IRS John Doe summonses on crypto exchanges explained: Coinbase, Kraken, Circle and SFOX, the §7609(f) standard, and what to do now.

A John Doe summons is how the IRS reaches inside an exchange and pulls out customer records for people whose names it does not yet know. It has been aimed at crypto repeatedly since 2016. The narrowed Coinbase summons reached users with at least $20,000 of one transaction type in a year from 2013 through 2015. Court-authorized summonses later reached Circle and Kraken users with at least the equivalent of $20,000 in transactions from 2016 through 2020, and SFOX users from 2016 through 2021. If your activity fell inside one of those windows and you did not report it correctly, assume the IRS has the data. Here is how the process works, what the IRS can do with the records, and how to think about your options.

What a John Doe Summons Is

Under IRC §7602, the IRS can issue summonses to any person to produce books, papers, records, or other data relevant to a federal tax liability. A regular summons names a specific taxpayer. A John Doe summons under IRC §7609(f) is different - it targets an ascertainable class of unknown taxpayers. To serve one, the IRS must go to a federal district court and show three things:

When a district court approves the petition, the summons is served on the third-party record-keeper - Coinbase, Kraken, Circle, SFOX - and the exchange is obligated to turn over the requested records. The exchange can (and often does) fight the scope in court. These fights rarely kill the summons entirely but usually narrow it.

The Four Crypto Summonses That Matter

The IRS issued its first crypto John Doe summons to Coinbase in 2016, seeking records of all U.S. accountholders with digital currency transactions from 2013 through 2015. Coinbase resisted, and the IRS petitioned to enforce in the Northern District of California. The IRS narrowed the summons to users with $20,000 of any one type of transaction (buying, selling, sending or receiving) in any one calendar year, which the First Circuit later reported covered 14,355 accounts. On November 28, 2017, the court enforced it in part. Details in the Coinbase order breakdown.

What the court allowed: taxpayer ID number, name, date of birth, address, records of account activity including transaction logs and counterparties, and periodic statements. It refused know-your-customer files, third-party access agreements and correspondence. In 2019 the IRS mailed Letters 6173, 6174 and 6174-A to more than 10,000 taxpayers, with names it said came from various ongoing compliance efforts.

For Kraken (Payward Ventures), the government petitioned in the Northern District of California on March 30, 2021. On March 31, 2021, the magistrate judge ordered the government to show cause why the petition should not be denied as not narrowly tailored. After the government narrowed it, the court granted the narrowed petition on May 5, 2021 (No. 3:21-cv-02201-JCS). The petition covered U.S. persons with at least the equivalent of $20,000 in value of cryptocurrency transactions in any one year from 2016 through 2020. See the Kraken summons fight.

For Circle Internet Financial, including Poloniex LLC, the District of Massachusetts granted leave to serve a John Doe summons on April 1, 2021 (No. 1:21-mc-91201-RGS), covering U.S. persons with at least the equivalent of $20,000 in value of cryptocurrency transactions in any one year from 2016 through 2020.

For SFOX (Ox Labs Inc.), the Central District of California granted leave to serve a John Doe summons on August 15, 2022 (No. 2:22-cv-05715-ODW), covering U.S. persons with at least the equivalent of $20,000 in value of cryptocurrency transactions in any one year from 2016 through 2021. In a parallel case, the Southern District of New York granted leave to serve a John Doe summons on M.Y. Safra Bank, which the petition says offered certain banking services to SFOX customers, by an order signed September 21, 2022 (No. 1:22-mc-00213-PGG). See Circle, SFOX and the bank summons.

What Happens to the Data

The IRS does not publish how it routes summons data internally. What the public record shows is the use: exchange records identify customers, the IRS compares them to filed returns, and it follows up by letter, examination, or not at all.

The IRS Fraud Handbook (IRM 25.1)

Part 25, Chapter 1 of the Internal Revenue Manual is the IRS Fraud Handbook. IRM 25.1.2.11.1 lists indicators of fraud specific to digital asset cases, including intentional failure to report a substantial portion of transactions over multiple years despite knowledge of the reporting requirement, reporting activity at some exchanges but not others, and the use of mixers, privacy coins or nominee accounts to conceal. See the IRS fraud indicators for crypto.

If fraud is developed, the IRS can invoke the unlimited statute of limitations under §6501(c)(1) - no three-year or six-year clock - along with the 75% civil fraud penalty under §6663. That's on top of the tax and interest. A criminal referral adds potential prison exposure.

Voluntary Disclosure vs. Wait-and-See

If your activity was in a summons window and not correctly reported, you have two real paths:

The IRS Voluntary Disclosure Practice, managed through the CI preclearance process, is available if you come forward before the IRS has started an investigation of your file. Benefits:

VDP is not free - the penalty structure is painful by design. But it is survivable, professional, and final.

Say nothing, file nothing, and see if the IRS knocks. For people with small amounts of unreported activity, minimal badges of fraud, and a plausible reasonable-cause story, this can work. Many taxpayers in the Coinbase 2018 production got Letter 6173 and had no further follow-up after amending returns with penalty relief. For large dollar amounts with affirmative concealment, wait-and-see is a terrible bet. The IRS has your data. It's running matching algorithms on it. It has years to act.

The rule of thumb I use after more than three decades of this work: if the numbers are large (say $250,000+ of unreported gain), if there was affirmative concealment (mixers, false names, privacy coin conversions specifically to hide), or if the taxpayer has any prior compliance history the IRS would find unfavorable - voluntary disclosure is almost always the right call. If the numbers are small, the conduct looks like honest confusion, and the badges-of-fraud analysis is weak, a quiet amendment with reasonable cause penalty abatement may work.

The Post-Summons Enforcement Timeline

The IRS has not published a timetable linking summons productions to letters or examinations, and I will not invent one. What the record shows is that the 2016 Coinbase summons was enforced in 2017 and the IRS announced its letter campaign in July 2019. For current years, Form 1099-DA reporting for sales on or after January 1, 2025 means the IRS will receive exchange data without needing a summons at all.

For the exchange-specific reporting details that determine what a summons would turn over, see Binance.US, Crypto.com, Robinhood, and PayPal. For the mechanical return-side fix, Form 8949 for crypto. For what happens after the debt is assessed, Crypto Offer in Compromise and penalty abatement.

Darrin T. Mish is a tax attorney licensed since 1993 (The Florida Bar No. 986641) and also admitted in Colorado and Texas, before the United States Tax Court, and before the Supreme Court of the United States. He represents taxpayers before the IRS nationwide.

Summonsed exchange activity unreported? Don't wait for the letter.

Once Criminal Investigation has opened a file, voluntary disclosure is off the table and the conversation becomes much more expensive. If your activity was in a summons window and your returns don't match, the time to act is before the letter arrives, not after. Call (813) 229-7100 for a confidential consultation or book at https://getirshelp.com/contact-us. Attorney-client privilege from the first minute. More than three decades of keeping people out of trouble who came forward in time.