Holding Cryptocurrency in an SMSF: What Auditors Check

Cryptocurrency has become an increasingly common investment within self-managed super funds, with many trustees seeking exposure to the potential growth of digital assets. While holding cryptocurrency in an SMSF is permitted, it also introduces additional audit considerations that don't apply to traditional investments.

From verifying ownership to assessing investment strategy and valuation, auditors have a responsibility to ensure cryptocurrency holdings comply with superannuation legislation and are appropriately reflected in the fund's financial statements.

If your SMSF invests in cryptocurrency, here are the key areas your auditor will examine.

1. Proving Ownership of Cryptocurrency

One of the first questions an auditor must answer is simple: Does the SMSF actually own the cryptocurrency?

Unlike listed shares or managed funds, proving ownership of digital assets isn't always straightforward.

Hot wallets

Where cryptocurrency is held through a recognised exchange or platform, such as CoinSpot or Swyftx, it is generally possible to generate reports that demonstrate the SMSF's ownership at year end. These reports assist auditors in verifying both ownership and balances.

Cold wallets

Cold wallets present a different challenge. Because the cryptocurrency is stored offline and ownership is controlled by physical hardware and private keys, auditors cannot independently verify ownership through third-party evidence.

As a result, where sufficient audit evidence cannot be obtained, the audit report may require a qualification relating to the existence or ownership of the asset.

2. Understanding Custodial Arrangements

Many trustees believe they hold cryptocurrency directly, when in reality, it is held by a third-party custodian. This distinction is important.

When cryptocurrency is held through a custodial arrangement, the SMSF may not have direct control of the underlying assets. Instead, it relies on the financial stability and operational integrity of the custodian.

This creates additional risks that trustees should understand, including:

• What happens if the custodian becomes insolvent?

• Could a liquidator or receiver gain control over the assets?

• How are the SMSF's holdings legally separated from the custodian's assets?

While these risks don't necessarily prevent an SMSF from investing in cryptocurrency, they are important considerations that auditors expect trustees to understand.

3. Valuation and Market Volatility

Like any investment, cryptocurrency must be valued at market value at 30 June each year.

For widely traded cryptocurrencies such as Bitcoin and Ethereum, establishing market value is generally straightforward because reliable pricing data is readily available.

However, cryptocurrency markets can experience significant price movements in a very short period.

Where there has been a material movement in value after the reporting date, trustees may need to include a post-balance date event disclosure in the financial statements. This helps provide users of the financial statements with appropriate context around significant market events occurring after year end.

4. The Impact of an Unregulated Asset Class

Unlike many traditional investments, cryptocurrency remains an unregulated asset class and is inherently volatile.

While investing in cryptocurrency is ultimately a decision for the trustees, auditors will consider whether the investment represents an increased risk to the fund.

Where cryptocurrency represents a significant proportion of the SMSF's assets, auditors may include an Emphasis of Matter paragraph in the audit report. This does not indicate non-compliance or an audit qualification. Instead, it draws attention to the significant uncertainty and volatility associated with the investment.

5. Is the Investment Strategy Appropriate?

Every SMSF must maintain and regularly review an investment strategy that considers the circumstances of its members.

Where cryptocurrency forms part of the portfolio, auditors will assess whether the investment strategy adequately explains why the investment is appropriate.

An effective investment strategy should acknowledge the risks associated with cryptocurrency and clearly document the trustees' rationale. Examples may include:

• Maintaining only a small allocation to cryptocurrency as part of a diversified investment portfolio.

• The trustees possessing relevant knowledge or expertise in digital assets.

• Seeking long-term capital growth while balancing overall portfolio risk.

Investment strategy concerns are more likely to arise where:

• Cryptocurrency represents a large percentage of the fund's assets.

• The fund has limited diversification.

• Members are approaching retirement, yet the investment strategy cannot justify why such a high-risk asset remains appropriate for achieving retirement objectives.

As members move closer to retirement, auditors generally expect to see investment strategies that appropriately consider risk management and diversification.

6. Protecting Access to Digital Assets

Unlike traditional investments, cryptocurrency can be permanently lost if passwords, recovery phrases or private keys cannot be accessed.

For this reason, auditors increasingly expect trustees to have documented procedures covering:

• Where cryptocurrency is stored.

• How passwords and recovery phrases are secured.

• Who has authorised access.

• How access will be maintained if a trustee dies or becomes incapacitated.

Without appropriate access controls, trustees risk permanently losing the fund's assets, potentially affecting their ability to meet their obligations as trustees.

Preparing for Audit

Holding cryptocurrency within an SMSF isn't prohibited, but it does require greater attention to governance, documentation and risk management than many traditional investments.

To help ensure a smooth audit process, trustees should maintain:

• Evidence of ownership for all cryptocurrency holdings.

• Documentation explaining any custodial arrangements.

• Reliable year-end valuation records.

• A well-considered investment strategy that addresses cryptocurrency risk.

• A documented access control process for wallets, passwords and recovery information.

With appropriate planning and documentation, cryptocurrency can be audited effectively while helping trustees meet their compliance obligations.

If your SMSF holds digital assets and you're unsure whether your records or governance processes are audit-ready, speaking with your SMSF auditor before year end can help identify potential issues before they become audit findings.