Key Takeaways
- Operation Hidden Treasure is a joint civil and criminal IRS initiative, launched in 2021, that targets taxpayers who omit cryptocurrency income from their tax returns.
- The IRS has spent at least $47 million on blockchain analytics contracts (81% with Chainalysis) and more than $200 million with Palantir to power audit case selection.
- The first Form 1099-DA reports reached the IRS in early 2026, covering 2025 transactions. The agency can now match exchange data directly against your returns.
- Crypto transactions are pseudonymous, not anonymous. Once a single wallet is linked to your identity, your entire transaction history becomes traceable.
- If you have unreported crypto, amending your returns or entering the Voluntary Disclosure Program before the IRS contacts you preserves your best options.
“These transactions are not anonymous. We see you.”
That’s not a line from a thriller. It’s Carolyn Schenck, National Fraud Counsel in the IRS Office of Chief Counsel, describing exactly how the agency views your crypto wallet.
If you have unreported crypto on past tax returns, the government has spent millions of dollars building the technology to find you. That isn’t speculation. It’s documented in federal contracts, inspector general reports, and public testimony from IRS officials.
The program behind it is called Operation Hidden Treasure, and it works by pairing IRS investigators with private contractors like Chainalysis and Palantir, who analyze massive amounts of blockchain data to zero in on audit targets.
Hiding behind a crypto wallet doesn’t work anymore, and arguably never did. In this guide, we’ll show you how the government’s tracking tools actually work, who’s at risk in 2026, and exactly what to do if you have unreported crypto in your past.
What Is Operation Hidden Treasure?
Operation Hidden Treasure is an IRS enforcement initiative, launched in March 2021, that combines the civil Office of Fraud Enforcement and the Criminal Investigation division to identify taxpayers who omit cryptocurrency income from their tax returns. It uses blockchain analytics tools and specially trained agents to find what the IRS calls “tax evasion signatures.”
Damon Rowe, then-Executive Director of the IRS Office of Fraud Enforcement, announced the program on March 5, 2021, at a Federal Bar Association virtual tax conference. The name wasn’t subtle, and neither was the mission.
Schenck, the official behind the warning that opened this article, explained the strategy plainly. The agency actively hunts for tax evasion signatures across blockchain networks. These include patterns like structuring transactions below the $10,000 reporting threshold, using shell companies, or rapidly moving on and off the chain to obscure funds. To sharpen their skills, IRS employees even began training with Europol on advanced cryptocurrency investigative techniques.
And this didn’t come out of nowhere. The IRS first classified crypto as property in 2014. It issued sweeping John Doe summonses to Coinbase in 2016, then added a direct virtual currency question to Form 1040 in 2019 and 2020. Each step gave the agency more data and more leverage.
Operation Hidden Treasure was the natural next step, pushing IRS enforcement of unreported crypto into a new era powered by data and technology. Beyond basic audits, the agency now uses blockchain analytics to build cases before you even know it’s looking.
So how does that tracking actually work? Let’s open the toolbox.
How the IRS Tracks Crypto: Chainalysis and Blockchain Forensics
The IRS tracks cryptocurrency by combining public blockchain data with identity records from exchanges, then using forensics software from contractors like Chainalysis to connect the two.
Prefer to watch? In the video above, Andrew Gordon, the tax attorney and CPA who reviewed this article, walks through every method the IRS uses to track crypto in about ten minutes.
Many crypto holders believe their transactions are entirely anonymous. They’re not. Bitcoin and most major cryptocurrencies are pseudonymous. Think of the blockchain as a glass bank vault: anyone can watch every dollar move between accounts. The names on the accounts are hidden, but the money never is. Blockchain forensics is simply the science of putting names on those accounts.
$47 Million Spent on Blockchain Analytics
The IRS isn’t doing this with spreadsheets and interns. Since fiscal year 2020, the agency has spent at least $47 million on contracts with blockchain analytics companies. Chainalysis has received an overwhelming 81% of that money.
And the tools hold up in court. IRS Criminal Investigation has relied on Chainalysis for years, and the methodology has been accepted under the Daubert standard in U.S. federal court proceedings. Translation: judges treat it as reliable evidence in criminal cases.
How Blockchain Tracing Works
You don’t need a computer science degree to understand blockchain tracing. Forensics software traces transactions across thousands of wallets, clusters addresses that likely belong to the same person, and follows funds from wallet to wallet, even jumping across different blockchains.
Here’s the part that surprises people: the IRS only needs one match. Once a single address is linked to a real identity, the rest of your transaction history becomes traceable. That link usually happens through exchange KYC data, law enforcement intelligence, or a routine audit. In practice, Chainalysis builds visual maps that show agents exactly where your money went.
How the IRS Connects Wallets to Real Identities
Where does that first match come from? Usually, from the exchanges themselves. The IRS uses John Doe summonses to force exchanges to hand over user records. It targeted Coinbase in 2016, Kraken in 2021, and Circle and Poloniex in 2021, acquiring names, transaction histories, and wallet addresses for users who transacted $20,000 or more.
Paired with blockchain forensics, this data is extremely effective. In a recent year, IRS-CI identified more than $10 billion in financial crime and maintained one of the highest conviction rates in federal law enforcement.
And summonses aren’t the only way identities reach the IRS. As Andrew Gordon explains in the video above, two recent developments handed the government entire user datasets without a single court order. When platforms like BlockFi and Celsius went bankrupt, their creditor lists became part of the public record, exposing detailed user information for anyone, including the IRS, to read. And major regulatory settlements, like Binance’s, have granted regulators greater access to user data as a condition of the deal. If you held assets on a bankrupt or settled platform, your information may already be in the government’s hands.
But tracing money is only half the operation. Someone still has to decide whose file lands on an auditor’s desk. That’s where Palantir comes in.
How Palantir Helps the IRS Select Audit Targets
Palantir provides the IRS with data-analysis platforms that decide which taxpayers to audit, while Chainalysis traces the crypto itself. In other words, Chainalysis answers “where did the money go?” and Palantir answers a more personal question: “who should we audit next?”
For decades, the agency relied on a Discriminant Information Function score to select audit cases. Palantir’s tools represent a major shift toward data-driven, technology-enhanced case selection. The IRS currently uses two key Palantir platforms to find discrepancies.
The first is the Selection and Analytic Platform. The IRS paid Palantir $1.8 million to develop this custom tool, commonly called SNAP. It’s designed to identify “highest-value” cases for audits, tax collection, and potential criminal investigations. The agency previously described its older system as a fragmented landscape of more than 100 business systems and 700 methods built over several decades; SNAP acts as a modern pilot program to streamline case selection, pulling key information about contracts, vehicles, and vendors straight from unstructured data in supporting documents.
The second tool is Lead and Case Analytics. IRS Criminal Investigation has used Palantir’s LCA platform since 2018 to aggregate and analyze sprawling federal databases; public documents indicate the IRS has paid over $130 million for LCA services alone. The platform runs on Palantir’s Gotham and Foundry applications and ingests individual tax forms, tax returns, Affordable Care Act data, bank statements, FinCEN data, and cryptocurrency data for assets like Bitcoin, Ethereum, Litecoin, and XRP.
In total, Palantir has been awarded more than $200 million in contracts and obligated payments with the IRS. This investment fuels the modern blockchain investigation process and actively shapes who receives a notice for an IRS crypto tax audit.
Has Operation Hidden Treasure Delivered Results?
Operation Hidden Treasure’s early results were criticized by a federal watchdog, but the infrastructure it built now powers the IRS’s largest crypto enforcement push to date. A July 2024 report from the Treasury Inspector General for Tax Administration found that the program “lacked any enforcement deliverables.”
The inspector general wrote that the operation’s primary purpose had been “limited to the acquisition of data analytics tools and of software licenses and employee training.” The IRS’s civil fraud enforcement office acquired over 600 software licenses for agency employees but kept “no written records about the operation’s results or effectiveness.” IRS chief tax compliance officer Heather Maloy acknowledged the critique, stating that “digital asset compliance enforcement can be improved.”
So is Operation Hidden Treasure a paper tiger? Not quite. The operation’s real product wasn’t a stack of closed cases. It was infrastructure: the training, tools, and data pipelines that feed directly into the IRS’s enforcement machine right now:
- Form 1099-DA reporting took effect for 2025 transactions, and exchanges delivered the first wave of these forms to taxpayers and the IRS in early 2026, with cost basis reporting phasing in for the 2026 tax year,
- The new Historical Digital Asset Form is actively appearing in audits, and
- John Doe summonses continue to roll out.
All of these point toward a much larger IRS crypto tax audit wave in 2026 and beyond.
Separately, IRS Criminal Investigation never stopped pursuing crypto cases, investigating 390 crypto-related cases between 2018 and 2023. Even if Operation Hidden Treasure didn’t produce an immediate wave of civil enforcement on day one, the foundation it built is now powering a much larger crackdown on unreported crypto.
Who’s at Risk of an IRS Crypto Audit in 2026?
Anyone with unreported crypto activity is a potential audit target, but the highest-risk groups are taxpayers whose returns contradict data the IRS already holds. You don’t need to be a whale to get a letter. The enforcement net is wide, it grows wider every year, and most of the people caught in it are ordinary investors, not criminal masterminds. Here’s who should be paying the closest attention:
- Taxpayers who answered “No” to the Form 1040 crypto question but had reportable activity. The IRS now has Form 1099-DA data to cross-reference against your return. Answering “No” while the IRS holds records showing otherwise creates a perjury-level mismatch.
- Investors with unreported gains across multiple tax years. The standard audit window is three years. That extends to six years if you underreported income by more than 25%. For cases involving fraud, there’s no statute of limitations at all.
- Users of U.S. exchanges. Every crypto exchange operating legally in the U.S. reports to the IRS, including Coinbase, Kraken, Gemini, Crypto.com, and Robinhood. Starting with 2025 transactions, they report your activity on Form 1099-DA.
- DeFi and self-custody wallet users. Many assume on-chain activity is invisible. It’s not. Blockchain analytics can trace transactions even when no centralized exchange is involved.
- Holders who used structuring, mixers, or privacy coins to obscure activity. These actions match the “tax evasion signatures” the IRS actively hunts for under Operation Hidden Treasure.
If any of that sounds familiar, don’t panic. You have options, and the next section walks through them in order.
What to Do If You Have Unreported Crypto
If you have unreported crypto, the safest path is to speak with a tax attorney under attorney-client privilege, calculate what you owe, and correct past returns before the IRS contacts you. Finding out you might be exposed is stressful, but there’s good news buried in everything above: the IRS consistently treats people who come forward better than people it has to find. The sooner you act, the more options you have:
- Talk to a tax attorney first, not your accountant. This one’s critical. Communications with your attorney are protected by attorney-client privilege; communications with your accountant aren’t. Your accountant can be compelled to testify or share your information directly with the IRS. Only an attorney can have confidential, legally protected conversations about potential tax violations.
- Calculate your crypto gains, losses, and income. Work with a knowledgeable crypto accountant, potentially under a Kovel agreement, which extends attorney-client privilege to the accountant’s work, to generate accurate reports of what you actually owe.
- Consider amending your tax returns. File amended returns using Form 1040X for years with unreported crypto gains, losses, and/or income. The IRS is almost always more lenient with taxpayers who proactively correct their mistakes compared to those who wait to get caught. Fixing unreported crypto issues with the IRS early saves massive headaches later.
- Look into the IRS Voluntary Disclosure Program. If your situation involves deliberate underreporting or a complete failure to report, you may need a stronger approach. The IRS’s Voluntary Disclosure Practice uses an updated Form 14457. It allows taxpayers facing potential criminal liability to come forward and typically avoid prosecution in exchange for paying the taxes owed plus penalties.
- Don’t ignore IRS notices. If you receive an IRS Letter 6173, Letter 6174 or 6174-A, or a CP2000 notice, respond by the deadline. The longer you wait, the fewer options you’ll have.
- Don’t bury your head in the sand. Once the IRS finalizes the amount you owe, it can take aggressive collection actions, such as levying your bank accounts or placing liens on your property. Handle it before it reaches that point.
Operation Hidden Treasure: Frequently Asked Questions
What is Operation Hidden Treasure?
Operation Hidden Treasure is an IRS enforcement initiative launched in March 2021 that pairs the civil Office of Fraud Enforcement with the Criminal Investigation division to identify taxpayers who omit cryptocurrency income from their tax returns, using blockchain analytics tools and specially trained agents.
Can the IRS track cryptocurrency?
Yes. Most blockchains are public ledgers, and the IRS contracts with firms like Chainalysis to cluster wallet addresses and follow funds across chains. Once any single address is tied to your identity, usually through exchange KYC records or a John Doe summons, your related transaction history becomes traceable.
Does Coinbase report to the IRS?
Yes. Coinbase and every other crypto exchange operating legally in the U.S., including Kraken, Gemini, Crypto.com, and Robinhood, report user activity to the IRS. Starting with 2025 transactions, these exchanges report your sales and exchanges directly to the IRS on Form 1099-DA.
What happens if you don’t report crypto to the IRS?
Unreported crypto can lead to warning letters, audits, back taxes with interest, accuracy or fraud penalties of up to 75% of the unpaid tax, and, in willful cases, criminal prosecution. Because exchanges now report activity on Form 1099-DA, mismatches between IRS records and your return can be flagged automatically.
How far back can the IRS audit unreported crypto?
The standard audit window is three years from filing. It extends to six years if you underreported your income by more than 25%, and there is no time limit at all in cases involving fraud or unfiled returns.
Does the IRS know about my crypto if I only use DeFi or a self-custody wallet?
Very possibly. Blockchain forensics tools trace on-chain activity regardless of whether a centralized exchange is involved. If your wallet ever touched an exchange, a fiat on-ramp, or another identified address, it can be linked back to you.
Should I amend my returns or use the Voluntary Disclosure Program?
It depends on whether your noncompliance was willful. Honest mistakes are usually best corrected with amended returns, while deliberate underreporting may call for the Voluntary Disclosure Program to reduce the risk of criminal prosecution. A tax attorney can evaluate your situation under attorney-client privilege before you commit to either path.
Don’t Wait for the IRS to Find You
Operation Hidden Treasure, Palantir, Chainalysis, and Form 1099-DA have dramatically expanded the government’s ability to identify unreported crypto. The best time to fix an unreported crypto problem was the year it happened. The second-best time is before the IRS sends a letter.
Here’s why that matters for choosing who helps you: software gives you a number. An accountant files a form. Neither one can protect you. Because Gordon Law is a law firm, your communications are protected by attorney-client privilege, and the same team that untangles your transaction history can defend you if the IRS pushes back.
Gordon Law has helped hundreds of crypto investors fix prior year tax returns. We’ve focused on crypto tax since 2014, before most tax professionals had heard of DeFi, and have prepared more than 1,500 cryptocurrency tax reports. Whether you need to amend past returns, respond to an IRS notice, or get ahead of a potential audit, our crypto tax attorneys combine deep tax law knowledge with a thorough understanding of blockchain technology.
Your situation is fixable, and the conversation about fixing it is confidential. Schedule a confidential consultation with Gordon Law’s attorneys today!
