What the ATO already knows about your crypto before you lodge

How the data actually reaches the ATO

Australian crypto exchanges operate under AUSTRAC registration as digital currency exchange providers, and they are designated service providers for ATO data-matching purposes. That means they supply account and transaction data on a routine basis — not in response to a specific investigation, but as standing practice.

The identity side is straightforward. You completed KYC when you opened the account, so your name, date of birth, address, email, phone number and often your bank account details are already linked to your trading. There is no meaningful sense in which an account on an AUSTRAC-registered Australian exchange is anonymous.

What arrives alongside it is transaction-level: deposits, withdrawals, buys, sells, and the AUD values attached. This is why pre-fill and ATO nudge letters have become common for crypto in recent years. The tax office frequently knows you had disposals before you tell it.

The gap that causes most problems

Here is the asymmetry that catches people out. Exchange data is strong on disposals and weak on cost base.

If you bought Bitcoin on Exchange A, transferred it to Exchange B, and sold it there, Exchange B reports a sale. It has no idea what you originally paid, because the purchase happened somewhere else. From the raw data, the sale can look like pure gain.

The burden of proving the cost base sits with you. If you cannot produce records establishing what you paid, the ATO is entitled to treat the cost base as unsubstantiated — and the consequences run in one direction only.

What counts as a disposal

A recurring misunderstanding is that tax applies only when crypto is converted back to Australian dollars. It does not. A CGT event happens when you dispose of a crypto asset, and disposal covers considerably more ground than cashing out:

• Selling for AUD — the obvious one
• Swapping one token for another — BTC to ETH is a disposal of BTC at market value, even though no fiat moved
• Spending crypto on goods or services
• Gifting crypto to another person
• Converting to a stablecoin — a stablecoin is a crypto asset, so this is a swap like any other

Someone who has never withdrawn a dollar can still have dozens of CGT events across a year of active trading. On a busy DeFi or altcoin strategy, the count runs into hundreds.

What is not a disposal

Moving crypto between wallets or exchanges you control is not a CGT event. You still hold the asset; you have only changed where it sits.

The catch is that raw exchange data does not distinguish a transfer to your own hardware wallet from a transfer to somebody else. Both look like an outbound withdrawal. If your return does not match what the ATO sees, this is a frequent reason, and the fix is documentation: keep a record of your own wallet addresses so a same-owner transfer can be demonstrated rather than asserted.

Income versus capital gains

Not all crypto is taxed as capital gains, and conflating the two causes real errors.

Staking rewards are generally ordinary income at their market value on the day you receive them. When you later sell those tokens, that is a separate CGT event calculated from the value at receipt — not from zero.

Airdrops of established tokens are generally treated the same way. If a token has no market value at receipt, the income may be nil, but you still need a record of having received it.

DeFi rewards — liquidity pool returns, yield farming, governance tokens — are generally income in the year received. The mechanics vary considerably by protocol and this is an area where guidance is still developing.

Business activity is a different regime again. If you are carrying on a business of trading, profits are ordinary income and the CGT discount does not apply. Whether your activity crosses that line depends on scale, organisation, repetition and intent — it is a question for an accountant, not a self-assessment.

The records you actually need

For every transaction, you should be able to produce:

• The date of the transaction
• The value in Australian dollars at the time it occurred
• What the transaction was for and who the other party was, at minimum the exchange name or wallet address
• The units involved and any fees paid

Keep these for five years from the later of when you prepared the record or completed the transaction. For the 2026 financial year, that means holding records into 2031.

Practically, this means exporting CSVs from every exchange regularly rather than at tax time, and storing them somewhere that outlives your relationship with that exchange. Crypto tax software such as Koinly or CryptoTaxCalculator can reconcile across platforms and the ATO has acknowledged the use of software for record-keeping, but the tool is only as good as the data you feed it — and it cannot recover a transaction history from an exchange that no longer exists.

If you have not been reporting

The honest position is that the data-matching program makes non-reporting an increasingly poor strategy, and voluntary disclosure is treated considerably more favourably than being found. If you have unreported crypto activity from prior years, that is a conversation to have with a registered tax agent rather than something to resolve from an article.

Sources

Drawn from ATO guidance on working out and reporting CGT on crypto assets, and published material on the ATO's crypto asset data-matching program.

Related reading