Overview

Tax-related identity theft occurs when a criminal uses your personal information — most often your name and Social Security number — to file a fraudulent federal (or state) tax return and claim a refund. The IRS treats these cases seriously because a duplicate or fraudulent return can block your legitimate refund, trigger IRS notices, and add months of resolution time. In my practice advising clients with tax and identity issues, I’ve seen how quick, organized action reduces stress and shortens the recovery timeline.

Immediate steps (first 24–72 hours)

  1. Don’t ignore IRS notices. If you receive any IRS correspondence saying a return has already been filed or asking you to verify your identity, follow the instructions on the notice. Many IRS identity cases start because the taxpayer got a letter; responding promptly prevents added delays.
  2. Gather key documents. Collect your Social Security card (or number), a current government photo ID, copies of the problematic tax return (if available), IRS notices, and any evidence of unusual account activity (bank statements, emails about changed passwords, etc.).
  3. File a Form 14039 (Identity Theft Affidavit) when instructed. The IRS uses Form 14039 to document tax-related identity theft cases. If an IRS notice directs you to submit Form 14039, complete it and include the requested attachments (copies of ID, IRS notices). See IRS Identity Theft Central for the form and instructions (irs.gov/identity-theft-central).
  4. Contact the IRS Identity Protection specialized units. Use the contact instructions on the IRS notice you received. The IRS’s Identity Theft Central explains next steps and provides guidance for taxpayers (https://www.irs.gov/identity-theft-central).

Reporting to other agencies and credit steps

  • Report to the FTC at IdentityTheft.gov. The Federal Trade Commission provides a centralized, printable recovery plan and lets you create a victim report that you can use with creditors and government agencies (https://www.identitytheft.gov) (FTC).
  • File a local police report if you can. A police report is not always required, but having one helps when dealing with banks, credit bureaus, or the IRS. Bring copies of the FTC report, IRS notices, and any proof of fraud.
  • Place a fraud alert or credit freeze. Contact one of the three major credit bureaus (Equifax, Experian, TransUnion) to request an initial fraud alert or a credit freeze. A freeze prevents most new accounts from being opened in your name; a fraud alert requires lenders to take extra steps to verify identity. You can get a free credit report at AnnualCreditReport.com.

Using the IRS Identity Protection PIN (IP PIN)

The IRS issues a six-digit Identity Protection PIN (IP PIN) to verified victims of tax-related identity theft and (as of 2024) allows most taxpayers to opt in through the online Get an IP PIN tool. The IP PIN prevents someone else from filing a federal return using your Social Security number because the IRS requires that PIN to accept your electronic tax return (https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin).

  • How to get it: Use the IRS Get an IP PIN tool on IRS.gov. You’ll need to verify your identity through ID verification steps the IRS requires. If you are already a confirmed victim, the IRS will provide instructions in its notices.
  • Keep it safe: Never share your IP PIN. Put it in secure records and follow your tax preparer’s procedures to transmit it securely.

Handling your refund and the IRS process

If a fraudster claimed your refund, the IRS will typically block the duplicate return and begin a resolution process. Expect delays — resolution can take several months depending on how complex the identity theft is. Keep copies of all correspondence and log dates, phone numbers, and names for every interaction.

  • Follow instructions on IRS notices: Some letters will ask you to verify identity by phone or in person. Others will direct you to submit Form 14039 and proof of identity.
  • If you used a tax preparer: Inform them. If your preparer’s credentials or systems were compromised, you’ll need to investigate and secure those accounts.

State tax agency issues

If the fraud involves state income tax (a common occurrence), contact your state revenue or taxation department immediately. States have their own identity-theft procedures and may require additional documentation.

Documentation checklist (keep copies, never send originals unless requested)

  • A copy of the suspicious or fraudulent tax return (if you can obtain it).
  • IRS notices or letters about the incident.
  • A government-issued photo ID (driver’s license, passport).
  • Social Security card or documents showing your SSN.
  • Copies of bank and financial statements showing unauthorized activity.
  • A copy of your FTC Identity Theft Report (from IdentityTheft.gov).
  • Police report (if filed).
  • Correspondence with any credit bureau or financial institution.

Common mistakes and misconceptions

  • Waiting to act: Delaying reporting increases the chance the fraudster will cause more damage (new accounts opened, more returns filed). Report promptly to the IRS and FTC.
  • Relying only on banks: While notifying your bank is necessary if accounts are affected, tax identity theft requires direct contact with the IRS and often Form 14039.
  • Throwing away IRS mail: Keep every IRS letter and notice. They typically contain unique case numbers and instructions needed during resolution.

Timelines and expectations

Resolution timelines vary. Simple cases with clear documentation can be resolved in a few months; complicated cases (multiple years, cross-jurisdiction fraud, or identity theft rings) can take significantly longer. You should also expect a delay in receiving refunds until the IRS verifies the legitimate return or issues a replacement refund once the case is resolved.

Prevention best practices

  • Enroll in the IP PIN program if eligible (IRS Get an IP PIN tool).
  • Use strong, unique passwords and multifactor authentication for email, tax software, and financial accounts.
  • Don’t click links or open unexpected attachments in emails requesting financial or personal information.
  • Safeguard your Social Security number. Only provide it when legally required.
  • Order your credit reports regularly and set up monitoring alerts.

Frequently asked questions (brief answers)

Q: I received an IRS letter saying my return was already filed. What’s the first thing I should do?
A: Follow the instructions on the letter, call the IRS phone number on it if asked, and consider submitting Form 14039 if the IRS requests it. Then report the fraud to the FTC at IdentityTheft.gov.

Q: Will I lose my refund permanently?
A: Not usually. If you are the rightful filer and you provide the required documentation, the IRS and state agencies generally work to restore your refund — but it may take time.

Q: Is a police report required to resolve tax identity theft?
A: Not always, but it can help. The FTC report and IRS Form 14039 are typically the first required steps.

Related FinHelp resources

For more details about protecting your tax account and recovering refunds, see these related guides on FinHelp:

Authoritative sources and further reading

Professional note and closing

In my 15 years advising clients on tax and identity issues, the single biggest difference between a quick resolution and a prolonged case is how promptly the taxpayer collects documentation and follows IRS instructions. Keep a dated log of every call and piece of mail, get an IP PIN if you can, and use the FTC report to standardize conversations with banks and credit bureaus.

Disclaimer

This article is educational and does not constitute legal or tax advice. For complex cases or litigation risk, consult a tax attorney or a qualified tax professional experienced with identity-theft cases.