IRS John Doe Summons for Crypto: Coinbase, Kraken, Circle, SFOX — And What Happens to Your Data

A John Doe summons is how the IRS reaches inside an exchange and pulls out customer records for people whose names it doesn't yet know. It is one of the most powerful enforcement tools in the Internal Revenue Code and it has been aimed at crypto repeatedly since 2016. If you used Coinbase between 2013 and 2015, your records were turned over. Kraken users between 2016 and 2020. Circle between 2016 and 2020. SFOX between 2016 and 2021. If your activity fell inside any of those windows and you didn't report it correctly, the IRS has your data and has had it for years. Here's what happens when the summons gets served, what the IRS does with the data, and whether voluntary disclosure still makes sense versus waiting for a letter.

What a John Doe Summons Is

Under IRC §7602, the IRS can issue summonses to any person to produce books, papers, records, or other data relevant to a federal tax liability. A regular summons names a specific taxpayer. A John Doe summons under IRC §7609(f) is different — it targets an ascertainable class of unknown taxpayers. To serve one, the IRS must go to a federal district court and show three things:

1. The summons relates to the investigation of a particular person or ascertainable group of persons.
2. There is a reasonable basis for believing those persons may have failed to comply with any internal revenue law.
3. The information sought is not readily available from other sources.

When a district court approves the petition, the summons is served on the third-party record-keeper — Coinbase, Kraken, Circle, SFOX — and the exchange is obligated to turn over the requested records. The exchange can (and often does) fight the scope in court. These fights rarely kill the summons entirely but usually narrow it.

The Four Crypto Summonses That Matter

Coinbase (2016 petition, 2017 narrowing, 2018 production)

The IRS filed its first crypto John Doe summons against Coinbase in November 2016 in the Northern District of California. The initial petition sought records for roughly 500,000 Coinbase customers with any account activity between 2013 and 2015. Coinbase resisted. The court narrowed the summons in November 2017 to customers with at least $20,000 of transactions in any one of those years. Coinbase produced records for approximately 13,000 users in early 2018.

What the IRS received: name, tax ID, address, transaction records, account opening records. Those 13,000 users received either the IRS Letter 6173, Letter 6174, or Letter 6174-A in 2019 — the "education letters" that warned taxpayers the IRS had information about their crypto activity. Many of those letters were followed by audits or CP2000 notices through 2022–2024.

Kraken (2021 petition, 2023 narrowing, production following)

The IRS filed against Payward Ventures (Kraken's operating entity) in May 2021 in the Northern District of California. The initial scope was broad. Kraken fought. The court approved a narrowed version in June 2023 covering customers with at least $20,000 of transactions between 2016 and 2020. Kraken produced records after the 2023 order. Letter 6173/6174 letters followed to affected users.

Circle Internet Financial (2021 petition, 2024 production)

The IRS filed against Circle Internet Financial and its affiliates (which then operated Poloniex among other services) in the District of Massachusetts in April 2021. The petition covered users with at least $20,000 of transactions between 2016 and 2020. The court approved the summons, and data production followed on the usual exchange-resisted, then narrowed, then delivered pattern.

SFOX (2022 petition, 2022 approval)

The IRS filed against M.Y. Safra Bank (SFOX's banking partner) and SFOX directly in the Southern District of New York in August 2022. The summons targeted users with at least $20,000 of transactions between 2016 and 2021. Court approval came quickly — SFOX is smaller than Coinbase or Kraken and didn't mount the same resistance. Production happened on the standard timeline.

What Happens to the Data

Once the IRS receives a summons response, the records go to the Criminal Investigation Division (CI) and civil enforcement units. The workflow:

1. Data ingestion. The CSV or database dump gets normalized and merged with existing IRS data on the taxpayer — W-2s, 1099s, prior returns, third-party records.
2. Discrepancy analysis. Does the summons data show crypto activity for years where the taxpayer answered "No" on the digital asset question, or reported no crypto income? If yes, the file gets flagged.
3. Triage to civil or criminal. Most cases go to civil enforcement — education letter, then CP2000, then audit if needed. Cases with affirmative concealment, large dollar amounts, or structuring patterns can go to CI for criminal review under §7201 (tax evasion) or §7203 (failure to file).
4. Outreach. For civil, the IRS sends Letter 6173/6174/6174-A depending on the file. For criminal review, the file sits silently until CI decides whether to open a formal investigation — at which point the taxpayer may or may not learn about it before an indictment.

IRM 25.1.11: The Fraud Development Handbook

The Internal Revenue Manual Part 25 Chapter 1 Section 11 governs civil-to-criminal referrals. For crypto cases with unreported activity matching John Doe summons data, the IRM factors that push toward a fraud referral include: multi-year unreported income, affirmative concealment (using mixers, privacy coins, or foreign exchanges specifically to hide activity), large dollar amounts, and inconsistencies between the taxpayer's stated lifestyle and reported income.

If fraud is developed, the IRS can invoke the unlimited statute of limitations under §6501(c)(1) — no three-year or six-year clock — along with the 75% civil fraud penalty under §6663. That's on top of the tax and interest. A criminal referral adds potential prison exposure.

Voluntary Disclosure vs. Wait-and-See

If your activity was in a summons window and not correctly reported, you have two real paths:

Voluntary Disclosure Practice (VDP)

The IRS Voluntary Disclosure Practice, managed through the CI preclearance process, is available if you come forward before the IRS has started an investigation of your file. Benefits:

• Nearly eliminates criminal exposure if the disclosure is timely, truthful, and complete.
• Standard civil resolution — generally the most egregious six years of returns amended, 75% fraud penalty on one year (the highest-tax year), other years at lower penalty rates, full tax and interest paid.
• Predictable outcome. No raid, no indictment, no criminal record.

VDP is not free — the penalty structure is painful by design. But it is survivable, professional, and final.

Wait-and-See

Say nothing, file nothing, and see if the IRS knocks. For people with small amounts of unreported activity, minimal badges of fraud, and a plausible reasonable-cause story, this can work. Many taxpayers in the Coinbase 2018 production got Letter 6173 and had no further follow-up after amending returns with penalty relief. For large dollar amounts with affirmative concealment, wait-and-see is a terrible bet. The IRS has your data. It's running matching algorithms on it. It has years to act.

The rule of thumb I use after 32 years of this work: if the numbers are large (say $250,000+ of unreported gain), if there was affirmative concealment (mixers, false names, privacy coin conversions specifically to hide), or if the taxpayer has any prior compliance history the IRS would find unfavorable — voluntary disclosure is almost always the right call. If the numbers are small, the conduct looks like honest confusion, and the badges-of-fraud analysis is weak, a quiet amendment with reasonable cause penalty abatement may work.

Letters You Might Receive

• Letter 6173 — "We have information indicating that you may not have met your U.S. tax filing and reporting requirements..." Requires a response. Ignoring it escalates.
• Letter 6174 — informational, no response required. But read it as a warning shot.
• Letter 6174-A — informational, more specific to crypto. No response required but the IRS is telling you it knows.
• CP2000 — proposed assessment based on third-party data. Response required within 30 days.
• Letter 2205-A — initial contact for examination (audit).

What to Do If You Used a Summonsed Exchange

1. Determine whether your activity fell in the summons window. Coinbase 2013–2015 with $20k+, Kraken 2016–2020 with $20k+, Circle 2016–2020 with $20k+, SFOX 2016–2021 with $20k+.
2. Pull your full transaction history. From the exchange if still operational, or from your own records.
3. Compare against what you reported. If the returns match the actual activity, you're fine. If not, you have a problem to address.
4. Calculate the real tax liability. Gross proceeds minus basis, organized by year. This is almost always much lower than the IRS's default (gross = gain).
5. Decide: quiet amendment or voluntary disclosure. Threshold and badges-of-fraud analysis. Experienced counsel matters here.
6. Execute before the IRS contacts you. Once CI has opened a file, VDP is off the table.

The Post-Summons Enforcement Timeline

Historically, the gap between data production and the first wave of IRS letters has been 12 to 24 months. Coinbase data delivered in 2018 generated Letter 6173 waves in 2019 and 2020. Kraken data from 2023 produced letter waves in 2024 and 2025. Expect SFOX-derived letters through 2025 and 2026, Circle-derived letters in the same timeframe. The criminal pipeline is slower — felony crypto tax prosecutions have been rolling out at a rate of several per year since 2020, and the trend line is up.

Related Reading

For the exchange-specific reporting details that determine what a summons would turn over, see Binance.US, Crypto.com, Robinhood, and PayPal. For the mechanical return-side fix, Form 8949 for crypto. For what happens after the debt is assessed, Crypto Offer in Compromise and penalty abatement.