The most effective way to stop someone from filing a federal tax return in your name is to enroll in the IRS Identity Protection PIN (IP PIN) program. The free, six-digit PIN is tied to your Social Security number (SSN) or Individual Taxpayer Identification Number (ITIN), changes every year, and must be entered on covered federal returns. Combine it with an IRS Online Account, careful handling of your SSN, strong account security, and a documented response plan if a fraudulent return appears.
This guide covers U.S. individual federal income tax returns. State tax agencies use separate systems, and an IRS IP PIN is not a state tax PIN.
As an Amazon Associate I earn from qualifying purchases.
What tax-related identity theft is—and how you can spot it
Tax-related identity theft happens when someone uses your stolen SSN or ITIN to file a fraudulent federal income tax return, usually to claim a refund before you file. The fraudulent return can be submitted even when the thief has no access to your IRS account.
Recommended Free Tools
Common warning signs include:
- Your legitimate e-filed return is rejected because a return with your SSN or ITIN was already filed.
- The IRS sends a notice asking you to verify a return that you did not submit.
- Your IRS records show wages, withholding, or an employer you do not recognize.
- You receive an IRS notice about a tax account, refund, or return that does not match your activity.
The IRS lists these indicators and identity-protection measures in its identity protection tips. An unexpected email, text, or phone call claiming to be from the IRS is not proof that a tax theft case exists; scammers often use real personal details to make a message look credible.
#1 Best Overall
Start with the free IRS IP PIN
What an IP PIN does
An IRS Identity Protection PIN is a six-digit authentication number. IRS Publication 5367, revised June 2026, defines it as “The IP PIN is a 6-digit number assigned to eligible taxpayers.” When the PIN is required and correctly entered, it helps the IRS verify that the filer is the taxpayer associated with the SSN or ITIN and blocks an impostor who does not have the current number.
The program is preventive: it helps stop an unauthorized filing, but it does not protect bank accounts, email, credit files, or other uses of your personal information. It also does not guarantee a faster refund or replace ordinary account-security practices.
Who can enroll
Anyone with an SSN or ITIN who can complete the IRS identity-verification process may enroll. The IRS Online Account is normally the fastest route. If you cannot validate your identity online, the IRS describes alternative routes in its current IP PIN frequently asked questions.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
| Enrollment route | When it is used | Important qualification |
|---|---|---|
| IRS Online Account | You can create or access the account and pass its identity checks. | Usually the quickest option; the account uses multifactor authentication. |
| Form 15227 | You cannot validate your identity or access an IRS Online Account. | The current FAQ lists adjusted gross income ceilings of $84,000 for an individual and $168,000 for married filing jointly. These thresholds and procedures can change, so confirm the current FAQ before filing the form. |
| Taxpayer Assistance Center appointment | You are eligible but cannot use the online or Form 15227 route. | Follow the appointment instructions and bring the identity documents the IRS specifies. |
Choose continuous or one-time enrollment
The IRS offers continuous enrollment and one-time enrollment for the current calendar year. Continuous enrollment keeps you in the program so a new PIN is issued each year. With one-time enrollment, you are automatically opted out at the end of the year. If you later decide to re-enroll, use the current IRS instructions rather than an old PIN.
How to enroll through an IRS Online Account
- Go directly to IRS.gov and open or sign in to your IRS Online Account. Do not use an account link from an unsolicited email, text, or social-media message.
- Complete the account’s identity-verification and multifactor-authentication steps.
- Open the IP PIN enrollment option and select continuous or one-time enrollment.
- Complete the requested information and save the newly issued six-digit PIN in a secure place that you can access when preparing your return.
- Record whether you selected continuous or one-time enrollment so you know whether to expect a new PIN next year.
If the online process fails, do not repeatedly submit random information. Check the current IP PIN FAQ for the Form 15227 income limits, mailing instructions, or Taxpayer Assistance Center process that applies to your situation.
Rank #2
- Ideal for Gifting
- Ideal for a bookworm
- Compact for travelling
How to use the PIN when filing
The IP PIN changes every year. A taxpayer who has one must use the current-year PIN on applicable federal individual returns filed during that calendar year, including a current-year return, a delinquent prior-year return, and an amended return when the form requires an IP PIN. Use the PIN issued for the year in which you file, not the year covered by the tax return.
- Enter each taxpayer’s required PIN. Dependent PIN rules vary by filing method and form, so follow the instructions for the specific return instead of assuming that one PIN covers everyone on it.
- Give the current PIN to a tax preparer only when needed to prepare and file your return. Tax professionals cannot obtain the PIN on a client’s behalf.
- Do not enter the IP PIN on a state tax return.
- Do not enter it on Form 4868, the federal extension request.
- Do not treat it as identity proof for an IRS telephone call or an in-person IRS visit.
An incorrect e-filed PIN generally causes the return to be rejected. A paper return can take longer while the IRS validates the number. Keep the PIN confidential until filing; someone who obtains it along with your SSN may be able to pass the filing check.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →If you lose the PIN or opt out
Use the IRS Online Account and the current FAQ’s lost-PIN instructions to retrieve or manage the number. The FAQ states that after an opt-out selection, it can take up to 72 hours before you can e-file without a PIN or opt back in. A return filed during that waiting period may still require the PIN, so plan before the filing deadline.
Secure the IRS account and the information behind your return
Protect your IRS Online Account
An IRS Online Account gives you a way to monitor tax-account activity and uses multifactor authentication. Use a unique, long password, keep recovery methods current, and never share the password or one-time authentication code. Reach the account by typing IRS.gov into your browser or using a bookmark you created yourself.
If you believe an email, text, or call is a scam, do not click its link or use its phone number. The IRS says suspicious IRS email can be forwarded to [email protected]. A legitimate-looking message can still be fraudulent.
Reduce exposure of your SSN and tax documents
- Keep your Social Security card, tax returns, wage statements, and identity documents in a secure location; do not routinely carry the SSN card.
- Provide your SSN or ITIN only when it is genuinely necessary, and ask how the recipient will protect and dispose of it.
- Protect paper and electronic financial records at home and on computers used for tax preparation.
- Install operating-system and application security patches, use firewall and anti-malware protections, and replace reused or compromised passwords.
- Review your credit reports for accounts or inquiries you do not recognize.
These practices are consistent with the IRS’s personal-information guidance. They lower the chance that a stolen SSN, tax document, or email account will provide the information needed for a fraudulent return.
What to do when you notice a problem before filing
Check your IRS account and wage information
Sign in to the IRS Online Account independently and review notices, transcripts, and account activity available there. If an unfamiliar employer or wage amount appears, preserve a copy and compare it with your payroll and employment records. Do not contact an unknown employer using a phone number supplied by a suspicious message; use a verified public contact.
File your legitimate return promptly
If you have not yet filed and your records are complete, filing your legitimate return promptly reduces the time available for an impostor to file first. An IP PIN is the stronger preventive step because the IRS checks it during covered e-filing. Keep proof of submission and the exact return you sent.
Be careful with unsolicited “IRS” contacts
The IRS does not make an unsolicited demand for gift cards, cryptocurrency, wire transfers, or payment through a link in a random text. Do not disclose your IP PIN, Online Account password, bank credentials, or authentication codes to an inbound caller. If a contact might relate to a real notice, locate the notice in your IRS account or use the contact information printed on the mailed notice.
If the IRS asks you to verify a return
A verification request is different from a confirmed identity-theft case. Read the mailed notice carefully and use only the verification path named in that notice. The IRS’s Verify your return service is intended for specified CP5071-series notices and Letter 5447C.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Rank #4
If you did file the return
- Have the notice and the relevant Form 1040 information available.
- Use the verification service identified in the letter, completing the requested identity and return details.
- After verification, retain the confirmation and continue monitoring the return’s processing.
If you did not file the return
Use the same notice-specific service to tell the IRS that the return was not yours. Do not submit Form 14039 automatically. The IRS says taxpayers who verify through this service generally do not need Form 14039 unless the notice or an IRS representative instructs them to complete it.
A phone call, email, or text that is not tied to a mailed IRS notice is not an acceptable substitute for the notice-specific process. If you are unsure whether a letter is genuine, start at IRS.gov rather than using a link or number supplied by a message.
If someone filed first or the IRS confirms a fraudulent return
When your e-filed return is rejected
A rejection stating that a return using your SSN or ITIN was already filed is a strong identity-theft warning. Save the rejection details, print or save your legitimate return, and follow the IRS identity-theft instructions. Do not repeatedly alter your SSN, filing status, or income information just to force an e-file through.
When the IRS directs you to use Form 14039
Form 14039 is the IRS Identity Theft Affidavit. Complete it only when the IRS notice or victim-assistance instructions call for it, and follow the submission address or electronic method in those instructions. Include accurate information about the fraudulent filing and attach only the documents requested.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchIf e-filing is blocked, the IRS may require a paper return. Sign it, include all required schedules and supporting documents, and write the identifying notation the IRS instructions specify. Keep a complete copy and proof of mailing. A paper filing does not eliminate the identity-theft case; it gives the IRS a return it can process while investigating the duplicate filing.
Best Value
- It can be a gift option
- Comes with secure packaging
- Helpful in various ways
What happens in IRS victim assistance
The IRS’s victim-assistance process assigns confirmed cases for specialized review. After a confirmed identity-theft case is resolved, the IRS adds an identity-theft indicator to the account. Confirmed victims are placed in the IP PIN program and issued a new PIN each year. Continue using the current PIN and answer later IRS notices; an identity-theft indicator is not a reason to ignore future filing or payment correspondence.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Use FTC recovery steps when the SSN is being misused elsewhere
A fraudulent tax return can be one part of broader identity theft. Report the incident at IdentityTheft.gov to create an FTC Identity Theft Report and a tailored recovery plan. Keep a dated log of notices, calls, letters, confirmation numbers, and the names or departments of people you contact.
Protect affected financial accounts
- Contact a bank, card issuer, lender, or other financial institution immediately if an account or payment method is involved.
- Change passwords for compromised accounts and for any other account that reused the same password. Enable multifactor authentication wherever it is available.
- Ask the affected institution how to close, freeze, replace, or dispute the account.
Place a fraud alert and review credit reports
You can request a free one-year fraud alert by contacting one of the three nationwide credit bureaus; that bureau must notify the other two. Review all three credit reports for unfamiliar accounts, inquiries, addresses, and collection activity. Obtain them through AnnualCreditReport.com, the federally authorized source. The FTC explains these rights and the available recovery measures in its identity-theft rights guidance.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteA fraud alert or credit-file review does not replace an IRS IP PIN. Credit tools address lending and credit-file misuse; the IP PIN addresses covered federal tax-return filing.
Do you need to buy an identity-theft product?
No purchase is required to protect a federal tax return. The IP PIN, IRS Online Account, IRS identity-theft assistance, FTC IdentityTheft.gov report, fraud alert, and authorized credit reports are available through government services. Commercial credit or identity monitoring may help someone who wants additional alerts about broader SSN exposure, but it cannot substitute for an IP PIN, block a fraudulent tax filing by itself, or replace IRS and FTC instructions.
Common mistakes that create more delay
- Using last year’s PIN: The PIN is annual; use the number issued for the calendar year in which you file.
- Putting the PIN on the wrong form: It is not for a state return or Form 4868 extension request.
- Sending Form 14039 reflexively: A notice-specific verification service may be the required first step, and the IRS says verified taxpayers generally do not need the affidavit unless directed.
- Responding to a scam message: Use IRS.gov or the mailed notice, not an unsolicited link, callback number, or attachment.
- Sharing the PIN broadly: Give it to a preparer only as needed, and never disclose it to an inbound caller claiming to be the IRS.
- Assuming a tax fix solves every identity problem: If your SSN is being used for credit, banking, employment, or other fraud, complete the FTC recovery steps as well.
A practical 2026 protection checklist
- Create or secure an IRS Online Account and enable its multifactor authentication.
- Enroll in the IP PIN program, choosing continuous or one-time enrollment based on your preference.
- Store the current six-digit PIN securely and verify that each required taxpayer’s PIN is available before filing.
- Review your IRS account, wage information, and credit reports for unfamiliar activity.
- Keep SSN documents and tax records secure, patch devices, use unique passwords, and treat unsolicited IRS contacts as suspicious.
- If a notice arrives, follow that notice’s exact verification route and do not add Form 14039 unless instructed.
- If a return was filed without your permission, preserve the rejection or notice, follow IRS victim-assistance directions, file on paper if required, and submit Form 14039 only when applicable.
- If other accounts or credit files are affected, report the theft at IdentityTheft.gov, contact financial institutions, request a fraud alert, and document every step.
The combination of an annual IRS IP PIN and disciplined account and document security addresses the specific risk of someone filing a federal return in your name while giving you a clear path to follow if the theft has already occurred.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
