What Is Tax Identity Theft? How It Happens, How to Catch It, and How to Recover

Tax identity theft is one of the fastest, cleanest ways a thief can profit from your stolen identity — and one of the most frustrating for victims to resolve. In the time it takes you to gather your W-2s and sit down to file your taxes, a thief using your Social Security number may have already filed a fraudulent return and collected your refund. By the time the IRS processes your legitimate return and rejects it, the money is gone — often loaded onto an untraceable prepaid debit card.

Recovering takes time. Filing an IRS Identity Theft Affidavit, waiting for the IRS to complete its investigation, and getting your legitimate refund can take six months to a year. But it is a solvable problem, and there are steps you can take to prevent it from happening in the first place.

—

What Is Tax Identity Theft?

Tax identity theft occurs when someone uses your Social Security number to file a federal or state tax return — typically early in tax season — and claims a fraudulent refund before you file your own legitimate return.

When you later file your real return, the IRS rejects it electronically with an error code indicating that a return has already been received under your SSN. At that point, the fraudulent refund has usually already been issued.

Tax identity theft can also occur in other ways: a thief might use your SSN to fraudulently claim your children as dependents, to establish false employment income that affects your benefits eligibility, or to file returns in multiple states simultaneously.

—

How Does Tax Identity Theft Occur?

Tax identity thieves need relatively little information to file a fraudulent return: your full name, Social Security number, and date of birth are often enough. This information is available in enormous quantities through data breaches, dark web purchases, and phishing attacks.

The tax filing window — typically January through April — is peak season for tax identity theft. Thieves file fraudulent returns as early as possible, before the IRS has received W-2 data from employers that would flag discrepancies. Early filing is fast and often automatically approved before verification systems catch up.

Fraudulent refunds are typically directed to prepaid debit cards, which are difficult to trace. Some sophisticated operations file hundreds or thousands of fraudulent returns simultaneously.

—

Warning Signs of Tax Identity Theft

Your electronic tax return is rejected. The clearest signal. If your e-filed return is rejected with a message stating that a return has already been filed under your Social Security number, you are a victim of tax identity theft.

You receive IRS correspondence you didn’t initiate. Letters from the IRS about returns, refunds, or accounts you don’t recognize — including CP01A notices, CP2000 notices, or letters referencing income from employers you’ve never worked for — may indicate fraud.

You receive a tax transcript you didn’t request. If you get a transcript you didn’t order, someone may be using your account to prepare fraudulent returns.

Your IRS online account shows unexpected activity. If you have an account at IRS.gov and see returns, transcripts, or correspondence you don’t recognize, investigate immediately.

—

What to Do If You’re a Victim of Tax Identity Theft

Step 1: Respond to the IRS rejection notice

If your e-filed return is rejected because one has already been filed under your SSN, the IRS rejection notice will include instructions. Follow them precisely. You will likely need to file a paper return.

Step 2: File IRS Form 14039 — the Identity Theft Affidavit

This is the official declaration to the IRS that your SSN has been used fraudulently. File it immediately along with your paper tax return. Download it at irs.gov/pub/irs-pdf/f14039.pdf.

Step 3: File a report with the FTC at IdentityTheft.gov

This generates a recovery plan and an official Identity Theft Report that you may need in disputes.

Step 4: Contact your state tax agency

Federal and state returns are separate. If a thief filed a federal return in your name, they may have also filed state returns. Contact your state’s department of revenue.

Step 5: Get an Identity Protection PIN (IP PIN) from the IRS

Once you’ve been identified as a tax identity theft victim, the IRS will issue you an IP PIN — a six-digit number that must be included on all future tax returns filed under your SSN. It effectively locks your tax account against unauthorized filing. You can also proactively request an IP PIN at irs.gov/identity-theft-fraud-scams even if you haven’t been a victim.

Step 6: Monitor your credit

Tax identity theft sometimes accompanies financial identity theft. Check your credit reports at all three bureaus.

—

How to Prevent Tax Identity Theft

Get an IP PIN proactively. The IRS now allows any taxpayer to opt into the IP PIN program, not just confirmed victims. This is the single most effective prevention measure. Sign up at irs.gov/identity-theft-fraud-scams.

File early. The earlier you file your legitimate tax return, the smaller the window for a thief to file first.

Protect your Social Security number. Never carry your Social Security card. Be skeptical of any communication — email, phone, or text — that asks for your SSN.

Be suspicious of tax preparers asking for your information via email. Tax season is prime time for phishing attacks impersonating the IRS or tax preparation services. The IRS does not initiate contact by email, text, or social media.

Use secure methods to file. File directly at IRS.gov or through reputable tax preparation software. If using a tax preparer, verify their credentials and ask how they protect your data.

Create an account at IRS.gov and Social Security Administration’s website. Having accounts you control makes it harder for a thief to create them on your behalf and access your information.

—

Frequently Asked Questions

Q: Will I still get my refund if someone filed a fraudulent return in my name?

A: Yes, but it takes time. The IRS will investigate the fraudulent return, and once it’s confirmed as fraud, your legitimate refund will be issued — but this process typically takes six months to a year. You may receive interest on the delayed refund.

Q: What if I owe taxes and can’t file because of an identity theft hold?

A: You are still required to pay any taxes owed by the April deadline, even if you cannot file electronically. Pay what you estimate you owe to avoid penalties and interest, and file a paper return with Form 14039 attached.

Q: Can a thief file a return in my child’s name?

A: Yes. Children’s SSNs are frequently used to claim fraudulent dependent credits or refunds. This is one reason child identity theft is particularly harmful during tax season.

→ Back to Types Hub: https://www.scammed.org/identity-theft/types/

→ How to Report: https://www.scammed.org/identity-theft/how-to-report/