How the IRS identity verification process starts

The IRS begins identity verification when a tax return triggers a fraud or identity concern, or when the agency cannot match key personal information (name, Social Security number, filing status or dependents) to its records. You’ll usually learn about this through an official IRS letter or notice that includes next steps and a deadline. See the IRS guidance on identity verification for current details (IRS, “Identity Verification”): https://www.irs.gov/identity-theft-fraud-scams/identity-verification.

In my practice I’ve seen three common triggers: an unexpected refund amount, a return filed from a different state or IP address, or a mismatch between the return and SSA/IRS records. Prompt attention to a verification notice is the single best way to avoid months-long delays.

Typical steps and what you’ll be asked to do

Below is a practical, step-by-step breakdown of what to expect and how to respond. Timelines vary by case; I include typical windows IRS communications reference and that we observe in client work.

  1. Official IRS notice or letter
  • What it looks like: A mailed notice (not an email) with a unique case or notice number and instructions. Keep the notice — it contains the code and mailing or online submission address.
  • Action: Read carefully and follow the page-by-page instructions. The IRS will not ask for passwords or full bank account numbers by mail.
  1. Verify online, by phone, or by mail
  • Online: The letter may direct you to an IRS secure portal or identity-verification web address to upload documents and enter a secure code. Use only the exact URL from the notice or IRS.gov. The IRS has a dedicated identity verification area: https://www.irs.gov/identity-theft-fraud-scams/identity-verification.
  • Phone: Some notices allow a phone verification option. Use the number shown on the notice — not any number you might find in an email or on a different website.
  • Mail: If instructed, mail photocopies (not originals) of requested documents to the address on the letter. The IRS usually specifies the documents it needs.
  1. What documents the IRS commonly requests
  • Government-issued photo ID (driver’s license or state ID).
  • Social Security card or SSA statement showing SSN.
  • A copy of the IRS notice you received.
  • Previous-year tax return or W-2s to show filing history.
  • Proof of address (utility bill) or birth certificate in some cases.

Do not mail originals unless the IRS explicitly asks for an original. When in doubt, scan and upload through the secure portal or send certified mail and retain copies. The IRS guidance cautions taxpayers to follow instructions exactly to avoid delays (IRS, taxpayer ID verification guidance).

  1. In-person or additional interviews (less common)
  • In a small number of cases the IRS may request an in-person visit to a Taxpayer Assistance Center (TAC) for face-to-face verification or require a follow-up phone interview.
  • These steps are used when mailed or online documents don’t fully resolve questions or in suspected identity-theft cases.
  1. Resolution
  • Once verification is complete, the IRS will process the return or take identity-theft remediation steps. If the IRS confirms identity theft, they may place an indicator on your account and require additional steps like submitting Form 14039 (Identity Theft Affidavit) to report the misuse of your SSN (see Form 14039: https://www.irs.gov/forms-pubs/about-form-14039).

Timelines you should expect

Exact timing varies, but the following are typical ranges based on IRS guidance and typical case outcomes:

  • Receipt of notice: usually within 30 days after the return is flagged.
  • Required response window: many notices ask for a response within 30–45 days of the notice date.
  • Verification processing: if you respond promptly and the documentation is complete, resolution can take 30–60 days; complex cases or confirmed identity-theft cases can take several months.
  • Refund holds: refunds tied to identity verification are commonly delayed 60–90 days; if identity theft is confirmed, the process to restore your refund may be longer.

These are working ranges — the IRS warns that identity-theft cases ‘‘may take longer’’ to resolve (IRS identity verification pages). In my client experience, quick, complete responses truncate the timeline considerably.

Special scenarios and how they change the steps

  • Suspected tax-related identity theft: If someone files a return using your SSN, the IRS may stop processing the return and begin an identity-theft investigation. You’ll be asked to file Form 14039 and to provide supporting documents. The IRS may also assign an Identity Protection PIN (IP PIN) to prevent future fraudulent filings. Learn more about IP PINs and how to get one here: Navigating IRS Identity Protection PINs (IP PIN): https://finhelp.io/glossary/navigating-irs-identity-protection-pins-ip-pin-why-and-how-to-use-one/.

  • Return flagged but not identity theft: Often a verification request is triggered by a mismatch—e.g., a dependent’s name or an incorrect SSN. These resolve faster if you supply the requested records from the notice, copies of W-2s or prior returns.

  • Refund held for verification: When a refund is held, use the IRS “Where’s My Refund?” tool after your ID steps are complete and monitor your account. If the IRS held a refund because of identity concerns, you may also want to review our guide on why refunds are held and steps to resolve delays: Why Your Refund May Be Held for Identity Verification and How to Resolve It: https://finhelp.io/glossary/why-your-refund-may-be-held-for-identity-verification-and-how-to-resolve-it/.

Practical tips to shorten the process and protect yourself

  • Respond immediately and follow the exact instructions on the IRS notice. Missing or incorrect documents are the biggest cause of delay.
  • Keep copies of everything you send and note tracking numbers if you mail documents. If you upload files online, retain PDFs/screenshots of confirmations.
  • Do not respond to emails or phone calls that ask for your tax or banking information — the IRS initiates identity verification by mail (visit IRS.gov for scams information).
  • Consider enrolling in the IRS IP PIN program if you qualify — an IP PIN prevents someone else from filing a return using your SSN.
  • If you suspect fraud beyond the IRS (credit accounts opened in your name), follow a broader recovery plan (report to FTC at IdentityTheft.gov and freeze your credit). See Consumer Financial Protection Bureau guidance on identity theft for additional consumer steps.

Common mistakes to avoid

  • Waiting too long: Delays in responding to an IRS notice extend the time to resolution and refund issuance.
  • Sending originals: Unless explicitly requested, send clear photocopies or upload files.
  • Using third-party links: Always use the URLs or phone numbers provided on the IRS notice or on IRS.gov — do not rely on links from unsolicited emails or texts.

Quick FAQ

  • How long can the IRS hold a refund for identity verification? It varies. Simple verifications may be resolved in 30–60 days, while identity-theft cases can take several months.

  • What if I’m sure the return is legitimate? Respond with the supporting documents requested. If you still have problems, a tax professional can help you work with the IRS; see our step-by-step article on proving identity when a return is flagged: How to Prove Identity to the IRS When Your Return Is Flagged for Verification: https://finhelp.io/glossary/how-to-prove-identity-to-the-irs-when-your-return-is-flagged-for-verification/.

  • Do I need to file Form 14039? Only if you suspect or know identity theft occurred related to your tax account; otherwise the IRS’s verification letter will specify the forms or documentation required (Form 14039 info: https://www.irs.gov/forms-pubs/about-form-14039).

Final thoughts and next steps

The IRS identity verification process exists to protect taxpayers and the tax system from misuse. Treat any IRS verification notice as time-sensitive. In my experience helping clients, the fastest solutions combine quick action, correct documentation, and secure submission methods.

If the verification process becomes confusing or you suspect broader fraud, consult a qualified tax professional or identity-theft specialist. This article is educational and not a substitute for personalized tax advice.

Sources and further reading

Disclaimer: This content is educational and reflects general practices as of 2025. For specific tax guidance about your situation, consult a licensed tax professional.