An HMRC letter may arrive after you cash out to a UK-linked bank account. You may also realise your Self Assessment return missed trades, swaps or staking rewards.
Risk of HMRC investigation: am I exposed? You may face HMRC scrutiny when exchange activity, bank movements and tax returns do not match. Holding crypto alone does not prove unpaid tax. Map each taxable event and keep its evidence. Returns can usually be amended within 12 months of the filing deadline. Older omissions may need a different disclosure route.
Your HMRC crypto exposure: check these five signals
Your risk is higher when your identity, crypto transactions and tax position clearly link together.
A quick exposure check: Add one point for each item: a KYC exchange account; crypto activity omitted for one or more tax years; GBP transfers between an exchange and a UK bank; Self Assessment figures that do not fit the activity; or an HMRC letter. A score of 0 to 1 usually calls for organised records. A score of 2 to 3 calls for a full tax review. A score of 4 to 5 needs careful, prompt action. This matters most if HMRC has set a deadline.
A score is not a verdict. It is like a smoke alarm: it tells you to check the kitchen, but does not prove there is a fire.
Useful signals include unreported gains after frequent trading, a large cash-out without purchase records, or staking rewards that may have gone unreported. HMRC still needs to establish the correct tax position.
Signals, evidence and prudent action
| Possible signal | Evidence HMRC may compare | Prudent action |
|---|
| Coinbase, Binance or Kraken account | KYC details and platform transaction data | Download full CSV and API histories |
| GBP paid into a UK bank | Bank statements and exchange withdrawals | Match each payment to its source |
| No crypto entry on Self Assessment | Returns, prior calculations and trading history | Check gains, losses and income separately |
| HMRC letter received | Letter type, period and stated deadline | Preserve records before replying |
Complex activity can create taxable crypto events, even when your wallet balance looks unchanged. A crypto-to-crypto swap is commonly a crypto disposal.
Wrapping or unwrapping a token may need separate review. The same applies to liquidity pools and lending interest. Repaying a loan with crypto or selling an NFT may also matter. The facts decide each case.
Staking rewards and some airdrops may be income when received. A later sale or swap can then need a separate capital gains tax calculation.
For DeFi activity, save transaction hashes and protocol statements. Save token amounts, GBP values, gas fees and each transfer's purpose. This helps separate internal transfers from undeclared gains or income.
Exchange data can identify you, wallets may not
HM Revenue & Customs can combine exchange KYC data, bank records and Self Assessment information. It can also use blockchain analysis. Public blockchain activity alone does not prove wallet ownership.
KYC creates an identity trail
KYC means “know your customer”. It usually confirms your name, address and photo ID. It may also ask about your source of funds.
GBP may move from Barclays, NatWest or Monzo to a verified exchange. That route may be easier to match than a wallet-only history. Buying and holding crypto is usually not a disposal.
Selling, swapping or spending crypto can create tax consequences. Gifting can also create tax consequences in many cases. Receiving taxable income may create them too.
On-chain visibility has limits
Blockchain analysis can follow movements between addresses. This includes wrapped tokens and decentralised-finance transfers. An analyst usually needs an identity link.
That link may be an exchange withdrawal or a known address. It may also be banking evidence, device evidence or information given during a check.
A visible wallet is not automatically an identified wallet.
⭐
Picked for you
A current UK-focused Bitcoin tax book can explain terms while you rebuild records. It should support your review. It cannot replace transaction evidence or tailored advice.
- Explains why swaps and spending crypto can create a disposal before any GBP cash-out
- Gives plain-English context for Self Assessment and capital gains tax records
- Helps separate routine learning from advice needed for an HMRC deadline
View on Amazon →
Crypto exchange data can reach HMRC through more than one route. HMRC may seek records from UK-connected platforms under its information powers. Overseas exchanges may also hold KYC data, transaction history and account balances.
International reporting arrangements or cross-border requests may make this data available. This does not mean every platform sends every account record automatically. Data access depends on the platform, country and legal route.
Where withdrawals match UK bank transfers, HMRC may compare both sides. Keep original exports. Do not rely only on figures rebuilt by a portfolio app.
An HMRC letter changes what you should do
A nudge letter, formal enquiry and Schedule 36 notice have different effects. An allegation of deliberate conduct also changes the risk. Read the heading, reference, tax years and deadline before replying.
Preserve evidence before you answer
Download original exchange CSV files and API histories before accounts close. Exports can also change. Save wallet addresses, transaction hashes, bank statements and fees.
Save earlier calculations and screenshots when platforms offer no export. Keep the files in their original form where possible.
- All exchange deposits, trades, withdrawals and fee records.
- Every wallet address, including hardware wallets and DeFi addresses.
- On-chain transfers, NFT purchases and sales, wrapping and unwrapping.
- Loans, liquidations, interest, staking rewards, mining income and airdrops.
- GBP bank transfers and the source of each initial crypto purchase.
- Earlier Self Assessment returns, capital losses and any tax software outputs.
Amend or disclose older omissions
You can normally amend a Self Assessment return within 12 months of the filing deadline. Older omissions may need voluntary disclosure. Check the facts before you take that step.
Normal assessment limits can reach four years. Careless errors can reach six years. Deliberate behaviour can reach 20 years. Do not guess figures just to meet a deadline.
- Is the return still within the amendment window? Calculate the corrected position. Then consider an amendment.
- Is the year older? Rebuild transactions. Work out tax, interest and losses before discussing disclosure.
- Has HMRC opened an enquiry or issued a notice? Do not treat it as a routine amendment. Get tailored help before making unsupported statements.
A nudge letter usually asks you to review your position. It may not open an HMRC crypto investigation. A formal Self Assessment enquiry is different.
It means HMRC has opened a statutory check into a return. It can ask questions about the stated tax years. A Schedule 36 information notice is more formal again.
It can require reasonably requested information or documents. Failure to comply may lead to penalties or appeal issues.
An allegation of deliberate behaviour is not a notice type. It is HMRC's view of how an error happened. It can affect time limits and penalties.
Keep full crypto tax records. Avoid guesses or speculative explanations. Consider disclosure only after you establish the relevant facts.
FAQs
Can HMRC investigate me just for using Coinbase?
Using Coinbase alone does not mean HMRC will investigate you or that you owe tax. A verified account may create identity-linked data. Tax depends on disposals, taxable income, records and what you reported.
Do small crypto gains trigger HMRC scrutiny?
Small gains can be taxable, but size alone does not decide whether HMRC contacts you. Repeated mismatches, omitted income or unexplained bank movements matter more than one modest transaction.
Is a crypto-to-crypto swap taxable in the UK?
A crypto-to-crypto swap is usually a capital gains tax disposal in the UK. You need the pound value at the swap time. This applies even if you received no GBP.
Should I reply to an HMRC nudge letter straight away?
You should meet the deadline, but first preserve and review your records. A nudge letter does not automatically start a formal enquiry. Its wording and requested action matter.
How risky are undeclared DeFi and staking rewards?
Undeclared DeFi and staking activity can carry high risk. Several taxable events may sit behind one wallet balance. Rewards may be income when received, while later sales or swaps may create capital gains tax.
What can a voluntary disclosure to HMRC cost?
A voluntary disclosure can involve unpaid tax, interest and penalties. The final amount depends on the facts. Penalties can range from 0% to 30% for some unprompted careless errors. Deliberate cases can be far higher.
Can HMRC see my private wallet?
HMRC may view public blockchain movements, but a wallet address is not automatically linked to you. Attribution often depends on exchange KYC data, bank transfers or other supporting evidence.
This framework does not replace tailored advice in some cases. These include formal enquiries, information notices and alleged deliberate behaviour. Complex residence, employment income, trusts, companies or major DeFi activity also need tailored advice. These situations can affect deadlines, disclosure strategy and penalties.
The essential points:- KYC exchange use can create an identity trail, but it does not itself prove unpaid crypto tax.
- Check swaps, staking, airdrops, NFTs and DeFi events, not only GBP withdrawals.
- Keep exchange, wallet and banking evidence before answering an HMRC letter.
- Amend returns still in time; assess older omissions carefully before any disclosure.
Related sources
These articles can help you explore the topic in more depth:
