How to Protect Yourself From Tax Identity Theft

Tax identity theft happens when someone uses your personal information, often your Social Security number or ITIN, to file a tax return, claim a refund, or access tax-related information without your permission. It can delay your refund, create IRS notices, and leave you feeling like your financial life has been invaded.

In this guide, you’ll learn how to protect yourself from tax identity theft, spot warning signs, use an IRS Identity Protection PIN, and respond if someone files a fraudulent return using your information.

---

TL;DR: Quick Decision Guide

• If you want extra protection → get an IRS Identity Protection PIN.
• If your e-filed return is rejected because one was already filed using your Social Security number → act quickly.
• If you receive an IRS identity verification letter → follow the instructions carefully.
• If you get a tax-related text, email, or direct message → do not click links or open attachments.
• If you suspect tax identity theft → file the right IRS forms, report the fraud, and protect your credit.

---

---

Step 1: Understand How Tax Identity Theft Happens

Tax identity theft usually happens when someone gets enough of your personal information to pretend to be you. They may try to file a tax return before you do and claim a refund in your name.

Your information may be exposed through:

• Data breaches
• Phishing emails
• Fake IRS texts
• Stolen mail
• Lost tax documents
• Scam phone calls
• Fake tax preparers
• Unsecured tax software accounts
• Compromised email accounts
• Shared devices or public Wi-Fi

The IRS says scammers sometimes use stolen Social Security numbers to file fraudulent returns and claim refunds. When IRS systems find a suspicious return, the IRS may send a letter and will not process the suspicious return until the taxpayer responds.

What to do:
Treat tax documents like financial documents. Your W-2, 1099s, prior-year tax return, and Social Security number can be used to commit fraud.

👉 Explore: Identity Protection Apps in the Marketplace →

---

Step 2: Get an IRS Identity Protection PIN

An IRS Identity Protection PIN, or IP PIN, is one of the strongest tools for preventing tax return fraud. The IRS says an IP PIN is a six-digit number that prevents someone else from filing a tax return using your Social Security number or ITIN. The number is known only to you and the IRS and helps verify your identity when you file electronically or by paper.

You may want an IP PIN if:

• You were a victim of identity theft
• Your information was exposed in a data breach
• You had a suspicious tax filing issue before
• You want added protection before filing
• You are worried someone may use your Social Security number

The Taxpayer Advocate Service notes that an IP PIN works as an additional authentication factor and helps protect against someone else filing in your name.

What to do:
Request an IP PIN through IRS.gov before filing. Keep it secure and do not share it with anyone except your trusted tax preparer when they are filing your return.

👉 Related: How to Handle a Tax Notice From the IRS →

---

Step 3: Know How IP PINs Work Each Year

An IP PIN is not permanent. The Taxpayer Advocate Service explains that an IP PIN is valid for one year and you need a new IP PIN every January.

If the IRS assigns you an IP PIN, you must use it on any return filed during the current calendar year, including current-year and delinquent returns. IRS FAQs explain that a new IP PIN is generated each year.

What to do:
Save the current year’s IP PIN in a secure place. Before filing each year, confirm you are using the correct PIN for that calendar year.

---

Step 4: File Early, but Only When Ready

Filing earlier can reduce the window of time a fraudster has to file before you. But do not rush so much that you file with missing information.

Wait until you have:

• W-2s
• 1099s
• 1098 forms
• Marketplace Form 1095-A, if applicable
• Business income and expense records
• Investment forms
• Social Security numbers for dependents
• Prior-year return details
• IP PIN, if you have one

What to do:
File as soon as your records are complete. Early and accurate is better than early and wrong.

---

Step 5: Protect Your Tax Filing Accounts

Your tax software account, IRS Online Account, and email account can all be targets. If someone gets access, they may see sensitive information or attempt fraud.

Use:

• A strong, unique password
• Multi-factor authentication
• A password manager
• A secure personal device
• Updated browser and device software
• Private internet connection

Avoid:

• Filing on public Wi-Fi
• Using shared computers
• Reusing passwords from other accounts
• Saving tax files in unsecured downloads folders
• Sending tax documents through unencrypted email
• Sharing tax software logins

What to do:
Secure your email first. If someone controls your email, they may reset passwords for tax software, banking, and financial accounts.

---

Step 6: Watch for Tax Scam Red Flags

Tax identity theft often starts with phishing. Scammers may pretend to be the IRS, a tax software company, a refund processor, or a tax preparer.

Be cautious of:

• Texts claiming your refund is waiting
• Emails asking you to verify tax information
• QR codes leading to fake IRS pages
• Calls threatening arrest
• Messages saying your refund is frozen
• Requests for Social Security numbers by email
• Requests for payment by gift card, crypto, wire transfer, or payment app
• Tax debt relief offers that sound too easy

The IRS says it does not send text messages without permission, and suspicious IRS or Treasury-related texts should not be answered. The IRS advises people not to reply, click links, or open attachments.

What to do:
Go directly to IRS.gov, your IRS Online Account, your tax software account, or your tax preparer’s secure portal. Do not use links from unexpected messages.

---

Step 7: Choose Tax Preparers Carefully

A dishonest or careless preparer can create serious problems. Some “ghost preparers” prepare returns but refuse to sign them. Others may inflate refunds, claim false credits, or direct your refund to their own account.

The IRS warns taxpayers not to trust a tax professional who does not sign the return, lacks a Preparer Tax Identification Number, falsifies tax information, puts your refund in their bank account, requires cash payment, or refuses to provide a receipt.

What to do:
Use a preparer with a valid PTIN, clear pricing, secure document process, and willingness to answer questions. Never sign a blank return.

👉 Learn: How to Choose Between DIY Tax Software and a Tax Professional →

---

Step 8: Know the Warning Signs of Tax Identity Theft

You may not know tax identity theft happened until you try to file or receive a notice.

Warning signs include:

• Your e-filed return is rejected because a return was already filed with your Social Security number.
• The IRS sends a letter about a tax return you did not file.
• You receive a tax transcript you did not request.
• You get a notice about wages from an employer you never worked for.
• Your IRS Online Account shows activity you do not recognize.
• You receive a refund you did not expect.
• A dependent’s Social Security number was already used on another return.

What to do:
If something does not match your records, pause before filing again or paying anything. Verify through IRS.gov or the phone number on a legitimate IRS notice.

---

Step 9: Respond Quickly if Someone Filed Using Your Information

If your e-filed return is rejected because a return was already filed using your Social Security number, or if the IRS tells you it suspects identity theft, follow IRS instructions.

You may need to:

• Complete IRS identity verification
• File Form 14039, Identity Theft Affidavit
• File a paper tax return if e-filing is blocked
• Respond to IRS letters by the deadline
• Keep copies of all documents
• Report broader identity theft through IdentityTheft.gov
• Place a fraud alert or credit freeze if your personal information was exposed
• Monitor your IRS Online Account and tax transcripts

What to do:
Act quickly, but carefully. Use official IRS identity theft guidance and keep a complete file of every notice, form, and confirmation.

---

Step 10: Protect Your Information After Filing

Identity protection does not end when your return is filed. Keep your tax records secure and watch for signs of misuse.

After filing:

• Save your return in a secure folder
• Store paper records safely
• Shred documents you no longer need
• Monitor IRS account activity
• Review credit reports
• Watch for unexpected tax forms
• Keep your IP PIN secure
• Update passwords after any breach
• Use secure portals for tax documents

What to do:
Create a yearly tax security habit. Once you file, store records securely and remove sensitive files from shared or unsecured spaces.

---

Common Mistakes to Avoid

• Ignoring an IRS identity verification letter
• Clicking refund links in texts or emails
• Sharing your IP PIN casually
• Filing without the correct current-year IP PIN
• Using weak passwords for tax software or email
• Sending tax documents through unsecured email
• Trusting a preparer who refuses to sign the return
• Leaving tax documents in your car, mailbox, or shared workspace
• Assuming tax identity theft only happens to high-income taxpayers

---

Protect Yourself From Tax Identity Theft FAQs

---

Final Thought

Tax identity theft is stressful, but you are not powerless. You can reduce risk by securing your accounts, filing accurately, using an IRS IP PIN, choosing trusted tax help, and watching for scams.

The goal is not to live in fear during tax season. It is to protect your information with the same care you give your money, your credit, and your financial future.

Next Steps:

👉 Learn: How to File Taxes Online Safely →
👉 Read: How to Respond if Your Tax Refund Is Delayed →
👉 Learn: How to Avoid Bad Tax Advice and Risky “Tax Hacks” →
👉 Explore: Tax software and free filing options in the Marketplace →