluntary Disclosures Program?
If you have unreported crypto income or gains and the CRA has not yet contacted you, the Voluntary Disclosures Program is often the best route, because it can reduce penalties and protect against prosecution. Whether you qualify and whether it is the right choice depends on your facts. Please let us review your situation and, where appropriate, prepare and file the disclosure correctly on your behalf.
How do I prepare for a CRA crypto audit?
Please gather your exchange statements and wallet addresses, then have a complete transaction history reconstructed and valued in Canadian dollars, with gains, losses and income properly classified. Do not respond to the CRA with partial or guessed figures. A reconciled record and a considered response protect you. We prepare the full record and manage the correspondence so nothing is conceded unnecessarily.
Should I respond to the CRA myself in a crypto audit?
You can, but crypto audits are technical and what you say and provide shapes the outcome. Incomplete or inconsistent answers can expand the audit or increase penalties. Having a CPA who understands crypto handle the record and the correspondence usually leads to a better result. Please do not send anything to the CRA before your records are complete and reviewed.
Can Gondaliya CPA represent me in a CRA crypto audit?
Yes. We reconstruct your full crypto and DeFi history, reconcile it against what the CRA holds, respond to its requests, and represent you through the audit, fully virtually across Canada. Our fee is an AFFORDABLE flat amount including HST, quoted upfront, with payment by Interac e-Transfer to info@gondaliyacpa.ca, auto-deposit enabled, security question Not Applicable. Please see our crypto audit support service for how we handle representation.
How long does a CRA crypto audit take?
It varies widely, from a few months to well over a year, depending on the volume of transactions, the completeness of your records, and how quickly requests are answered. Disorganized records lengthen the process significantly. Having a reconstructed, reconciled history ready shortens it and reduces friction. We keep the audit moving by responding promptly and completely to each CRA request.
What if I lost access to my crypto records or exchange closed?
This is common and not fatal. From your public wallet addresses and available marketplace data, a complete transaction history can usually be reconstructed even where an exchange has closed or records are lost. On-chain activity is permanent, which cuts both ways. Please provide whatever you have and your wallet addresses, and we will rebuild the record the CRA needs from the blockchain.
Does the CRA treat crypto as income or capital gains?
Both, depending on the activity. Occasional investment activity is usually capital gains, of which two-thirds is taxable in 2026, while frequent, business-like trading, mining and much DeFi and NFT activity is income, fully taxable. In an audit the CRA scrutinizes this classification closely, because business income is taxed more heavily. We document a defensible position for how your activity is classified.
What is the capital gains inclusion rate the CRA applies in 2026?
For 2026 the capital gains inclusion rate is 66.67%, so two-thirds of a capital gain is taxable and one-third is not, where the activity is treated as capital rather than business income. In an audit the CRA will test whether your gains are truly capital, because reclassifying them as business income raises the tax. We confirm and support the correct classification for each disposition.
Will the CRA audit my DeFi and NFT activity too?
Yes. DeFi and NFT transactions are within the same crypto compliance focus, and because they are complex and often unreported, they draw scrutiny. Staking, lending, yield farming, liquidity pools, NFT sales and royalties can all be examined. These are the hardest areas to reconstruct after the fact. We build a complete record across your DeFi and NFT activity so an audit does not find gaps.
What if the CRA reassesses me for more than I can pay?
If a reassessment exceeds what you can pay at once, the CRA offers payment arrangements, and interest relief may be available in limited circumstances. It is important to respond rather than ignore the assessment, because collection action can follow. We help you respond to the reassessment, dispute any incorrect figures, and arrange a manageable path forward with the CRA where a balance is genuinely owing.
Can I object to a CRA crypto reassessment?
Yes. If you disagree with a reassessment you can file a Notice of Objection, generally within 90 days, setting out why the CRA's figures are wrong. This is where a complete, reconciled record is decisive, because objections are won on evidence. We prepare and file the objection with the supporting records, and represent you through the appeals process if it is needed.
How does the CRA value my crypto transactions in an audit?
The CRA expects each transaction valued at its fair market value in Canadian dollars at the time it occurred, using a reasonable and consistent source. In an audit it may challenge inconsistent or missing valuations. Because crypto activity spans many tokens and timestamps, proper valuation methodology matters. We value every transaction consistently so the CRA cannot dispute your numbers on valuation grounds.
What if I only bought and held crypto, no sales?
Simply buying and holding crypto is not a taxable event, so if you genuinely never disposed of anything there may be nothing to report. However, swaps, spending crypto, and earning rewards all count as dispositions or income even without cashing out to dollars. In an audit the CRA checks for these. We confirm whether your activity truly created taxable events or not.
Should I amend past returns before the CRA contacts me?
If you have unreported crypto and the CRA has not yet contacted you, correcting past returns, usually through the Voluntary Disclosures Program, is generally far better than waiting, because it can reduce penalties and protect against prosecution. Once the CRA reaches out, that opportunity is lost. Please let us review your past years and correct them properly before an audit begins.
Does moving crypto between my own wallets trigger an audit issue?
Transferring your own crypto between wallets you control is not a disposition and is not taxable, but in an audit these transfers must be clearly identified so they are not mistaken for sales. Poor records can make internal moves look like unreported disposals. We map your wallet transfers so the CRA sees them correctly as non-taxable movements rather than hidden sales.
What is the difference between a review and a full audit?
A review is a narrower request, often for support on specific figures, while a full audit is a comprehensive examination of your crypto activity and records. A review can escalate to an audit if the CRA is not satisfied. Both are best answered with complete, reconciled records. We handle either, providing exactly what is asked for in a way that resolves the matter efficiently.
Can the CRA get my data from foreign exchanges?
Increasingly, yes. Through international information-sharing agreements and cooperation between tax authorities, the CRA can obtain data from many foreign exchanges, and blockchain analysis does not stop at the border. Using an offshore exchange does not make activity invisible. Please report worldwide crypto activity, and we will make sure your foreign-exchange transactions are included and correctly reported.
How much does crypto audit representation cost?
We work on an AFFORDABLE flat fee, quoted upfront before we begin, with all fees including HST and no hourly billing. The exact fee depends on the volume of transactions and the scope of the audit. Payment is by Interac e-Transfer to info@gondaliyacpa.ca with auto-deposit enabled and the security question set to Not Applicable. Please book a consultation for an exact quote.
What should I do first if the CRA contacts me about crypto?
Please do not send partial figures or explanations to the CRA before your records are complete, because early answers shape the audit. Note the deadline, gather your exchange statements and wallet addresses, and speak with a crypto-experienced CPA promptly. We will reconstruct your history, prepare a considered response, and manage the correspondence so the audit is handled correctly from the start.
How do I get started with CRA crypto audit help?
Please book a free consultation and share the CRA letter, your wallet addresses, and the exchanges you have used. We will assess the scope, reconstruct your history, and quote a fixed flat fee including HST. Whether you have been contacted already or want to correct past years before an audit, we will build a complete, CRA-ready record and represent you through it.

What Our Clients Say

1300+ five-star reviews from business owners across Ontario and Canada.

CRA Crypto Audit Support, From First Letter to Final Assessment. From $400.

We reconstruct your full crypto history, reconcile it against what the CRA holds, respond to its requests, and represent you through the audit. AFFORDABLE flat fees. All fees include HST.

Scroll to Top