Tax Rules · September 11, 2026 · 9 min read · By CryptoTaxCalc Team

Lost or Stolen Crypto Tax Deduction 2026: Can You Write It Off?

A DeFi exploit drained your wallet. A phishing link took your ETH. Your seed phrase is gone. The IRS has rules for each — and they're not the rules most people assume.

Image: Illustrative purposes. Tax rules cited from IRC Section 165, IRS CCA 202511015, and Taxpayer Advocate Service guidance.

You signed a malicious smart contract at 2 AM. By morning, the 3 ETH you'd been holding for two years was gone — moved to an address you don't control, probably already laundered through a mixer. The block explorer confirms it. The exchange support ticket is open. The police report is filed.

Now the question that actually matters at tax time: can you deduct this loss?

The honest answer is "it depends" — on three things. Whether the IRS calls it a theft or a worthlessness. Whether you held the crypto as an investment or for personal use. And whether the loss happened before or after the rule changes that took effect in 2026. Most people get at least one of those wrong, and the difference between right and wrong here is the difference between a full deduction and nothing.

1. Three loss types, three different tax treatments

The IRS doesn't treat all lost crypto the same way. There are three categories, and the category determines the deduction.

Market loss. Your crypto dropped 60% in value. This is an unrealized loss. Not deductible until you actually sell or exchange the asset — the price drop alone creates no tax event. This is the category most people conflate with "lost crypto," and it's the one that has no deduction path until you close the position. Our tax-loss harvesting guide covers what to do here.

Theft loss. Your crypto was stolen through a hack, scam, or fraud. This is a distinct event, and under the right conditions it can trigger a deductible theft loss. The IRS issued major guidance on this in 2025 that changed how crypto theft gets analyzed.

Worthlessness. The asset still exists on-chain but has zero value and zero recovery potential — a rug-pull token, an abandoned chain, a permanently inaccessible wallet. This may qualify as a worthlessness deduction, which is an ordinary loss, not a capital loss.

Which category your loss falls into determines which form you file, which deduction limits apply, and whether you can claim it at all. Let's take them one at a time.

2. Theft losses: the investment-vs-personal split

Here's the rule that matters most. Under IRC Section 165, there are two types of theft losses for individuals: investment theft losses under §165(c)(2) and personal theft losses under §165(c)(3). The split is the entire game.

Investment theft loss — crypto you held to profit, stolen through fraud — is deductible as an itemized deduction. It is not subject to the 10% AGI floor or the $100 per-event reduction that personal losses face. This is the deduction most crypto holders want, and most can plausibly qualify for it.

Personal theft loss — crypto you held for personal use, not for profit — faced a near-total suspension from 2018 through 2025 under the Tax Cuts and Jobs Act (TCJA). Only federally-declared-disaster losses were deductible. The One Big Beautiful Bill Act (OBBBA), enacted in 2025, made that restriction permanent but expanded it slightly: starting in 2026, personal losses may also qualify if attributable to a state-declared disaster. For a typical DeFi hack where no disaster declaration applies, the personal path remains closed.

The investment category is where most crypto holders live. If you bought ETH on an exchange with the intent to profit — and the IRS's own Chief Counsel has acknowledged that investing in financial products is generally a profit-seeking transaction — you likely qualify.

3. The 2025 IRS memo that changed everything for scam victims

In 2025, the IRS Office of Chief Counsel released CCA 202511015, a memorandum analyzing several common crypto fraud schemes. The memo's most important conclusion: victims of "pig butchering" scams — where people are lured into fake investment platforms promising high returns — generally qualify for the investment theft loss deduction under §165(c)(2).

This was a big deal. Before this memo, tax professionals were split on whether scam victims could deduct anything. The memo established that the profit motive test is satisfied when someone transfers funds expecting a return, even if the platform was fraudulent.

To claim a theft loss deduction, you need to establish three things:

• A theft occurred — the loss must result from an act that is illegal and considered theft under your state's law. Fraud, embezzlement, and larceny by false pretenses all qualify.
• No reasonable prospect of recovery — you must show that at the end of the tax year, you had no realistic chance of getting the funds back from the scammer, insurance, or any other source.
• Profit motive — your primary reason for entering the transaction was to generate profit. This is what separates a deductible investment loss from a non-deductible personal loss.

Documentation is critical. Keep the police report, the exchange support tickets, the blockchain transaction IDs, screenshots of the scam, and any correspondence with recovery services. The IRS will ask for evidence that the theft occurred and that recovery is improbable.

Common scam types and how each is treated

Not every crypto loss looks the same to the IRS. The type of scam matters for documentation and for proving the "theft" element. Here's how the most common crypto fraud schemes map to Section 165:

The key distinction: a theft requires an intentional, illegal taking by another person. Sending crypto to the wrong wallet address is a mistake, not a theft — no deduction. A rug pull where the developer abandons the project is closer to worthlessness than theft, because the dev didn't steal your tokens — they made them worthless. A phishing attack that tricks you into signing a transaction draining your wallet is theft by false pretenses under most state laws.

Smart contract exploits are the hardest category. When Wormhole was hacked for $320 million in 2022, the hacker stole the crypto by exploiting a vulnerability — that's theft. But the victims are the protocol's users, and proving the theft element for each individual user's loss requires connecting the user's specific tokens to the specific exploit. This is where a tax attorney's help becomes essential — the documentation burden is high.

A worked example: what the deduction looks like

Let's make this concrete. In March 2026, you fall for a phishing link that drains 3 ETH from your MetaMask wallet. You bought that ETH at $1,800 each (total basis $5,400). At the time of the theft, ETH was $2,800 — so the stolen crypto had a fair market value of $8,400.

Your theft loss is the lesser of your basis or the FMV at the time of theft. Since your basis ($5,400) is less than FMV ($8,400), your deductible loss is $5,400. You don't get to deduct the $3,000 of unrealized appreciation that was also stolen — only what you put in. This is a Section 165 rule that trips up people who assume they can deduct the full FMV.

You held the ETH as an investment (profit motive), so this goes on Form 4684, Section B. No 10% AGI floor, no $100 reduction. The $5,400 flows to Schedule A as an itemized deduction. If your total itemized deductions exceed the standard deduction ($15,000 single in 2026), the excess saves you tax at your marginal rate. At 24% marginal rate, the $5,400 deduction saves $1,296 in federal tax.

If you don't itemize (because the standard deduction is larger), the theft loss deduction generates no tax benefit. This is why some crypto theft victims are better off selling remaining losing positions to harvest capital losses — those offset ordinary income up to $3,000 without itemizing. Run your numbers through our free calculator to see which path gives you a bigger deduction this year.

4. Worthless tokens: the deduction that came back in 2026

Different scenario. You didn't get hacked. You bought a token that went to zero — a rug pull, an abandoned project, a chain that shut down. The tokens still sit in your wallet, but they're worth nothing and nobody will buy them.

For 2018 through 2025, this was nearly impossible to deduct. The TCJA disallowed miscellaneous itemized deductions, and the IRS's position (per the Taxpayer Advocate Service) was that a worthlessness loss on a digital asset held as an investment was a miscellaneous itemized deduction — meaning it was suspended.

Starting in 2026, the TCJA's suspension of miscellaneous itemized deductions expires. Worthlessness deductions return. A token that became completely worthless — zero market value, zero recovery potential — can finally generate an ordinary loss deduction, reported on Form 4797.

But "completely worthless" is a high bar. The IRS requires that the asset has zero value and no hope of recovery. A token trading at $0.0001 with no volume is nearly worthless — not completely worthless. You generally cannot claim the deduction until the token is provably dead: the contract is abandoned, the chain is shut down, or the token is irreversibly delisted everywhere.

Until that bar is met, your only option is to sell the token for whatever you can get (even pennies) on a DEX that still lists it, realize the capital loss, and deduct it under the normal capital loss rules. This is the cleaner path for most "dead" tokens — and it's what we recommend unless you're dealing with a six-figure position where every deduction dollar matters.

If you have other crypto losses from normal trading, run them through our free calculator to see how much you can deduct this year against income and how much carries forward. The $3,000 capital loss limit still applies to realized losses — worthlessness deductions escape that cap.

5. Lost private keys: the gray area

You lost your seed phrase. The crypto is still on the blockchain, but you cannot access it. Is that a theft? No — nothing was stolen. Is it worthless? The asset has value; you just can't reach it.

This is the grayest area in crypto tax, and the IRS has not issued specific guidance. The conservative view: you cannot claim a theft loss because there was no theft. You likely cannot claim a worthlessness deduction because the asset isn't worthless — it has real market value, it's just inaccessible to you.

The aggressive position some tax professionals take: if you can document that the keys are permanently lost — no backup exists, no recovery is possible, you've exhausted every avenue — you may have an argument for a worthlessness deduction. But expect IRS scrutiny. Document everything: when you last accessed the wallet, what recovery attempts you made, and why recovery is impossible.

Honestly, most people in this situation are better off waiting. If the IRS later issues guidance allowing lost-key deductions, you can amend. If you claim now and the IRS rejects it, you're in a worse position than if you'd waited.

6. Exchange bankruptcies and frozen accounts

The FTX collapse put this question on the map for thousands of crypto holders. Your assets are locked in a bankruptcy proceeding. Can you deduct the loss?

The IRS's answer (via the Taxpayer Advocate Service) is clear: not until there's a closed and completed transaction. If your account is frozen or tied up in bankruptcy, you have no recognizable loss yet — because you might still recover something.

Once the bankruptcy resolves, one of two things happens:

• You receive a settlement (any amount) — this is treated as a sale, and you calculate your capital loss on Form 8949 for the year you received the settlement.
• You receive nothing — the asset may be considered worthless, and the worthlessness rules (now deductible again in 2026) may apply.

Do not claim the loss in the year the exchange filed for bankruptcy. Claim it in the year the proceeding closes and you know the outcome. Filing too early is a common mistake that triggers audits and amended returns.

How to actually claim the deduction

Here's the reporting flow for each loss type:

Note the difference between theft/worthlessness (ordinary loss, no $3,000 cap) and a realized sale loss (capital loss, $3,000 cap). This is why classification matters — an ordinary loss can offset any income, including wages, with no annual limit. A capital loss can only offset capital gains plus $3,000 of other income per year.

If you're not sure which category your loss falls into, our guide on what happens if you don't report crypto covers the broader compliance picture — and why claiming a deduction you're not entitled to is just as risky as skipping one you are.

The takeaway

Not all lost crypto is deductible, and not all deductible losses are equal. The IRS splits the world into theft, worthlessness, and market loss — and the deduction path for each is different. Investment theft losses are the most accessible deduction for crypto holders, and the IRS's 2025 guidance on pig butchering scams opened that door wider than it's ever been. Worthlessness deductions return in 2026 after an eight-year suspension. Lost keys remain a gray area where caution beats aggression.

Two things to do before you file: gather every piece of evidence — police reports, blockchain IDs, exchange tickets, recovery correspondence — and sort your losses by category. Then talk to a tax professional who understands crypto. This is one area where the rules are genuinely complex, the stakes are high, and the IRS is paying attention. Our tax-loss harvesting calculator can help you see the deduction math for realized losses; for theft and worthlessness, you'll want a CPA.

Have you been hacked, scammed, or left holding worthless tokens? What's the most confusing part of trying to claim the loss? Share it — these situations are common enough that your question will help the next person staring at an empty wallet.