A CRA letter about missing receipts or unreported crypto is a solvable problem when you respond with organized evidence and a clear plan. The Canada Revenue Agency expects you to support every income and expense figure on your returns.
It also accepts reconstructed records when originals are gone, provided the substitutes are reliable and traceable.
If you face a CRA audit with missing receipts, rebuild the records from third-party sources (bank statements, exchange ledgers, supplier copies), correct any unreported crypto before the CRA raises it, and treat the file as a civil audit until the CRA's purpose shifts toward prosecution. Most audits stay civil.
Timelines run from a few months to well over a year, driven mostly by how complete your responses are.
At Beganyi Law, we advise Ontario business owners on corporate and tax matters, and we see the same pattern repeatedly: taxpayers who answer early and precisely keep control of the outcome. A Canadian tax lawyer can help you meet your tax obligations without conceding more than the law requires.
If a letter has already arrived, you can call us at +1 647-977-7749 or arrange a confidential consultation, including remotely from anywhere in Ontario.
Key Takeaways
- Third-party records can replace lost receipts when they tie clearly to your claims.
- Correcting unreported crypto before CRA contact earns the strongest relief.
- Deadlines after a reassessment are strict, so calendar them immediately.
How Can You Rebuild Evidence When Records Are Missing?
You rebuild missing records by obtaining copies from the parties that created them and reconciling those copies against your tax returns, line by line. The CRA's own audit guidance tells taxpayers to request copies from banks and suppliers first, then work with the auditor on alternative ways to confirm amounts.
What Should You Do First After Receiving a CRA Letter?
Read the letter closely and identify three things: the tax years under review, the specific items requested, and the response deadline. Then send nothing until you know what you have.
Practical first steps we recommend:
- Preserve everything. Do not delete emails, wallet apps, or old exchange accounts. Destroyed records create far bigger problems than missing ones.
- Inventory your gaps. List each requested item and mark it as available, obtainable, or lost.
- Request copies now. Banks, card issuers, and exchanges can take weeks to produce older statements.
- Contact the auditor if you need time. A short written request explaining what you are gathering is far better than silence.
- Get advice before any interview. What you say in a tax audit becomes part of the record.
The law requires you to keep books and records for at least six years from the end of the last tax year they relate to. If electronic records were lost or damaged, the CRA expects you to report it and recreate them within a reasonable time.
Which Alternatives Can Support Missing Receipts and Purchase Costs?
The CRA defines a "record" broadly: invoices, statements, emails, contracts, images, and any other proof containing information. That breadth works in your favour.
Missing item | Acceptable substitutes |
|---|---|
Expense receipts | Credit card statements, cancelled cheques, supplier duplicate invoices, email order confirmations |
Cash purchases | Expense journal entries with vendor name, address, date, amount, and description |
Crypto purchase cost | Exchange trade ledgers, bank transfers to the exchange, archived account exports |
Equipment costs | Warranty registrations, shipping records, financing agreements |
For crypto, the hardest gap is usually the adjusted cost base. The ACB is generally the cost of the asset plus acquisition expenses.
If original exchange records are gone, bank withdrawals to the platform and historical price data for the transaction date can establish a defensible figure. Document your method so the auditor can follow it.
A statement alone rarely proves the business purpose of an expense. Pair it with a contemporaneous note, calendar entry, or client email showing why you incurred it.
How Do You Reconcile Bank Deposits, Exchange Records, and Wallet Transfers?
Auditors often start with your bank deposits and ask you to explain any amount that does not match reported income. Your job is to classify each deposit before they do.
Build a single spreadsheet with these columns: date, source account, destination, amount, crypto units, CAD value at the time, and classification (income, loan, transfer between own accounts, gift, capital proceeds). Transfers between wallets you own are not taxable dispositions, but you must prove ownership of both ends.
Keep wallet addresses, screenshots of wallet balances, and exchange withdrawal confirmations showing the destination address. The CRA lists what crypto records should contain: units and type, date and time, CAD value, the nature of the transaction, the counterparty (even if only an address), and opening and closing wallet balances with cost for each year.
Matching that format strengthens your tax compliance position immediately.
What Should You Do About Unreported Cryptocurrency?
Unreported crypto income should be quantified and corrected as early as possible, ideally through the Voluntary Disclosures Program before the CRA identifies the issue. The CRA has multiple data sources linking Canadians to exchange activity, and its access to foreign platform data is expanding in 2027.
Which Transactions Create Income or Capital Gains?
Under Canadian tax law, you dispose of crypto when you sell it for dollars, trade it for another token, spend it on goods or services, or gift it. Swapping bitcoin for an altcoin is a taxable event even though no Canadian dollars changed hands.
Characterization drives the tax result:
- Capital gains: If you held as an investor, half the gain is included in income. Allowable capital losses offset only taxable capital gains and can be carried back three years or forward indefinitely.
- Business income: Frequent trading, short holding periods, market expertise, debt financing, or substantial time spent point toward business treatment, where 100% of profit is taxable.
- Staking and mining: Staking rewards on a centralized exchange are generally income when credited to your wallet. Mining at scale is normally a business, and equipment such as ASIC miners can qualify for capital cost allowance in class 50.
- NFTs: Sales and swaps follow the same disposition rules, with characterization depending on your pattern of activity.
How Does the CRA Link Exchange Accounts to Blockchain Activity?
Canadian exchanges collect identity documents under know-your-customer rules and report to FINTRAC as money services businesses. That exchange KYC data is the anchor point for CRA crypto audits.
The CRA can obtain client data in bulk through an unnamed persons requirement, a Federal Court order compelling a business to disclose information about an identifiable group of clients. The CRA has used this tool in the crypto-asset sector, including a well-known order against Coinsquare.
Once the CRA has a name and a deposit address, blockchain analytics tools such as Chainalysis can trace funds through public ledgers to other wallets you control. In practice, moving coins to a self-custody wallet does not break the trail. The on-ramp and off-ramp transactions remain tied to your identity.
What Could International Reporting Reveal About Offshore Crypto?
Offshore exchanges are becoming visible to the CRA. Canada is part of the Joint Chiefs of Global Tax Enforcement (J5), an alliance of five tax agencies that shares intelligence on crypto-related tax evasion and has published risk indicators for financial institutions.
Canada also committed to the OECD's Crypto-Asset Reporting Framework (CARF), with participating jurisdictions aiming to begin automatic information exchanges by 2027. Under CARF, crypto service providers abroad will report Canadian customers' transactions to their home tax authority, which shares the data with the CRA.
Foreign holdings also raise a separate reporting duty. If your offshore assets exceed the threshold, a missed Form T1135 carries its own penalties, independent of any unreported gains.
Can the Voluntary Disclosures Program Help Correct Past Returns?
Yes, if you apply before an audit or investigation begins on the same issue. Since October 1, 2025, the VDP has two relief tiers:
Application type | Interest relief | Penalty relief |
|---|---|---|
Unprompted (general relief) | 75% | 100% |
Prompted (partial relief) | 25% | Up to 100% |
An application is prompted if it follows CRA correspondence identifying a specific error, or if the CRA already holds third-party information about you. An education letter alone does not make it prompted.
Accepted applications also receive protection from criminal prosecution, and gross negligence penalties will not apply to the disclosed information. Expect to include ten years of records for foreign-sourced income or assets and six years for Canadian-sourced amounts, plus payment of estimated tax or a payment arrangement request. An anonymous pre-disclosure discussion is available if you are unsure whether to proceed.
When Does Tax Verification Become a Criminal Matter?
A file becomes criminal when the CRA's predominant purpose shifts from verifying tax owing to gathering evidence of an offence. That shift changes which powers the CRA may use and which rights protect you.
What Information Can the CRA Require During a Civil Audit?
During a civil audit under the Income Tax Act and the Excise Tax Act, the CRA can compel production of records and answers to questions. Refusing to provide required books and records is itself an offence.
Auditors can examine business ledgers, personal bank and credit card statements, and records of spouses, family members, related corporations, and trusts. They can speak with your bookkeeping staff.
Your obligation is to provide relevant records and complete, timely explanations, though you can and should make sure answers are accurate before giving them.
How Does the Predominant Purpose Test Affect Investigative Powers?
The Supreme Court of Canada set the rule in R v Jarvis: once the predominant purpose of an inquiry is determining penal liability, the CRA must stop using compulsory audit powers against you and proceed with criminal investigative tools such as search warrants.
Signs the purpose may be shifting include an auditor suddenly going quiet, a referral to the Criminal Investigations Program, or questions focused on intent and knowledge. The CRA prioritizes significant evasion with an international element, organized schemes, money laundering, and underground economy cases.
If you suspect a change, stop voluntary interviews and get legal advice immediately.
How Do Gross Negligence Penalties Differ From Tax Evasion Charges?
Gross negligence penalties are civil and assessed administratively. Tax evasion is a crime prosecuted in court.
Feature | Gross negligence penalty | Tax evasion charge |
|---|---|---|
Nature | Civil, imposed by the CRA | Criminal, prosecuted by the PPSC |
Standard | Knowingly or under circumstances amounting to gross negligence | Wilful evasion proven beyond reasonable doubt |
Amount | Greater of $100 or 50% of the understated tax | Court fines, possible jail, criminal record |
Challenge route | Notice of objection, then Tax Court | Criminal trial defence |
A separate 10% penalty applies for repeated failure to report income of $500 or more within a four-year window. Criminal investigations usually take years, and the CRA refers files to the Public Prosecution Service of Canada to decide whether criminal charges proceed.
What Do Solicitor-Client Privilege and Charter Protections Cover?
Solicitor-client privilege protects confidential communications with your lawyer made to obtain legal advice. The CRA cannot compel those communications.
Accountant communications do not carry the same privilege, which is one reason sensitive exposure analysis is often structured through counsel. Once a criminal purpose exists, the Canadian Charter of Rights and Freedoms protects you against unreasonable search and seizure and against compelled self-incrimination. Evidence obtained in breach of the Jarvis line can be challenged and potentially excluded at trial.
What Determines the Timeline and Outcome of Your File?
The state of your records and the speed of your responses determine most of the timeline, and the deadlines after a reassessment determine whether you keep your appeal rights. A CRA crypto audit with incomplete exchange data runs longest.
Why Can an Audit Take Months or Longer?
The CRA names the main drivers itself: record quality, audit scope, delays from missing records, and consultation with other CRA specialists. Crypto files frequently need specialist input on valuation and characterization.
A straightforward expense review with organized records can close in a few months. Multi-year crypto reviews involving several exchanges, DeFi activity, or related corporations commonly stretch past a year.
How Can Complete Responses and Requested Extensions Reduce Delays?
Answer each numbered request with a numbered response and an index of attached documents. Partial answers trigger follow-up letters, and each round adds weeks.
If you need more time, ask in writing before the deadline and give a specific date. Auditors usually grant reasonable extensions when you show progress, such as a pending bank request.
If an issue stalls, the auditor's team leader is the next contact, and their details appear on all audit correspondence.
What Happens After an Audit Proposal or Reassessment?
If the auditor finds adjustments, you receive a proposal letter and generally have 30 days to respond. This is your best opportunity to submit new evidence and arguments before positions harden.
After that, the CRA issues a final letter and a notice of reassessment (or, for first-time filings, a notice of assessment). Interest accrues on tax owing from the original due date.
The auditor can estimate the balance before the notice issues, letting you pay early and stop interest growth.
When Must You Object or Appeal to the Tax Court of Canada?
File a notice of objection within 90 days of the reassessment date. Individuals have a fallback of one year after the filing due date for that tax year, whichever is later.
Collection on disputed amounts is generally postponed while the objection is pending, though interest continues. If Appeals confirms the reassessment, the Tax Court of Canada must receive your notice of appeal within 90 days of that decision.
You can also appeal if Appeals has not decided your objection within 90 days of filing it. Missing either deadline can end your rights entirely.
Build a Documented Response With Coordinated Tax Advice
A well-documented, well-timed response gives you the best chance of a fair result, whether the issue is lost receipts or years of unreported crypto. Rebuild records from third-party sources, classify every deposit and wallet transfer, and correct gaps through the VDP while that option remains open.
Watch the line between civil audit and criminal investigation, and protect privileged analysis by routing it through counsel. Calendar the 30-day proposal window, the 90-day objection deadline, and the 90-day Tax Court deadline the day each document arrives.
Audit adjustments rarely stay isolated. They affect corporate retained earnings, shareholder loan balances, and future sale planning, including eligibility for the lifetime capital gains exemption. Our integrated tax and legal strategy brings that corporate picture into the response, and we coordinate directly with your accountant so the numbers and the legal position match.
Principal lawyer Ladislav Beganyi holds a Master of Taxation from the University of Waterloo, and a Canadian tax lawyer with that background can assess exposure before you answer the CRA.
Frequently Asked Questions
Can the CRA disallow an expense if I lost the receipt?
Yes, the CRA can disallow an unsupported expense, but a lost receipt does not automatically mean denial. Bank or card statements, supplier copies, and expense journal entries showing the vendor, date, amount, and purpose can substantiate the claim and help you meet your tax obligations.
Can I owe crypto tax if I never cashed out into Canadian dollars?
Yes. Trading one crypto-asset for another, spending crypto, or gifting it are all dispositions, so unreported crypto income can arise without any conversion to Canadian dollars.
Can I apply to the VDP after the CRA contacts me?
Often yes, depending on the contact. A general education letter still allows an unprompted application, and a letter identifying a specific error leads to partial relief, but once an audit or investigation on the same issue begins, the Voluntary Disclosures Program (VDP) is generally unavailable.
How long does a CRA audit take when exchange records are missing?
Expect a longer audit, often extending beyond a year for multi-year crypto files. Requesting archived exports from exchanges and reconstructing transfers from bank records early shortens the process considerably.
Does a gross negligence penalty mean I am facing criminal charges?
No. A gross negligence penalty is a civil penalty of the greater of $100 or 50% of understated tax, assessed by the CRA and disputed through objection and the Tax Court, while criminal charges require a separate investigation and prosecution.
Can the CRA reassess older returns for unreported crypto?
Yes, if the misrepresentation stems from neglect, carelessness, wilful default, or fraud, or if you signed a waiver. The normal reassessment window for individuals is three years from the original assessment, and unreported crypto income often falls within the exception.