Coinbase Faces Legal and Privacy Turmoil as Supreme Court Weighs IRS Access to User Data

The intersection of cryptocurrency, privacy, and government oversight has once again come under the spotlight as the United States government pushes back against a Supreme Court challenge concerning IRS access to crypto records. At the heart of this case is James Harper, a Coinbase user who has been fighting a legal battle over what he claims is an unconstitutional intrusion into his financial privacy. But the government argues otherwise—and its position could reshape how digital assets are treated in the eyes of U.S. law.

IRS Investigations and the Birth of a Legal Battle

In 2016, the IRS launched an investigation into widespread tax evasion involving cryptocurrencies, identifying a troubling disparity: millions of users were actively trading crypto on platforms like Coinbase, but very few reported any related income on their tax returns. To address this, the agency issued a so-called John Doe summons to Coinbase, demanding user records of high-volume traders without naming specific individuals.

James Harper, who had traded Bitcoin during the targeted period, later filed suit against the IRS. He argued that the agency’s actions amounted to a violation of his Fourth Amendment rights, which protect against unreasonable searches and seizures.

However, both the District Court and the First Circuit Court of Appeals rejected his claims. Their rulings emphasized that Coinbase, not Harper, held ownership of the records and that those records constituted business documents rather than personal papers.

Government’s Position: No Right to Financial Privacy on Centralized Platforms

On May 30, 2025, the U.S. Solicitor General filed a brief urging the Supreme Court not to review the case. The government stated unequivocally that Harper “voluntarily” provided his financial data to Coinbase, a third-party intermediary. Therefore, under longstanding legal precedent—including the pivotal United States v. Miller decision—he had no reasonable expectation of privacy in those records.

The brief reinforced that the IRS followed due legal process, acquiring the data via a court-approved summons. Furthermore, the Coinbase privacy policy explicitly warned users that their data could be disclosed to authorities under certain conditions.

This argument builds on the legal principle that third-party records—including bank transactions or digital asset trades—are not protected in the same way as private correspondence or personal documents. If accepted, it would uphold a broad interpretation of the government’s authority to monitor crypto-related financial activities.

The Wider Implications for the Crypto Community

The Harper case has struck a nerve within the broader crypto ecosystem. Advocates of financial sovereignty argue that cryptocurrency was built on the premise of user control and privacy. The idea that a centralized exchange can hand over transaction records to federal authorities without individual consent challenges this principle at its core.

At the same time, legal experts warn that using centralized platforms like Coinbase inherently involves relinquishing a level of privacy. When users opt for custodial services, they also adopt the terms and conditions of that platform—including data-sharing clauses. In Harper’s case, these terms may have undermined his argument before it even reached the Supreme Court.

Still, the broader concern remains: How far can the government go in surveilling crypto transactions, especially when tied to tax compliance? And how much privacy are users truly afforded when operating within regulated environments?

The Coinbase Breach: A Compounding Controversy

Adding fuel to the fire is Coinbase’s recent data breach, disclosed on May 15, 2025. The breach was reportedly the result of bribery targeting customer support agents in India, allowing attackers to access sensitive user data—including names, account balances, and transaction histories.

Roughly 1% of monthly active users were affected, and prominent figures such as Sequoia Capital’s Roelof Botha were among the victims. The fallout included multiple lawsuits filed within days of the disclosure, with users accusing Coinbase of insufficient security practices and negligent handling of the breach.

This parallel controversy has only deepened user concerns about the safety and control of their data when using large crypto platforms. The Harper case, already a touchstone for privacy rights, now resonates even more given the recent exposure of user records through both legal and illegal means.

A Supreme Court Decision That Could Set the Tone

The Supreme Court has not yet announced whether it will take up the Harper case. A denial would leave the First Circuit’s decision in place, effectively endorsing the IRS’s authority to access crypto records through exchanges. If the Court agrees to hear the case, it could have sweeping implications for digital privacy rights in the context of financial data.

Whether or not Harper prevails, the debate around crypto regulation, user privacy, and governmental oversight is only heating up. For Coinbase, this dual challenge of legal scrutiny and cybersecurity failures places the exchange under unprecedented pressure to reassure its users and stakeholders.

A Critical Inflection Point for User Expectations

The cryptocurrency industry is undergoing a maturity test. As platforms like Coinbase grow into full-fledged financial institutions, they inherit not only legitimacy but also regulatory obligations. That means user records are increasingly subject to both legal access and potential exploitation through cyberattacks.

For users, the lesson is sobering: unless you hold your keys and operate outside custodial platforms, your privacy is subject to third-party controls. Whether the Supreme Court reinforces or challenges that reality will determine the next frontier of crypto privacy law in the United States.