Skip page Logo and Brand information to navigation. Skip page header section and navigation, to main content.

Identity Theft

IDENTITY THEFT AND YOUR TAXES

Your identity and money can be stolen in a tax-related scam via email ('phishing"), fax, phone, or letters.  Some recent examples of identity theft scams are:

Phone scam.  A bogus phone call where you are told you owe the IRS money and threatened that a warrant will be issued for your arrest.  Variations include the threat of other law-enforcement agency intervention, deportation, or revocation of licenses.  Some scam artists program their computers to display IRS phone numbers on your caller ID.

Email phishing scam.  A bogus email that appears to be from the IRS or a program closely related to the IRS, such as the Electronic Federal Tax Payment system (EFTPS), that attempts to trick you into revealing personal and financial information.  The email includes links to bogus websites intended to mirror the official IRS website.

Tax transcript.  The bogus email carries an attachement labeled "Tax Account Transcript" or something similar, and the subject line uses some variation of the phrase "tax transcript."  The attachment may contain a computer virus or malware.

IRS refunds.  A bogus email, claiming to come from the IRS, tells you that you are eligible to receive a tax refund for a given amount if you just follow the instructions in the email.

 

NOTIFY the IRS.

If you receive a tax-related phishing email, do not click on the links or open any attachments.  Forward the email to phishing@irs.gov or call the IRS at 800-366-4484.

 

HOW THE IRS CONTACTS TAXPAYERS

  • The IRS will never initiate contact with you by email or any social media tools to request personal or financial information.
  • It is unusual for the IRS to initiate contact by fax or phone call.  You can call the IRS at 800-829-1040 to verify that an unexpected fax or phone call is legitimate.

FRADULENT TAX RETURNS

An identity thief might use your Social Security Number to fraudulently file a tax return and claim a refund.  You could be completely unaware that your identity has been stolen until your return is rejected for e-filing or you get an IRS notice or letter.

Rejected e-File

Your electronically-filed return is rejected because the Social Security Number belonging to you, your spouse, or a dependent has already been used on a tax return.

  • This situation can occur because of a mistyped number or dispute about claiming a dependency exemption.  Such cases do not necessarily indicate identity theft.
  • If your return has been rejected because of a previously used Social Security Number, it cannot be e-filed.  You must file a paper return.

IRS NOTICE

You receive an IRS notice or letter stating that:

  • More than one return was filed in your name for the year,
  • You have a balance due, refund offset, or initiation of collection action for a year when you did not file a return, or
  • IRS records indicate that you received wages from an employer you didn't work for.

You should respond immediately to the name and phone number printed on the IRS notice or letter.  You will be asked to complete Form 14039, Identity Theft Affidavit, and provide identifying information.

IRS IDENTITY THEFT VICTIM ASSISTANCE (IDTVA)

If you believe there is a risk of identity theft due to lost or stolen personal information, contact the IDTVA immediately so the agency can take action to secure your tax account.

  • Call 800-908-4490
  • You will be asked to complete Form 14039, Identity Theft Affidavit.

FORM 14039 IDENTITY THEFT AFFIDAVIT

Form 10439 has two purposes.

  1. Informs the IRS you are an actual or potential victim of identity theft that has or could affect your tax account.
  2. Requests that the IRS mark your account to identify any questionable activity.

You must provide details of the actual or potential identity theft situation, tax years impacted (if known), address and other contact information, and a photocopy of valid government issued identification.

 

IDENTITY PROTECTION PIN (IP PIN) PROGRAM

If the IDTVA determines that you do have a tax-related identity theft problem, the IDTVA will research your account, identify the IRS business unit handling the case, and monitor the case to ensure it is being handled in a timely manner.

  • The IRS may issue you an Identity Protection PIN (IP PIN).  The computer-generated IP PIN has six digits and is specific to the tax year for which it was provided.
  • The IRS issues IP PINs to allow a legitimate taxpayer's return to bypass the identity theft filter, prevent fraudulent returns from being processed, and minimize taxpayer burden associated with potential delays when a return fails one or more of the identity theft filters.
  • A new IP PIN will be issued to you every filing season as long as the identity theft indicator remains on your account.

USING an IP PIN

You will receive an IRS notice in the mail containing the single-use six-digit PIN.  The IRS does not use email or fax to notify taxpayers of an IP PIN.

  • All six digits must be input on your Form 1040 in the space to the right of the occupation line.   Use of the IP PIN on the return acts as an authenticator to validate you as the legitimate owner of the Social Security Number on the tax return.
  • If you lose or misplace the IP PIN letter, retrieve your IP PIN at www.irs.gov and seach for "Retrieve Your Identity Protection PIN (IP PIN)."  You may file a paper return without the IP PIN, but processing and refunds may be significantly delayed.

SURPRISE IP PIN LETTER

The IRS has been known to mail an IP PIN letter to a taxpayer who was previously unaware of a potential tax-related identity theft problem.  If you receive an unexpected IP PIN letter, you can call the IDTVA phone number (800-908-4490) to verify that the IP PIN letter is legitimate.