Most people who lost crypto to a scam assume the loss is gone forever. That was true for many personal theft losses after the 2017 Tax Cuts and Jobs Act. But there is a specific, often-missed provision — IRC §165(c)(2) — that treats theft of money or property held for profit as a deductible loss in the year of discovery. If you sent money to what looked like a real investment and it turned out to be a fraud, you may have a real deduction. Here is what the law actually says, what the IRS expects, and the evidence you need to survive an audit.
The TCJA Wall — And the Narrow Door It Left Open
Before TCJA, personal casualty and theft losses were deductible under §165(c)(3) after a $100-per-event floor and a 10%-of-AGI floor. TCJA changed that for tax years 2018 through 2025: personal casualty and theft losses are deductible only if attributable to a federally declared disaster. For most crypto scams, that shuts the door.
But TCJA did not touch §165(c)(2) — losses in transactions entered into for profit, though not connected with a trade or business. That's the door that stays open. If you wired money or sent crypto to what you reasonably believed was a profit-making investment, and it turned out to be a fraud, the loss is §165(c)(2) and fully deductible as a theft loss in the year of discovery. No $100 floor. No 10%-of-AGI haircut. No TCJA suspension.
The IRS confirmed this framework is alive and well in CCA 202511015 and earlier guidance following the 2009 Madoff-style guidance. The character of the loss is ordinary, deductible above the standard deduction threshold if you itemize on Schedule A as a theft loss from a for-profit transaction.
What Qualifies as a §165(c)(2) Crypto Scam
Four elements must be present:
- A taking that qualifies as theft under the law of the jurisdiction where it occurred. This includes larceny, embezzlement, fraud, false pretenses, and criminal impersonation.
- A transaction entered into for profit. You expected to make money. This is the dispositive factor in most crypto cases.
- The loss is not compensated by insurance or other recovery.
- The loss is sustained and discovered in the taxable year claimed.
Common crypto fact patterns that do qualify:
- Pig-butchering / romance investment scams. Fake investment platforms that show profit on a dashboard, let you withdraw a small amount to build trust, then freeze you out after a large deposit. Clear profit motive.
- Rug pulls where the developers intentionally abandoned or drained the protocol. Documented intent to defraud.
- Exchange frauds. Operators who took customer funds and fled. Think Thodex, certain offshore derivatives platforms, and the criminal portions of collapsed platforms.
- Fake ICOs and Ponzi tokens. Where the issuer raised capital with no intent to build the represented project.
Fact patterns that typically do not qualify:
- A real company that failed legitimately. Bankruptcy alone is not theft. That's a capital loss under §165(f), not a theft loss — which is worse, because capital losses are bounded by §1211.
- A bad investment decision. Losing money on a legit asset that tanked is not theft.
- Sending crypto to the wrong address. That's negligence, not theft, unless someone affirmatively tricked you.
- Personal crypto holdings stolen from a wallet hack not connected to a profit transaction. This is the harder case — arguably §165(c)(3) personal theft (suspended through 2025 absent federal disaster), arguably §165(c)(2) if the holding was for profit. The IRS tends to disallow §165(c)(2) for casual personal holdings. We document profit intent aggressively.
Rev. Proc. 2009-20: The Madoff Safe Harbor
Rev. Proc. 2009-20 was the IRS's response to the Madoff Ponzi. It provides an optional safe harbor for theft losses from "specified fraudulent arrangements" — including investment arrangements where:
- The lead figure was charged under federal or state law with an offense meeting the criteria, or the perpetrator died before being charged and other conditions are met.
- The taxpayer relied on the arrangement and treated the gains as taxable income in prior years.
- The taxpayer makes the §165(c)(2) election on the return for the discovery year.
When the safe harbor applies, the loss amount equals:
- 95% of qualified investment minus actual recovery minus potential insurance/SIPC recovery, if no third-party lawsuit is pursued.
- 75% of qualified investment minus actual recovery minus potential insurance/SIPC recovery, if the taxpayer intends to pursue third-party recovery.
The safe harbor removes the year-of-discovery controversy and the requirement to prove "no reasonable prospect of recovery" at deduction time. For clients who were defrauded through a criminally charged operator, the safe harbor is usually the cleanest path. For clients in pig-butchering situations where the foreign operator is unknown and uncharged, the safe harbor generally won't apply — we claim under the general §165(c)(2) framework and build the evidence package the hard way.
The "Reasonable Prospect of Recovery" Problem
Under Treas. Reg. §1.165-1(d)(3), a theft loss is not sustained for tax purposes until there is no reasonable prospect of recovery. You cannot take the deduction while there is still a realistic chance to get the money back. "Reasonable prospect" is a fact question — a class action in motion, an insurance claim in process, a bankruptcy estate with significant assets all cut against current-year deduction.
For crypto scams where the crook is in Cambodia and the funds are gone through a mixer to a no-KYC exchange, the reasonable prospect of recovery evaporates fast. A signed affidavit from you describing the facts, law-enforcement reports, and ideally an FBI IC3 complaint all build the record.
Worked Example: The Pig-Butchering Scam
Client sent $180,000 in USDC to a "trading platform" over three months in late 2024, recommended by someone on WhatsApp. The platform dashboard showed $340,000 in "profits." She tried to withdraw in January 2025 and was told to pay a $38,000 "tax fee" first. She paid it. Then they went dark. Client filed an IC3 report on February 3, 2025.
On the 2025 return, we claim a §165(c)(2) theft loss of $218,000 (the $180,000 principal plus the $38,000 withdrawal fee, all sent with clear profit motive). We document the WhatsApp thread, the USDC transaction hashes, the platform URL and screenshots, the IC3 complaint number, and the FBI liaison's initial contact. Because there is no identified perpetrator and no realistic recovery path, the loss is sustained in 2025.
If the client is in a 32% bracket, the deduction saves $218,000 × 32% = roughly $69,760 in federal tax. Minus state tax savings on top. That's real money back — but it only happens if you claim it and document it.
Documentation You Must Build
- Transaction records. Block explorer links for every on-chain transfer. Exchange withdrawal confirmations. Bank wire confirmations.
- Communications with the perpetrator. WhatsApp, Telegram, Discord, email chains. Archive everything.
- Platform evidence. Screenshots of the dashboard, the "profits," the user agreement, the website before it disappears.
- Law-enforcement reports. FBI Internet Crime Complaint Center (IC3). State attorney general. Local police. File and keep the complaint number.
- Insurance and recovery inquiry. Even if you know there's no coverage, check and document the denial.
- Evidence of profit motive. Texts, emails, or anything else showing what you expected to earn. A loss from a "friend" you wired money to casually is a harder claim than one where the fraudster sold you on 15% monthly returns.
- Good-faith belief. Testimony that you believed this was a real investment. Prior similar transactions. Research you did before investing.
Reporting Mechanics
§165(c)(2) losses report on Form 4684, Section B (for losses from income-producing property held as an investment rather than business property). The net loss carries to Schedule A as an itemized deduction — not a capital loss. This matters because:
- The deduction is not bounded by the $3,000-per-year capital-loss limit under §1211.
- You must itemize to claim it — the standard deduction won't let you capture it.
- Under §165(h)(5)(B) the 10% AGI floor that applies to some personal casualty losses does not apply to §165(c)(2) profit-motive theft.
Net Operating Loss and Amended Returns
If the §165(c)(2) deduction drives taxable income below zero, you have a net operating loss under §172. Post-TCJA, NOLs arising in 2021 and later carry forward indefinitely and can offset up to 80% of taxable income in future years. They do not carry back except in narrow circumstances.
If you discovered the fraud late and missed the year-of-loss window, you may be able to amend the correct year on Form 1040-X if within the §6511 three-year limit. For theft losses, §6511(d)(1) gives you a seven-year window to claim the deduction — longer than most refund claims.
Related Reading
For the narrower theft-loss analysis where the taxpayer is the holder rather than the investor, see crypto theft loss tax deduction. If the scam uncovered unpaid tax on earlier gains, Crypto Offer in Compromise. For the loss-harvest alternative when the asset is still alive but worthless, crypto tax loss harvesting.
Crypto scam loss? Don't accept that the money is gone twice.
I've seen six-figure scam losses turned into five-figure tax refunds. Not always — the law has real limits — but often enough that it's worth a phone call before you give up. Call (813) 229-7100 for a confidential consultation, or book at https://getirshelp.com/contact. We'll tell you straight whether the facts support a §165(c)(2) claim and what the deduction is worth.