Tax identity theft: Recover your IRS account and protect future returns

The short answer

Tax-related identity theft can mean someone used your information to file a fraudulent return, claim a refund or interfere with your IRS account. A suspicious message alone does not establish that this happened. Secure exposed accounts, independently verify what the IRS has on record, and choose the response for your actual situation.

If your return was rejected because your Social Security number was already used, check the rejection details before treating it as fraud. If the IRS sent you an identity-verification letter, follow that letter's verified instructions—even if you did not file the return it describes. Do not automatically file Form 14039 for every suspicious contact or every IRS notice.

This guide covers recovery after possible tax-account misuse. For immediate containment after clicking, paying or sharing information, start with IRS scams and fake letters. For the specific identity-and-return verification process, use the separate Letter 5071C guide.

For wages you did not earn, use the employment identity-theft and SSA correction guide. For unauthorized entity filings or EIN misuse, use the business tax identity-theft guide.

Separate exposure, warning signs and confirmed misuse

The IRS identity theft guide lists warning signs but cautions that they do not always mean identity theft occurred.

Do not use a transcript code alone as a diagnosis. TC 150 records return-related tax information; TC 971 can represent many administrative actions. Neither proves who submitted a return. A refund delay, a dependent dispute or an unfamiliar wage statement also needs investigation rather than an automatic fraud conclusion.

If your electronic return was rejected

1. Save the exact rejection code and explanation privately. Confirm whether it concerns your own SSN or ITIN, your spouse, a dependent, or an incorrect or missing IP PIN.
2. Check for ordinary errors and earlier filings. Review identifying numbers with your trusted preparer or tax-software provider. Ask whether a return was already accepted. Do not repeatedly transmit altered identifying information to bypass a rejection.
3. If your own identity was used without permission, follow the IRS victim-assistance route. The IRS explains that victims unable to e-file should file a paper return and complete Form 14039 when applicable. Its instructions allow attaching the affidavit to the back of the completed paper return, or submitting it separately. Use the current official form instructions and the correct IRS return mailing address for your situation; keep copies and proof of mailing.
4. If the rejection is about an IP PIN, retrieve the current PIN first. A missing or wrong PIN is not itself proof that a new fraudulent return was filed. Follow the lost-PIN instructions below.
5. If it is a duplicate dependent, use the dependent rules. A disagreement about who may claim a child is not necessarily identity theft. Determine who is entitled to claim the dependent. The current IRS individual guide says that, beginning with 2024 returns, eligible Forms 1040, 1040-NR and 1040-SS can be e-filed despite a duplicate dependent when the primary taxpayer on the second return supplies a valid IP PIN. The dependent does not need a PIN unless one was already issued to them. This is not a general workaround for duplicate use of the primary taxpayer's identity.

Continue filing required returns and paying tax you actually owe. Fraud reporting does not automatically extend filing, payment, notice-response or court deadlines. If a deadline is near or you are unsure how to file correctly, get qualified help rather than waiting for the identity-theft investigation to finish.

Choose the right Form 14039 instructions

Form 14039, Identity Theft Affidavit reports individual tax-related identity theft. It is not an application for a refund, an IP PIN request or a substitute for responding to a verification letter.

Use the current IRS screening questions for your circumstances:

• Fraudulent original or amended return, tax-related employment misuse or unauthorized tax-account changes: Review the form's federal income-tax scenarios and follow the applicable IRS instructions. Explain the tax-account effect, affected years and when you discovered it.
• 5071C or another Taxpayer Protection Program verification letter: Follow the verified letter's process to say whether you filed the return. Do not file Form 14039 instead of verification or in addition to it unless the IRS instructs you. If you cannot use the specified method, contact the verified IRS office for the next step.
• Other notices: Read your exact notice. Instructions can differ: a CP05 involving a return you did not file is not the same process as 5071C. Use the CP05 guide and the current notice-specific instructions rather than importing another letter's rules.
• Stolen wallet, credit fraud or a breach without a known federal tax effect: Do not automatically submit an affidavit. The general IRS guide discusses reporting possible tax-related exposure, including a breach, while the current form screens out non-tax situations such as a lost wallet with no federal tax effect. Use the live screening instructions or ask the IRS which route applies; consider an IP PIN for prevention.
• Business, trust, estate or tax-exempt organization tax-account misuse: The IRS directs these cases to Form 14039-B, not the individual affidavit. A deceased individual's personal income-tax case is different; use the individual instructions for an authorized person acting on their behalf.

Do not submit duplicate Forms 14039 for the same incident. If you already filed through IdentityTheft.gov or directly with the IRS, do not send another merely because you have not heard back. Keep a private record of what was submitted and how. Use only the official IRS submission method selected by the current instructions; never send tax documents to a supposed recovery agent who contacted you unexpectedly.

The FTC's general tax-identity-theft checklist mentions Form 14039. Read that alongside—not instead of—the IRS's current, situation-specific instructions. An FTC report does not replace an IRS verification response, a required return or a notice deadline.

If you received Letter 5071C

A 5071C letter can concern your own legitimate return or a return you did not file. It is not confirmation of fraud by itself. Authenticate the contact, then use the letter's specified verification method and tell the IRS whether you filed.

See the dedicated 5071C notice guide for that process and the official CP5071-series page. Do not file another return simply to bypass a verification request. This recovery guide does not replace that notice's instructions or establish a universal response period.

Get an IP PIN and keep it private

An Identity Protection PIN is a six-digit number that helps prevent someone else from filing a federal return using your SSN or ITIN. You can enroll proactively; you do not need to wait until you are a confirmed victim. The IRS also enrolls confirmed tax-related identity-theft victims.

Start at IRS.gov and reach your IRS Online Account independently. The IP PIN section is in your profile. You must validate your identity. If online enrollment is unavailable, the IRS describes Form 15227 for eligible applicants and an in-person Taxpayer Assistance Center appointment as alternatives. Check the current eligibility rules and identification requirements there. People under 18 must use an alternative enrollment method.

• Use the current calendar year's PIN, including when filing a prior-year return during that calendar year. A PIN is valid for one calendar year and a new one is generated each year.
• Understand how you receive it. Confirmed victims generally receive a CP01A notice annually. People who opt in online retrieve their PIN online each year rather than expecting that notice. If you chose a one-time enrollment option, check its end-of-calendar-year limits.
• Enter it correctly on electronic and paper returns. A missing or incorrect PIN can reject an e-file or delay a paper return.
• Keep it secret. Share it only with your trusted tax professional when you are ready to sign and submit your return. Do not disclose it to an unsolicited caller, in email, in a public post or to TaxRZR. The IRS says phone calls, emails or texts asking for your IP PIN are scams.

An IP PIN does not repair past account misuse, freeze credit, protect every financial account or guarantee a refund. It is one part of recovery and future filing protection.

If your IP PIN is lost or never arrived

Use the IRS lost-PIN instructions. Retrieve the current PIN through your Online Account profile, or follow the IRS reissue process. The IRS lists 800-908-4490 for U.S. callers requesting reissue. A minor's PIN cannot be retrieved online; follow the telephone reissue instructions.

Do not file Form 15227 to replace an already assigned PIN. Mail reissue has restrictions, including first-time online enrollment in the current calendar year and the annual maintenance period. If you cannot retrieve or have it reissued, the IRS provides a paper-return route with identity review. That can delay processing; it does not guarantee a refund date.

Monitor account records without treating every change as fraud

After securing your email, tax-software account and IRS access, compare available records against your own filings and payments. Reach IRS Online Account through IRS.gov, not a link in a suspicious message.

Review available notices, return information, balances and payment history. Use the account-transcript guide to select the right transcript and interpret entries in context. Look for unfamiliar returns, income, address or account-access changes, and payments or refunds you cannot explain. A transcript does not establish who filed a return or when a fraud investigation will finish.

Keep copies of IRS correspondence, affected returns, rejection details, submissions and mailing evidence in a secure private file. Use the IRS Communication Log for dates, verified contacts and required next actions. Do not put passwords or your IP PIN in an ordinary call log.

Follow verified requests for information promptly. The IRS victim-assistance page discourages duplicate affidavits and routine calls just to check claim status; monitor its current processing-status information instead. That does not mean ignoring a new notice, an actual deadline or a new account problem. For an identity-theft-related balance notice, follow the verified notice's contact instructions.

If unfamiliar wages appear, follow the IRS employment-identity-theft instructions and check Social Security earnings records; do not add income you did not earn merely because a form arrived. Contact your state tax agency through its official site about separate state-return issues. Federal reporting does not automatically resolve them.

Follow the FTC recovery plan beyond taxes

Use IdentityTheft.gov recovery steps for identity misuse affecting credit, banking and other accounts:

1. Contact companies where fraud occurred. Reach their fraud departments independently. Ask about closing or freezing affected accounts and disputing unauthorized activity. Change compromised logins and secure related email.
2. Place a fraud alert and review credit reports. The FTC describes a free one-year alert placed through one nationwide credit bureau, which must notify the other two. Obtain and review your credit reports for unfamiliar accounts.
3. Create an FTC Identity Theft Report and recovery plan. Enter information only on the official site. If you do not create an account there, print and save the report and plan immediately; the FTC says you cannot retrieve or update them after leaving.
4. Dispute fraudulent accounts and information. Use the plan's letters and instructions, keep copies and record who you contacted. Follow the police-report steps if appropriate to your circumstances.
5. Consider a credit freeze. Unlike an alert placed through one bureau, a freeze must be requested separately with each of the three bureaus. It limits access to credit reports but does not stop tax-return filing fraud or replace an IP PIN.

Do not pay an unsolicited service promising to “unlock” your IRS refund or guarantee identity recovery. No guide can promise when an investigation, account correction or refund will be completed. If unresolved tax issues cause serious hardship, seek qualified assistance or contact the Taxpayer Advocate Service through official IRS resources; assistance is not a guaranteed outcome or faster refund.

Does a suspicious text prove someone filed a tax return in my name?

No. It may be an impersonation attempt without any filed return. Secure exposed information and verify actual IRS records or correspondence independently before choosing a tax-identity-theft reporting route.

Should everyone with stolen information file Form 14039?

No. Use the IRS's situation-specific screening and notice instructions. Non-tax exposure, an already reported incident and a return-verification letter can require different steps rather than another affidavit.

Can an IP PIN fix a fraudulent return already on my account?

No. An IP PIN protects filing using your identity; it does not remove an existing fraudulent return. Follow the IRS's account-correction or verification instructions separately.

Can I upload my notice or identity documents to TaxRZR?

No. TaxRZR does not accept sensitive document uploads for this guide or handle identity-theft cases. Do not send SSNs, ITINs, returns, transcripts, identification, passwords or IP PINs to TaxRZR. Use only verified official channels for required submissions and keep copies privately.

How long will recovery or my refund take?

There is no guaranteed recovery or refund date. Follow current IRS case instructions, respond to verified requests and consult official processing information rather than treating an estimate as a promise.

Official sources and review status

IRS and FTC sources checked October 30, 2026 (US Eastern time). Prepared by the TaxRZR editorial team; professional review is pending. This is general federal tax education, not a determination that identity theft occurred or advice for an individual case.

• IRS: Identity theft guide for individuals
• IRS: How identity theft victim assistance works
• IRS: Form 14039 and situation-specific screening instructions
• IRS: Get an identity protection PIN
• IRS: Lost or missing IP PIN
• IRS: CP5071 series, including Letter 5071C
• IRS: Online account records and profile
• FTC: IdentityTheft.gov recovery steps

See Source Notes for the dated editorial record.