Tax identity theft happens when someone uses stolen personal information, such as a Social Security number or Individual Taxpayer Identification Number, to file a fraudulent tax return or interfere with a real taxpayer’s account. A false refund claim is one form, but the warning can also appear as income from an employer you do not recognize, a return you did not file, or access to an IRS account you did not authorize.
The right response depends on how you learned about the problem. Follow a real IRS notice, protect your tax account, file the return you are legally required to file, and use the specific identity-theft process the IRS directs you to use.
Common warning signs of tax identity theft
The IRS lists several events that deserve attention:
- Your e-filed tax return is rejected because a return was already filed using your taxpayer identification number
- You receive a Form W-2 or Form 1099 from an employer or payer you do not recognize
- You receive a Form 1099-G for unemployment benefits you did not receive or apply for
- An IRS notice shows income you did not earn or a balance you do not understand
- Your Social Security record shows wages you did not earn
- An IRS Online Account was created or accessed without your authorization
- You receive password-reset or login-verification alerts you did not request
- Someone claimed your dependent without permission
One warning does not prove identity theft. A payer name can differ from the business name you know, and a return can be rejected for another filing error. Verify the exact document, tax year, and IRS instruction before deciding what happened.
Start with the IRS letter or e-file message
If the IRS sends a letter or notice about a suspicious return, first confirm that the notice is real. Search the notice number at IRS.gov or use the official contact information shown in your IRS Online Account. Then follow the instructions in the notice.
The IRS may direct you to its Identity and Tax Return Verification Service. Use that service only when the letter tells you to. If you cannot sign in, call the number on the notice. Do not file a separate identity-theft affidavit just because you received a letter unless the IRS instructions say to do so.
If your e-file is rejected because someone already filed with your information, keep the rejection record and follow the current IRS identity-theft guide. The IRS says a taxpayer may still need to file a return and pay tax owed even while the identity-theft issue is being resolved. The required filing route can depend on the rejection and whether you have an Identity Protection PIN.
Use Form 14039 only when it fits the situation
Form 14039 is the IRS Identity Theft Affidavit. It is not a universal first step. The IRS says most people do not need to file it when the agency already sent a letter, when the taxpayer is using the Identity and Tax Return Verification Service, when the affidavit was already filed for the incident, or when the identity theft is not tax-related.
The form may be appropriate when the IRS tells you to use it, when you cannot use the verification service, or when you need to report possible tax-related identity theft the IRS does not already have on file. IdentityTheft.gov can also help a victim complete and submit the affidavit as part of a recovery plan.
Do not send duplicate affidavits for the same incident. A duplicate can add confusion instead of speeding the case. Save the confirmation and copies of every document you submit.
Get an Identity Protection PIN
An IRS Identity Protection PIN, or IP PIN, is a six-digit number that helps prevent someone else from filing a federal tax return using your Social Security number or ITIN. Anyone with an SSN or ITIN who can verify their identity is eligible to enroll. Parents and legal guardians can also request an IP PIN for a dependent.
The fastest route is through the IRS app or your IRS Online Account. If you cannot use the online route, the IRS lists alternative enrollment methods, including Form 15227 for eligible applicants and in-person identity verification at a Taxpayer Assistance Center.
A new IP PIN is generated each year. If the IRS assigns you an IP PIN, include the current number on every applicable federal return filed during that calendar year, including a late or amended return when required. Keep the number private. The IRS says it will not call, email, or text to ask for your IP PIN.
Protect your IRS Online Account
Use a unique password that you do not reuse on email, banking, or shopping accounts. Keep multi-factor authentication enabled and never share a sign-in or verification code. Review the account for tax records, notices, return activity, and profile information you do not recognize.
If someone changed the account password or recovery information, use the official IRS recovery process. Do not accept help from an unexpected caller or person who offers to create the account for you. The IRS lists unsolicited help with its app or Online Account as a warning sign.
Check whether the theft extends beyond taxes
A stolen Social Security number, address, date of birth, or account credential can be used outside the tax system. Review bank and card activity, Social Security earnings records, and all three credit reports. Credit Dad’s guide to spotting fraud on your credit reports explains how to compare accounts, inquiries, and addresses without treating every error as identity theft.
If someone used your identity for other fraud, report it at IdentityTheft.gov and follow the recovery plan. Consider a security freeze or fraud alert based on what was exposed. A freeze can make new-account fraud harder, but it does not resolve a fraudulent tax return or protect an existing bank account by itself.
Handle dependent and state-tax issues separately
A dependent can also be affected by tax identity theft. The IRS says parents and legal guardians may request IP PINs for dependents, but the process for a child under 18 uses alternative enrollment options rather than the child’s online account. Follow the current IRS instructions for the child’s age and your authority to act.
If another person claimed your dependent, confirm who is legally entitled to the claim for that tax year and use the IRS process for a duplicate dependent. Do not expose a child’s Social Security number in ordinary email or unsecured messages while trying to resolve the issue.
Federal and state tax systems are separate. The IRS advises victims to check with their state tax agency for any additional steps. Use the state’s official government site rather than a number or link from an unexpected message.
Avoid tax-identity-theft follow-up scams
Scammers impersonate the IRS, Treasury Department, tax preparers, and recovery services. They may claim you owe money immediately, threaten arrest, promise a refund, or ask you to move money. The IRS says it does not call to demand immediate payment, threaten arrest, or tell you about a refund in an unsolicited call.
If you receive a suspicious tax-related text, do not reply, click, or open an attachment. The IRS provides a process for forwarding suspicious texts and emails to phishing@irs.gov. A real notice can be verified through IRS.gov or your Online Account.
Be careful with paid offers to obtain an Employer Identification Number or to fix an identity-theft case quickly. An EIN is available free from the IRS, and paying a third party does not bypass IRS verification or case processing.
Tax identity theft response checklist
| Situation | Best next step | Avoid |
|---|---|---|
| IRS letter about a suspicious return | Verify the notice and follow its exact instructions | Filing a duplicate Form 14039 without direction |
| E-file rejected as a duplicate return | Keep the rejection and use the IRS identity-theft guide | Assuming you no longer need to file |
| Unknown W-2, 1099, or wages | Compare records and report the issue through the official route | Ignoring the document because it looks unfamiliar |
| Unauthorized IRS account activity | Recover the account and secure credentials | Sharing codes with someone offering help |
| Identity used beyond taxes | Use IdentityTheft.gov and review financial accounts and credit reports | Treating an IP PIN as protection for every account |
Keep a complete recovery record
Save IRS letters, e-file rejection codes, copies of returns, affidavits, identity-verification confirmations, IP PIN records, phone-call notes, and dates. Record which tax year each document covers. Keep the current IP PIN secure and separate from routine paperwork.
Follow up using the contact information in the verified notice or the current IRS identity-theft guide. Processing time can change, and one person’s timeline does not establish yours. The IRS publishes current processing information for identity-theft forms and returns.
Tax identity theft is stressful, but a precise response prevents extra work. Verify the notice, use the process the IRS assigns, protect the account with an IP PIN, file required returns, and keep evidence for every step.