Crypto Scam Theft Loss Tax Deduction: The Profit Motive Test.

A retired engineer moves $180,000 into what looks like a professional crypto trading platform. The dashboard shows steady gains, so he takes a $120,000 distribution from his IRA and adds that too. When he tries to withdraw, the platform tells him a $30,000 release tax has to be paid first. He pays it. Then the site goes dark. The question that reaches me in April is whether any of that $330,000 comes off his return. A crypto scam theft loss tax deduction is still available in 2026, but it survives on one fact, and it is not that the money was stolen. It is why he sent it.

The IRS spelled this out in CCA 202511015, released March 14, 2025, which ran five 2024 fact patterns past section 165. Taxpayer 1 was told by a fake fraud desk to move his accounts somewhere safe, Taxpayer 2 was worked through a pig butchering crypto scheme, Taxpayer 3 handed over login credentials in a phishing email. All three got the deduction. Taxpayer 4 sent money to someone he had met online, and Taxpayer 5 paid a ransom for a relative who was never taken. Neither got anything. The theft was equally real in all five. What differed was why the money moved. The first three transferred funds intending to invest them, which lands the loss in §165(c)(2). The last two did not, so their loss is a personal casualty loss.

That distinction matters more in 2026 than it did last year, because plenty of advice written in 2025 said the personal rule was about to sunset. It did not. Section 165(h)(5) allows a personal casualty loss only to the extent it is attributable to a federally declared disaster, and the One Big Beautiful Bill Act, P.L. 119-21, made that limit permanent and, for tax years beginning after December 31, 2025, widened it to state declared disasters. A wire to a scammer is not a hurricane. If the transfer was not profit-motivated, there is no deduction, and there is no year in which one comes back.

Start with theft, which federal tax law does not define. Since Edwards v. Bromberg, 232 F.2d 107 (5th Cir. 1956), whether a loss is theft depends on the law of the jurisdiction where it happened, and the term covers theft by swindling, false pretenses, and any other form of guile. The real burden is proving criminal intent from the start rather than a deal that went bad. Under New York Penal Law §155.05(2)(d), for instance, intent not to perform cannot be inferred from a broken promise alone. Most victims never get a criminal case to lean on, so the file has to carry it: the platform's own messages, the wallet trail, the IC3 complaint, the bank's fraud finding.

Then the timing. Section 165(e) puts a theft loss in the year the taxpayer discovers it, and Treas. Reg. §1.165-8(a)(2) says the same. But Treas. Reg. §1.165-1(d)(2)(i) holds the loss open while a claim for reimbursement carries a reasonable prospect of recovery. A receiver appointed over the exchange, a pending clawback, a bank that has not ruled on your fraud claim: to the extent recovery is realistic, that slice waits for the year it can be ascertained with reasonable certainty. Chief Counsel treated all five 2024 losses as having little to no prospect of recovery, which is usually the honest answer once the money is on-chain and offshore.

Treas. Reg. §1.165-8(c) measures a theft loss the way §1.165-7(b)(1) measures a casualty loss, treating fair market value immediately after the theft as zero, which caps the deduction at adjusted basis. Cash is easy, because basis is the dollars sent, including the fake taxes, penalties, security deposits, and release fees the scammer induced you to pay. Appreciated crypto is not. Bitcoin bought for $40,000 and displayed as $400,000 on the scammer's screen is a $40,000 deduction, and the $360,000 you never actually had is nothing. Unpaid gains count in one place only, a genuine Ponzi arrangement, where Rev. Rul. 2009-9 adds fictitious income you previously reported and left invested to your basis.

Retirement money is the cruelest part. A distribution the scammer talked you into taking is still a distribution. It goes in gross income, and under 59½ the §72(t) 10% penalty rides along, no matter that the money is gone. There is no rollover fix, because the funds never reached an eligible account. The consolation in the CCA is that the tax you owe on the distribution establishes basis in the stolen funds, so the full withdrawal sits inside the theft loss.

Report the loss in Section B of Form 4684 as a theft of income-producing property and carry line 32 to Schedule A line 16. It is an itemized deduction, so it does nothing if your standard deduction is larger, and it survives §67(g) only because §67(b)(3) excludes casualty and theft losses under §165(c)(2) from the miscellaneous itemized deduction category. If the loss exceeds your income, §172(d)(4)(C) treats it as attributable to a trade or business, so it feeds a net operating loss that carries forward indefinitely, capped in each later year at 80% of taxable income under §172(a)(2).

Two more things worth knowing. Amending an earlier year for a missed theft loss runs on the ordinary three-year clock of §6511(a); the seven-year rule in §6511(d)(1) covers worthless securities and bad debts, not this. And the Ponzi safe harbor in Rev. Proc. 2009-20, which lets a qualified investor deduct 95% of the investment, or 75% when third-party recovery is being pursued, requires that the lead figure be criminally charged. Nobody indicts an offshore pig butchering operation, so most victims are back to proving the elements themselves on Section B.

The payoff for all that work is character. A theft loss is ordinary, not capital, which makes it one of the few investment losses that escapes the $3,000 annual capital loss limit, alongside section 1244 stock. It is also a different animal from selling a scammed token at a loss, which is a capital transaction where the wash sale rule still does not reach crypto.