Build secure, compliant crypto wallets without touching private keys.

Dfns is the Wallets-as-a-Service platform trusted by teams at Stripe, MoonPay, Sphere, and global institutions like Fidelity, ABN AMRO, and Zodia Custody. With MPC-based architecture, SOC 2 and ISO certifications, and APIs built for developers, Dfns helps fintechs, exchanges, OTC desks, market makers, and DeFi platforms launch on-chain wallets across 50+ blockchains,without the headaches of key storage, policy enforcement, or compliance risk. Whether you’re scaling payments infrastructure or building a regulated digital asset platform, Dfns makes wallets work the way you need them to.

Request your demo now at fintechconfidential.com/dfns

Most crypto investors assume their tax software is accurate. Forensic testing across 14 major platforms says otherwise, with variances of 25 to 35 percent on identical transaction data. Tedd Huff, CEO of fintech advisory firm Voalyre and founder of Fintech Confidential, breaks down these findings with Janna Scott, founder and CEO of DeFi Tax and an IRS enrolled agent who spent years working inside federal agencies. Janna tested her own 300 transactions across every product she could find and got wildly different results for every single tax year.

She then took that research to the SEC, the IRS crypto division, and congressional committees, where it contributed to pausing crypto audits for over two years. With enforcement expected to ramp back up within months and the IRS sitting on tens of millions of taxpayer names from John Doe summonses, the window to get organized is closing fast. The details here could save real money and real headaches.

Crypto tax software flaws, IRS audit risk, and data manipulation vulnerabilities are putting millions of crypto investors in danger of penalties, interest, and enforcement actions they never saw coming.

A forensic audit of 14 major crypto tax platforms and 53 self-described crypto tax expert firms found variances of 25 to 35 percent or higher on identical transaction data, raising serious questions about whether any of these tools can survive real IRS scrutiny.

Tedd Huff, CEO of fintech advisory firm Voalyre and founder of Fintech Confidential, sits down with Janna Scott, founder and CEO of DeFi Tax and an IRS enrolled agent with years of experience inside federal agencies, including the IRS itself. Janna brings a rare combination of government-side tax expertise and hands-on forensic testing across the crypto tax industry. The conversation unpacks how crypto tax reporting went wrong, why the tools investors trust may actually hurt them in an audit, and what a defensible, audit-ready approach looks like.

The core problem is straightforward: in a tax audit, the IRS does not have to prove they are right. The taxpayer has to prove the IRS is wrong. That burden shifts the entire calculus for anyone who has filed crypto taxes using third-party software. If the platform that generated the report cannot produce consistent, defensible numbers, the taxpayer walks into an audit with nothing persuasive. And right now, the data suggests that most platforms cannot do this. The same set of 70 test transactions produced a $99 gain on one exchange's own reporting, a $2,990 gain on one endorsed third-party product, and a $351 loss on another. Three answers, same data, same year.

Those numbers come from controlled testing, not edge cases. The transactions were simple buys, sells, and transfers with small dollar amounts. No exotic DeFi activity, no complex NFT stacks. Just basic crypto activity that billion-dollar software companies should be able to calculate correctly. When zeros get added and the activity scales to match a serious trader or a multi-year portfolio, the dollar impact of those variances grows fast. A swing between a small gain and a $29,000 gain changes tax owed, triggers penalties, compounds interest, and can snowball across multiple tax years if the IRS treats the omission as intentional.

A reasonable pushback here is that these platforms have large engineering teams, exchange partnerships, and millions of users. Surely they have been tested and validated at some level. The forensic evidence tells a different story. Several platforms changed their algorithms after being notified of issues, producing 25 to 35 percent different results on the same historical data without notifying users. No emails went out suggesting amended returns. No disclosures were made. If a taxpayer gets audited and pulls a fresh report that no longer matches what they originally filed, they have a credibility problem with no easy fix. Two of the platforms that failed testing had active IRS contracts at the time; those contracts no longer exist. And when a detailed attorney letter was sent to a major exchange that endorses two top crypto tax products, the exchange updated its terms of service within 36 hours for the first time in eight years, adding mandatory arbitration, limiting class actions, and removing liability for its own tax calculations and any endorsed third parties.

Build secure, compliant crypto wallets without touching private keys.

Your days of choosing between data security and data usability are over. Whether you're just concerned with PCI compliance or need to go further to include CCPA, GDPR, SOC2, and beyond, Sky Flow has you covered. What if you could build fast but not break privacy? With SkyFlow, you can. Visit SkyFlowSecure.com today to learn how.

For compliance teams, CFOs, and treasury managers with any crypto exposure, the practical takeaway is about data integrity and audit defensibility. The IRS treats crypto tax platform reports the same way it treats QuickBooks files: as user-editable documents that cannot stand on their own. Many platforms allow users to change dates, timestamps, currency types, spot prices, fees, and cost basis on transactions that are supposed to be immutable on-chain records. That editing capability, even if it exists for legitimate correction purposes, makes the output inadmissible as reliable evidence under audit. The comparison to bank statements matters here. The IRS asks for bank statements because they come directly from an institution and are harder to manipulate. Crypto tax reports that can be rewritten by the user do not meet that standard.

DeFi Tax addresses this by locking immutable transaction data so users cannot edit basis, purchase price, spot price, or fees. The platform allows categorization where user intent matters, such as marking a transaction as a self-transfer, gift, or donation, but it verifies claims. If a user marks an incoming transaction as a self-transfer from a public blockchain wallet, the system automatically pulls that wallet and attaches it to the account. That either confirms the claim and fixes basis tracking or exposes additional activity the user may not have intended to reveal. The platform also traces NFT basis back through the chain of custody to the original purchase, subtracts burn fees from validator income, and averages spot prices from three independent sources at the relevant date and time to create a defensible valuation record.

Anyone looking to go deeper into the research can find Janna's peer-reviewed findings published in Tax Notes, which were also shared directly with the IRS crypto division, SEC FinHub, and congressional committees before public release.

Looking ahead, enforcement is expected to accelerate. The 1099-DA broker reporting requirement was halted but is likely to return. Audits could resume within six to 18 months, starting with high-income earners and working down. The IRS may have missed an estimated $146 billion in crypto-related capital gains and ordinary income tax since 2009. That number creates a strong incentive to collect aggressively. For taxpayers who are not wealthy enough to hire representation and fight in tax court, compounding interest and penalties on even modest unreported gains could consume annual tax refunds for years.

The single most actionable step anyone can take right now is to track every wallet address, exchange login, and access point they have ever used, including exchanges that no longer operate in the US. Without a complete picture, transfers into a connected wallet can be misclassified as income when the source wallet is missing. DeFi Tax is currently offering free subscriptions with full audit support, and the firm includes tax attorneys, enrolled agents, and CPAs who can represent taxpayers through audit and into tax court.

This conversation is a data integrity briefing disguised as a tax discussion. Anyone holding, trading, or managing crypto assets will walk away understanding exactly where the current system fails, why it fails, and what a defensible position actually requires before the IRS comes asking questions.

The Justice Department authorized John Doe summonses that forced every KYC-connected exchange and platform to hand over US taxpayer identities, and the IRS has now received three rounds of responses since 2021. Tens of millions of names are in federal hands, and the IRS does not need to know how much someone bought or sold to open an audit file based on reported income alone.

A forensic review of 53 firms marketing themselves as crypto tax specialists found that most simply ran client data through a low-cost software subscription and charged $2,000 to $3,000 for the output. None of the firms tested could justify their numbers or defend the results under audit conditions, leaving clients paying premium fees for reports with no evidentiary value.

The IRS partnered with Chainalysis for blockchain tracing capabilities that can follow crypto across wallets, exchanges, and peer-to-peer transfers with forensic precision. That same tracing power also supports federal asset seizure operations, making it nearly impossible for flagged taxpayers to move holdings without detection.

Multiple crypto tax platforms rely on CSV file uploads as a primary data ingestion method, but testing revealed that CSV exports from exchanges are missing critical fields needed for accurate tax calculations. Raw blockchain data pulled via API contained roughly 20 columns per transaction, and platforms that skip this level of detail are discarding the information that determines whether a taxable event is categorized correctly.

When crypto moves between two exchanges that do not share data, the sending platform can report the departure as a realized gain while the receiving platform can classify the arrival as ordinary income. This double-reporting risk becomes a real liability if broker reporting requirements like the 1099-DA are reinstated, because neither exchange has the context to know it was a self-transfer.

Most crypto tax platforms either return zero results or only a handful of failed transactions when a validator wallet address is connected, completely missing tens of thousands of actual validation events. Burn fees that reduce the real income received during the validation process are ignored by every other product tested, inflating reported income beyond what the taxpayer actually earned.

Inside the IRS, the 1040 division handling donations does not communicate with the 1040 division handling W-2s, and agencies internally operate in compartmentalized units that rarely share processes or data. That structural disconnect explains why crypto tax enforcement stalled for years and why audit methodologies were built on flawed assumptions until outside research forced a correction.

Kraken's API exports include internal ledger entries labeled "auto allocate" that have no relevance to a user's tax obligations, yet platforms that ingest this data without filtering treat those entries as taxable activity. Without exchange-specific parsing rules built through direct testing, tax calculations absorb phantom transactions that distort gains and losses for every affected year.

After reviewing the forensic research, the SEC FinHub division and enforcement attorneys acknowledged the severity of crypto tax platform failures but confirmed they lack direct oversight authority. Their response was to route the findings immediately to the IRS crypto division, chief counsel staff, and congressional committees, where the research influenced audit methodology changes.

Taxpayers with modest unreported crypto gains from years like 2019 or 2020 face compounding IRS interest at 8% plus escalating penalties that can consume annual tax refunds for three to five years. Those lost refunds, often $2,000 to $4,000 that families depend on for basic expenses, represent an economic ripple effect that extends well beyond the individual taxpayer.

HAWK:AI - HAWK:AI's game-changing approach to compliance. With real-time monitoring, adaptive learning, and advanced AI, it cuts false positives, simplifying your compliance efforts. Upgrade your surveillance with ease. Visit https://gethawkai.com for more intelligent, more effective compliance.

Advertisement

Platforms changed their algorithms and produced 25 to 35 percent different results on the same historical data without telling a single user. If you get audited for 2021 or 2022 and pull a fresh report that no longer matches what you filed, you have zero way to prove what the original output said. Go into every crypto tax product you have ever used and download or screenshot your reports for every tax year today, before another silent update rewrites your history.

These platforms let you edit dates, timestamps, currency types, spot prices, fees, and cost basis on transactions that are permanently recorded on-chain. The moment you change any of those fields, you have created a report the IRS will treat the same way it treats a doctored bank statement PDF. Leave every core transaction detail untouched, period. If something looks miscategorized, flag it with your tax preparer instead of rewriting the underlying data.

One missing wallet turns every transfer from that address into taxable income on the receiving end. A $100,000 Bitcoin self-transfer looks like $100,000 of ordinary income if the source wallet is not connected, and no platform can fix that math without the full picture. Dig up every public wallet address, every exchange login, and every cold storage device you have ever used, including exchanges that stopped serving US customers, because backend data access is often still available.

The same 70 transactions produced a $99 gain, a $2,990 gain, and a $351 loss across three different tools pulling from the same exchange via the same API connection. Stop trusting a single output as truth. Pull your transaction history through at least two or three platforms, compare the results side by side, and if the numbers diverge by more than a small rounding difference, treat that as a red flag that requires professional review before you file.

Ask any firm claiming crypto tax expertise one question: can you manually calculate my transactions and show your work to the IRS? If the answer involves plugging your data into a third-party app and handing you the printout, you are paying $2,000 to $3,000 for something a $100 subscription does on its own. Demand to know their methodology, their data sources, and whether they can represent you in tax court if the numbers get challenged.

Website: https://defitax.us/

Linkedin: https://www.linkedin.com/in/janna-louisa-scott/ 

X/Twitter: https://x.com/defitax_us

Facebook: https://www.facebook.com/defitax25/

YouTube: https://fintechconfidential.com/watch

Podcast: https://fintechconfidential.com/listen

Notifications: https://fintechconfidential.com/access

LinkedIn: https://www.linkedin.com/company/fintechconfidential

X: https://X.com/FTconfidential

Instagram: https://www.instagram.com/fintechconfidential

Facebook: https://www.facebook.com/fintechconfidential

Janna Scott is the founder and CEO of DeFi Tax, a crypto tax compliance platform built for audit-ready reporting. She is an IRS Enrolled Agent and holds an MBA, with over 20 years of experience across accounting, tax preparation, financial analysis, and compliance. Janna spent several years working in government finance roles, including positions as a tax specialist, fiscal analyst, and financial consultant. That government experience shaped her understanding of how agencies operate internally and how audit processes are structured. In late 2021, a client question about crypto reporting sent her down a research path that revealed major inconsistencies across 14 crypto tax platforms and 53 firms claiming crypto tax expertise. Her peer-reviewed findings, published in Tax Notes, were shared with the IRS crypto division, SEC FinHub, and congressional committees. Janna built DeFi Tax to eliminate data manipulation vulnerabilities and provide defensible, IRS-compliant crypto tax reporting. 

DeFi Tax is a crypto tax compliance platform that calculates tax obligations using direct blockchain data instead of CSV uploads, exchange exports, or user-editable inputs. The platform was built through extensive testing across dozens of wallets, exchanges, and transaction types, including NFTs, validator accounts, and DeFi activity. DeFi Tax locks immutable transaction data so users cannot alter core fields like basis, spot price, fees, or timestamps. It traces NFT basis back through the full chain of custody, subtracts burn fees from validator income, and averages spot prices from three independent sources at the relevant date and time. The platform includes self-transfer verification that automatically pulls and attaches wallets when users claim a transaction came from their own address. DeFi Tax is backed by a team of tax attorneys, enrolled agents, and CPAs who can represent users through audit and up to tax court. The platform launched its paid public version in early 2026 and is currently offering free subscriptions with full audit support.

Tedd Huff is CEO of Voalyre, a fintech advisory firm, and founder of Fintech Confidential. Over the past 25+ years, he has contributed to fintech startups as an Advisory Board Member, Co-Founder, and Chief Experience Officer, providing strategic and tactical direction for global companies. His expertise focuses on growth while delivering process improvements and user experience-driven value to simplify the complexity of payments. As host and executive producer of Fintech Confidential, Tedd brings entertaining and informative content focused on fintech industry insights, market trends, and stories from fintech leaders, thinkers, and doers. He is a recognized thought leader and U.S. Army veteran known for making complex financial technology approachable and engaging through his conversational storytelling style and deep understanding of global payments, cross-border transactions, and payment localization.

Fintech Confidential is produced by DD3 Media. Established in 2022, the show brings you the people, tech, and companies that change how you pay and get paid. Hosted by Tedd Huff, CEO of fintech advisory firm Voalyre, Fintech Confidential delivers straight talk with the builders, operators, and decision makers shaping the future of financial services. New episodes drop weekly across YouTube, Spotify, Apple Podcasts, and all major platforms.