ATO Crypto Tax Records: What Every Australian Investor Has to Keep (and for How Long)
The ATO has data-sharing agreements with every Australian-registered cryptocurrency exchange. It receives transaction-level information from CoinSpot, CoinJar, Swyftx, Independent Reserve, BTC Markets and the rest, and cross-references that against the cryptocurrency questions on every Australian income tax return. If you have transacted in crypto, the ATO already knows. What it does not yet know is whether your records reconcile with what they have on file — and that is where record-keeping obligations start to matter. This guide covers what every Australian crypto investor has to keep, in what format, and for how long.
What the ATO actually expects
Section 262A of the Income Tax Assessment Act 1936 requires every Australian taxpayer to keep records sufficient to substantiate every entry in their tax return. For crypto, the ATO has translated that general obligation into a specific set of records: the date of each transaction, the AUD value of the transaction at the time it took place, the purpose of the transaction, and the other party (where known).
These records must be kept for at least five years from the date the relevant tax return is lodged. For an asset held for many years before disposal, that effectively means keeping the acquisition records for the full holding period plus five years after the year of disposal. For someone who bought Bitcoin in 2017 and sells in 2030, the acquisition records from 2017 need to survive until 2035 — a thirteen-year retention window.
What specific records to keep
The ATO’s published guidance lists the following as records that must be kept: receipts of purchase or transfer of cryptocurrency, exchange records, records of agent, accountant and legal costs, digital wallet records and keys, software costs related to managing tax affairs, dates and AUD value of crypto received, and details of who you transacted with.
In practice, the records you most need are: (1) the exchange CSV downloads from every Australian exchange you have used, (2) the on-chain transaction history for every wallet address you control, (3) the AUD market price on each transaction date (preferably sourced from a publicly auditable price service like CoinGecko or CoinMarketCap), and (4) any wallet-to-wallet transfers you have made between your own addresses (these are not CGT events but are critical for matching cost bases).
Why this matters for cost-basis tracking
The ATO accepts FIFO, LIFO, HIFO, average-cost and specific-identification as cost-basis methods, with specific-identification being the most flexible for Australian investors who can identify the exact parcels they are disposing of. To use specific-identification you have to be able to demonstrate which parcel was sold — that demonstration is only possible if your records cleanly track every acquisition and disposal.
Most retail investors default to FIFO because their record-keeping is not granular enough to support specific-identification. That is acceptable, but it is often not the most tax-efficient method. If you want the flexibility to choose, your records have to be clean enough to support the choice.
The exchange data the ATO sees
Through Australia’s data-matching protocols, the ATO routinely receives the following from registered exchanges: the customer identity (full name, address, date of birth), the date and AUD value of each AUD deposit and withdrawal, the date and AUD-equivalent value of each crypto trade, and the wallet addresses used for on-chain transactions. The data-matching window typically covers two financial years, though the ATO publishes refreshes of this protocol periodically.
This means a return that omits crypto activity already known to the ATO is the single highest-probability trigger for ATO contact. The ATO does not need to prove the activity exists — they already have the records from the exchange.
Wallet-to-wallet transfers
Transferring cryptocurrency between your own wallets (for example, from your Swyftx account to your Ledger) is not a CGT event. It is also one of the most commonly mis-recorded activities in retail Australian crypto records. Without explicit notation that the destination wallet is your own, the ATO has no way to distinguish a transfer from a disposal — which can result in the transfer being treated as a sale at the prevailing market price, with the corresponding tax liability.
Best practice is to maintain a list of every wallet address you own, with the date you opened it and the wallet type. Reconcile transfers between your addresses explicitly in your records. Any half-decent crypto tax tool (Koinly, CryptoTaxCalculator) will do this for you if you label the wallets — but you have to actually label them.
Records for staking, airdrops, and DeFi
For staking rewards and airdrops, you need the date received, the AUD value at the time of receipt, and the source. The ATO treats both as ordinary income at the AUD value on the day received, with that AUD value becoming the cost base for future CGT purposes.
For DeFi activity, records should cover every on-chain interaction, the smart contract involved, the AUD value of every asset received or disposed of, and (critically) the gas fee in AUD. DeFi gas fees are deductible against the relevant capital gain or treated as part of the cost base, but only if you have the records to support the deduction.
What the ATO does not currently track
The ATO has direct visibility into registered Australian exchanges. It does not have direct visibility into self-custody wallets, foreign exchanges, decentralised exchanges, or peer-to-peer transactions. That does not mean these are invisible — chain analytics tools used by the ATO can in principle follow funds from a known Australian exchange address onto chain, and reconstruct subsequent activity. But the depth of visibility falls off the further you are from a known Australian exchange touchpoint.
The practical implication is that records are the only way to credibly establish your position on activity the ATO did not directly observe. Without records, the ATO’s default position is to treat the activity in whatever way maximises the assessed liability — which is usually not the position the taxpayer would have chosen.
How long to keep records
At least five years from the date the relevant tax return is lodged. For acquisitions, that effectively means the longer of (five years from the year of acquisition) or (five years from the year of eventual disposal). For Bitcoin and other long-held assets, this is a multi-decade retention obligation.
Records can be kept digitally. The ATO does not require paper. Reasonable practice is to maintain a single archive (a cloud-stored folder, with appropriate access controls) containing every exchange CSV download, every wallet address list, and an export of your crypto tax tool data for each financial year.
Verdict
Crypto record-keeping in Australia is more demanding than most retail investors realise. The ATO sees the exchange data already, the retention window is at least five years from lodgement, and the consequences of poor records are higher tax bills and audit risk. The right defensive posture for every Australian crypto holder is: download every exchange CSV at the end of every financial year, maintain a clean wallet-address list, use a tax tool that produces auditable reconciliations, and archive everything. The cost of doing this is small. The cost of not doing it can be very large.
Related guides
- The definitive australian crypto tax guide
- Australian crypto tax for investors, traders and DeFi users
- How the ato tracks cryptocurrency in australia
- Koinly Review (Australia): How the ATO-Ready Crypto Tax Tool Stacks Up
- Airdrop Tax in Australia: How the ATO Treats Free Tokens, Staking Rewards and Hard Forks
- DeFi Tax in Australia: Lending, Borrowing, Liquidity Pools and the Mess of CGT Events
Frequently asked questions
How long do I have to keep crypto tax records in Australia?
At least five years from the date the relevant tax return is lodged. For long-held assets, that often means a holding-period-plus-five-years retention window — potentially more than a decade.
What crypto records does the ATO require?
Date, AUD value, purpose and counterparty of each transaction; exchange CSVs; wallet addresses you control; receipts for any related agent, accountant or software costs.
Does the ATO already know about my crypto?
If you have used a registered Australian exchange, yes — the ATO has direct data-matching agreements with every AUSTRAC-registered local exchange. Returns that omit known crypto activity are a high-probability audit trigger.
Is a wallet-to-wallet transfer a taxable event?
No, as long as both wallets are yours. But you need clear records establishing that the destination address is one you control — otherwise the transfer can look like a disposal.
Can I keep crypto records digitally?
Yes. The ATO does not require paper. Best practice is a single archived folder containing exchange CSVs, wallet address lists and tax-tool exports for each financial year.
Important Australian disclosure — The information in this article is general and educational only. It does not constitute personal financial product advice and should not be relied on as such. Cryptocurrency products are highly volatile and many crypto exchanges or platforms operating in Australia are not licensed by ASIC. You should consider whether crypto suits your objectives, financial situation and needs before making any decision. Tax treatment varies by individual circumstance — consult a registered tax agent or financial adviser, and refer to the official guidance at ato.gov.au and moneysmart.gov.au.
