1. TL;DR
Tax identity theft occurs when someone uses your Social Security Number (SSN) to file a fraudulent tax return and claim your refund. **Warning signs include:** your electronic return being rejected because a return was already filed using your SSN, or receiving IRS notices about income you didn't earn. **Protect yourself by:** securing your personal information, filing early in the tax season, and obtaining an IP PIN from the IRS. **If you're a victim:** file Form 14039 (Identity Theft Affidavit), contact the IRS Identity Protection Specialized Unit, and expect resolution to take 6-12 months. **Businesses should also protect their EINs** from similar fraud schemes.
2. What Is Tax Identity Theft?
Tax identity theft is when someone uses your personal information—typically your Social Security Number (SSN)—to file a fraudulent tax return and claim a refund in your name. This is one of the most common forms of identity theft, particularly during tax filing season when thieves know millions of legitimate returns are being processed. The fraudster's goal is simple: file a return using your SSN before you do, claim a large refund (often using fabricated W-2 information or stolen employer data), and have the refund deposited to a prepaid debit card or bank account they control. By the time you try to file your legitimate return, the thief has already received your money. The IRS has implemented significant fraud detection measures, but tax-related identity theft remains a persistent problem. In recent years, the IRS has protected billions of dollars from fraudulent returns, yet criminals continue to evolve their tactics.
3. Warning Signs You're a Victim
Recognizing tax identity theft quickly can help minimize damage. Here are the most common red flags: ### Your Return Is Rejected The most common way victims discover theft is when they attempt to file their tax return electronically and receive a rejection notice stating that a return has already been filed using their SSN. **If you haven't filed yet and receive this rejection, you're almost certainly a victim of tax identity theft.** ### Unexpected IRS Notices You receive IRS correspondence that you didn't request, such as: - A notice stating that more than one tax return was filed using your SSN - A notice indicating you received wages from an employer you don't recognize - A notice about a balance due or refund adjustment you didn't initiate - A notice about an online account created in your name that you didn't set up - Letter 5071C or 5747C asking you to verify your identity ### Your Tax Records Don't Match When reviewing your IRS online account or tax transcripts, you see: - Income reported from employers you've never worked for - Returns filed for years you didn't file - Dependents claimed that you didn't claim
4. How Thieves Get Your Information
Understanding how criminals obtain your information can help you protect yourself. Common methods include: ### Data Breaches Large-scale corporate data breaches expose millions of SSNs annually. When companies suffer breaches, your personal information—including SSN, date of birth, and address—can be sold on the dark web. Tax identity thieves often purchase this data in bulk and use it to file fraudulent returns. ### Phishing Scams Sophisticated phishing emails and text messages impersonate the IRS, tax preparation companies, or employers. These messages may: - Claim you're owed a refund and request personal information to process it - Threaten legal action for alleged tax violations - Ask you to click links to verify your identity - Mimic legitimate tax software communications **Remember: The IRS never initiates contact by email, text message, or social media to request personal information.** ### Stolen Mail Thieves may steal mail from unlocked mailboxes to obtain: - W-2 forms and other tax documents - Pre-filled tax forms - Financial statements containing SSNs - IRS correspondence ### Unsecured Tax Preparers Disreputable or negligent tax preparers may: - Fail to secure client information properly - Sell client data to criminal networks - File fraudulent returns alongside legitimate ones ### Social Engineering Criminals may call pretending to be from the IRS, demanding immediate payment or personal information. These calls often use threats of arrest or deportation to intimidate victims.
5. Prevention Strategies Before Filing
The best defense against tax identity theft is proactive protection. Implement these strategies before tax season begins: ### File Early File your tax return as soon as you have all necessary documents. **The earlier you file, the less opportunity thieves have to file before you.** Many fraudsters file early in the season to beat legitimate taxpayers, so filing in January or February provides a significant protective advantage. ### Secure Your Personal Information - **Shred documents** containing personal information before discarding - **Use a locked mailbox** or secure postal drop box for outgoing mail - **Retrieve mail promptly** daily, especially during tax season - **Store tax documents** in a secure location at home - **Use strong, unique passwords** for tax software accounts - **Enable two-factor authentication** wherever available ### Monitor Your Accounts - **Check your credit report** regularly for unfamiliar accounts - **Monitor your IRS online account** for suspicious activity - **Review Social Security Administration statements** for unfamiliar earnings - **Set up fraud alerts** with credit bureaus if you suspect exposure ### Choose Reputable Tax Preparers If using a tax professional: - Verify their PTIN (Preparer Tax Identification Number) - Check credentials and reviews - Ask about their data security practices - Review your return carefully before signing - Never sign a blank return ### Use Secure Internet Connections When filing online or accessing tax accounts: - Avoid public Wi-Fi networks - Use secure, password-protected home networks - Ensure websites use HTTPS encryption - Log out completely when finished
6. The IP PIN: Your Best Protection
The Identity Protection PIN (IP PIN) is one of the most effective tools against tax identity theft. This six-digit number, known only to you and the IRS, must be entered (or included with your tax software) to file your return electronically. ### What Is an IP PIN? An IP PIN prevents anyone from filing a tax return using your SSN without the PIN. Even if a thief has your SSN and all your personal information, they cannot file a fraudulent return without your IP PIN. The IP PIN changes annually, so you'll receive a new one each year. ### Who Can Get an IP PIN? - **Voluntary participants:** Any taxpayer can opt-in to receive an IP PIN - **Confirmed victims:** Taxpayers who have been confirmed as identity theft victims are automatically enrolled - **Residents of eligible states:** The IRS has piloted IP PIN programs in certain states (check current eligibility) ### How to Obtain an IP PIN 1. **Create an IRS online account** at irs.gov if you don't already have one 2. **Verify your identity** using personal information and financial documents 3. **Request your IP PIN** through your online account 4. **Receive your IP PIN** immediately online, with a confirmation letter following by mail For those who cannot verify online, the IRS offers alternative enrollment methods, though these take longer. ### How to Use Your IP PIN - **Electronic filing:** Enter your IP PIN in the designated field when using tax software or working with a preparer - **Paper filing:** Write your IP PIN in the space provided on your tax return - **Keep it secure:** Don't share your IP PIN with anyone except your tax preparer (if you use one) - **New each year:** Your IP PIN changes annually, so you'll need to retrieve the new one each tax season ### Important IP PIN Notes - If you lose or forget your IP PIN, you can retrieve it through your IRS online account - If you can't retrieve it online, you may need to request a new one by mail (allow time for processing) - Once enrolled, you must use an IP PIN for all future returns—you cannot opt out
7. Secure Filing Practices
How you file your taxes can affect your vulnerability to identity theft. ### Electronic Filing vs. Paper Filing **Electronic filing with direct deposit is generally more secure:** - Faster processing means less time for fraud to occur - Direct deposit to a known bank account is more secure than paper checks - Immediate confirmation of receipt and acceptance - Faster rejection if someone has already filed using your SSN **Paper filing may be appropriate if:** - You're specifically avoiding online accounts due to security concerns - You don't have internet access - You prefer physical documentation ### Protecting Tax Documents - **Store digital copies** in encrypted, password-protected folders - **Use secure backup** methods for important tax documents - **Shrink physical documents** after the required retention period - **Keep only what's necessary**—don't carry SSNs or tax documents unnecessarily ### After You File - **Save confirmation** of your filed return (electronic confirmation or mailing receipt) - **Monitor your refund status** through the IRS "Where's My Refund?" tool - **Watch for suspicious correspondence** after filing - **Report immediately** if you receive notices indicating issues
8. What to Do If You're a Victim: Step-by-Step
Discovering you're a victim of tax identity theft can be overwhelming, but taking prompt, organized action helps resolve the situation. ### Step 1: Confirm the Theft If your return was rejected, try filing again to confirm it wasn't a simple error. If rejected a second time with a message indicating a prior return, identity theft is confirmed. ### Step 2: Complete Form 14039 **File Form 14039 (Identity Theft Affidavit)** immediately. This form: - Alerts the IRS that you may be a tax identity theft victim - Initiates the IRS's identity theft investigation process - Is required for the IRS to take action on your behalf **Download Form 14039** from the IRS website or call the IRS to request one. Complete it carefully, providing: - Your personal information (name, SSN, date of birth, address) - Details about the theft (when you discovered it, what happened) - Information about any fraudulent activity you've identified - Copies of supporting documentation (see below) ### Step 3: File Your Paper Return **File your legitimate tax return by mail** after submitting Form 14039. Include: - Your completed tax return - A copy of your Form 14039 - A copy of the rejection notice (if you have one) - Any other relevant documentation **Do not attempt to file electronically** after discovering identity theft—your electronic return will continue to be rejected. ### Step 4: Attach Required Documentation Include copies of the following with your Form 14039 and paper return: - **Proof of identity:** Driver's license, passport, or state ID - **Proof of SSN:** Social Security card or official documentation - **Proof of address:** Utility bill, bank statement, or other official mail - **Police report:** If you filed one (recommended but not always required) - **IRS notices:** Any correspondence from the IRS related to the theft ### Step 5: Contact the IRS Identity Protection Specialized Unit After submitting Form 14039, you may need to contact the **IRS Identity Protection Specialized Unit (IPSU)** at the dedicated identity theft hotline: **1-800-908-4490**. Be prepared for extended wait times, especially during peak tax season. When you reach a representative: - Have all your documentation ready - Be ready to verify your identity extensively - Take notes on the conversation, including the representative's name and ID - Ask for a timeline and next steps ### Step 6: Report to Other Authorities - **Federal Trade Commission (FTC):** File a report at IdentityTheft.gov - **Local police:** File a police report to create an official record - **Credit bureaus:** Place fraud alerts on your credit reports (Equifax, Experian, TransUnion) - **State tax agency:** Report the theft to your state's tax department - **Financial institutions:** Alert your bank and credit card companies ### Step 7: Monitor and Follow Up - **Keep detailed records** of all correspondence, calls, and actions taken - **Follow up regularly** with the IRS about your case status - **Continue monitoring** your credit reports and financial accounts - **Respond promptly** to any IRS requests for additional information - **Update your security** practices based on lessons learned
9. Form 14039: Identity Theft Affidavit
Form 14039 is your primary tool for alerting the IRS to tax identity theft. Understanding this form helps you complete it correctly. ### When to File Form 14039 Submit Form 14039 if: - Your electronic tax return was rejected because a return was already filed with your SSN - You received an IRS notice indicating identity theft - You were a victim of identity theft and expect it to affect your taxes - You received a tax refund you didn't request - Your IRS account shows activity you didn't initiate ### How to Complete Form 14039 1. **Download the form** from the IRS website (IRS.gov) 2. **Fill in your personal information** accurately (name, SSN, address, phone) 3. **Check the appropriate box** indicating why you're filing: - Someone used my SSN to file a tax return - Someone used my SSN to get a job - Other (explain) 4. **Provide details** about the theft when it occurred, how you discovered it 5. **List affected tax years** if known 6. **Sign and date** the form ### What to Include with Form 14039 Attach copies of: - Proof of identity (driver's license, passport, state ID) - Proof of SSN (Social Security card or SSA-1099) - Proof of current address (utility bill, bank statement) - IRS notices or rejection letters - Police report (if available) - Any other relevant documentation **Never send original documents—send copies only.** ### Where to Mail Form 14039 Mail your Form 14039 and attachments to the appropriate address based on your state: **For states east of the Mississippi River (and some others):** Internal Revenue Service P.O. Box 9039 Andover, MA 01810-0939 **For states west of the Mississippi River:** Internal Revenue Service P.O. Box 9045 Andover, MA 01810-9045 **Check the current IRS website for the most up-to-date mailing addresses**, as they can change.
10. IRS Identity Protection Specialized Unit
The IRS Identity Protection Specialized Unit (IPSU) is dedicated to assisting tax identity theft victims. ### What IPSU Does - **Investigates** reports of tax-related identity theft - **Marks accounts** with identity theft indicators to prevent further fraud - **Resolves** tax issues resulting from identity theft - **Issues** IP PINs to confirmed victims - **Coordinates** with other IRS departments to resolve cases ### Contacting IPSU - **Phone:** 1-800-908-4490 - **Hours:** Monday–Friday, 7 a.m.–7 p.m. local time - **Best times to call:** Early morning or late afternoon to avoid peak wait times ### What to Expect When You Call - **Extended wait times**, especially during tax season (be patient) - **Strict identity verification** before discussing your case (have documentation ready) - **Case-specific information** only after identity is confirmed - **Next steps** provided for your specific situation - **Follow-up instructions** and timelines ### Working with IPSU - **Document every interaction** (date, time, representative name, discussion points) - **Be persistent but polite**—representatives are handling complex cases - **Follow instructions carefully** to avoid delays - **Ask for clarification** if you don't understand something - **Request written confirmation** of important information
11. How Long Resolution Takes
Resolving tax identity theft is not quick. Understanding the timeline helps manage expectations. ### Typical Timeframes - **Initial case processing:** 2–4 weeks after submitting Form 14039 - **Identity verification:** 1–2 weeks - **Investigation and resolution:** 6–12 months (typical) - **Complex cases:** 12–18 months or longer ### Factors Affecting Timeline - **Complexity of the case:** Multiple tax years or extensive fraud take longer - **IRS workload:** Peak tax season (January–April) means slower processing - **Completeness of documentation:** Incomplete information causes delays - **Response time:** Delayed responses to IRS inquiries prolong resolution - **Backlog:** Identity theft cases are common, so wait times can be significant ### During Resolution While your case is being resolved: - **You may not receive your refund** until the case is resolved - **Collection activities are suspended** for disputed amounts - **You should continue filing** tax returns on time for future years - **You may be assigned an IP PIN** to prevent future fraud - **You'll receive periodic updates** on your case status ### After Resolution Once your case is resolved: - **Your legitimate return is processed** and refund issued - **You'll receive notification** of the resolution - **You'll likely receive an IP PIN** for future protection - **The fraudulent return is removed** from your account history - **Your credit remains protected** if you placed fraud alerts
12. State Tax Identity Theft
State tax identity theft often accompanies federal identity theft, as thieves typically file both federal and state returns simultaneously. ### State-Specific Processes Each state handles tax identity theft differently: - **Some states mirror federal procedures** with similar forms and processes - **Others have unique forms** and procedures specific to that state - **Some coordinate directly with the IRS** on identity theft cases - **Others operate independently** with separate investigations ### What to Do 1. **Contact your state tax agency** as soon as you discover federal identity theft 2. **Report the theft** through your state's designated process 3. **File state-specific forms** if required (similar to federal Form 14039) 4. **Provide documentation** similar to what you provided to the IRS 5. **Monitor state refund status** separately from federal refund 6. **Follow state-specific procedures** for resolution ### State-Specific Protections Some states offer additional protections: - **State-specific PIN programs** (similar to federal IP PINs) - **Identity verification questions** before processing returns - **Additional screening** for suspicious returns - **Enhanced fraud detection** systems Check with your state's tax department for specific protections available in your state.
13. Business Identity Theft (EIN Theft)
Businesses are also vulnerable to tax identity theft, typically through theft of their Employer Identification Number (EIN). ### What Is Business Identity Theft? Business tax identity theft occurs when someone uses a business's EIN to: - File fraudulent business tax returns - Claim fraudulent tax refunds - Open fraudulent credit lines - Apply for loans in the business name - Obtain fraudulent tax IDs ### Warning Signs for Businesses - **Business return is rejected** for reasons you don't understand - **IRS notices** about employees you didn't hire - **IRS notices** about tax periods you didn't file - **Unexpected state tax registrations** in your business name - **IRS 941 forms filed** for periods when you didn't file - **Unknown changes** to your business address or EIN information ### Prevention for Businesses - **Protect your EIN** as carefully as you protect your SSN - **File business returns early** in the tax season - **Secure business records** containing EIN and employee information - **Monitor business credit reports** for unfamiliar activity - **Verify IRS correspondence** before responding (scammers often impersonate the IRS) - **Use secure payroll providers** with strong security practices - **Educate employees** about phishing and data security ### What Businesses Should Do If Victimized 1. **Contact the IRS** immediately at the business identity theft hotline 2. **Complete Form 14039-B** (Identity Theft Affidavit for Businesses) 3. **File police reports** documenting the theft 4. **Notify state tax agencies** where your business is registered 5. **Notify credit bureaus** (Equifax, Experian, TransUnion) for business credit 6. **Review all business accounts** for unauthorized activity 7. **Update security practices** based on how the theft occurred 8. **Inform affected employees** if their information was compromised
14. Additional Resources
### IRS Resources - **IRS Identity Theft Central:** irs.gov/identity-theft-central - **IP PIN Information:** irs.gov/ip-pin - **Identity Theft Hotline:** 1-800-908-4490 - **Taxpayer Advocate Service:** 1-877-777-4778 (if you need help resolving issues) ### Federal Trade Commission - **IdentityTheft.gov:** Comprehensive resource for identity theft victims - **Report identity theft online** and receive a recovery plan ### Credit Bureaus Place fraud alerts by contacting: - **Equifax:** 1-800-525-6285 - **Experian:** 1-888-397-3742 - **TransUnion:** 1-800-680-7289 ### Social Security Administration - **Report SSN misuse:** 1-800-269-0271 - **Request benefit statements:** ssa.gov/myaccount
15. Related Articles
- [Tax Refund Status Tracking: How to Check Your Refund and What Those Codes Mean](/articles/tax-refund-status-tracking) - [IRS Audit Triggers: Common Red Flags and How to Avoid Unwanted Attention](/articles/irs-audit-triggers) - [Recordkeeping for Audit-Proofing: What Documents to Keep and For How Long](/articles/recordkeeping-audit-proofing) - [EITC and ACTC Refund Timing: Understanding the February 15 Hold](/articles/eitc-actc-refund-timing)