CRA Audit Letter About Crypto? A Gambler's Survival Guide
- Why You Got the Letter (and What the CRA Already Knows)
- What the CRA Typically Asks Crypto Users For
- How to Respond Without Hurting Yourself
- The Records That Decide the Outcome
- When to Call a Professional — and Which Kind
- What the CRA Asks For, and Where It Actually Lives
- The Clock Once a Letter Turns Into a Reassessment
Why You Got the Letter (and What the CRA Already Knows)
Crypto letters rarely come out of nowhere. The CRA has obtained bulk customer data from major exchanges through court orders, receives international account data under the OECD's crypto reporting framework as it phases in, and runs matching between exchange records, bank e-transfers and filed returns. If you ever completed KYC at an exchange to buy your gambling bankroll, assume the CRA can see the fiat on-ramp — what it usually cannot see is what happened after the coins left, which is exactly the gap the letter is asking you to fill.
Not every letter is an audit. Most start as a "review" or questionnaire — a request for information with a deadline, typically 30 days. The severity ladder runs from an education letter (no response needed, but a warning shot), to a processing review, to a full audit with a named auditor. Read which one you have before panicking; respond to all of them on time.
What the CRA Typically Asks Crypto Users For
Crypto questionnaires are broad by design. Expect requests for:
A list of all wallets and wallet addresses you control, and all exchange accounts, foreign and domestic.- Full transaction histories — CSV exports from exchanges, on-chain history for self-custody wallets.
- How you valued transactions in CAD, and how you calculated adjusted cost base for reported gains.
- The source of funds for large purchases — where the money that bought the coins came from.
- Whether you held foreign property over the T1135 threshold in the years under review.
For a gambler, the sensitive line is the source and destination of transfers to unknown addresses. Those are your casino deposits and winning withdrawals, and you should be prepared to identify them as such — accurately and calmly, since gambling itself is not illegal and recreational winnings are generally not taxable, as we set out in the main winnings guide.
How to Respond Without Hurting Yourself
The rules that keep small reviews from becoming big audits: never ignore the deadline — silence leads to an arbitrary reassessment based on what the CRA can see, which is always worse than your real numbers, and asking for an extension in writing is routine. Answer what is asked, precisely and completely, and volunteer nothing beyond it — "here are the records for the 2024 and 2025 years requested" is a complete answer. Never guess: an estimate presented as fact that later unravels damages your credibility on everything else. Put responses in writing and keep copies; if an auditor calls, confirm the conversation by email afterward. And stay factual about the gambling — the position "these transfers were deposits to online casinos; winnings are windfalls; here is my session log and my capital gains reporting on the coins" is a coherent, defensible story when your records back it.
The Records That Decide the Outcome
Audits are won by paper, and the winning file for a crypto gambler looks like this: a per-session log (date, casino, coin, amount in, amount out); TXIDs for deposits and withdrawals, which prove direction and timing on-chain; timestamped CAD valuations for every disposition — a tracker export works, and how Koinly and CoinTracker handle casino flows; a running ACB worksheet per coin; and casino account statements where they exist. Players at no-KYC casinos should note the flip side of privacy: the operator will never produce a statement for you, so your own log plus the blockchain is the entire defence. Start the log before the letter, not after — reconstructed records are legal but visibly weaker.
When to Call a Professional — and Which Kind
Handle it yourself if it is a simple processing review, the amounts are small, and your records are clean. Bring in a CPA experienced with crypto the moment a named auditor appears, the letter spans multiple years, T1135 is mentioned, or the CRA hints your gambling might be business income — that classification fight is worth professional fees many times over. Go a step further to a tax lawyer if there is any suggestion of gross negligence penalties or unreported income you know is real: lawyer communications are privileged, accountant ones generally are not, and a lawyer can bring the accountant in under privilege. If you have old unreported gains and no letter yet, ask about the Voluntary Disclosures Program before the CRA writes first — it only works while you approach them.
This article is general information, not tax advice. If a real letter is sitting on your table, the next call is to a licensed CPA — not a forum, and not a chatbot.
What the CRA Asks For, and Where It Actually Lives
Knowing the category of document a letter asks for is only half the job — the harder half is knowing where that document actually comes from when you don't already have it filed away. Five requests come up in almost every crypto review, and each one has a different source and a different recovery path if the drawer is empty.
| What the CRA asks for | Where it actually lives | What to do if you don't have it |
|---|---|---|
| Full list of wallets and addresses you control | Exchange KYC records, plus address reuse across your own withdrawals | Pull KYC exports from every exchange used, then trace deposit addresses on a block explorer |
| Full transaction history per exchange | The exchange's own CSV or tax-report export tool | Request the history directly from support if self-serve export doesn't reach the older years |
| Crypto deposit and withdrawal records from casinos | On-chain TXIDs, plus a casino account statement where the operator issues one | Match wallet withdrawal TXIDs to casino deposit addresses by date and amount |
| Adjusted cost base calculation | Rebuilt from exchange history and casino withdrawal values — no single platform hands over a finished number | Reconstruct it chronologically, coin by coin, from the earliest acquisition you still hold |
| Proof a win was a windfall, not business income | Session logs, bet sizing, other income sources — evidence you create, not a platform record | Start a forward-looking log now; flag that reconstructed history for past years is weaker evidence |
Source: CRA crypto-asset compliance guidance and the categories used in standard information requests.
The pattern across all five rows is the same: nothing you need was designed to be handed to you pre-assembled. Exchanges keep transaction ledgers because securities and tax law force them to, not because a Canadian gambler will need it later; casinos keep statements, when they keep them at all, for their own dispute records; and the CRA has never published an ACB calculator, because the calculation depends on facts only you hold. The one item nobody can reconstruct after the fact is the session log tied to the windfall-versus-business question — a bank statement shows a deposit landed, but only your own notes show whether that session was recreational or run like a trade.
That last gap is also where the stakes are highest, since the classification question decides whether winnings are taxed at all — the full reasoning behind it lives in our guide to whether crypto casino winnings are taxable in Canada. If the letter also references a foreign-property threshold, the records question doubles: you now need cost-amount figures for everything held offshore, not just the casino flows, which is its own reconstruction exercise covered in our T1135 guide for offshore casino wallets.
The Clock Once a Letter Turns Into a Reassessment
A letter that starts as a simple questionnaire can, a few exchanges later, turn into a reassessment with real deadlines attached — and the deadlines are not all the same length, or even fixed by rule. Knowing which stage carries a hard date and which one is set case-by-case by the person handling your file changes how much slack you actually have.
| Stage | Typical window | If you miss it |
|---|---|---|
| Information request letter | Deadline stated on the letter itself | The CRA can proceed on the numbers it already has, without your side of the story |
| Extension request | Set by the auditor, granted case-by-case | Not guaranteed — ask before the original deadline passes, not after |
| Proposal letter, before reassessment | Response window set by the auditor | Silence lets the proposed numbers become the actual reassessment |
| Notice of Objection | 90 days from the reassessment date; for an individual, whichever is later of one year after the filing deadline or 90 days from the notice | The right to object lapses; a late-filing extension can be requested, but only within about a year of the missed deadline, and only the CRA can grant it |
| Voluntary Disclosures Program | Only available before the CRA has contacted you about that specific issue | Once a review or audit starts on that issue, the program is closed to it |
Source: CRA's published objection deadlines for income tax reassessments (canada.ca).
The two rows worth reading twice are the ones without a fixed number. Nothing in CRA's published material sets a universal number of days for an extension or a proposal-letter response — both run on the auditor's own schedule, which is precisely why the earlier advice on this page to ask for extensions in writing matters: a verbal understanding about a moving deadline is the easiest thing to lose in a dispute later.
The Notice of Objection is the one hard, published deadline in the whole sequence, and individuals get more room than corporations do — a detail worth knowing before assuming the clock is shorter than it is. Missing it does not necessarily end the matter, since a late-filing extension exists, but it is discretionary, time-limited itself, and a worse position than simply objecting on time. None of this changes what decides the underlying dispute, which is still the paper described earlier on this page — the clock only decides whether you get to present it.
Keep exploring
- Best Crypto & Bitcoin Casinos in Canada — our full top-10 ranking.
- Do Koinly & CoinTracker work for casino deposits? — the records that answer most audit questions before they escalate.
- No-KYC crypto casinos — privacy from the casino is not invisibility from the CRA.