Quick summary

Before you file: get an IRS Identity Protection PIN (IP PIN), file early (e-file is best), lock or freeze your credit if appropriate, secure tax documents and accounts, and use trusted preparers or software. These practical steps reduce the chance a fraudster files a return using your Social Security number and claims your refund first (IRS Identity Theft Central; FTC).

Why this matters now

Tax-related identity theft remains a top priority for the IRS and consumer protection agencies. When someone files a return using your Social Security number, the IRS may flag the account, delay legitimate refunds, and require an identity review. That process can take months and often requires submitting identity verification paperwork and an Identity Theft Affidavit (Form 14039) to the IRS (IRS Identity Theft Central; IRS Form 14039). In my practice advising clients, the fastest prevention is a combination of an IP PIN plus strong document and account hygiene.

Step-by-step checklist to protect your refund before filing

  1. Request an IRS Identity Protection PIN (IP PIN)
  • What it does: an IP PIN is a six-digit code the IRS uses to verify your identity on electronically filed returns. If a correct IP PIN isn’t included, the return will be rejected or flagged as suspicious.
  • How to get one: apply online using the IRS “Get an IP PIN” tool. The IRS requires identity verification (government ID, recent tax information, or an identity verification service). If you have a prior identity-theft case, the IRS may automatically issue one. See the IRS IP PIN page for current steps and links (IRS Get an Identity Protection PIN).
  • My advice: enroll early — the process can take time if you need to verify identity documents.
  1. File early and e-file when possible
  • Filing as soon as you have accurate tax documents (W-2s, 1099s, etc.) reduces the window a thief has to submit a fraudulent return using your SSN.
  • E-file with a reputable provider and opt for direct deposit to your bank rather than paper checks. E-file software will prompt for identity verification steps and is faster for rejecting suspicious duplicates.
  1. Secure your personal documents
  • Store tax forms, Social Security cards, and financial statements in a locked drawer or safe. Shred unneeded paper containing account numbers or SSNs before disposal.
  • Protect digital copies with strong passwords and encryption; avoid emailing unencrypted Social Security numbers or tax documents.
  1. Harden online accounts
  • Use unique, strong passwords and a password manager.
  • Enable multi-factor authentication (MFA) on your IRS Online Account, tax software accounts, email, banks, and retirement accounts.
  • Check account activity regularly and change passwords immediately if you spot unfamiliar logins.
  1. Monitor credit and consider a freeze or fraud alert
  • Fraud alerts and credit freezes restrict new credit applications in your name. A freeze is stronger: creditors won’t open new accounts without your explicit unfreeze action.
  • Place a fraud alert or freeze with one of the three major bureaus (Equifax, Experian, TransUnion); by law, one bureau must notify the others.
  • Credit monitoring services can help detect suspicious credit activity, but they don’t prevent tax return filing. Use them as one layer among many.
  1. Vet tax preparers and software
  • Choose a tax pro with a valid PTIN and check credentials (CPAs, EAs) or use respected software companies.
  • Avoid preparers who ask you to sign blank returns or who guarantee unusually large refunds without documentation.
  • Keep copies of signed returns and correspondence; ask your preparer how they protect client data.
  1. Use IRS and government resources
  • Bookmark the IRS Identity Theft Central page and the FTC’s identity theft site (identitytheft.gov) for current alerts, tax-season scams, and instructions for victims.
  • Create or review your IRS Online Account to monitor tax transcripts and notices for early signs of suspicious filings (IRS Online Account).

If someone already filed using your SSN — immediate steps before and after filing

  1. Don’t file another return if you learn a fraudster already filed for that tax year. Filing a second return can complicate the IRS review. Instead, follow these actions:
  • Report the identity theft to the IRS according to their instructions. The IRS identity-theft procedures typically require submitting Form 14039 (Identity Theft Affidavit) if instructed, or following a specific notice’s guidance. See the IRS Identity Theft Central for the latest contact steps (IRS Identity Theft Central).
  • File a report with the Federal Trade Commission at identitytheft.gov and get a recovery plan. The FTC report generates an identity-theft report and a recovery checklist you can use with creditors, the IRS, and credit bureaus.
  • Place a fraud alert or credit freeze with the credit bureaus.
  1. Work with the IRS to clear the hold
  • The IRS may request identity verification documents, a completed Form 14039, copies of government ID, and supporting tax documents. Respond to IRS notices promptly and use recorded delivery if mailing sensitive documents.
  • If the IRS places an ‘identity theft indicator’ on your account, ask about the IP PIN program if you don’t already have one.
  1. Consider professional help for fast resolution
  • For complex cases (multiple years, fraudulent refunds already issued), a tax attorney or enrolled agent who specializes in identity theft can help manage communications and documentation with the IRS.

Practical examples from practice

  • Case: A client delayed filing until March. A third party had already filed in January using the client’s SSN and direct-deposit routing. The client had to submit identity verification to the IRS and wait five months for refund resolution. After this, they enrolled in the IP PIN program and froze credit to stop repeat attempts.

  • Case: A retiree received an IRS notice of a duplicate return. Because they kept copies of prior-year tax returns and W-2s, we assembled the requested documents quickly and filed Form 14039. The IRS cleared the hold within three months due to complete documentation.

These examples show that keeping organized records and acting quickly with the IRS and credit bureaus reduces the long-term headache.

Common misconceptions

  • Misconception: Tax software or a preparer guarantees full protection. Reality: Software and reputable preparers reduce risk, but the best defense is preventive — IP PINs, timely filing, account security, and credit controls.

  • Misconception: Only people with high incomes are targeted. Reality: Anyone with a Social Security number can be a target — especially those who have had data breaches, mailed documents stolen, or who previously experienced identity theft.

Useful links and resources

For related reading on FinHelp, see our guides on preventing tax-related fraud and resolving refund holds:

Final professional tips

  • Enroll in the IP PIN program as soon as you’re eligible — it’s one of the most effective preventive tools the IRS provides.
  • File early and e-file with direct deposit to reduce the time a fraudster has to act.
  • Keep a printed, year-by-year folder of tax returns, W-2s, 1099s, and a list of accounts accessed when preparing tax returns.
  • If you’re a victim, act immediately: report to the FTC, notify the IRS, and consult a qualified tax professional.

Professional disclaimer: This article is educational only and does not replace individualized tax, legal, or financial advice. Contact a qualified tax professional or the IRS for guidance tailored to your situation.

Authoritative sources and further reading: IRS Identity Theft Central; IRS Get an Identity Protection PIN; FTC’s identitytheft.gov.