Cryptocurrency Transaction: What the Law Sees When You Send or Receive

The most commonly misunderstood aspect of cryptocurrency taxation is that trading one cryptocurrency for another is a taxable event, not a tax-deferred exchange.

A taxpayer who trades Bitcoin for Ethereum has disposed of Bitcoin at its current fair market value and acquired Ethereum at that value as the new basis. If the Bitcoin was held at a gain, the gain is recognized at the time of the trade, not when the Ethereum is eventually sold. This means that a series of profitable trades within a single tax year can generate substantial taxable income even if the portfolio's overall value declined by year-end, because each individual gain was realized when the trade was executed. The wash sale rule currently applies to stock and securities, so many non-security digital assets are not subject to loss deferral when reacquired within 30 days. The analysis can change, however, if a token is treated as a security or if Congress extends wash sale rules to digital assets, and taxpayers holding tokens with uncertain classification should monitor their status.

DeFi transactions including providing liquidity to automated market makers, receiving governance tokens, and participating in yield farming generate income and gain recognition events at multiple points that most participants do not separately track. An NFT minted by a creator and sold constitutes ordinary income equal to the sale proceeds. An NFT purchased as an investment and later sold generates capital gain or loss. NFT resales held long-term may be subject to the 28 percent collectibles rate depending on the NFT's classification. Each of these transaction types requires basis tracking, income documentation, and correct characterization before any annual return is prepared.

The permanent, public nature of the blockchain creates an investigative record that law enforcement, regulators, and civil litigants can analyze using blockchain analytics tools to trace the movement of funds across addresses and identify patterns consistent with illicit activity.

Know-your-customer obligations require regulated entities including exchanges, custodians, and certain wallet providers to verify the identity of their customers, collect identification documentation, and screen customers against sanctions lists maintained by OFAC. A U.S. .erson who sends cryptocurrency to a wallet address belonging to a sanctioned individual, entity, or country may violate OFAC regulations even if the sender did not know the address was sanctioned. OFAC has published guidance that U.S. .ersons using cryptocurrency must screen counterparties against the SDN List and other sanctions lists just as they would for dollar-denominated wire transfers, and OFAC has imposed civil penalties on cryptocurrency exchanges that processed transactions with sanctioned parties without adequate screening.

Blockchain analytics firms including Chainalysis and Elliptic provide transaction tracing services to the IRS, DOJ, and SEC that allow investigators to follow cryptocurrency through multiple wallets and identify the exchanges where funds were converted to fiat. A wallet holder who believed their transactions were anonymous should understand that pseudonymity does not prevent identification once an on-ramp or off-ramp to a regulated exchange is identified. Cryptocurrency fraud and digital asset compliance cases consistently demonstrate that blockchain analytics makes the pseudonymous nature of wallet addresses far less protective than most users assume.

Smart contracts are self-executing code deployed on a blockchain that automatically perform specified actions when predetermined conditions are met. Whether a smart contract constitutes a legally enforceable contract depends on whether the interaction satisfies offer, acceptance, and consideration, and whether the automated execution satisfies any writing requirements that apply to the specific type of agreement. Courts have increasingly held that digital agreements including smart contracts can satisfy the Statute of Frauds when the parties' conduct demonstrates mutual assent to the terms the code executes. The difficulty arises when the smart contract executes in an unintended way, when a bug produces an outcome neither party intended, or when the dispute requires a remedy such as rescission or damages that the code cannot self-execute. In states that have adopted UCC Article 12, cryptocurrency and similar digital assets may be analyzed as controllable electronic records when the statutory requirements are met. Control of the asset is central to that analysis, but ownership disputes still depend on the governing state law, the custody arrangement, the private-key facts, and any competing contractual claims. Blockchain dispute and fintech litigation arising from smart contract failures require evaluating both what the code did and what the parties agreed to.

Three of the most common cryptocurrency transaction disputes have no parallel in conventional banking: permanent loss of access due to lost private keys, theft through private key compromise, and irreversible mistaken transfers to the wrong address.

Lost private key cases present a legal problem distinct from a forgotten banking password. A bank can verify a customer's identity and restore access. A non-custodial wallet has no institution behind it, and the cryptocurrency secured by a lost key is permanently inaccessible without the key regardless of any legal proceeding or court order. The legal question is usually whether a custodian, exchange, or third party was responsible for key management under a service agreement and whether their failure constitutes a breach. Private key theft, including SIM-swapping attacks, phishing, and exchange hacks, generates liability claims against the exchange or telecommunications provider whose security failures enabled the theft.

Mistaken sends to a wrong address are irreversible on the blockchain, but if the recipient is identifiable, a claim for unjust enrichment requires the recipient to return the mistakenly received cryptocurrency. The same principles that require return of mistakenly paid funds apply, subject to the practical challenge of identifying and locating the recipient. Blockchain lawsuit and cryptocurrency recovery practice requires acting quickly when a mistaken send is discovered, because funds moved through additional wallets become progressively harder to trace.

Yes. The IRS treats cryptocurrency as property, and trading one cryptocurrency for another is a taxable disposal of the first asset. When you trade Bitcoin for Ethereum, you have realized gain or loss on the Bitcoin equal to the difference between its fair market value at the time of the trade and your basis. The gain is reportable in the year of the trade, not when you later sell the Ethereum. Many traders receive unexpected tax bills for years in which their portfolio's overall value declined, because individual profitable trades earlier in the year created reportable gain that was not offset by trades that had not yet been executed.

Moving cryptocurrency between wallets you own and control is generally not a taxable event because no change of ownership occurs. The IRS indicates that taxpayers who merely transfer virtual currency from one wallet they own to another may answer "No" to the digital asset question on the return if they had no other digital asset transactions. The transfer itself does not create gain or loss. Two caveats apply: if you pay a transaction fee in cryptocurrency to execute the transfer, that fee payment is itself a disposal of cryptocurrency that may create a taxable event; and you should preserve records of the transfer, including the date and the wallet addresses, to document that no change of ownership occurred. Exchange and wallet records showing you controlled both addresses are the most reliable evidence.

A smart contract can satisfy the legal requirements for an enforceable contract if the interaction demonstrates offer, acceptance, and consideration, and if the parties' conduct shows mutual assent to the terms the code executes. The absence of a lawyer does not make the contract unenforceable. The problem is not whether smart contracts can be binding, but what happens when they execute in an unintended way, when a bug produces an outcome no one wanted, or when you need a remedy that the code cannot deliver. Rescission, damages, and specific performance all require a court, and a dispute about what the parties actually agreed to when they interacted with a DeFi protocol requires traditional contract law analysis applied to automated code.

The IRS receives 1099 forms from U.S.-based exchanges for accounts that meet reporting thresholds, and starting with 2025 transactions, many digital asset brokers are required to report gross proceeds on Form 1099-DA. Beyond broker reporting, the IRS has contracted with blockchain analytics firms to trace transactions across wallets and identify patterns suggesting unreported taxable activity. A wallet address that appears pseudonymous becomes identifiable once the holder uses a regulated exchange to convert cryptocurrency to cash, because the exchange's KYC records connect the real-world identity to the address. The IRS also issues John Doe summonses to exchanges requiring disclosure of account holders who meet specified transaction profiles.

Purchasing an NFT typically gives you ownership of the token on the blockchain, which may represent a certificate of authenticity or a record of purchase, but it does not automatically transfer copyright in the underlying artwork. The copyright remains with the creator unless there is an explicit written agreement transferring it, as required by the Copyright Act. Most NFT purchases do not include any such transfer. What you own depends entirely on what the specific NFT project's terms provide, which vary enormously and are often not clearly disclosed. Some projects grant limited commercial use rights; most grant nothing beyond the right to display the image personally. The governing terms of that specific project must be reviewed before any commercial use is made.

Recovery depends on how quickly the theft is discovered, whether the funds can be traced before they move through additional wallets or exchanges, and whether the receiving exchange has KYC records identifying the scammer. Blockchain analytics can often trace funds to a specific exchange account even after multiple hops. A civil TRO or injunction directing a domestic exchange to freeze an identified account can be obtained when tracing evidence is sufficient, and law enforcement coordination can compel some foreign exchanges to cooperate. Privacy coins and mixing services used after the theft substantially reduce recovery probability. Organized fraud schemes involving identifiable exchange accounts and amounts large enough to justify litigation costs have produced successful civil recoveries, but small-dollar theft against anonymous actors rarely results in recovery.

Yes. Cryptocurrency received as compensation for services is ordinary income equal to the fair market value of the cryptocurrency at the time you receive it, regardless of whether you receive a 1099. This applies whether you are paid in Bitcoin, a stablecoin, or any other digital asset. The fair market value at receipt becomes your basis in the cryptocurrency, so if you later sell it at a higher value you owe capital gains tax on the appreciation, and if you sell it at a lower value you have a capital loss. Self-employed individuals receiving cryptocurrency are also subject to self-employment tax on the income, and estimated quarterly tax payments may be required if the amounts are significant.