The Ponzi scheme safe harbor is an optional IRS procedure that lets an investor in a fraudulent investment arrangement deduct a fixed percentage of the amount invested in a single year, without proving the timing and recovery questions that normally govern a theft loss. It was published as Revenue Procedure 2009-20 and modified by Revenue Procedure 2011-58.
The safe harbor replaces three factual questions with three fixed answers. The year of the loss is the year the scheme's lead figure is charged. The amount of the loss is a percentage of the qualified investment: 95 percent for an investor who is not pursuing any third-party recovery, 75 percent for one who is pursuing or intends to pursue one. The recovery analysis is reduced to two subtractions from that figure, actual recoveries received in the discovery year and any potential insurance or SIPC recovery.
In exchange, the investor gives up certain positions. The election is made on the return for the discovery year, by marking Revenue Procedure 2009-20 at the top of Form 4684 and attaching the statement set out in the procedure. The investor agrees not to amend earlier returns to remove the fictitious income the scheme reported, and takes the loss in the discovery year rather than any other year. Any part of the qualified investment not deducted under the safe harbor is not forfeited; it can be deducted in a later year under the general rules once the remaining claims are resolved, and any recovery beyond what was allowed for is income when received.
When three defined terms are all satisfied, and the asset being crypto is irrelevant to each of them. The arrangement must be a specified fraudulent arrangement: the operator received investors' cash or property, purported to earn income for them, reported income that was partly or wholly fictitious, paid some investors from others' deposits, and appropriated investor funds. The investor must be a qualified investor: a US person who invested directly, had no actual knowledge of the fraud before it became public, and is not using the arrangement as a tax shelter. The loss must be a qualified loss: the lead figure has been charged by indictment or information with fraud, embezzlement or a similar crime, or is the subject of a criminal complaint alleging one together with an admission, an appointed receiver or trustee, or frozen assets.
The third condition is where most crypto losses fall outside. A platform that froze withdrawals, a founder who vanished, or a scheme exposed only by on-chain investigators and journalists produces no indictment and no receiver. Investors in that position are outside the safe harbor and back under the general rules: theft loss in the discovery year under IRC Section 165(e), deferred to the extent of any reasonable prospect of recovery under Treasury Regulations section 1.165-1(d). Those rules can still produce a deduction. They demand more proof and offer less certainty.
The safe harbor does not change the character of the loss. Under it, the deduction is a theft loss in a transaction entered into for profit under Section 165(c)(2), consistent with Revenue Ruling 2009-9, and reported on Form 4684. It is not a capital loss and it is not available for an investment that merely fell in value or a platform that failed without fraud.
The percentage is applied to the qualified investment, and that figure is routinely wrong. It is the cash and the basis of property put in, plus fictitious income reported and reinvested, minus everything withdrawn, whether the withdrawal was labelled income or principal. Crypto investors who deposited ETH with a $1,200 basis when it was worth $3,000 tend to use the $3,000, and investors who took early withdrawals tend to forget them. Either error carries straight into 95 percent of the wrong number.
Read our 2026 Guide to Claiming Crypto Losses from Fraud, Scams, Theft
CountDeFi specializes in fraud, hack and theft loss accounting, including safe harbor elections, qualified investment computations and multi-year receivership tracking. See pricing.
