I have not personally seen any clients hit with an IRS crypto audit. The IRS recently put out an RFP for assistance in calculating basis so I think they are a ways away from mass audits of individual taxpayers. The audits I have seen in this space were entities. Based on discussions with IRS and Treasury officials this list would seem overly detailed for their capabilities and current enforcement targets.
Is
this the RFP you're mentioning? Seems to refer to only 22,000 accounts from 2017.
I wonder why someone would come up with a fake crypto audit letter going into great plausible detail about what's requested, but then make a silly mistake and not just use one font throughout.