Losing cryptocurrency to a hack, scam, or a forgotten private key is already a painful experience. Worse, the Indian tax system offers you very little comfort in the aftermath. You lost real money, but the law does not treat it the way you might expect.
The Income Tax Department (ITD) has not issued explicit guidance on lost or stolen crypto, but the framework under Section 115BBH leaves little room for relief. Yes, your loss is not taxable, but it is also not deductible. Helping you understand what that means for your compliance obligations is what this guide is about.
Key Takeaways
- Losing crypto to a hack, theft, or scam is not a taxable event in India. You do not owe capital gains tax on assets you no longer possess.
- However, losses from stolen or hacked crypto cannot be used to offset gains from other profitable trades under Section 115BBH.
- Lost private keys, exchange collapses, and hacks are each treated differently, but none of them qualify as a deductible loss under the Indian tax law.
- A hack is considered an involuntary transfer, meaning you received zero consideration. This creates a 100% loss that still cannot reduce your tax liability on other gains.
- You are still required to report lost or stolen crypto in your ITR under Schedule VDA to avoid undisclosed income notices.
- Maintaining documentation, including a Cyber Cell FIR, transaction IDs, and wallet records, is essential for proving your assets are genuinely gone.
- From April 2026, Section 509 imposes strict penalties for not furnishing crypto statements and inaccurate reporting.
How does the ITD Tax Lost, Stolen & Hacked Crypto in India?
The absence of explicit guidance from the Income Tax Department does not mean lost or hacked crypto sits in a grey area. So, how does taxation apply on such transactions?
Is Lost, Stolen, or Hacked Crypto a Taxable Event?
No. Under Section 115BBH of the Income Tax Act, tax applies to the transfer of a Virtual Digital Asset (VDA). Since a hack or theft is an involuntary event with zero consideration received, it does not constitute a taxable transfer. Moreover, the Income Tax Department also does not treat an involuntary loss as a disposal that generates taxable income.
However, the relief ends there. While you are not taxed on the loss itself, you cannot use it to your advantage:
- The stolen or lost crypto is treated as simply gone. This means there’s no gain or loss.
- You cannot claim the cost of acquisition of the lost asset as a deduction against other income.
- There is no mechanism under Indian law to claim a refund or tax credit for assets lost to fraud or technical failure.
Taxation Scenarios
The tax treatment varies slightly depending on how you lost your crypto. Here is how each scenario is handled under the current framework:
Scenario | Tax Treatment | Action Required |
Hacked or Stolen Crypto | Not a taxable event, which means there’ll be no capital gains tax on the lost asset. However, loss cannot offset other gains. | File a Cyber Cell FIR immediately and maintain transaction IDs plus technical logs as proof. |
Lost Private Keys | Treated as an irrecoverable loss; the cost of acquisition cannot be used to offset other income. | Keep records of the original purchase and wallet address to show assets have not been moved voluntarily. |
Exchange Collapse | Assets are frozen, not transferred. No tax arises until a formal transfer occurs. Loss cannot be claimed until final settlement. | Monitor liquidation proceedings. A zero-value final settlement may qualify as a transfer for reporting purposes. |
The No Set-Off Rule
This is where the Indian tax law is at its most unforgiving. Section 115BBH(2)(b) creates an absolute prohibition on loss set-off, and it applies equally to involuntary losses from theft or hacking as it does to voluntary trading losses.
What this means in practice:
- A loss from a hack cannot be adjusted against gains from a profitable crypto trade.
- These losses cannot be claimed as business expenses, even if you are a professional trader.
- There is no carry-forward provision, the loss is permanently disallowed.
- Even a 100% loss on a stolen asset leaves your tax liability on other gains completely unchanged.
Real-Life Example:
A user on r/CryptoIndia reported that someone drained 1,500 USDT from their Trust Wallet through a P2P scam. The scammer posed as a buyer, convinced the user to share access via an AMI report, and disappeared after draining the wallet entirely.
Here is how this situation is treated under Indian tax law:
The Situation
- Asset lost: 1,500 USDT
- Assumed cost of acquisition: INR 1,24,500 (at INR 83 per USDT, assuming approximate rate on 3rd May 2025, as per the screenshot)
- Amount received in return: INR 0
- Nature of loss: Involuntary theft via social engineering scam
With the above situation in mind, here are the steps you can undertake for reporting taxes in India:
Step 1: Is This a Taxable Event?
No. Since the 1,500 USDT was stolen without the user’s consent and zero consideration was received in return, this does not constitute a voluntary transfer under Section 115BBH. No capital gains tax is owed on the stolen amount.
Tax on Stolen USDT = INR 0
Step 2: Can the Loss Be Claimed as a Deduction?
No. Under Section 115BBH(2)(b), the loss of INR 1,24,500 cannot be set off against any other crypto gains made during the same financial year. It is permanently disallowed.
Deductible Loss = INR 0
Step 3: What if the User Made Other Crypto Gains That Year?
Suppose the user also made a profit of INR 50,000 from selling Bitcoin earlier in the year. The stolen USDT loss offers absolutely no relief against this gain.
Tax on Bitcoin Gain = 30% × INR 50,000 = INR 15,000
Cess = 4% × INR 15,000 = INR 600
Total Tax Payable = INR 15,600
The theft does not reduce this liability by even a single rupee.
Step 4: What Should the User Do?
Even though no tax is owed on the stolen USDT, the user must still:
- File a complaint with the Cyber Cell on 1930 immediately and obtain a copy of the FIR
- Record the transaction ID of the unauthorised outflow from the Trust Wallet
- Reflect the stolen 1,500 USDT in Schedule VDA with zero sale consideration
- Ensure the asset is removed from Schedule AL in subsequent filings with supporting documentation.
So what does it mean for the user? The stolen USDT may be gone from your portfolio, but it still needs to be accounted for in the ITR. Failing to do so risks an undisclosed income notice from the Income Tax Department, adding a compliance problem on top of an already painful financial loss.
Case Study: The WazirX Hack (July 2024)
On 18th July 2024, India’s cryptocurrency community woke up to alarming news. WazirX, one of India’s largest crypto exchanges, confirmed a cyberattack that resulted in over USD 230 million, roughly INR 2,000 crore, from one of its multi-signature Ethereum wallets.
The attack, later attributed to the North Korea-linked Lazarus Group, wiped out nearly 45% of the exchange’s total reserves overnight.
What WazirX Did?
WazirX publicly acknowledged the breach through an official day-wise report on their blog, stating that the affected wallet was managed using Liminal’s digital asset custody and wallet infrastructure, and the attack deeply impacted their ability to maintain 1:1 collaterals with assets.
Trading and withdrawals were suspended immediately, a police complaint was filed with the National Cyber Crime Reporting Portal, and the matter was reported to the Financial Intelligence Unit (FIU) and CERT-In.
Who Were Affected?
The hack affected over 16 million WazirX users, leaving their funds frozen for months. By October 2025, after a Singapore High Court-sanctioned restructuring scheme, WazirX returned approximately 85% of user funds.
Recovery Tokens were issued for the remaining 15%, representing a stake in future platform profits.
What Does this Means for Affected Users Under Indian Tax Law?
The WazirX hack is a textbook example of the exchange collapse scenario from the taxation framework discussed earlier. Here is how the tax treatment applies to affected users:
- During the Freeze Period (July 2024 – October 2025): No taxable event arose. Since no transfer of assets occurred, the funds were simply inaccessible, users had no tax obligation on the frozen amount during this period.
- Upon the 85% Distribution: This partial recovery may qualify as a transfer event for tax purposes. The value received against the original cost of acquisition would determine whether a gain or loss arose. Given that users received less than their original holdings, most would likely face a loss, which, under Section 115BBH(2)(b), remains non-deductible.
- Recovery Tokens Received: These tokens may be treated as a new VDA upon receipt. Their fair market value at the time of distribution could be considered income, subject to applicable tax rules at the time of any future transfer.
- The 15% Unrecovered Amount: This represents an irrecoverable loss under the current framework. It cannot be set off against other gains, nor carried forward to future financial years.
What Affected Users Should Have Done and Still Should Do?
- Maintain records of original asset values as of 18th July 2024, the date of the hack
- Keep documentation of the exchange’s official communications confirming the freeze and restructuring
- Reflect the frozen assets accurately in Schedule VDA for FY 2024-25, with a note on the exchange collapse
- Reconcile the 85% recovery distribution in Schedule VDA for FY 2025-26, recording the value received
- Account for Recovery Tokens as a new VDA and track their fair market value from the date of receipt
- Ensure previously disclosed assets in Schedule AL are reconciled with the restructuring outcome across subsequent ITR filings
Note: The WazirX case remains an evolving situation. Tax treatment of Recovery Tokens and any future distributions may change as further guidance emerges. Users are strongly advised to consult a qualified crypto tax professional for personalised advice on their specific holdings and recovery amounts.
How to Report Lost, Stolen & Hacked Crypto in India?
Reporting lost or stolen crypto accurately is not optional, it is a compliance requirement. Failing to reflect missing assets in your ITR can trigger undisclosed income notices, particularly if those assets were previously declared in your Schedule AL or Schedule FA.
Step 1: File a Cyber Cell FIR Immediately
The moment you discover your crypto has been stolen or hacked, report it to your local Cyber Cell. This FIR is the foundational document that proves the assets are no longer in your possession. Without it, the Income Tax Department has no official record to support your claim of loss. Key documents to obtain and preserve:
- A copy of the Cyber Cell FIR with the date of the incident
- Acknowledgement of the complaint from the relevant authority
- Any communication from the exchange or platform confirming the breach
Step 2: Maintain a Thorough Audit Trail
Beyond the FIR, you need detailed technical evidence that the assets left your control involuntarily. This is what protects you during any scrutiny assessment. Maintain the following:
- The transaction ID (TXID) of the unauthorised transfer on the blockchain
- Screenshots or exports of your wallet showing the outgoing transaction
- Exchange statements confirming the hack or platform freeze
- For lost private keys, records of the original purchase and the wallet address showing no subsequent movement
Step 3: Update Schedule VDA in Your ITR
Even though the lost assets generate no tax liability, they must still be accounted for in your ITR. Navigate to Schedule VDA within your ITR-2 or ITR-3 and reflect the loss accurately.
Enter the date of acquisition, its cost, and note the asset as lost or stolen with zero sale consideration. This ensures the missing crypto is formally explained rather than flagged as an unexplained discrepancy.
Step 4: Reconcile Schedule AL and Schedule FA
If your lost crypto was previously disclosed under Schedule AL (Assets and Liabilities) or Schedule FA (Foreign Assets), its absence in subsequent filings must be explained. Failure to account for this discrepancy can trigger an undisclosed income notice from the Income Tax Department. Ensure your records clearly reflect:
- The asset was previously disclosed in the relevant schedule
- The reason for its absence is documented as theft, hack, or irrecoverable loss
- Supporting evidence such as the FIR and transaction records is retained for at least six years
TDS 2: Applies when the user exchanges USDT to get BTC.
Step 5: Comply with the 2026 Penalty Provisions
From April 2026, Section 509 has introduced significant penalties for non-compliance in crypto reporting. These apply directly to situations where lost or stolen assets are not accurately reflected in your ITR:
- INR 200 per day for non-furnishing of required crypto statements
- INR 50,000 for furnishing inaccurate particulars in crypto disclosures
Accurate and timely reporting is the only way to ensure that genuinely lost assets are not misread as deliberately hidden ones. Managing all of this documentation while simultaneously tracking your active portfolio is where things can become genuinely difficult, and that is precisely where KoinX steps in.
How can KoinX Help with your Lost, Stolen & Hacked Crypto?
Dealing with the aftermath of a crypto hack or theft is stressful enough without the added burden of navigating complex tax reporting requirements. KoinX is built to support Indian crypto investors through exactly these situations, ensuring your compliance obligations are met even when your portfolio takes an unexpected hit.
Accurate Transaction Classification for Lost Assets
KoinX automatically identifies and classifies transactions across your connected wallets and exchanges. When an unauthorised transfer or sudden outflow is detected, it flags the event separately, ensuring it is not misclassified as a voluntary disposal that generates a taxable gain.
Complete Audit Trail Across 800+ Integrations
KoinX connects with over 800 exchanges, wallets, and blockchains, consolidating your entire transaction history in one place. Every transaction is recorded with timestamps, wallet addresses, and asset values, giving you the detailed audit trail you need to demonstrate that a loss was involuntary and genuine.
Portfolio Visibility Across all Chains and Wallets
With real-time analytics and complete asset visibility across chains, exchanges, and wallets, KoinX gives you a unified view of your holdings. This makes it straightforward to identify discrepancies, reconcile missing assets, and ensure previously disclosed crypto is properly accounted for in subsequent filings.
Schedule VDA-Ready Reports that Reflect Lost Assets
KoinX generates ITR-ready tax reports structured to match the Schedule VDA format. Lost or stolen assets are reflected with zero sale consideration, ensuring your filing accurately represents your position without triggering unnecessary scrutiny.
Expert CA Support for Complex Cases
For situations involving exchange collapses, large-scale hacks, or multi-platform losses, KoinX connects you with verified Chartered Accountants who specialise in crypto taxation. They can review your complete transaction history, guide you through the reporting process, and ensure your ITR holds up under scrutiny.
Losing crypto is difficult enough on its own. KoinX makes it easier, ensuring every lost or stolen asset is accurately documented, correctly reported, and clearly explained to the tax authorities.
Conclusion
Losing cryptocurrency to a hack, scam, or technical failure is a painful reality for many Indian investors. The tax framework under Section 115BBH offers no deduction for these losses, but it equally imposes no capital gains tax on assets that are genuinely gone. The obligation, however, does not end there.
Accurate reporting, thorough documentation, and proper reconciliation of previously disclosed assets remain non-negotiable. With Section 509 penalties now in effect from April 2026, the cost of getting this wrong has never been higher. KoinX does the heavy lifting for you. So sign-up today and ensure every missing asset is accounted for and reported correctly.
Frequently Asked Questions
Is Stolen Crypto Traceable?
Yes. Blockchain forensics is a specialised discipline that analyses on-chain transaction data to follow the movement of stolen digital assets. Investigators use advanced tools to track funds across multiple wallets, identify clusters of related addresses controlled by the same actor, and flag high-risk wallets. Despite techniques like chain-hopping and mixing services such as Tornado Cash, a significant portion of stolen funds often remains traceable.
Can You Avoid the 30% Crypto Tax in India?
There is no legal way to avoid the 30% tax on crypto gains in India. However, strategies like buying and holding your cryptocurrency for the long term can help you minimise your tax liability by reducing the number of taxable events you trigger. But, remember, there aren’t any lower tax rates on long-term crypto gains. It only delays the tax, by not triggering a taxable event.
What if I Have Recovered Lost Crypto? Do I Still Have to Pay Tax?
Yes. If you recover previously lost or stolen crypto, the recovery itself may constitute a taxable event. The fair market value of the recovered assets at the time of recovery is treated as a fresh acquisition. Any subsequent sale or transfer of those assets will attract a 30% tax on gains under Section 115BBH, with the recovery value serving as the new cost of acquisition. Losses from such transactions cannot be set-off against gains.
How Much Crypto is Tax-Free in India?
Holding onto your cryptocurrency without engaging in any transactions is tax-free in India. Moving your crypto assets between your own wallets also does not attract any liability. You can receive crypto gifts without worrying about taxes if the gift value is up to INR 50,000 from friends and relatives, or any amount from close family members. However, any profit from selling, swapping, or spending crypto is taxed at a flat 30%.
