Quick overview

If a criminal files a tax return using your Social Security number (SSN) or personal data, it can block your legitimate refund, trigger IRS correspondence, and damage your credit or financial standing. The IRS uses tools such as an Identity Protection PIN (IP PIN) and identity-theft investigations to stop criminals, but you need to act quickly. This article gives step-by-step actions, realistic timelines, sample scripts, and prevention tips based on IRS guidance and consumer protection resources (IRS Identity Theft Central; IdentityTheft.gov / FTC) and my experience helping clients recover stolen refunds.

Immediate steps to take (first 24–72 hours)

  1. Preserve and document everything
  • Keep any IRS notices, emails (do NOT click suspicious links), bank statements, and screenshots. Note dates, phone numbers, and names of people you speak with.
  1. Verify the problem with the IRS
  • If you receive an IRS notice saying more than one return was filed for your SSN, or you believe your return was rejected because one already exists, call the IRS Identity Theft Hotline at 1-800-908-4490. The IRS provides detailed guidance at its Identity Theft Central page: https://www.irs.gov/identity-theft-central.
  1. File Form 14039 (Identity Theft Affidavit) when instructed
  • The IRS uses Form 14039 to begin an identity-theft case for tax purposes. Follow the instructions on the notice you received; in many cases you’ll complete and submit Form 14039. Keep a copy for your records. See IRS Form 14039: https://www.irs.gov/pub/irs-pdf/f14039.pdf.
  1. Report the theft to IdentityTheft.gov and the FTC
  • Create a recovery plan and get pre-filled letters/forms by filing a report at IdentityTheft.gov (run by the FTC) — this centralizes documentation you’ll use for credit bureaus, banks, and law enforcement: https://www.identitytheft.gov/.
  1. Place a fraud alert or credit freeze
  • Contact one of the three nationwide credit bureaus (Equifax, Experian, TransUnion) to place an initial fraud alert (free, lasts one year) or a security freeze (blocks new credit accounts). The bureau you contact must notify the others. Freezes and alerts reduce the chance of new accounts opened in your name.
  1. Secure your financial accounts and passwords
  • Change passwords and enable two-factor authentication (2FA) on email, bank, and tax-prep accounts. In my practice, clients who updated passwords and enabled 2FA stopped several follow-up attempts by fraudsters within days.

If the IRS rejected your e-filed return

  • If your e-file was rejected because a return already exists for your SSN, don’t re-file electronically. Follow the IRS notice instructions. You’ll often need to file a paper return and include Form 14039 and requested documentation (copies of ID, proof of address, and a statement). The IRS accepts mailed documents to the address shown on the notice; follow the notice instructions exactly.

How the IRS investigates and what to expect (timelines)

  • The IRS may open an identity-theft case and assign an Identity Theft Victim Advocate or investigator. Identity-theft cases can take weeks to several months to resolve; complex cases sometimes take longer. During the investigation, the IRS may delay refund issuance and require identity verification before processing future returns.
  • If you’re eligible, request an Identity Protection PIN (IP PIN). The IRS issues an IP PIN that you must include on future returns to confirm your identity; this prevents criminals from filing returns in your name. Get information at: https://www.irs.gov/identity-theft-central/identity-protection-pin.

What to do about a stolen refund

  • If the refund was issued and you didn’t receive it, the IRS will guide you to report refund fraud. You’ll usually need to submit Form 14039 and additional documentation. If the refund went to a bank account you don’t recognize, notify your bank immediately and file reports with your bank’s fraud department.

Notifications and additional agencies to contact

  • Credit reporting agencies: Equifax, Experian, TransUnion — freeze credit or place alerts.
  • Financial institutions: Notify banks, credit card issuers, and loan servicers; close and open accounts as needed.
  • Social Security Administration: If your SSN is being misused for employment, report to the SSA’s fraud unit or the Office of the Inspector General.
  • Local police: File a police report when identity theft involves financial loss, fraudulent accounts, or serious breaches. Keep the report number for creditors and the IRS.

Documentation you’ll typically need

  • Copy of the IRS notice and completed Form 14039
  • Proof of identity: driver’s license or passport
  • Proof of residency: utility bill or bank statement
  • A copy of a filed police report or IdentityTheft.gov recovery report
  • Any correspondence showing an e-file rejection

Preventive steps to reduce risk (short and long term)

  1. Enroll in the IRS IP PIN program if eligible — it’s one of the most effective tax-season protections.
  2. File early — criminals often file fraudulent tax returns early in filing season to beat legitimate filers.
  3. Use reputable tax preparers and secure tax software — verify preparers’ PTIN and use secure portals.
  4. Lock down personal data online — limit what you post on social media, shred mail with personal details, and avoid sharing your SSN.
  5. Monitor credit and tax transcripts — check your credit reports (annualcreditreport.com provides free reports) and request a tax account transcript from the IRS to spot strange activity.

Sample scripts (what to say on calls and in letters)

  • To the IRS hotline: “Hello, my name is [Name]. I received Notice [Number] that indicates another return was filed using my SSN. I want to report tax-related identity theft and need instructions to file Form 14039 and any supporting documents.” Note dates and names.
  • To a credit bureau: “I want to place a fraud alert (or credit freeze) on my file. My name is [Name], SSN ending in [XXX]. I can provide my identity verification documents.”
  • To your bank: “I believe a fraudster used my identity to receive a tax refund / open an account. Please place a fraud alert on my accounts and advise on next steps.”

Common misconceptions and pitfalls

  • Myth: The IRS will fix everything automatically. Reality: The IRS provides programs, but you must submit documentation and follow instructions. Expect to stay involved until the case closes.
  • Myth: Only people with online accounts get targeted. Reality: Criminals use data from breaches, stolen mail, and purchased SSNs. Anyone can be a target.
  • Pitfall: Re-filing electronically immediately after rejection. This often delays resolution. Follow IRS guidance and submit the paper return with Form 14039 when required.

How I help clients (practical perspective)

In my practice, the most effective approach is rapid documentation plus layered protections: report to the IRS, file with IdentityTheft.gov, place a credit freeze, and enroll in IP PIN when eligible. I also prepare clients to expect processing delays and to keep careful records so that lenders or government agencies can verify legitimate tax history when reviewing loans or benefits.

When to get professional help or legal advice

  • If the fraud involves significant stolen funds, loan application denials, ongoing harassment, or identity theft that affects employment, consult a tax professional and an attorney. For complex losses, an identity-theft attorney or a tax attorney can guide dispute resolution, potential claims, and interactions with creditors and the IRS.

Useful official resources

Internal resources on FinHelp.io

For more detailed guides and related recovery steps, see these FinHelp articles:

Final checklist (action items)

  • [ ] Save IRS notices and emails; don’t click suspicious links
  • [ ] Call the IRS Identity Theft Hotline: 1-800-908-4490
  • [ ] File Form 14039 if the IRS instructs
  • [ ] Report at IdentityTheft.gov and get a recovery plan
  • [ ] Place a fraud alert or freeze with credit bureaus
  • [ ] Change passwords, enable 2FA, and secure accounts
  • [ ] Notify banks and creditors; file police report if needed
  • [ ] Consider enrolling for an IP PIN

Professional disclaimer: This article is educational and informational only and does not constitute legal or tax advice. Consult a qualified tax professional or attorney for personalized guidance.