Potential insurance or SIPC recovery is the amount an investor may get back from an insurance policy, a contractual guarantee against loss, or the Securities Investor Protection Corporation. In crypto it is usually small or nil: SIPC covers securities and cash at member broker-dealers, not crypto, and few platforms carry insurance that pays customers directly.
SIPC protects customers of failed member broker-dealers against missing securities and cash, within statutory limits. Crypto held on an exchange or in a wallet is outside that protection, and the major crypto platforms are not SIPC members for their crypto business. A platform that also offers securities trading through a separate broker-dealer entity may carry SIPC coverage on that side only.
Insurance is more varied. Some exchanges hold crime insurance on the assets in their own custody, which protects the platform and may or may not flow through to customers. Some custodians offer cold storage policies. A small number of DeFi cover protocols sell protection against smart contract exploits or stablecoin depegs, paid out in crypto after a claims vote. A personal policy covering theft of digital assets is rare. Whether any of these gives an investor a claim depends on the policy terms and whether the loss is a covered event.
It reduces the deduction under both routes, and it does so before anything is paid. Under IRC Section 165(a) a loss is deductible only to the extent it is not compensated for by insurance or otherwise, and under Treasury Regulations section 1.165-1(d) a claim for reimbursement with a reasonable prospect of recovery delays the loss for the amount it may cover. An insurance claim is the classic reimbursement claim. A theft loss on a wallet covered by a valid policy is not sustained, for the covered amount, until the claim is paid or refused.
The Ponzi scheme safe harbor gives the term a precise meaning. Revenue Procedure 2009-20 defines potential insurance/SIPC recovery as the amount of all actual or potential claims for reimbursement that, as of the last day of the discovery year, are attributable to insurance policies in the name of the investor, contractual arrangements other than insurance that guaranteed or protected against loss of the investment, and amounts payable by SIPC. That amount is subtracted in full from the safe harbor deduction, unlike claims against the scheme itself, which are not subtracted at all, and unlike a third-party recovery claim, which affects only the percentage. If the insurance claim later pays less than the amount subtracted, the shortfall is deductible in the year that becomes certain.
For most crypto investors the arithmetic is short. No SIPC claim exists, the platform's own crime policy does not name the customer, and no personal policy responds, so the potential insurance or SIPC recovery is nil and the qualified loss is the full 95 or 75 percent figure. The point of stating it is to show that the question was asked and answered, since platforms often advertise insured custody and the return should reflect what that cover actually did for the customer.
Platform reimbursement gets counted twice. Where an exchange was hacked and announced it would make customers whole from its own reserves or its policy, that announcement is a reimbursement claim with a reasonable prospect of recovery, and the loss is deferred until the reimbursement lands. Reports that book the theft loss in the hack year and then treat the reimbursed coins as a fresh acquisition with a new basis double count the loss. The reimbursed units carry the original basis, and the loss on them was never sustained.
Read our 2026 Guide to Claiming Crypto Losses from Fraud, Scams, Theft
CountDeFi specializes in fraud, hack and theft loss accounting, including custody insurance analysis, exchange reimbursement tracking and safe harbor recovery schedules. See pricing.
