Ponzi Scheme Safe Harbor for Crypto: Rev. Proc. 2009-20

Cover illustration for: Ponzi Scheme Safe Harbor for Crypto: Rev. Proc. 2009-20
A photo of Chris Herbst, Managing Director at global crypto tax reporting firm, CountDeFi & CH Consulting. CBAP (CIBA), GTP (SAIT).
By Chris Herbst
Managing Director at global crypto tax reporting firm, CountDeFi & CH Consulting
CBAP (CIBA), GTP (SAIT)
Category
Published On
Updated On
Update Due
Professional Support for Crypto Tax
October 20, 2026
October 20, 2026
August 16, 2027
The safe harbor's main advantage is certainty: the IRS will not challenge the theft loss, the year or the amount once its conditions are met.
CountDeFi Precision 7 System video

Watch: two minutes

The Precision 7 System: every exchange, wallet, chain and DeFi position reconciled and verified, then reported.

Book a free exploratory call

Short answer: the primary advantage of the Ponzi scheme safe harbor in Rev. Proc. 2009-20 is certainty. If you qualify and follow the procedure, the IRS will not challenge treating your loss as a theft loss, deducting it in the discovery year, or the amount computed as 95% or 75% of your qualified investment, less recoveries.

Without the safe harbor, a victim has to prove each of those points on the facts: that a theft occurred under state law, which year the loss was discovered, how much was lost, and that no reasonable prospect of recovery remained at the end of that year. Those questions are where theft loss claims usually stall, because a Ponzi collapse is followed by years of receivership, clawback suits and partial distributions. The safe harbor swaps the arguments for fixed answers.

This guide explains how the procedure works for a crypto investor: who qualifies, how the deduction is computed, how it is claimed on Form 4684, the promises you make by electing it, and why most crypto scams do not fit it. For the wider picture of scam, hack and fraud losses, read our guide to claiming crypto losses from scams, theft and fraud.

What Is the Ponzi Scheme Safe Harbor?

The Ponzi scheme safe harbor is an optional procedure the IRS published in the 2009-14 Internal Revenue Bulletin, alongside Rev. Rul. 2009-9, after a run of large investment frauds came to light. The revenue procedure says it responds to arrangements that "have been discovered to be fraudulent, resulting in significant losses to taxpayers." It was modified by Rev. Proc. 2011-58, and it applies to losses whose discovery year is a taxable year beginning after December 31, 2007.

The companion ruling, Rev. Rul. 2009-9 in the same bulletin, holds that a theft loss in a transaction entered into for profit is a theft loss, not a capital loss, under section 165, and that it is not subject to the personal loss limits in section 165(h). That ruling is the general law. The revenue procedure is the shortcut that sits on top of it.

Is the safe harbor mandatory?

No. It is an election. The revenue procedure sets out, in section 8, what happens to a taxpayer who does not use it: the general section 165 rules apply, and the taxpayer must establish the theft, the year of discovery, the amount of the loss and that no reasonable prospect of reimbursement exists in that year.

Does the safe harbor apply to crypto?

Nothing in the defined terms turns on the type of asset. A qualified investor is one who "transferred cash or property" to the arrangement, and the IRS treats digital assets as property, per its digital assets page. What decides eligibility is the shape of the fraud and whether the operator has been charged, which is where most crypto cases fail. That is covered further down.

Who Qualifies for the Safe Harbor?

A taxpayer can use the procedure only when four defined terms are all met. The IRS Chief Counsel lists them in memorandum 202511015: a qualified investor who incurred a qualified loss from a qualified investment in a specified fraudulent arrangement.

What is a specified fraudulent arrangement?

Section 4.01 of Rev. Proc. 2009-20 defines a specified fraudulent arrangement as one in which a party, the lead figure, receives cash or property from investors, purports to earn income for them, reports income amounts that are partially or wholly fictitious, makes payments, if any, of purported income or principal to some investors from amounts other investors invested, and appropriates some or all of the investors' cash or property. That is the classic Ponzi structure: promised returns, fictitious statements, and early investors paid out of later deposits.

What is a qualified loss?

A qualified loss needs official action against the lead figure. Under section 4.02 as modified by Rev. Proc. 2011-58, one of three things must be true:

  • The lead figure was charged by indictment or information, not withdrawn or dismissed, under state or federal law with a crime that would be theft for section 165 purposes.
  • The lead figure was the subject of a state or federal criminal complaint, not withdrawn or dismissed, and either the complaint alleged an admission or a receiver or trustee was appointed or the arrangement's assets were frozen.
  • The lead figure died before a criminal charge could be brought, a state or federal governmental entity filed a civil complaint alleging substantially all of the elements of a specified fraudulent arrangement, and a receiver or trustee was appointed or the assets were frozen.

Who is a qualified investor?

Under section 4.03 of Rev. Proc. 2009-20, a qualified investor is a United States person who generally qualifies to deduct theft losses under section 165 and the regulations, did not have actual knowledge of the fraudulent nature of the arrangement before it became known to the public, and transferred cash or property to the specified fraudulent arrangement. Amounts invested through a separate fund that itself invested in the arrangement are excluded from the individual's qualified investment.

How Is the Safe Harbor Deduction Calculated?

The computation has three steps, all set by sections 4 and 5 of Rev. Proc. 2009-20.

What counts as the qualified investment?

The qualified investment starts with the cash or the basis of property you invested. It adds income from the arrangement that you reported on your returns in years before the discovery year, where that income was consistent with information the arrangement gave you. It subtracts everything you withdrew. Income that was reported to you but that you never included on a return does not count, and neither do fees you already deducted.

For a crypto investor, two points matter. Property counts at its basis, not its value when you sent it, which matches the general rule that a theft loss is limited to adjusted basis, per CCA 202511015. And yield you reported as income on a platform that later proved fictitious raises your qualified investment, because you were taxed on it and never received it in substance. That makes a clean cost basis history for every deposit, withdrawal and reported reward the core of the claim.

Is the deduction 95% or 75%?

Section 5.02 multiplies the qualified investment by 95% if you are not pursuing any potential third-party recovery, or by 75% if you are pursuing or intend to pursue one. From that product you subtract any actual recovery received in the discovery year and any potential insurance or SIPC recovery. Potential direct recoveries from the responsible group and potential third-party recoveries do not reduce it further.

StepWhat goes inSource in Rev. Proc. 2009-20
Qualified investmentCash or property basis invested, plus prior-year reported income from the arrangement, less withdrawalsSection 4.06
Percentage95% with no third-party recovery pursued; 75% if pursuing or intending to pursue oneSection 5.02
Less actual recoveryAmounts actually received in the discovery year from any source as reimbursementSections 4.07 and 5.02
Less potential insurance or SIPC recoveryClaims at the end of the discovery year under insurance, protective contracts or SIPC advancesSections 4.08 and 5.02
Not deductedPotential direct recovery from the responsible group and potential third-party recoverySections 4.09, 4.10 and 5.02

An illustration with round numbers: an investor sends crypto with a basis of $100,000, reports $20,000 of platform yield as income in earlier years, and withdraws $30,000 before the collapse. The qualified investment is $90,000. With no third-party claim pursued and nothing recovered, the safe harbor deduction is 95% of that, $85,500.

What is the discovery year?

The discovery year is the investor's taxable year in which the indictment, information or complaint is filed, per section 4.04 of Rev. Proc. 2009-20. For the civil complaint route added by Rev. Proc. 2011-58, it is the year the civil complaint is filed or the lead figure dies, whichever is later. It is not the year you lost access to the platform or the year you gave up hope. That date is set by the court record.

How Do You Claim the Safe Harbor on Form 4684?

The claim is made on the return for the discovery year. Section 6 of Rev. Proc. 2009-20 requires a timely filed return, including extensions, with the form marked with the revenue procedure's name and number. The original procedure used a signed statement in Appendix A. The Form 4684 instructions now say Section C of Form 4684 replaces Appendix A.

Which lines of Form 4684 are used?

Per the 2025 instructions, Section C runs from line 40, the initial cash or property invested, through line 51. Line 42 takes net income previously included before the discovery year, line 44 the total withdrawals, line 48 recoveries actually received and line 49 potential insurance or SIPC recovery. The amount on line 51 goes to line 28 of Section B. The instructions say not to complete lines 19 through 27 for this loss, and then to complete Section B, Part II.

Where does the deduction end up?

Section B is the part of Form 4684 for business and income-producing property, which is where a theft loss from a transaction entered into for profit belongs. The instructions set out how it flows to the rest of the return. Rev. Rul. 2009-9 adds that a theft loss of this kind may create or increase a net operating loss under section 172, which is a separate computation your preparer handles.

What Do You Give Up by Electing the Safe Harbor?

The certainty has a price. By using the procedure you agree, under section 6.02 of Rev. Proc. 2009-20, to four things:

  • Not to deduct any amount of the loss in the discovery year beyond what the safe harbor computes.
  • Not to file amended returns for earlier years to exclude or recharacterize income reported from the arrangement.
  • Not to use the alternative computation in section 1341.
  • Not to use equitable recoupment or the mitigation provisions in sections 1311 to 1314 for income from closed years.

Can you amend earlier years instead?

Only outside the safe harbor. Section 8.02 says a taxpayer who amends earlier returns to exclude reported income must establish that the income was not actually or constructively received. The safe harbor instead lets that phantom income sit in the qualified investment and come back as part of the deduction. Which route is better depends on how much phantom income there is, which years are still open, and what the loss can absorb. Our guide on amending a crypto tax return covers the mechanics of the second route.

What happens if you recover money later?

Section 5.03 provides that a later recovery may give rise to income, or to an additional deduction, in the year it happens. If the receivership pays out more than the safe harbor allowed for, the excess is income in the year you receive it. If the final recovery is smaller than the computation assumed, the shortfall can be deducted then. The 75% path leaves room for that by holding back a larger share for the third-party claim.

Why Most Crypto Scams Do Not Qualify

The most useful document for crypto victims is Chief Counsel memorandum 202511015, released 14 March 2025. It walks through five scam victims from 2024, including one in a pig butchering scheme that promised large profits from a new cryptocurrency platform. Its conclusion on this procedure is direct: none of the five could use the Ponzi safe harbor.

Why did the memo rule the safe harbor out?

For four of the victims, the scam was not a specified fraudulent arrangement. The memo says the scammer did not purport to earn income for them and made no payments to some investors out of other investors' money; the funds were stolen outright. For the pig butchering victim, the memo says the scheme "may have arguably been" a specified fraudulent arrangement, but the loss was not a qualified loss because the scammer was never identified, charged or named in a criminal complaint.

Can a crypto scam victim still claim a theft loss?

Yes, under the general rules, when the facts support it. In the same memorandum, three of the five victims, the pig butchering victim among them, were allowed a theft loss deduction in 2024 because the loss arose in a transaction entered into for profit and there was no reasonable prospect of recovery. The other two were denied because their losses were personal casualty losses. The Form 4684 instructions say that for tax years beginning after 2017, personal-use theft losses are deductible only if attributable to a federally declared disaster, while theft losses in a transaction entered into for profit may be deductible.

Which crypto collapses fit the safe harbor?

The fit is a platform that took deposits, promised yield, showed account balances that turned out to be fictitious, paid earlier withdrawals out of later deposits, and whose operator was then charged or named in a criminal complaint, or died with a civil complaint filed and the assets frozen or placed with a receiver. If any one of those pieces is missing, the general theft loss rules apply instead, along with the burden of proving the timing and the reasonable prospect of recovery question.

Safe Harbor vs the General Theft Loss Rules

The two routes reach the same deduction from different directions. The table sets them side by side.

QuestionPonzi safe harborGeneral section 165 theft loss
Is it a theft?Not challenged once the conditions are metYou prove theft under state law
Which year?The discovery year, fixed by the charging documentThe year of discovery, with no reasonable prospect of recovery at year end
How much?95% or 75% of qualified investment, less recoveriesAdjusted basis, less recovery prospects you must assess
Earlier yearsNo amended returns for phantom incomeAmendment possible if the income was never received
Who it suitsInvestors in a charged Ponzi-type schemeVictims of scams where no one has been charged

Records To Keep for a Crypto Ponzi Loss

The safe harbor removes the arguments about timing and recovery, but not the need to prove the numbers. Line 40 to line 51 of Section C are only as good as the history behind them. Keep:

  • Every deposit to the platform, with the transaction hash and your basis in the asset sent.
  • Every withdrawal, in crypto or cash, with dates and amounts.
  • The account statements or dashboard captures showing the yield the platform reported, and the returns where you included that yield as income.
  • The charging document, criminal complaint or civil complaint that fixes the discovery year, and any receivership or asset freeze order.
  • Claim filings and correspondence with any receiver, trustee or insurer, which feed the recovery lines.

When a platform shuts down, its own export usually goes with it. Our guide on getting records after an exchange shuts down covers rebuilding the history from the chain, emails and bank statements, and accurate record keeping covers what to keep from day one.

Who Can Reconstruct a Ponzi Loss for Your Return?

The election itself is a few lines on Form 4684. The work is the qualified investment: tracing every deposit back to its basis, matching withdrawals across wallets and exchanges, and separating the income you reported from the income you did not. CountDeFi is a firm of US crypto tax accountants that reconstructs that history and hands the figures, with the transaction trail behind them, to your CPA or enrolled agent, who prepares and signs the return. Our crypto bankruptcy and theft loss accounting service covers collapsed platforms specifically, and our guide on who prepares crypto tax reports for your CPA explains how that handover works.

If you have received an IRS notice about income from a platform that later collapsed, read our guide to CP2000 letters for crypto traders before you reply.

Frequently Asked Questions

What is the primary advantage of the Ponzi scheme safe harbor?

Certainty. If you meet the conditions of Rev. Proc. 2009-20, the IRS will not challenge the theft loss treatment, the discovery year as the year of deduction, or the amount computed under the procedure, so you avoid proving timing and recovery prospects on the facts.

Do I use 95% or 75% of my qualified investment?

95% if you are not pursuing any potential third-party recovery, and 75% if you are pursuing or intend to pursue one, per section 5.02. Actual recoveries and potential insurance or SIPC recoveries are then subtracted.

Can I use the safe harbor for a crypto scam loss?

Only if the scam was a Ponzi-type arrangement and its lead figure was charged or named in a criminal complaint, or the civil complaint route applies. In CCA 202511015, none of five scam victims qualified, though three could deduct a theft loss under the general rules.

Can I amend earlier returns to remove fictitious yield if I elect the safe harbor?

No. Electing it means agreeing not to amend earlier returns to exclude or recharacterize income reported from the arrangement. That income instead increases your qualified investment and is recovered through the deduction.

What happens if the receiver pays me more later?

A later recovery can create income, or an additional deduction, in the year it occurs, per section 5.03 of the revenue procedure. It does not reopen the discovery year return.

Where is the safe harbor reported on my return?

On Section C of Form 4684, lines 40 to 51, for the discovery year. The Form 4684 instructions say to carry line 51 to line 28 of Section B and to skip lines 19 to 27 for this loss.

‍
Chris Herbst is the founder of CountDeFi, a crypto tax specialist whose qualifications span investment management, financial analysis, mathematical statistics and computer science. He holds the Chartered Business Accountant in Practice (CBAP) designation with the Chartered Institute for Business Accountants (CIBA) and the General Tax Practitioner (GTP) designation with the South African Institute of Taxation (SAIT). His combined background in investments, accounting and tax, mathematical statistics and computer science underpins his work in complex crypto tax reporting. This article is for educational purposes only and does not constitute tax, legal or investment advice. Consult a qualified tax professional for guidance specific to your situation. View our Editorial Policy.

Let's get your crypto taxes done.

Book a free, no-obligation exploratory call with us.