"I Never Cashed Out": Why the CRA Can Still Come Looking
By Dilan Ropero · Canada · August 2026
He started buying in 2017, never moved a dollar back to his bank account, and was completely certain he owed nothing. I see this exact story constantly, so let me use it, with the detail that it is a blend of many people and not one real person.
He moved exchanges twice, because two platforms shut down. He staked through an exchange for a couple of years. At some point he moved his coins to a hardware wallet. And he reported some of it. Not because he was hiding anything. Because nobody ever sat him down and explained that the thing he believed, the one that felt like common sense, was wrong.
The belief was this: "I never cashed out to my bank, so there is nothing to report." It feels airtight. It is also completely untrue, and it is the single most expensive assumption in crypto tax.
Why cashing out was never the trigger
Tax does not wait for Canadian dollars to land in your chequing account. It is triggered by a disposition, and a disposition happens in a lot of moments that have nothing to do with your bank. The clearest way to see it is to line up three things our composite investor did and notice that they are taxed in three completely different ways.
Trading one coin for another
Swapping Bitcoin for Ether is a disposition of the Bitcoin, valued in Canadian dollars at that moment. No cash involved, still a taxable event. This is the one people miss most.
Earning a staking reward
Rewards from staking are generally income at the value you received them, and then there is a second taxable event later when you sell or trade them.
Moving to your own hardware wallet
Sending your own coins from an exchange to your own wallet is not a sale. Ownership did not change. But you still need the records to prove it was a transfer, not a disposal.
Spending crypto directly
Buying something with crypto is a disposition too, at the Canadian-dollar value on the day. Even if it never felt like "selling."
Look at what that means for our investor. Two years of coin-to-coin trades and a couple of years of staking created a real tax history, with real gains and real income, and not one dollar of it showed up in his bank account. His mental test, "did money come out," was measuring the wrong thing entirely.
Then the records problem makes it worse
Here is where it gets genuinely unfair. When one of his old exchanges shut down, his purchase records went with it. What survived was the record of coins arriving on the next platform, with no cost attached. To the CRA's data, that can look like a gain built from nothing.
We have sat with people who actually lost money across a run of trades but showed an apparent gain on paper, purely because the cost basis was trapped inside a dead exchange. The tax was not the problem. The missing history was the problem. And the CRA does not fill that gap in your favour. You have to reconstruct it, and your obligation to keep those records does not disappear when the platform does.
How far back can the CRA actually go?
People assume that if they are fine for last year, they are fine. Two very different questions get blurred here, and pulling them apart is the whole point. There is how far back the CRA can ask you for records, and there is how far back it can legally reopen a specific tax year. They are not the same thing, and confusing them is what causes both false panic and false comfort.
Asking for records
Can reach back a long way. If you sold crypto in a recent year, the CRA can request records going back to when you first bought it, sometimes many years earlier, just to check your cost. That does not mean the older year is being reopened.
Reopening a year
Is narrower and rule-bound. For an individual, a filed year is normally settled three years after your Notice of Assessment. It can be reopened after that only in specific situations, which crypto has a way of triggering.
On the records side, the reach is wide. If the CRA opens a crypto review, the questionnaire it sends is not limited to the single year under review. In practice it is a long document, reportedly around 13 pages and more than 50 questions, asking about every exchange you have used, every wallet address you have controlled, your staking and mining activity, and where your funds came from. And even without a formal review, if you sold crypto in a recent year that is still open, the CRA can ask for records going right back to when you first acquired that crypto, purely to confirm your adjusted cost base. Being asked about 2018 does not mean 2018 is being reassessed. It often just means the CRA is checking the cost of something you sold in a recent year.
Reopening a past year is a narrower, more specific thing
For an individual, each personal tax year has a normal reassessment period of three years. That clock runs from the date on your original Notice of Assessment for that year, not from the date of the transaction and not from the filing deadline. Once those three years pass, the year is normally statute-barred and closed. There are real exceptions, though, and crypto has a way of landing in them.
- An extra three years, in specific cases only. This is not a general six-year crypto audit rule. It applies to particular situations, and the one most likely to reach a crypto holder involves foreign property. If you did not report income from specified foreign property and did not file the T1135 form, or filed it incorrectly, that year's window extends by three years. Certain non-arm's-length dealings with non-residents can extend it as well.
- No time limit at all where a filed return contains a misrepresentation attributable to neglect, carelessness, wilful default, or fraud, or where you have signed a waiver. In the CRA's own framing, misrepresentation can include ordinary neglect or carelessness, not only deliberate fraud.
- No limit where no return was filed. The three-year clock only starts once a return has been assessed. If a year was never filed, nothing ever becomes statute-barred, and the CRA can assess it whenever it chooses.
And the "ten years" you may have seen quoted is not a universal audit lookback. It generally refers to something else entirely: the ten-year limit on taxpayer-relief requests, the ten years of records the Voluntary Disclosures Program asks for on foreign-sourced items, or the roughly ten-year period the CRA has to collect a confirmed tax debt. None of those is a blanket rule that lets the CRA reopen any year within ten years.
So here is the honest version. For a year you filed cleanly and completely, the CRA generally has three years, and then it is closed. For a year with unreported crypto income, especially anything touching foreign exchanges, that three-year protection can stretch, or fall away entirely. That is exactly why unreported history is worth dealing with on your own terms rather than hoping it quietly ages out.
Get the Crypto History Reconstruction Worksheet
The same tool we use with clients. It walks you through rebuilding your complete history of records, including from exchanges that no longer exist, and shows you which events are actually taxable. Free, fillable, and yours to keep.
How to actually rebuild your complete crypto history
It sounds impossible until you break it into steps. This is roughly the order we work in, and it is the backbone of the worksheet above.
Start with what still exists. Log into every active exchange and export the full transaction history, not just the last year. Do this before an account lapses.
Search your email. Old confirmations of deposits, withdrawals, and trades carry the dates and amounts that rebuild a timeline when nothing else survives.
Pull your bank history. Every on-ramp and off-ramp left a footprint. That anchors the dollar amounts at the edges of your activity.
Trace your wallet addresses. Public addresses can be looked up on the blockchain to reconstruct transfers when exchange records are gone.
Be careful with software totals. Koinly and CoinTracker help gather data, but their headline number is only as good as what you imported. A missing dead-exchange cost quietly inflates the gain. Treat it as a draft, not the answer.
None of this requires you to be an expert. It requires you to be thorough, and to have someone who knows what a defensible reconstruction looks like check the result before anything gets filed.
What our composite investor should do now
He has a genuine choice, and it is the same one a lot of real people have right now. He can spend a few hours getting his history properly reconstructed and, if there is a gap, come forward on his own terms. Or he can wait, and let a CRA letter make that choice for him later, on worse terms. Same facts. Very different outcomes, depending only on who moves first. If you want the detail on why coming forward first is worth real money, we wrote about that in unprompted versus prompted.
Not sure what your history adds up to? Let us look at it with you.
A Crypto History Review is a free 15-minute call. You walk us through what you have found, and we give you a straight, honest read on whether there is a filing gap and what your options are. No reconstruction or filing needed to have the conversation, and we are always upfront about cost before any engagement.
Book your Crypto History ReviewQuick answers to what people ask us next
I only ever bought and held. Am I fine?
Buying with Canadian dollars and holding is not a taxable event on its own, so if that is genuinely all you did, there may be nothing to report yet. The catch is that most people did more than they remember: a swap here, a staking reward there. The worksheet helps you find out.
Moving coins to my own wallet is not taxable, right?
Correct, a transfer between your own wallets is not a disposition. But without records it can look like one, so you still need to document it. That gap is exactly what trips people up in a review.
One of my exchanges no longer exists. Is that history just gone?
Usually not. Between bank records, old emails, blockchain data, and any exports you saved, a defunct platform's activity can almost always be reconstructed. It takes work, but it is very doable.
What if I find a real gap once I reconstruct it?
Then timing matters a great deal. The CRA's Voluntary Disclosures Program can remove penalties and cut interest on unreported crypto. A letter from the CRA does not automatically shut the door, but coming forward before the CRA contacts you about the specific issue generally earns better relief, and once an audit or investigation on that issue is underway the program may no longer be available. That is a conversation worth having quickly, and it is what the call is for.
Sources
- CRA, Keeping records of your cryptocurrency transaction
- CRA, Guide for cryptocurrency users and tax professionals
- CRA, Voluntary Disclosures Program overview
- On the CRA crypto audit questionnaire (13 pages, 54 questions covering wallets, exchanges, and mining): David Rotfleisch, TaxPage
- On reassessment periods for individuals (three years from the Notice of Assessment; the further three-year extension; no limit for misrepresentation or unfiled returns): PwC, Canada Individual Tax Administration, and CRA, Reassessments