Connect with us

CRYPTO

ATO Crypto Tax Emails Catch Buyers the Office Already Knows

The ATO crypto tax email is a data match against exchange files, so buyers with no sale still get pinged while swaps and gifts remain taxable.

Published

on

Thousands of Australians received an ATO crypto tax email in July 2026 telling them records showed they had bought or disposed of crypto since 1 July 2025.

The note is a data match against files Australian exchanges already hand over, not a bill. Buying with Australian dollars is not a capital gains event. Selling, swapping, gifting or spending is.

The Email Means the ATO Already Has Exchange Files

The Australian Taxation Office does not need a whistleblower to know you opened an account. Designated service providers, the exchanges through which people buy, sell or transfer crypto in Australia, must hand over identity and transaction files under section 353-10 of Schedule 1 to the Taxation Administration Act 1953. That power is coercive. The provider is obligated to supply what is asked.

The July inbox wave sits on top of that feed. The message told people how to report profits or losses, and it spelled out that disposals include selling, gifting, swapping and similar transactions. It also flagged income from trading, mining, an exchange business, or selling non-fungible tokens as a business. It warned that penalties or interest may apply if the return is incomplete.

You may receive a letter from us if we received information from third parties indicating that you sold an investment (such as property, shares or units, or crypto assets) which may have resulted in a capital gain or loss.

Australian Taxation Office, Capital gains tax letter for investments, 15 July 2026

That page, published five days after the first public accounts of the emails, describes a later product. It is the sales-mismatch letter that can follow if a return omits a gain, reports a different amount, or never gets lodged. The July note is broader. It names people whose files show a buy or a disposal, which is why a holder who only purchased coins can still find the message in the inbox.

WHAT WE KNOW

  • The trigger: Third-party exchange records, not a completed audit, sit behind the July emails.
  • The window: The activity cited starts on 1 July 2025, the first day of the 2025-26 income year.
  • The later letter: A separate CGT matching letter covers unreported or mismatched sales of property, shares, units or crypto.

WHAT IS UNCONFIRMED

  • Exact mail-out: No official count has been published for this wave beyond thousands of inboxes.
  • Buy-only cases: The ATO has not said what share of recipients only bought and never disposed.

Summ, the crypto tax software firm formerly called Crypto Tax Calculator, put the same distinction in plainer words in September 2026: the program is “reconciliation rather than surveillance.” A match against an exchange file is usually a non-event if the return already lines up. The trouble starts when it does not.

What Those Files Contain for Up to 1.2 Million Accounts

The ATO’s crypto asset data-matching program is built to collect data on 700,000 to 1,200,000 accounts each financial year. It covers every year from 2014-15 to 2025-26. Files come in annually between April and July. Each year’s data is kept for 7 years from the final verified instalment, in part because a coin can sit untouched for a long time before a disposal creates a CGT event.

The office says it does not use this provider data to complete automated action. It does use it to send tailored messages in online services, to compare against returns when selecting people for compliance work, and to design education campaigns. Where someone lodges without the right income or capital gain (or loss) reported, the return may be audited and penalties applied. Early evidence, the ATO says, shows voluntary compliance is rising among people who dispose of crypto.

FIELDS THE MATCHING PROGRAM CAN TAKE

Bucket Examples on the protocol list
Identity Name, date of birth, addresses, email, phone, ABN, ID-document details, social media account, registration IP, user ID, sign-up date
Account Status (open, closed, suspended, lost), linked bank accounts, wallet address, lost or stolen amounts, unique identifier
Each transfer Date, time, asset type, amount in fiat and in crypto, transfer type, transfer description, total account balance, IP address

Providers are chosen on a principles test: they operate a crypto designated service in Australia, they offered it in the years in focus, and the cost of collecting the data is worth the compliance benefit. The ATO does not publish the source list. Anyone who completed identity checks on a local exchange should assume the file exists.

The office also does not receive a ready-made cost base across platforms, and it does not receive a complete map of self-custody wallets or decentralised-exchange activity. That gap cuts both ways. It is why a buy-only holder can still get pinged, and why a DeFi-heavy return can still be wrong even after the July email is answered.

Every Swap and Gift Is a Disposal

Crypto is a CGT asset for an investor, not money. A tax event happens when ownership of that asset changes, which is a much wider idea than cashing out to Australian dollars. The ATO’s tax-time toolkit treats swaps, gifts and fiat conversions as disposals, along with deposits into liquidity pools and wrapping. Using crypto to pay a network fee that reduces your holding is a disposal too.

A purchase with Australian dollars is an acquisition. Moving coins between wallets you own, with no change of beneficial ownership, is not a disposal and does not need to be reported. Those two facts sit under the same email that uses “bought or disposed” in one breath.

CGT AND INCOME EVENTS THE ATO LISTS

Action Tax treatment
Buy crypto with Australian dollars Acquisition; no CGT event
Transfer between wallets you own Not a disposal; do not report
Sell for Australian dollars or other fiat CGT disposal
Swap one crypto for another CGT disposal of the coin given up, new cost base for the coin received
Gift, or spend on goods and services CGT disposal at market value
Wrap, unwrap, or deposit into a liquidity pool Treated as a disposal
Staking rewards or established-token airdrops Ordinary income at Australian-dollar value when received

If you hold the asset as an investment for at least 12 months, the CGT discount may reduce the gain. Investment intent also blocks the personal-use exemption. Even spending investment coins on household items does not convert them into a personal-use asset. A narrow exemption can apply if the crypto was mainly kept to buy personal items, used in a short period, and acquired for less than $10,000.

Gains and losses go at the CGT labels: total current year capital gains and net capital gains if you made a gain, or net capital losses carried forward if you made a loss. Report a loss even when you have no gain to offset, so it remains available in later years. Current-year capital gains over $10,000 require the CGT schedule, with crypto reported at Other CGT assets and any other CGT events.

Usha’s $95 Swap Shows How Fast Gains Stack

The toolkit walks through a worked case so the swap rule is not abstract. Usha bought 8,000 PZT for $5,500 and paid $5 brokerage, so the cost base is $5,505. A few days later, at 1:30 pm on 15 July 2025, she exchanged those tokens for 2 CAB. The market value of the 2 CAB was $5,600. Proceeds minus cost base left a $95 capital gain, with no discount because the holding period was days, not 12 months.

She then swapped the 2 CAB for 0.1 BAT at 2:00 pm on 10 January 2026. The cost base of the CAB was $5,600 plus $10 brokerage, or $5,610. The BAT was worth $7,000. That second hop produced a $1,390 gain. Still no discount. No Australian dollars hit her bank. Both figures still belong on the 2026 return.

That is the pattern the matching files can surface without ever seeing a withdrawal. Gross disposal value on an exchange report is not profit. Cost base, fees and the 12-month clock still have to be worked out from records. The ATO tells people to export transaction history regularly because exchanges close and accounts get lost. Keep those records for 5 years after the return that reports the CGT is processed, and a further 2 years after you use up a capital loss.

The loudest error around these emails is still the cash-out rule people tell themselves. Waiting for a bank deposit before counting a tax event leaves every swap, wrap and gift off the return. The exchange file the ATO already holds does not wait with you.

Side Hustle Letters Used the Same Matching Machine

The crypto note arrived in the same tax-time run as sharing-economy letters. Platforms that arrange rides, stays, hired assets, freelance jobs or online content send the ATO income data under the Sharing Economy Reporting Regime. That data does not automatically pre-fill a return. The letter told people they still have to key the amounts in, even if the work was part-time, casual or irregular, even with no ABN, and even if no tax was withheld.

SHARING ECONOMY INCOME THE ATO EXPECTS ON THE RETURN

  • Ride-sourcing and transport: Passenger trips, taxis, boats and other hired transport arranged through an app.
  • Stays and spaces: Short-term accommodation, offices, parking and storage listed on a platform.
  • Hired gear and gigs: Vehicles, tools, freelance tasks, deliveries and paid online content.

The method is the same as crypto: a third party already sent a file, the return is checked against it, and the first contact is a prompt. Crypto CGT still has to be calculated by the taxpayer because the exchange file is not a completed tax position. Sharing-economy income has to be typed in because the platform file is not a pre-fill. In both cases the office is telling people it already has a version of the year.

Withdrawals to Cold Storage Still Leave a Buy Record

Pulling coins off an exchange onto a hardware wallet does not delete the account that created the July email. The buy, the linked bank account, the wallet address and the withdrawal are the sort of rows the protocol lists. Self-custody can hide later on-chain hops from that particular feed. It cannot unwrite the KYC file.

From 1 July 2026, the same regulated platforms also face AUSTRAC’s travel rule for virtual asset transfers. A virtual asset service provider that moves coins for a customer has to collect, verify and pass on key details through the transfer chain, for domestic and international moves. There is an exemption when sending to a self-hosted wallet, so the business does not have to transmit travel-rule information to another business in that case. Reporting of transfers that involve unverified self-hosted wallets is a separate obligation, and it does not start until 31 March 2029.

AML reporting is not a tax assessment. It does thicken the paper trail on the same on-ramps and off-ramps the data-matching program already uses. The people treating a ledger as a blank year still have a buy sitting in an exchange file the ATO collected between April and July.

Self-Lodgers Face a 31 October Deadline

The income year runs 1 July to 30 June. If you lodge your own return, the ATO’s due date is 31 October. When 31 October falls on a weekend, lodgment moves to the next business day. 31 October 2026 is a Saturday, so that rule takes self-lodgers to 2 November 2026. A registered tax agent can lodge later, but you need to engage the agent before 31 October. If you self-lodge between 1 July and 31 October and the assessment is a bill, payment is due by 21 November.

THE 2025-26 CRYPTO MATCHING CALENDAR

  1. 1 July 2025: Income year opens; this is the start date named in the July emails.
  2. April to July 2026: Annual collection of exchange files for the matching program.
  3. 1 July 2026: Travel-rule obligations apply to virtual asset transfers by regulated providers.
  4. July 2026: Thousands of bought-or-disposed emails land; the CGT letter explainer is published on 15 July 2026.
  5. 31 October 2026: Standard self-lodgment day, rolling to 2 November 2026 under the weekend rule.
  6. 21 November 2026: Payment due if you self-lodged from 1 July to 31 October and owe a bill.

If a prior year is wrong, a voluntary disclosure before the ATO tells you it will examine your affairs cuts some shortfall penalties by 80%. If the shortfall is less than $1,000, that penalty falls to nil, provided the office has not already notified an examination and has not publicly called for disclosures on that transaction. After an examination notice, a disclosure that saves the office a lot of time or resources can still cut the penalty by 20%. Interest on unpaid tax is a separate charge.

The July email is the cheap moment to fix the file. Once the return is in, the office can compare it with the exchange records it already holds. If the figures line up, that message is the end of the matter. If they do not, the next letter is the CGT matching note that asks you to amend.

Disclaimer: This article is news reporting and analysis of Australian Taxation Office matching letters and published crypto tax guidance. It is for information only and is not tax, financial, legal or accounting advice, and it is not a recommendation to lodge, amend, hold, sell or gift any crypto asset. Anyone who received a letter, or who bought, swapped, spent or sold crypto, should speak with a registered tax agent or other qualified tax professional about their own records before lodging or amending a return. Figures, due dates, penalty reductions and program settings reflect the cited ATO and AUSTRAC pages as used in this piece and can change.

Harry is the editor of Oton Technology, an independent site he owns and edits, covering the part of technology that people actually have to act on. After ten years in journalism, first reporting and then editing, he works from primary material by habit: the advisory rather than the write up of it, the filing rather than the press release, the changelog rather than the launch video. Every figure in an article carries its source and its date, and where a number comes from a vendor or an analyst model rather than a count, he says so plainly instead of letting it stand as established fact. What he leaves out is anything he could not verify himself, which on a beat full of unnamed supply chain claims removes a great deal. That standard applies across all the sections the site publishes for an international audience, from artificial intelligence and security to phones, computers, gaming, crypto and the software businesses depend on. He corrects errors in the open and labels them, because a site that hides its mistakes is asking readers to trust the rest on nothing.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Trending