Quick overview

If a thief uses your Social Security number or business EIN to file tax returns, you must act quickly to stop further filings and restore your tax record. The IRS, the Federal Trade Commission (FTC), and the Consumer Financial Protection Bureau (CFPB) provide official guidance, but the path typically includes reporting the theft, documenting the fraud, protecting your credit, and tracking the IRS case until it’s resolved. (See IRS Identity Theft Central: https://www.irs.gov/identity-theft-central.)

Priority steps to take immediately (first 24–72 hours)

  1. Document the discovery
  • Save IRS notices, emails, and any suspicious tax forms you receive.
  • Note dates, phone calls, and names of IRS or other agency representatives you speak with.
  1. Report tax‑related identity theft to the IRS
  • Submit Form 14039, Identity Theft Affidavit, if you believe someone used your SSN to file a return. Follow the instructions on the IRS Identity Theft Central page. (IRS: https://www.irs.gov/identity-theft-central)
  • If you receive an IRS notice that a return was filed under your SSN, follow the notice’s instructions immediately.
  1. Use IdentityTheft.gov and FTC resources
  • File a report at IdentityTheft.gov and print the recovery plan and affidavit. The FTC’s portal centralizes reports and creates an evidence package you can use with creditors and law enforcement. (FTC: https://www.ftc.gov)
  1. Protect credit and financial accounts
  • Place a fraud alert or credit freeze with the three major credit bureaus (Equifax, Experian, TransUnion). You can place a one‑year fraud alert for free and request a credit freeze to block most new accounts.
  • Monitor bank and brokerage accounts for unusual activity and change passwords.
  1. Notify your tax preparer and any affected third parties
  • If you work with a CPA or tax firm, inform them so they can stop any pending e‑filings and help with documentation.

What the IRS typically does next (and what to expect)

  • The IRS may treat your Identity Theft Affidavit as the start of an identity‑theft investigation. They will review records for the tax year(s) in question and may place a marker on your account to protect future returns.
  • In many cases, the IRS will ask you to verify your identity and provide supporting documents (copy of government ID, Social Security card, proof of filing, police report, etc.).
  • The IRS may issue an Identity Protection PIN (IP PIN) to victims to prevent future fraudulent filings. The IP PIN program is described at the IRS website and can significantly reduce future risk.

Timeline note: The IRS investigation and resolution can take weeks to many months depending on complexity. For complicated cases or multiple years involved, expect 6–12 months in many cases; some cases can take longer when cross‑agency investigations or criminal prosecutions are involved. (IRS Identity Theft Central.)

Detailed recovery timeline (typical stages)

  • Immediate (0–7 days): File Form 14039 if tax‑related theft is confirmed or suspected; file FTC/IdentityTheft.gov report; place fraud alert/freeze.
  • Short term (2–8 weeks): IRS acknowledges receipt and may request documentation; you may be given instructions to file by paper or follow special filing procedures.
  • Medium term (1–6 months): IRS investigates, clears fraudulent returns, issues corrected account transcripts, and may issue an IP PIN. You should receive written confirmation when resolved for each tax year affected.
  • Long term (6–24 months): Monitor your IRS account transcripts and credit reports. If arrest or criminal proceedings occur, resolution timelines may extend.

In my practice, cases with straightforward documentation and early reporting resolved in about 3–6 months; complex multi‑year identity theft required 9–18 months.

Practical documentation checklist (what the IRS or others commonly request)

  • Completed Form 14039 (Identity Theft Affidavit).
  • A copy of an identity theft report (IdentityTheft.gov or local police report).
  • Government ID (driver’s license, passport) and Social Security card or SSA letter.
  • Copies of IRS notices showing suspected fraudulent returns.
  • Proof of filing (if you filed an original return and the IRS shows a duplicate filing).
  • Any correspondence from employers, financial institutions, or tax preparers tied to the fraud.

Keep both paper and scanned copies in a secure folder.

Credit and financial recovery steps

  • Fraud alert vs. freeze: A fraud alert warns creditors to verify identity before opening accounts; a freeze blocks new accounts. Freezes often take effect faster and are stronger.
  • Correct credit report errors: Use each credit bureau’s dispute process to remove accounts you didn’t open. Keep dispute records.
  • Consider credit monitoring for at least a year; many identity‑theft packages include assistance with removing fraudulent filings or identity restoration services.

For more on recovering credit after identity theft, see our guide: Identity Theft and Your Credit Report: Steps to Recover and Protect Yourself.

Interacting with the IRS — tips that save time

  • Respond quickly to IRS correspondence and keep copies of everything you send. Use certified mail for critical documents you want proof of delivery.
  • If instructed to file a paper return, follow the IRS guidance exactly. Paper returns are sometimes necessary when fraud is suspected to allow manual processing.
  • Request an IRS account transcript to verify the status of filings and adjustments.
  • If you receive repeated IRS notices after filing Form 14039, reference the original Form 14039 case number and include copies of prior correspondence.

For targeted procedural guidance, see our related post: What to Do If You Receive a Notice of Identity Theft from the IRS.

Common mistakes and how to avoid them

  • Delaying the report: Waiting makes fraud easier to compound and harder to fix. File Form 14039 and an IdentityTheft.gov report as soon as you suspect tax identity theft.
  • Ignoring non‑tax identity theft: Thieves who use your data to open credit accounts or file for benefits can create additional tax consequences.
  • Under‑documenting your case: Vague or incomplete records slow the IRS investigation; keep clear, dated copies of everything.

Realistic expectations and emotional considerations

Identity‑theft recovery is both administrative and emotional. Expect repeated documentation requests, phone hold times, and occasional frustration. My experience working with clients shows that persistence and organized documentation reduce time to resolution. Use trusted advisors—CPAs, enrolled agents, or tax attorneys—if the case raises audit or liability concerns.

Frequently asked questions (short answers)

  • How long will it take to get my refund? If a fraudulent return was filed, legitimate refunds are delayed until the IRS completes its review; this can be weeks to many months.
  • Will the IRS clear my tax record if I’m a victim? Yes, when you provide required evidence and follow IRS procedures, the IRS corrects tax records. Keep your documentation until the case is closed.
  • Should I hire an attorney? Consider professional help if you face threatened tax liens, audits, or criminal investigations.

Useful authoritative resources

Final checklist — immediate to 3 months

  • [ ] File Form 14039 with the IRS (if tax‑related).
  • [ ] Report the theft at IdentityTheft.gov and file a local police report if appropriate.
  • [ ] Place credit freezes and/or fraud alerts with Equifax, Experian, TransUnion.
  • [ ] Notify your tax preparer and any financial institutions affected.
  • [ ] Keep organized copies of all communications and follow up with the IRS until you receive written confirmation the matter is resolved.

Professional disclaimer: This article is educational and reflects common, up‑to‑date procedures as of 2025. It does not replace personalized legal or tax advice. Consult a tax professional or attorney for guidance specific to your case.

Related reading on FinHelp: “Identity Theft and Tax Refund Fraud: Prevention and Recovery Steps” and “What to Do If You Receive a Notice of Identity Theft from the IRS” (linked above).