Are cryptocurrency ransom payments tax-deductible?

Published at: July 4, 2021

About 2,000 years ago during its Han dynasty, China made peace with some of the nomadic people of Central Asia who continuously ransacked Silk Road traders for an easy payday. It did so in order to fully establish the Silk Road trade route, which stretched from China to Europe, and to secure a great source of wealth from trading in luxury goods.

Now, as trade increasingly has shifted to the digital realm during the global COVID-19 pandemic, cyberattackers are taking advantage of organizations’ lax cybersecurity measures. They are using ransomware to lock these organizations’ data with encryption until a ransom payment in cryptocurrency is made. Back in 2019, 98% of ransomware payments were made in Bitcoin (BTC).

Related: Not like before: Digital currencies debut amid COVID-19

Anne Neuberger, United States deputy national security adviser for cyber and emerging technology, explained:

“The number and size of ransomware incidents have increased significantly. [...] The U.S. government is working with countries around the world to hold ransomware actors and the countries who harbor them accountable, but we cannot fight the threat posed by ransomware alone. The private sector has a distinct and key responsibility.”

The administration of President Joe Biden is moving to treat cyberattacks — which are estimated to cost $1 trillion a year and often take the form of ransomware — as a national security threat. Intelligence agencies have concluded that they pose an elevated threat to the country, with gasoline, food supplies and hospital systems at risk.

Recently, the U.S. Department of Justice seized 63.7 BTC (worth approximately $2.3 million at the time) representing the proceeds of a ransom payment made by Colonial Pipeline to the group known as “DarkSide.” It did so via a coordinated effort with the DoJ’s Ransomware and Digital Extortion Task Force, which collaborates with domestic and foreign government agencies in addition to private-sector partners to combat this significant criminal threat.

Related: Cybercrime task force monitoring the global digital financial system

Lisa Monaco, the DoJ's deputy attorney general, noted: “Following the money remains one of the most basic, yet powerful tools we have.” She continued:

“Ransom payments are the fuel that propels the digital extortion engine, and [..] the United States will use all available tools to make these attacks more costly and less profitable for criminal enterprises.”

Paul Abbate, deputy director of the Federal Bureau of Investigation, added:

“We will continue to use all of our available resources and leverage our domestic and international partnerships to disrupt ransomware attacks and protect our private sector partners and the American public.”

U.S. tax implications of ransom payments in cryptocurrencies

One question is whether ransomware payments can be considered an “ordinary and necessary” cost of doing business and be deducted from taxable income as a theft loss under Sections 162(a) and 165(a) of the Internal Revenue Code, which provides the authority to deduct any losses that were not covered by insurance or some other means. There are several judicial and administrative definitions of theft, and the Internal Revenue Service’s definition seems broad enough to encompass a cyberattack and allow for ransomware payments made in cryptocurrency to be deducted as a business expense for federal tax purposes.

However, under Section 162(c), if the ransom payment in cryptocurrency constitutes an illegal bribe, illegal kickback, blackmail payment or other illegal payment — such as one made to a group classified as a terror organization under any U.S. law — it would not be tax-deductible. Thus, a taxpayer should distinguish illicit payments from ransomware cryptocurrency payments by highlighting the theft of property. Questions of illegality may arise when paying a ransomware demand in cryptocurrency to a cybercriminal with a known connection to a sanctioned or boycotted foreign government.

Related: Sanctions compliance for transactions in fiat and cryptocurrencies are the same: Expert take

Here is an example, provided by Elliptic co-founder and chief scientist Tom Robinson: “Elliptic was first to identify the Bitcoin wallet used by the DarkSide ransomware group to receive a 75 Bitcoin ransom payment from Colonial Pipeline. [...] DarkSide [which is believed to be based in Eastern Europe] is an example of ‘Ransomware as a Service’ (RaaS). In this operating model, the malware is created by the ransomware developer, while the ransomware affiliate is responsible for infecting the target computer system and negotiating the ransom payment with the victim organisation. This new business model has revolutionised ransomware, opening it up to those who do not have the technical capability to create malware, but are willing and able to infiltrate a target organisation.”

Ransomware attackers may even offer a victim company a discount if it transmits the infection to other companies. These ransom payments in BTC are then laundered on dark web markets, according to a report issued by Flashpoint and Chainalysis.

Any ransom payment made in cryptocurrency is taxed as property rather than currency. Therefore, taxpayers are expected to keep detailed records of these ransom payment cryptocurrency transactions, report any gains and report the fair market value of any mined cryptocurrency on their tax returns as well.

Additionally, the Financial Crimes Enforcement Network, or FinCEN, also regulates cryptocurrency-related transactions pursuant to the Bank Secrecy Act (BSA) by stating that “An administrator or exchanger that (1) accepts and transmits a convertible virtual currency or (2) buys or sells convertible virtual currency for any reason is a money transmitter.”

Thus, under the BSA, a cryptocurrency transmitter is required to complete a risk assessment, develop a written program to avoid money laundering, designate an individual compliance officer and complete other action items.

Related: The United States updates its crypto AML/CFT laws

It should be noted that other profiting and culpable participants in a Bitcoin ransom payment scheme might find themselves facing criminal and tax fraud/evasion penalties. For example, John McAfee, founder of the antivirus company bearing his name, had recently been charged with various tax crimes in the U.S. relating to nominee-held cryptocurrency transactions and was facing many years in prison if convicted. This may have been a factor in his decision to commit suicide in a Spanish jail after the court ruled he could be extradited to the United States.

Related: John McAfee’s suicide reports raise disbelief, spark conspiracy theories

Conclusion

In remarks to the U.S. Senate Appropriations Committee, FBI Director Christopher Wray advised ransomware victims to not pay a ransom to retrieve hijacked data or regain network access. He said that “In general, we would discourage paying the ransom because it encourages more of these attacks, and frankly, there is no guarantee whatsoever that you are going to get your data back,” adding: “We have to make it harder and more painful for hackers and criminals to do what they are doing.” And he continued:

“We took upwards of 1,100 actions against cyber adversaries last year, including arrests, criminal charges, convictions, dismantlements, and disruptions, and enabled many more actions through our dedicated partnerships with the private sector, foreign partners, and at the federal, state, and local entities.”

The views, thoughts and opinions expressed here are the author’s alone and do not necessarily reflect or represent the views and opinions of Cointelegraph.

Selva Ozelli, Esq., CPA, is an international tax attorney and certified public accountant who frequently writes about tax, legal and accounting issues for Tax Notes, Bloomberg BNA, other publications and the OECD.
Tags
Fbi
Irs
Related Posts
Get a passport, pay crypto, live tax-free?
Way back in 2014, the United States Internal Revenue Service (IRS) ruled that cryptocurrency is property in Notice 2014-21. That classification as property has some big tax consequences accentuated by wild price swings. Buying and selling crypto can trigger gain or loss and be taxable. Yes, buying something using crypto — a house, a car, a new suit — can trigger taxes. Even paying taxes in crypto can trigger taxes. If you owe $5,000 in taxes, you could pay the $5,000 in dollars. However, if you pay with $5,000 worth of Bitcoin (BTC), as long as the crypto is worth …
Bitcoin / July 22, 2021
How You Could Save Money When Reporting Crypto Taxes
Many crypto holders are reporting their crypto transactions for the first time as a result of the United States Internal Revenue Service’s question about “virtual currency” on the 2019 tax return form. It is a big question for some taxpayers — many have not reported their crypto gains in the past or may have done so without a great deal of precision. Should a taxpayer let bygones be bygones or file an amended return to accurately reflect their historical income from crypto? The IRS subpoenas of crypto exchanges for taxpayers’ trading histories certainly raise the stakes. To layer more on, …
Blockchain / May 16, 2020
Crypto can be lucrative, but make sure you’re ready for the taxman
Hindsight is 20/20, but when money is on the line, being prepared can give investors better foresight. Just over a year and a half ago, Investopedia reported on the panic among many crypto investors who’d found themselves on the wrong side of the taxman. The article read, “Online forums like Reddit are abuzz with posts citing possible scenarios by worried investors about pending tax liabilities for their past dealings in cryptocoins, which may now leave them poorer.” As Bitcoin’s (BTC) price soars and investors flock to crypto to cash in, legislators and regulators around the world are taking notice. Most …
Bitcoin / Feb. 27, 2021
Parents, it’s time for ‘the talk’: Did your kid trade crypto in 2020?
The taxation of cryptocurrency is no longer just a young person’s problem. That changed the day the United States Internal Revenue Service made cryptocurrency a focal point of enforcement and added a crypto disclosure question on its Form 1040. Unsuspecting parents with dependent children should be on guard. The IRS is looking for noncompliance, and crypto questions create a possibly perjurious trap. Noncompliance may be sleeping in the basements of many unwary parents. As of October 2019, nearly 40 million Americans own some form of cryptocurrency, and the average account value is over $5,000. And Google Analytics data shows that …
Bitcoin / Feb. 4, 2021
IRS prepares for an increase in crypto cases in the upcoming tax season
The United States Internal Revenue Service (IRS) criminal investigation division is ramping up for tax season with its sights set on the crypto community. According to a report from Bloomberg Law, the division chief Jim Lee said they are preparing “hundreds” of crypto-involved cases, many of which will soon be available to the public. Lee said in the last three years, there has been a major shift in digital asset investigations conducted by the IRS. Previously these investigations were mostly money-laundering related, whereas now tax-related cases make up nearly half. This includes what is often called “off-ramping” transactions where digital …
Bitcoin / Nov. 4, 2022