DGFiP Crypto Tax Audit in France

The number that decides a French crypto audit is not the rate but the reassessment period. The DGFiP normally has three years. The crypto fact patterns most holders fall into — never declaring habitual activity, omitting a foreign exchange account — extend that to ten. This article is specifically about the individual contrôle fiscal: how the procedure runs, what flips the three-year window to ten, and the defence file that survives it. The corporate equivalent is the company vérification, and the France crypto tax guide gives the broader picture.

The audit in brief

• The standard reassessment period (délai de reprise) is three years, under article L. 169 LPF.
• It extends to ten years for undeclared activity (habitual trading, structured mining, regular NFT sales), an omitted foreign crypto account, or a sham foreign domicile.
• The audit entry point is the gap between what you declared (2086 / 2042 C) and the reconstructed or reported reality.
• DAC8/CARF from 2026 make declared-versus-reported divergence and omitted accounts systematically visible.
• The durable defence is a reconcilable history: every figure on the return reproducible from records.

The 3-year default — and why crypto often loses it

For a correctly-declared occasional investor, the DGFiP's reassessment window is 3 years from the declaration year. That is the routine case. The problem is that crypto holders disproportionately fall into the situations that extend it to 10 years:

Any one of these converts the comfortable 3-year window into a 10-year exposure. The 3916-bis omission is the most common — and it is independent of whether tax was even due (see Cerfa 3916-bis). Treating "I didn't owe tax" as "I have no exposure" is the classic error: the omitted-account trigger is about disclosure, not tax owed.

What the DGFiP actually checks

A crypto contrôle fiscal is, at its core, a reconciliation:

• Declared position: Form 2086 / Form 2042 C lines 3AN/3BN.
• Reconstructed reality: from wallet addresses, exchange statements, on-chain analysis, and — from 2026 — DAC8/CARF automatic data.

Within that, the examiner tests:

1. The 150 VH bis computation (correct portfolio method, not FIFO — see crypto capital gains calculation).
2. The €305 threshold application (all-or-nothing, on disposals — see the France €305 exemption).
3. Foreign-account declarations (3916-bis completeness).
4. Whether activity should have been BNC (professional trading or staking/mining income) rather than only PFU (see BNC vs PFU).

The single most common finding is a divergence between the declared net and what the reconstructed/reported data shows — which is exactly what DAC8 hands the DGFiP from 2026.

DAC8/CARF: detection becomes systematic

Before 2026, the DGFiP largely depended on the taxpayer's declaration plus ad hoc data requests. From 1 January 2026, DAC8 (EU CASPs) and CARF (non-EU) deliver automatic, structured, multi-year data on French residents' crypto activity (see DAC8 impact on individuals). Two consequences for audits:

• Declared-vs-reported divergence is now a default flag, not a needle to find.
• Omitted foreign accounts surface directly — and that omission is itself a 10-year trigger.

The pre-2026 strategy of relying on non-detection is structurally over. The audit question is no longer "will they find it" but "does your declared position reconcile to what they already have."

The defence file

The only durable defence is a reconcilable history. The DGFiP expects you to reproduce every declared figure on request; if you cannot, the burden of proof shifts against you for the rest of the audit. A defensible file contains:

• Every acquisition and disposal: euro value, date, counterparty/venue.
• The running total acquisition price (the 150 VH bis cumulative figure) across all years.
• Portfolio valuations at each disposal date.
• All wallet addresses and exchange statements.
• The 3916-bis filings for every foreign account.
• The BNC-vs-PFU classification rationale where relevant.

Build this before an audit, not during. Reconstruction under a 15-day production demand, across years and venues, is where unprepared holders lose.

If you have undeclared prior years

Given the 10-year window and DAC8 detection, the rational move for a holder with undeclared prior years is to consider a voluntary regularisation before the first DAC8 cross-check materially raises detection probability. This is a national-tax-law decision — take advice from a French tax lawyer on the mechanism and the penalty exposure (the corrective declaration is generally better than a discovered omission).

Practical guidance

1. Assume the 10-year window applies if you ever had undeclared activity or an undeclared foreign account.
2. Build the reconcilable history now — every figure reproducible.
3. Reconcile your declarations against DAC8/CARF-reported data each year from 2026.
4. Fix prior omissions via voluntary regularisation with counsel, ahead of the cross-check.
5. If audited, engage a French tax lawyer immediately — do not respond to the DGFiP unrepresented.

Where a tool helps audit-readiness

Waltio (built for the French market) and Koinly reconstruct history and produce 2086-consistent figures, the basis of a reconcilable file. Confirm the tool uses the 150 VH bis method and the 2026 PFU at 31.4%, and that it lists foreign accounts so 3916-bis omissions surface before the DGFiP raises them. A tool builds the file; it does not handle the audit, which is a French tax lawyer's role.

Where Wag3s fits

Wag3s Folio maintains a continuously reconcilable multi-chain history, with every declared figure reproducible from records, and flags foreign accounts and BNC-side income, so a holder is audit-ready before a contrôle and can reconcile against DAC8/CARF-reported data. If a contrôle has begun, or there are prior unreported years to regularise, that is a French tax lawyer's terrain; Wag3s supplies the defence file, not the representation. See the Folio product page.

Further reading

• France Crypto Tax Guide 2026
• Cerfa 3916-bis — Foreign Crypto Accounts
• Crypto Capital Gains Calculation France (150 VH bis)
• BNC vs PFU for Crypto in France
• DAC8 Impact on Individuals
• Crypto Audit Readiness — general framework

Sources

• Légifrance — Article L. 169 LPF: the reassessment period (three years, extended to ten for occult activity and undeclared foreign accounts).
• impots.gouv.fr — Modalités de déclaration des comptes d'actifs numériques détenus à l'étranger: the 3916-bis obligation whose omission triggers the ten-year window.
• BOFiP — Contrôle des comptabilités informatisées : remise du FEC (BOI-CF-IOR-60-40-10): the documentary basis the administration tests in a control.
• Council Directive (EU) 2023/2226 (DAC8) — EUR-Lex.