Why an IRS identity theft notice matters

An IRS identity theft notice signals that the agency detected suspicious activity involving your Social Security number (SSN) or tax account. That activity might be a return filed using your SSN, repeated filings, or an attempt to claim a refund in your name. Ignoring these notices can lead to delayed refunds, incorrect tax records, and longer cleanup—sometimes lasting months.

In my practice helping clients with tax and identity issues, a swift, documented response is the difference between a simple verification and a prolonged identity-recovery process.

Authoritative sources: IRS Identity Theft and Fraud (irs.gov) and FTC / IdentityTheft.gov provide step-by-step guidance and reporting tools. See IRS: https://www.irs.gov/identity-theft-fraud-involving-taxes and FTC: https://www.identitytheft.gov/ for official action steps.

How to recognize a legitimate IRS identity theft notice

  • The IRS typically sends notices by mail; the agency does not initiate unexpected calls demanding immediate payment. If you receive a suspicious phone call, hang up and verify via irs.gov.
  • A common identity verification letter is Letter 5071C, which asks you to confirm your identity online or by phone. (Always verify a letter’s contents on the IRS website.)
  • Legitimate notices include a letter or notice number, clear instructions, and a phone number or online verification link. If anything looks off, cross-check the notice code and phone number at IRS.gov.

Tip: Before calling a number printed on a notice, compare it against the contact information at IRS.gov/contact to reduce scam risk.

Step-by-step: What to do the moment you get a notice

  1. Stop and read the notice carefully. Note the notice ID, date, and any listed instructions.
  2. Confirm authenticity. Go to the IRS identity pages (https://www.irs.gov/identity-theft-fraud-involving-taxes) and search for the notice code—do not call phone numbers from suspicious emails or texts.
  3. Use the IRS Identity Verification Service if the notice directs you there. The IRS often gives a secure online process for verifying identity; follow the exact instructions on the letter.
  4. If the notice indicates someone filed a return using your SSN, file Form 14039, Identity Theft Affidavit, if instructed by the IRS. The form is still the IRS’s official way to flag tax-related identity theft.
  5. File a report at IdentityTheft.gov (FTC) and follow the recovery plan you receive. This establishes an official record and helps with credit and account restoration.
  6. Place a fraud alert or credit freeze with the three major credit bureaus if your SSN is compromised (Equifax, Experian, TransUnion). The FTC recovery plan will walk you through this.
  7. Keep dated records of every call, form, and submission. Save copies (paper and scanned) of the notice and any supporting documents.

Citations: FTC IdentityTheft.gov (https://www.identitytheft.gov/) and IRS identity pages (https://www.irs.gov/identity-theft-fraud-involving-taxes).

What the IRS may ask you to provide

The IRS may ask you to verify identity with one or more of the following:

  • Copies of government-issued ID (driver’s license or passport)
  • Recent federal tax returns or W-2s/1099s
  • A completed Form 14039 (Identity Theft Affidavit) when the IRS requests it
  • Responses via the IRS Identity Verification Service portal

Protect any documents you submit. Send copies, not originals, and use secure upload tools listed on the IRS site. Never provide sensitive documents in response to an unsolicited email or phone call.

How long resolution typically takes and what to expect

There is no single timetable. Simple verifications can conclude in weeks; complex fraud cases may take several months. Expect these possible outcomes:

Note: The IRS may place special markers on your account to prevent future fraudulent tax filings. These protections are helpful but do not replace broader credit monitoring and identity safeguards.

When to file Form 14039 (Identity Theft Affidavit)

File Form 14039 only if the IRS instructs you to do so or if you know for certain someone used your SSN to file a tax return. The form helps the IRS flag your account and start an investigation. Submit it per the instructions on the notice or the IRS Form 14039 page.

Do not file Form 14039 if the notice only asks you to verify identity through an online or phone process—follow the path on the letter unless directed otherwise.

Reference: IRS Form 14039 instructions at irs.gov/forms-pubs.

Practical prevention and recovery tips

  • Enroll in the IRS IP PIN program if eligible. An IP PIN is a six-digit code known only to the taxpayer and the IRS that prevents someone else from filing a return using your SSN.
  • Sign up for annual free credit reports at AnnualCreditReport.com and monitor for new accounts or inquiries you don’t recognize.
  • Use multi-factor authentication on tax-preparation accounts, financial institutions, and email.
  • Limit sharing of your SSN; only provide it when legally required.

See our related article on the IRS verification process and timelines for more detail: The IRS Process for Identity Verification: Steps and Timelines (https://finhelp.io/glossary/the-irs-process-for-identity-verification-steps-and-timelines/).

Common mistakes to avoid

  • Treating the notice as a scam without verifying it through IRS channels. Many notices are legitimate; verify before discarding.
  • Calling phone numbers from suspicious emails or texts. The IRS will mail notices and has official phone numbers on IRS.gov.
  • Waiting to act. Delays can make recovery harder and increase the chances a fraudulent return goes unchallenged.
  • Submitting originals or overly sensitive documentation in unsecured ways.

Quick response checklist (printable)

  • [ ] Read the notice and note the date and notice number.
  • [ ] Verify the notice on IRS.gov.
  • [ ] Use the IRS Identity Verification Service if directed.
  • [ ] File Form 14039 if instructed or if fraud is confirmed.
  • [ ] Report at IdentityTheft.gov and follow the recovery plan.
  • [ ] Freeze or place alerts on credit files if SSN is compromised.
  • [ ] Enroll in IP PIN if recommended.
  • [ ] Keep copies of all communications and forms.

If the IRS won’t resolve your case or you hit roadblocks

If you’ve followed instructions and still can’t get your tax account corrected, contact the Taxpayer Advocate Service (TAS). TAS is an independent organization within the IRS that helps taxpayers resolve persistent issues; see the TAS page on IRS.gov. Keep careful records of your attempts to resolve the problem—this will help TAS and other advocates act more efficiently.

Examples from practice

  • A client received Letter 5071C asking her to verify identity. She completed the IRS online verification and received an IP PIN the following tax season; the marker prevented future fraudulent filings.
  • Another client had a stolen SSN used for multiple prior-year returns. We filed Form 14039 as instructed, reported fraud to IdentityTheft.gov, and placed freezes with the credit bureaus. The cleanup took months, but documentation and persistence led to a full correction of his tax records and a refund release.

These experiences underline the importance of early detection, accurate record-keeping, and following IRS instructions precisely.

Helpful official resources

Professional disclaimer: This article is educational and does not constitute tax or legal advice. For guidance tailored to your situation, consult a qualified tax professional, attorney, or the IRS directly.

If you need practical, step-by-step help specific to identity-related tax problems, see our additional guides on verification timelines and IP PINs linked above.