Crypto Tax Appeals: When You Owe HMRC Without Cashing Out
Swapping, spending or gifting crypto can trigger a tax bill even if you never withdrew cash. A plain-English guide to what HMRC taxes, how to disclose, and how to challenge its figures.
You can owe HMRC tax on your crypto even though you never moved a single pound to your bank account. That is the part almost everyone misses, and it is why a lot of people who feel they have "done nothing" are suddenly facing a bill. Swapping one coin for another is a taxable event in its own right—so is spending crypto, and so is giving it away. The cash never has to leave the exchange.
If a letter from HMRC has just landed, take a breath before you do anything. Owning crypto is not illegal and it is not tax evasion. A nudge letter is not a bill and not a finding that you owe anything—HMRC has not decided your case, it is asking you to check your position.
This article is your map. It explains what is actually taxable, how the gain is worked out (the maths is genuinely counter-intuitive), how to report and disclose past years, and—if HMRC's figures are wrong—how to push back. Around around 45% of people who appeal to the tax tribunal represent themselves, so this is written for you to use. Crypto tax gets complicated fast, though, and nothing here replaces advice on your own facts.
What's Even Taxable?
Crypto Is Property, Not Gambling Or Currency
Start with the single biggest misconception. Many people assume crypto is a flutter—like betting—and that winnings are therefore tax-free. HMRC's position is the opposite: it treats exchange tokens such as Bitcoin and Ether as property, not as currency and not as gambling, and its guidance is explicit that buying and selling cryptoassets is not gambling (CRYPTO10450). This is not just HMRC's view. The courts have recognised that a cryptoasset such as Bitcoin is property under English law (Tulip Trading Ltd v van der Laan [2023] EWCA Civ 83), and Parliament has since put the point on a statutory footing in the Property (Digital Assets etc) Act 2025. That property status is the foundation for taxing crypto as an asset.
For the large majority of individuals, holding crypto is treated as a personal investment. That means disposals fall under Capital Gains Tax (CGT)—the tax on the profit when you dispose of an asset—in the Taxation of Chargeable Gains Act 1992. HMRC's view is that an ordinary individual buying and selling crypto will be trading—and so taxed under Income Tax instead—only in "exceptional circumstances" (CRYPTO20250). So the default for most readers is CGT; we cover the income side, and the line between the two, further down.
The Four Disposal Events
Here is the trap that catches the most people. A disposal—the event that can crystallise a taxable gain—is not just "selling for cash." HMRC's guidance (CRYPTO22100) lists four things, and all of them count:
- Selling tokens for money. The obvious one.
- Exchanging one token for a different token. Swapping Bitcoin for Ether is a disposal of the Bitcoin, even though no cash was withdrawn. This is the headline trap: the gain is measured in pounds at the moment of each swap, so if you have traded between coins on an exchange, you have been making taxable disposals all along.
- Using tokens to pay for goods or services. Spending crypto is a disposal of the crypto you spent.
- Giving tokens away. Gifting crypto is a disposal at market value—unless the gift is to your spouse or civil partner, which is tax-neutral under the ordinary no-gain/no-loss rule for couples (section 58 TCGA 1992).
So someone who never withdrew a penny to their bank can still have years of reportable disposals from swaps and spends.
How The Gain Is Worked Out
Pooling: Why Your Maths Is Probably Wrong
Most people work out their gain wrong, because they assume each coin is matched to whichever one they bought first or last. UK CGT does not work that way for crypto. Tokens of the same type are added together by pooling into a section 104 pool—a single combined holding with a single averaged cost (section 104 TCGA 1992). When you dispose of some, you use a proportionate slice of that pooled cost, not the price of one specific coin. And there is one pool per type of token across all your wallets and exchanges combined—not a separate pool for each platform—so the Bitcoin you hold on one exchange and the Bitcoin you hold on another sit in the same pool.
Two special rules override the pool, and are applied first, in this order:
- The same-day rule (section 105 TCGA 1992)—tokens of the same type bought and sold on the same day are matched to each other.
- The 30 days "bed and breakfasting" rule (section 106A TCGA 1992)—if you sell and buy back the same token within 30 days, the disposal is matched to that later reacquisition rather than to the pool.
Only then does the section 104 pool mop up the rest (CRYPTO22200). Your allowable costs in the pool include what you paid for the tokens plus transaction and exchange fees (CRYPTO22150). One exception: NFTs are not pooled—each is tracked on its own. If you have done more than a handful of trades, this is where crypto tax software or an adviser earns its keep.
The Rates And Allowance—And Why The Date Matters
This is the part to get right, because the figures changed partway through 2024 and the rate that applies depends on the date of disposal, not the year HMRC happens to assess you. A disposal in August 2024 is taxed at the old rates even if HMRC raises the assessment in 2026. Crypto gains are taxed at the rates for assets that are not residential property:
| When you disposed | Rate within the basic-rate band | Rate above the basic-rate band |
|---|---|---|
| Up to and including 29 October 2024 (and earlier years) | 10% | 20% |
| On or after 30 October 2024 | 18% | 24% |
The tax-free annual exempt amount also fell:
| Tax year | Annual exempt amount |
|---|---|
| 2023-24 | £6,000 |
| 2024-25 onwards | £3,000 |
The practical message: never apply today's rate to an old disposal. If you are reconstructing several years, bucket each disposal by its date and apply that period's rate and allowance—HMRC assessing now still uses the year-of-disposal figures. One quick filter before the rates matter at all: if your total gains for a tax year, after deducting any losses, come to less than that year's annual exempt amount, there is no CGT to pay for that year—though you may still need to report, and the notification duty below can still apply.
A Worked Example
Suppose you bought 1 BTC for £20,000 in 2021, and on 15 January 2025 you swapped it for Ether when the Bitcoin was worth £35,000. That swap is a disposal at £35,000, so your gain is £15,000 (ignoring fees, and assuming this is your whole pool). Because the disposal fell in 2024-25, the £3,000 allowance applies, leaving £12,000 chargeable; and because it fell after 30 October 2024, the rate is 18% or 24% depending on your income band. No cash changed hands—the bill came purely from moving one coin to another.
When It's Income, Not A Gain
CGT is the default, but some crypto activity is taxed as income instead. Where the line falls usually turns on the badges of trade—the factors courts use to decide whether an activity is a taxable trade, set out in full in our guide to online platform income and nudge letters.
Income Tax (rather than CGT) typically arises on:
- Crypto received as pay. Tokens paid by an employer are earnings—taxable as employment income with National Insurance, with the employer generally operating PAYE on the sterling value at receipt because tokens are usually "readily convertible assets" (CRYPTO21100).
- Mining and staking. These are trading income if the activity amounts to a trade (judged on its scale, organisation, risk and commerciality); otherwise the sterling value at receipt is miscellaneous income (CRYPTO21150, CRYPTO21200).
- Airdrops. Tokens received for nothing—not in return for anything and not as part of a trade—are generally not Income Tax on receipt. But tokens received "in return for, or in expectation of, a service" are income (CRYPTO21250).
- DeFi lending and staking returns. DeFi means decentralised finance—lending or staking tokens through automated protocols for a return. Here HMRC's guidance treats the capital-versus-income question as fact-dependent: its factors (CRYPTO61214, updated November 2025) include whether the return was fixed and known at the outset (pointing towards income) or speculative and at risk (pointing towards capital). HMRC says no single factor decides it, and because this guidance is still evolving, the label on any DeFi return is arguable rather than settled.
The thread running through all of these: receiving tokens as income and later disposing of them are two separate taxable events, the disposal a CGT event in its own right.
How You Report It
There are two routes to report and pay (GOV.UK, "Check if you need to pay tax when you sell cryptoassets"):
- Self Assessment. You report crypto gains and income on your annual tax return, which has a dedicated cryptoasset section from 2024-25 onwards; for earlier years it went on the capital gains pages.
- The Capital Gains Tax real time service, an online HMRC facility for reporting a gain during the year rather than waiting for the return.
One myth to bust directly: the 60-day reporting-and-paying deadline you may have heard about is specific to UK residential property and does not apply to crypto, which goes on the annual return or the real-time service. We cover it in our guide to CGT 60-day reporting appeals; the only reason to mention it here is to be clear it is not your deadline.
If you are not in Self Assessment but have a liability, there is a separate duty to notify HMRC—by 5 October following the end of the tax year (section 7 TMA 1970). Missing that has its own consequences, covered below.
How HMRC Knows—And The Nudge Letter
The "they'll never find out" assumption is finished. HMRC has obtained customer data directly from UK-based exchanges for years, and from here it gets far more comprehensive.
The UK has adopted the OECD's Cryptoasset Reporting Framework (CARF)—the crypto equivalent of the bank-account information-sharing that already underpins offshore enforcement. Under the Reporting Cryptoasset Service Providers Regulations 2025 (SI 2025/744), the rules apply from 1 January 2026. The first reporting period is the 2026 calendar year, with the first reports due to HMRC by 31 May 2027. The UK went further than the baseline: providers must also report on UK-resident customers (announced at the Autumn Budget 2024), so HMRC is set to receive data on UK taxpayers using both UK-based and overseas platforms.
If a letter has landed, it is almost certainly a "nudge letter"—what HMRC calls a "one to many" letter, the same template sent to many people whose data suggests they might have something undeclared. As our guide to online platform income and nudge letters explains, it is not a formal enquiry and not an assessment.
Two practical points carry straight across. First, respond even if you owe nothing—silence is the one thing that reliably makes matters worse, because it can turn a soft prompt into a formal enquiry. Second, these letters often enclose a "certificate of tax position." Professional bodies including the CIOT and LITRG have cautioned that the certificate has no statutory basis, that you are not legally required to sign it, and that a false declaration carries its own risk; many people write back setting out their position rather than signing the form. And because HMRC-impersonation scams exist, you can check any letter against the list of genuine HMRC contacts first.
Coming Clean: The Cryptoasset Disclosure Service
If you owe tax for past years, coming forward is cleaner than waiting to be assessed. HMRC runs a dedicated Cryptoasset Disclosure Service (CDS)—an online facility for disclosing unpaid Income Tax and CGT on cryptoassets, for individuals, executors, trustees and partnerships (GOV.UK, "Tell HMRC about unpaid tax on cryptoassets").
How many years you disclose depends on your behaviour, mirroring the assessment time limits:
- 4 years if you took reasonable care,
- 6 years if you were careless (failed to take reasonable care), and
- up to 20 years if the failure was deliberate.
After you submit, HMRC issues a payment reference and you must pay within 30 days of submitting the disclosure.
If you genuinely cannot pay in one go, do not let that stop you disclosing: HMRC can agree a Time to Pay instalment plan, and you can set out what you can afford through its difficulties paying HMRC service. Interest keeps running on the balance, but an agreed plan is far better than a missed payment or an undisclosed liability.
Two warnings, because the CDS is not the same as the offshore Worldwide Disclosure Facility (WDF). Unlike the WDF, the CDS has no separate notification stage—you cannot register an intention to disclose and so cannot lock in "unprompted" status before you do the work. The practical risk: if HMRC writes to you while you are still preparing, your disclosure becomes prompted, which carries a higher minimum penalty. And like the WDF, the CDS gives no immunity from prosecution and no special penalty deal—you self-assess penalties under the ordinary rules. We explain the disclosure-facility mechanics and the penalty floors in our guide to offshore income and the 200% penalty; for the mitigation that disclosure quality can earn, see reducing HMRC penalties.
None of that is a reason not to disclose—and the prosecution warning needs to be kept in proportion. Criminal prosecution is reserved for the most serious, deliberate fraud; HMRC settles the overwhelming majority of disclosures through the civil penalty system instead. Coming forward voluntarily points away from fraud—it is protective, not the thing that triggers a prosecution. Being treated more favourably for disclosing than for being caught is exactly why getting the figures and the behaviour analysis right matters.
The Offshore Myth: Why A Foreign Exchange Usually Isn't "Offshore"
Here is a point that is widely misunderstood and usually works in your favour. People assume that because their crypto sat on an exchange based abroad, it is an "offshore" matter—and brace for the heavier offshore penalties and the long 12-year reach. Usually it is not.
HMRC's guidance (CRYPTO22600) is that an exchange token with no underlying asset is situated where its beneficial owner is resident. So a UK resident's tokens are treated as UK-situated wherever the exchange or wallet sits—with two consequences:
- Failure-to-notify penalties fall in the ordinary Category 1 band—a maximum of 30% (non-deliberate), 70% (deliberate) or 100% (deliberate and concealed)—not the loaded offshore categories that can reach 150% or 200%.
- The 12 years offshore assessment time limit generally does not apply, because UK-situated tokens are not an "offshore matter" simply because the platform is overseas. The ordinary 4-, 6- and 20-year limits apply instead.
Be clear-eyed about the status of this, though. This is HMRC's published position, not settled law—there is no binding tribunal or higher-court decision fixing crypto situs, so it is followed in practice but remains arguable. For the offshore penalty categories and the 12-year limit this point lets most crypto escape, see offshore income and the 200% penalty.
Lost, Stolen Or On A Collapsed Exchange
If your loss came from losing access, a hack, a scam or an exchange going under, this section is for you—and it asks for honesty rather than false comfort, because the rules are stricter than most people expect. Losing crypto does not automatically create a deductible loss that wipes out your gains.
- Lost private keys. Misplacing the key to your wallet is not a disposal, because the tokens still exist on the ledger (CRYPTO22400). You have not parted with them in the eyes of the law.
- Theft and fraud. HMRC does not treat theft as a disposal either, on the basis that you still own the stolen asset and have a right to recover it (CRYPTO22450). Someone who paid for tokens they never received may not be able to claim a capital loss at all.
So where does relief come from? The route is a negligible value claim under section 24 TCGA 1992. If you still own tokens that have become essentially worthless, you can claim they are treated as sold and immediately reacquired at their (possibly nil) value, crystallising an allowable loss (CRYPTO22500). Two points to absorb: the claim must be made for the whole section 104 pool, not cherry-picked tokens; and proving that something has become of negligible value—and the date it did—can be contentious, especially when an exchange collapses and assets are tied up in administration. Whether a failed exchange gives you a claim turns on whether you still hold an asset that has become worthless—so it is fact-dependent, and worth advice before you assume a loss is available.
If HMRC's Figures Are Wrong
If HMRC raises an assessment you think is too high, you can challenge it—but it helps to understand how the ground is laid out.
HMRC expects a record of every transaction: token type, date, units, sterling value, pooled costs and wallet addresses. Where records are missing—an exchange has closed, or you never kept them—HMRC may assess on its best estimate, and on appeal the burden is generally on you to displace that estimate (section 50(6) TMA 1970). A bare "I can't remember" rarely beats an HMRC figure at the tribunal, so reconstruct what you can from exchange histories and blockchain explorers. If the records genuinely cannot be rebuilt—an exchange has vanished, taking your history with it—the answer is still not silence: make a documented, good-faith best estimate, write down the method and assumptions behind it, and keep whatever partial evidence you have. A transparent figure you can explain and stand behind beats no figure at all. Our guides to how to appeal to the tax tribunal and HMRC enquiries and closure notices cover the mechanics.
Two further lines of challenge:
- Reasonable excuse. A penalty (not the tax) can be set aside if you had a reasonable excuse for the failure. Crypto's novelty and complexity are commonly argued—but "I didn't know there was an obligation" rarely succeeds where the duty was clear. See what is a reasonable excuse? and Perrin v HMRC for the structured test.
- The assessment's validity and timing. Many crypto assessments are discovery assessments under section 29 TMA 1970, raised outside a return. Was there a valid discovery? Was it in time—within the 4-, 6- or 20-year limit that actually applies? Our guides to discovery assessments and Wilkes v HMRC explain those hurdles. If the assessment falls away, the penalty geared to it usually falls with it.
Whatever the ground, mind the clock. You normally have 30 days from the date of the decision to appeal. And remember that interest runs automatically on unpaid tax from the original due date—at the current rate of 7.75%—separately from any penalty, so factor it into your real exposure.
One honest note that cuts both ways: while the courts have confirmed that cryptoassets are property, there is no settled crypto tax case law. No tribunal has yet ruled on the crypto-specific tax questions, so they apply the ordinary CGT and income-tax principles—and share-dealing authority—by analogy. This area rests on HMRC's guidance plus the general principles of the TCGA 1992, not a body of crypto tax precedent—so HMRC's positions, on situs, on DeFi and on negligible value, are arguable rather than gospel.
What To Do Now
- Don't ignore it—but don't panic. A nudge letter is a prompt to check, not a bill, and a foreign exchange usually is not "offshore." Silence tends to escalate matters.
- List every disposal—including the ones that don't feel like disposals. Sales, swaps between coins, spending crypto on goods, and gifts (except to a spouse or civil partner) all count.
- Reconstruct your records. Download transaction histories from each exchange and use blockchain explorers to fill gaps, capturing token, date, units, sterling value and costs.
- Work out which years and which behaviour band apply. Bucket disposals by date for the right rate and allowance, and assess honestly whether any failure was careless or deliberate—that drives both the years and the penalties.
- Consider the Cryptoasset Disclosure Service before HMRC writes. Coming forward is generally treated better than being found—but pay within 30 days, and you cannot lock in "unprompted" status first.
- Get advice for the hard cases. Large liabilities, anything potentially deliberate, DeFi, and collapsed-exchange or negligible-value claims are where professional help most reliably pays off.
- Protect your appeal right. If an assessment or penalty does land, you normally have 30 days to appeal. Free help is available from the Low Incomes Tax Reform Group (litrg.org.uk) and TaxAid (taxaid.org.uk).
Key Legislation And Resources
Legislation
- Section 104, TCGA 1992—the pooling rule for fungible tokens
- Section 105, TCGA 1992—the same-day matching rule
- Section 106A, TCGA 1992—the 30-day "bed and breakfasting" rule
- Section 24, TCGA 1992—negligible value claims for tokens still owned that have become worthless
- Section 58, TCGA 1992—the no-gain/no-loss rule for gifts between spouses and civil partners
- Section 7, TMA 1970—duty to notify chargeability by 5 October
- Sections 29, 34 and 36, TMA 1970—discovery assessments and the 4-, 6- and 20-year time limits
- Schedule 41, Finance Act 2008—failure-to-notify penalties (Category 1: 30% / 70% / 100%)
- The Reporting Cryptoasset Service Providers Regulations 2025 (SI 2025/744)—the UK's CARF rules, in force from 1 January 2026
- Property (Digital Assets etc) Act 2025—confirms cryptoassets can be a distinct ("third") category of personal property under English law
HMRC Guidance
- HMRC Cryptoassets Manual—HMRC's full guidance, including disposals (CRYPTO22100), pooling (CRYPTO22200), location/situs (CRYPTO22600), lost keys and theft (CRYPTO22400/22450), negligible value (CRYPTO22500), income events (CRYPTO21000 series) and DeFi (CRYPTO61214)
- Check if you need to pay tax when you sell cryptoassets—reporting via Self Assessment or the real-time CGT service
- Tell HMRC about unpaid tax on cryptoassets—the Cryptoasset Disclosure Service and the behaviour-based years
- Capital Gains Tax rates and allowances—current rates and annual exempt amount (with the previous-year figures at the rates-and-allowances guidance)
- Genuine HMRC contact and recognising phishing—to check a letter is really from HMRC before you respond
On This Site
- Online platform income and nudge letters—the badges of trade and what a nudge letter is and isn't
- Offshore income and the 200% penalty—disclosure mechanics and the offshore penalty/time-limit contrast crypto usually escapes
- CGT 60-day reporting appeals—the 60-day property rule that does not apply to crypto
- Reducing HMRC penalties—mitigation and disclosure quality
- What is a reasonable excuse?—the penalty defence
- Perrin v HMRC—the four-step reasonable-excuse test
- Discovery assessments—the section 29 gateway and time limits
- Wilkes v HMRC—a discovery challenge in practice
- HMRC enquiries and closure notices—how an enquiry and assessment unfold
- How to appeal to the tax tribunal—the appeal procedure and the burden of proof
- Self-assessment penalties—the failure-to-notify and late-filing context
- Interest on unpaid tax—why interest adds up alongside the tax
This article is for informational purposes only and does not constitute legal or tax advice. For advice specific to your situation, consult a qualified tax adviser, accountant, or solicitor.