Quick summary

An IRS Identity Protection PIN (IP PIN) is a six‑digit, annually‑issued code the IRS uses to confirm that the person filing a tax return is the legitimate taxpayer. The IP PIN helps block fraudulent e‑filed and paper returns submitted by identity thieves. The IRS provides an online Get an IP PIN tool for eligible taxpayers and issues IP PINs automatically to confirmed victims of tax‑related identity theft (IRS) — see the IRS IP PIN information page for details: https://www.irs.gov/identity-theft-fraud-scams/identity-protection-pin.

Why the IP PIN matters

Tax identity theft occurs when someone uses your personally identifying information to file a tax return and claim a refund. An IP PIN prevents thieves from successfully filing a return in your name because the IRS will only process a return that includes the correct current IP PIN for that taxpayer. In practice, this reduces the time you spend resolving fraud, preserves refunds, and prevents incorrect tax records.

In my work advising clients, I’ve seen how an IP PIN speeds resolution. Victims who obtain an IP PIN often avoid repeated correspondence with the IRS and reduce the time their refunds are held for verification.

Who is eligible for an IP PIN?

  • Taxpayers who the IRS has already identified as victims of tax‑related identity theft. The IRS may issue an IP PIN automatically to these individuals.
  • Taxpayers who receive an IRS notice such as Letter 5071C requesting identity verification; these notices can lead to IP PIN issuance after verification.
  • As of recent IRS guidance, many taxpayers can apply via the online Get an IP PIN tool if they can verify their identity. Check the IRS Get an IP PIN page for current eligibility and verification steps: https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin.

Note: Eligibility rules and verification procedures have changed over time. Always confirm current requirements on the IRS site before you start the application.

How to get an IP PIN — step‑by‑step

  1. Create or sign in to your IRS online account (if required). The IRS provides an online tool to request an IP PIN; you must complete an identity verification process. (IRS) See: https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin
  2. Complete the identity verification steps — this may include providing personal information, uploading ID documents, or answering knowledge‑based questions. If you can’t verify online, follow the IRS alternative instructions (phone or in‑person verification, if available).
  3. After successful verification, the IRS issues a six‑digit IP PIN for the current filing year. The IRS usually displays the IP PIN immediately in your online account; some taxpayers may receive it by mailed CP01A letter.
  4. Use the IP PIN when you file your federal tax return (e‑file or paper). The IP PIN is valid only for the year shown; the IRS issues a new one annually.

If you are already a confirmed identity‑theft victim, the IRS may mail an IP PIN automatically; victims should follow the instructions the IRS provides. If you were told to file Form 14039 (Identity Theft Affidavit), visit the IRS Form 14039 page for guidance: https://www.irs.gov/forms-pubs/about-form-14039.

Using the IP PIN on your tax return

  • Include the current year’s IP PIN on your federal individual tax return (Form 1040). When e‑filing, your tax software will prompt for the IP PIN if the IRS record requires it; if you’re paper‑filing, write the IP PIN in the designated field.
  • If you fail to include the correct IP PIN, the IRS will generally reject an e‑filed return or hold a paper return for manual review — this delays refunds and processing.
  • Keep your IP PIN safe. Treat it like a password: do not share it by email or post it on social media. The IRS will not call to demand your IP PIN.

Lost, forgotten, or expired IP PIN

  • Online account users can retrieve the current IP PIN after passing the IRS identity verification process.
  • If you cannot use the online tool and you lose your mailed IP PIN, follow IRS instructions in the CP01A letter or contact the IRS Identity Protection Specialized Unit for help. Expect identity verification steps.
  • If you file without the current IP PIN because you mislaid it, the IRS may reject your e‑file. For paper returns submitted without the IP PIN, the IRS will send correspondence requesting identity verification.

Common mistakes and misconceptions

  • Misconception: “An IP PIN makes me fully immune to identity theft.” Reality: the IP PIN specifically prevents tax return fraud filed with the IRS; it does not stop other forms of identity theft (bank account fraud, new accounts opened in your name). Use it as one layer in a broader security strategy (FTC: https://www.consumer.ftc.gov/topics/identity-theft).
  • Mistake: Sharing your IP PIN. Never send it via plain email or SMS. Scammers may try to trick you into divulging it.
  • Mistake: Using last year’s IP PIN. The IP PIN changes annually; entering a prior year’s code will trigger a rejection or delay.

What happens if someone files a fraudulent return anyway?

If a thief manages to use your personal information but doesn’t have your current IP PIN, the IRS’s systems should detect the mismatch and block the return. If a fraudulent return is accepted before detection, the IRS has a recovery process for victims of tax‑related identity theft. For immediate steps and timelines on recovering an intercepted refund, see our guide on protecting refunds and recovery steps: Protecting Your Refund from Identity Theft: Detection and Recovery Steps (internal link: https://finhelp.io/glossary/protecting-your-refund-from-identity-theft-detection-and-recovery-steps/).

If the IRS sends a notice such as Letter 5071C asking you to verify your identity, follow the letter’s instructions promptly. Our article on responding to that notice explains how to resolve verification requests quickly: How to Respond to an IRS Identity Verification Letter (Letter 5071C) (internal link: https://finhelp.io/glossary/how-to-respond-to-an-irs-identity-verification-letter-letter-5071c/).

Additional protections to use alongside an IP PIN

  • Monitor your IRS account transcript and tax records for unexpected activity.
  • Place a free credit freeze or fraud alert with the major credit bureaus if you suspect broader identity theft.
  • Regularly review bank and brokerage accounts for unauthorized transactions.
  • Consider identity‑theft insurance or professional monitoring tools if you have high risk or prior exposure.

Professional tips from practice

  • If you or a family member has already been a tax‑related identity‑theft victim, apply for an IP PIN without delay — it removes one significant attack vector.
  • For families, each eligible individual (including children with Social Security numbers who file returns) should enroll separately if needed. Don’t assume a parent’s IP PIN covers dependent returns.
  • Keep a secure, offline record of your annual IP PIN (for example, a password manager with offline backup). This prevents accidental usage of an old code.
  • If you use a tax preparer, provide the IP PIN directly to the preparer via a secure channel and confirm they enter it correctly on your return.

When not to use or rely solely on an IP PIN

  • The IP PIN protects tax filings but won’t prevent identity thieves from opening credit or committing other non‑tax fraud. Use broader identity‑theft prevention and credit monitoring strategies.
  • If you can’t pass the IRS online identity verification, don’t ignore the problem: follow IRS alternate verification routes or contact a tax professional to guide you through the process.

Frequently asked operational questions

  • Will the IRS call me and ask for my IP PIN? No. The IRS does not initiate unsolicited calls asking for your IP PIN. Treat such calls as scams.
  • Can businesses get an IP PIN? The IP PIN program is for eligible individuals. Businesses have different identity‑protection and tax‑filing safeguards; consult the IRS for business‑level protections.
  • How long does the IP PIN remain valid? Each IP PIN is valid for the calendar year shown. The IRS issues a new number each year; you must use the current year’s PIN on that year’s return.

Quick checklist before filing

  • Verify you have the current year’s IP PIN and that it is entered on your tax return.
  • Confirm your preparer received it securely and entered it correctly.
  • If filing electronically and you are rejected due to IP PIN mismatch, verify the number and refile after correction.

Disclaimers and sources

This article is educational and informational only. It does not substitute for personalized tax advice. If you have a complex situation or are an identity‑theft victim, consult a tax professional or contact the IRS Identity Protection Specialized Unit.

Authoritative sources referenced:

Internal resources on finhelp.io:

If you need step‑by‑step help applying for an IP PIN or responding to an IRS identity verification request, consider contacting a licensed tax professional.