Cryptocurrency theft has reached levels that make it impossible for investors and tax professionals to ignore the intersection of criminal loss and tax law. FBI IC3 data shows that Americans lost $9.3 billion to crypto-related fraud in 2024 alone, and the 2025 figure surpassed $11 billion. Yet the Tax Cuts and Jobs Act of 2017 sharply restricted the conditions under which those losses generate a tax deduction a restriction in effect from 2018 through at least 2025. The IRS issued Chief Counsel Advice memorandum 202511015 in March 2025, clarifying which theft scenarios qualify under IRC Section 165, and the National Taxpayer Advocate has called on Congress to reform the restriction. On-chain analytics firms document a parallel escalation: total crypto stolen globally reached $2.2 billion in 2024 and $3.4 billion by end-2025, with North Korean state actors accounting for a disproportionate share.
At KoinX, we compile the statistical record underlying these compliance challenges from the volume of crypto theft globally to the specific deductibility thresholds and safe harbor percentages investors must navigate to claim what the law permits.
This article covers global crypto theft and fraud statistics, FBI enforcement and victim data, IRS deductibility rules for crypto theft losses with measurable outcomes, the Ponzi scheme safe harbor under Rev. Proc. 2009-20, North Korean state-sponsored theft statistics, and domestic investor loss figures by crime type.
Scope and Methodology
Statistics are drawn exclusively from primary sources published within the last 2 years: the FBI Internet Crime Complaint Center 2024 and 2025 Annual Reports; the FBI Operation Level Up official page; the Chainalysis 2025 Crypto Crime Report and 2025 Mid-Year Update and 2026 Crypto Crime Report Introduction; the TRM Labs 2025 Crypto Crime Report; the Elliptic Bybit hack analysis; IRS Chief Counsel Advice 202511015 (March 2025); the IRS Taxpayer Advocate Service blog post on CCA 202511015 (April 2025); the IRS Taxpayer Advocate Service tax tip on digital asset investment losses; the IRS Rev. Proc. 2009-20 primary document; the Journal of Accountancy analysis of CCA 202511015; and the Wilson Center Bybit heist analysis citing North Korean theft data.
Crypto Theft and Fraud Losses at a Glance: 2026 Statistics
- Approximately 3,200 cryptocurrency investment fraud complaints are filed with the FBI’s IC3 each month, with victims often unaware they are being scammed, based on the FBI Operation Level Up official page.
- Americans reported $3.9 billion in estimated losses from cryptocurrency investment fraud to IC3 in 2023, a figure the FBI notes is likely underreported as many victims do not file complaints, based on the FBI Operation Level Up official page.
- The average loss per IC3 complaint in 2024 reached $19,372, with 256,256 complaints resulting in actual monetary loss across all internet crime categories, based on CyberScoop’s 2025 analysis of the FBI IC3 2024 Annual Report.
- Cryptocurrency was used in 72% of investment fraud transactions and 43% of tech support scam transactions reported to IC3 in 2025, based on the CryptoBreak 2026 analysis of the FBI IC3 2025 Annual Report.
- FBI Operation Level Up has notified 8,103 victims of cryptocurrency investment fraud cumulatively, with 77% unaware they were being scammed at the time of contact, and has saved an estimated $511,511,288 in total potential losses, based on the FBI Operation Level Up official page.
- AI-enabled fraud generated $893 million in losses across 22,364 complaints reported to IC3 in 2025 the first year the IC3 Annual Report included a dedicated AI section based on the 2026 FBI IC3 2025 Annual Report.
- North Korean crypto theft attacks averaged nearly 5 times larger in monetary value than attacks by other threat actors in 2024, based on TRM Labs’ 2025 Crypto Crime Report.
- 80 victims contacted through FBI Operation Level Up were referred to an FBI victim specialist for suicide intervention, based on the FBI Operation Level Up official page.
FBI IC3 Crypto Theft and Fraud Loss Statistics: 2024
- The FBI’s IC3 received 149,686 cryptocurrency-related complaints in 2024, generating $9.32 billion in total reported losses comprising more than 56% of the record $16.6 billion in total internet crime losses across 859,532 complaints that year, based on the 2025 FBI IC3 2024 Annual Report.
- Crypto investment fraud in 2024 produced $5.8 billion in victim losses from 41,557 complaints, with the over-60 age group accounting for the most complaints at 8,043 and the highest losses at $1.6 billion, based on the 2025 FBI IC3 2024 Annual Report.
- Americans aged 60 and older filed 33,369 crypto-related complaints with IC3 in 2024, reporting total losses of $2.84 billion the highest of any age group based on The Block’s 2025 reporting on the FBI IC3 Annual Report.
- Cryptocurrency ATM fraud generated $246.7 million in losses in 2024 across 10,956 complaints, representing a 99% increase in complaint volume and a 31% increase in monetary losses compared to 2023, based on the 2025 FBI IC3 2024 Annual Report.
- Cyber-enabled fraud accounted for approximately 83% of all losses reported to IC3 in 2024, with 333,981 complaints generating $13.7 billion in losses, and investment fraud leading all fraud categories at $6.57 billion, based on CyberScoop’s 2025 analysis of the FBI IC3 2024 Annual Report.
FBI IC3 Crypto Fraud Statistics: 2025
- Americans reported $11.366 billion in losses linked to cryptocurrency in 2025, across 181,565 complaints out of 1,008,597 total IC3 complaints marking cryptocurrency as the single highest-loss category in the annual report and representing a 22% increase from 2024 levels, based on the 2026 FBI IC3 2025 Annual Report.
- Crypto investment fraud alone accounted for $7.2 billion in 2025 losses the highest source of financial damage among all cyber-enabled crimes based on the 2026 FBI IC3 2025 Annual Report.
- Investment fraud accounted for nearly 49% of all scam-related losses reported to IC3 in 2025, based on the 2026 FBI IC3 2025 Annual Report.
- Americans over 60 reported approximately $7.7 billion in total cybercrime losses in 2025, up 37% from 2024, with the age group remaining the most financially impacted demographic in IC3 reporting, based on the 2026 FBI IC3 2025 Annual Report.
- FBI Operation Level Up notified 3,780 victims of cryptocurrency investment fraud in 2025, saving an estimated $225.8 million, with 78% of those notified unaware they were being scammed at the time of contact, based on the 2026 FBI IC3 2025 Annual Report via Fox 13 Seattle.
IRS Deductibility Rules for Crypto Theft Losses: Measurable Outcomes
- The TCJA of 2017 disallowed personal casualty and theft loss deductions for individuals for tax years 2018 through 2025 an 8-year period during which personal crypto theft losses yield a $0 federal deduction limiting qualifying deductions to losses from a federally declared disaster or a transaction entered into for profit under IRC Section 165(c)(2), based on the April 2025 IRS Taxpayer Advocate Service blog post on CCA 202511015.
- IRS CCA 202511015 (March 2025) analyzed 5 hypothetical taxpayer scenarios involving 2024 theft losses and confirmed that pig-butchering investment scams involving profit-motivated transfers qualify as deductible theft losses under IRC Section 165(c)(2), while romance scams and personal protection scams are classified as non-deductible personal casualty losses, based on the July 2025 Journal of Accountancy analysis.
- Under the current TCJA framework (2018–2025), a deductible crypto theft loss is limited to the taxpayer’s original cost basis not the fair market value at time of theft meaning an investor who bought $10,000 in crypto that appreciated to $100,000 before being stolen may only deduct $10,000, based on the IRS Taxpayer Advocate Service guidance on digital asset losses.
- A theft loss deduction from a qualifying investment scam that creates a net operating loss can be carried back 3 years and forward 20 years, enabling victims to recover taxes paid in prior years, based on the IRS Ponzi scheme victim guidance via Nolo Legal.
- IRS Chief Counsel Advice 202511015 concluded that none of the 5 hypothetical 2024 taxpayer scenarios qualified for the Ponzi safe harbor under Rev. Proc. 2009-20 because none involved a Ponzi scheme with a formally charged lead figure, based on the July 2025 Journal of Accountancy analysis.
IRS Ponzi Scheme Safe Harbor: Rev. Proc. 2009-20 Statistics
- Under Rev. Proc. 2009-20, a qualifying investor who does not pursue potential third-party recovery may deduct 95% of their qualified net investment as a theft loss in the discovery year, while an investor pursuing third-party recovery is limited to 75%, based on the primary IRS Revenue Procedure.
- To qualify for the 95% or 75% safe harbor deduction under Rev. Proc. 2009-20, the lead figure in the scheme must have been charged or been the subject of a state or federal criminal complaint alleging fraud, embezzlement, or a similar crime, based on the IRS help page for Ponzi scheme victims.
- Theft loss deductions from qualifying Ponzi schemes under IRC Section 165 are not subject to the $3,000 annual capital loss limitation that applies to ordinary investment capital losses, meaning investors may deduct the full qualifying amount in the discovery year regardless of scale, based on the IRS Ponzi scheme victim guidance via Nolo Legal.
- Investment theft losses from qualifying Ponzi schemes under IRC Section 165 include not only the investor’s unrecovered principal but also fictitious income previously reported as taxable income and reinvested, allowing the deductible loss to exceed 100% of the cash amount originally invested, based on IRS Revenue Ruling 2009-9.
Global Crypto Theft Statistics: Chainalysis and TRM Labs Data
- Total cryptocurrency stolen from platforms reached approximately $2.2 billion in 2024 a 21% year-over-year increase with private key compromises accounting for 43.8% of stolen value, based on the 2025 Chainalysis Crypto Crime Report.
- Illicit cryptocurrency addresses globally received at least $40.9 billion in 2024, an initial estimate that Chainalysis projects will be revised upward to exceed $51 billion as additional illicit addresses are identified over time, based on the 2025 Chainalysis Crypto Crime Report.
- TRM Labs identified at least $10.7 billion in crypto funds sent to fraudulent schemes globally in 2024, with financial grooming schemes alone receiving more than $2.5 billion, based on TRM Labs’ 2025 Crypto Crime Report analysis.
- By mid-2025, over $2.17 billion had been stolen from cryptocurrency services exceeding the total for all of 2024 with 2025 reaching the $2 billion theft threshold in just 142 days versus 214 days in 2022, based on the 2025 Chainalysis Mid-Year Crypto Crime Update.
- Total crypto stolen across all platforms in 2025 reached $3.4 billion, with the February 2025 Bybit compromise by North Korean hackers representing the largest single incident in crypto theft history, based on the 2025 Chainalysis crypto hacking stolen funds analysis.
- Ransomware payments globally declined 35% year-over-year in 2024, despite ransomware groups adapting their tactics following major law enforcement takedowns, based on the 2025 Chainalysis Crypto Crime Report.
- Stablecoins represented 63% of all illicit crypto transactions in 2024 and 84% in 2025, overtaking Bitcoin as the preferred asset for cybercriminals and sanctioned entities, based on the 2025 Chainalysis Crypto Crime Report and 2026 Chainalysis Crypto Crime Report Introduction.
- North Korean hackers stole $1.34 billion in cryptocurrency across 47 incidents in 2024, representing 61% of all cryptocurrency stolen globally that year and the highest annual total from North Korean operations up to that point, based on the 2025 Chainalysis Crypto Crime Report.
- North Korea’s Lazarus Group stole approximately $1.5 billion in Ethereum from Bybit on February 21, 2025 the largest crypto theft in history with at least $160 million of those funds laundered within the first 48 hours, based on CSIS’s 2025 analysis of the Bybit heist.
- North Korean hackers stole $2.02 billion in cryptocurrency in 2025 a 51% year-over-year increase accounting for 76% of all service compromises globally, based on the 2025 Chainalysis crypto hacking stolen funds analysis.
- North Korea’s cumulative lower-bound total of cryptocurrency stolen since 2017 reached $6.75 billion by end-2025, based on the 2025 Chainalysis crypto hacking stolen funds analysis.
- In 2024, more than 12 crypto companies were infiltrated by North Korean hackers posing as legitimate IT workers to gain access to internal systems, based on CSIS’s 2025 analysis of the Bybit heist.
- Individual wallet compromises in 2025 surged to 158,000 incidents affecting 80,000 unique victims, though the total value stolen from individual wallets ($713 million) decreased relative to service-level hacks, based on the 2025 Chainalysis crypto hacking stolen funds analysis.
References
![[object Object]](/_next/static/media/ISO_27001-2022_certification.ae776691.svg)
![[object Object]](/_next/static/media/GDPR_Compliance.a2dc5933.svg)
![[object Object]](/_next/static/media/SOC_2_Type_II_certification.dd69381e.svg)
