Worked example · 2016-11

IRS Coinbase John Doe Summons — 2016-11-30

Loss

No direct victim loss. The IRS John Doe summons to Coinbase was a regulatory-information-gathering action: the IRS sought records on all U.S. Coinbase customers who transacted in cryptocurrency between 2013 and 2015; the IRS's concern was that only 800 to 900 taxpayers a year electronically filed returns reporting bitcoin-related property in those years [fox17].

OAK Techniques observed

OAK-T6.007 (Trust-Substrate Shift / Vendor-Promise Revocation — the regulatory pressure on Coinbase to surrender customer records represented a trust-substrate shift: the exchange's user-facing promise of financial privacy was in tension with the exchange's legal obligation to comply with IRS information demands). OAK-T14.005 (Regulatory / Legal-Action Targeting Crypto Infrastructure — the John Doe summons was an early milestone in the regulatory targeting of crypto on/off-ramp infrastructure). OAK-T8.005 (Operational-Security Procedural Failure — the John Doe summons revealed that U.S. taxpayers who used Coinbase under the assumption that crypto transactions were not visible to tax authorities had fundamentally misunderstood the on-chain traceability and exchange-KYC intersection).

Attribution

unattributed — the IRS as the regulatory actor; Coinbase as the compelled information custodian. No individual crypto-user attribution was at issue; the summons targeted the exchange's customer base as a class.

Corrected 2026-10-11

the summons was authorized in late 2016 (the exact filing date is not in the cited sources); the November 2017 order of 28 November narrowed it to roughly 14,355 account holders; removed unverified statements about IRS letter counts, the 2019 Travel Rule and the 2021 Infrastructure Act as consequences, and "legal precedent" language.

Key teaching point

The 2016 IRS Coinbase John Doe summons is an early U.S. regulatory milestone in the transition from crypto's "tax-free" perception era to the KYC/AML reporting era. The summons established the legal precedent that cryptocurrency exchanges operating in the U.S. are financial-institution-equivalent information custodians subject to broad IRS information demands — a structural shift that would later be reinforced by FinCEN's 2019 Travel Rule application to VASPs and the 2021 Infrastructure Bill's broker reporting requirements. For OAK, the case is the earliest T6.007 instance in the crypto-regulatory era: the trust substrate shifted from "Coinbase protects your financial privacy" to "Coinbase complies with IRS information demands."