Tax Identity Theft: What to Do If Someone Filed as You
Updated October 24, 2026
What tax identity theft looks like
Tax identity theft happens when someone uses your Social Security number, or another taxpayer number of yours, to file a return or collect a refund. Many people learn about it only after something odd shows up. The IRS lists these as warning signs. None of them proves you were targeted, but each deserves a closer look:
- Your return is rejected when you try to file.
- You receive a W-2 or 1099 from an employer you never worked for.
- You receive a 1099-G for unemployment benefits you never applied for.
- An employer identification number was applied for in your name.
- You get an unreported income notice, such as a CP2000 series notice.
- Someone offers to "help" you with your IRS online account.
- You see log-in or password reset alerts you did not ask for.
- A data breach exposed your information.
- Your Social Security account shows wages you never earned.
A rejected return does not always mean theft. A typo or a name that does not match can do the same thing. But if every detail is right and the return still bounces, find out why before you try again. Our guide to the CP2000 notice explains what that letter is, since it can also point to a plain reporting mismatch.
Your first steps, in the order the IRS lists them
The IRS gives a short sequence for victims. Work through it from the top:
- Stop dealing with the person who contacted you. Do not send money, personal details or financial details, and do not click unknown links. If you already clicked one, run antivirus software on that device.
- Change your IRS online account password to a complex one that you use nowhere else.
- Follow the directions in any IRS letter or notice you received about the problem.
- Report the identity theft through the fraud reporting pages on irs.gov.
- Follow the recovery steps the IRS points to at IdentityTheft.gov.
- Get an Identity Protection PIN. More on that below.
- Keep a record of every letter, call and email.
- Keep filing your returns and paying your tax as usual.
- Check with your state tax agency for any extra steps it asks for.
Number eight surprises people. A theft problem does not excuse you from your own filing and payment duties, so do not let it stall your return.
A real preparer reviews and signs your return. You get a free quote.
Do you actually need Form 14039?
Most people do not. Form 14039 is the Identity Theft Affidavit. The IRS says to file it in only three situations:
- The IRS tells you to.
- You cannot use the Identity and Tax Return Verification Service.
- You want to report possible tax identity theft the IRS may not know about yet, for example after a data breach.
Skip it if you already sent one, if the IRS has already sent you a letter or notice about the problem, or if you are using the verification service.
That service is an online tool, and the IRS says to use it only if you received a CP5071 series notice or letter 5447C. Keep the notice next to you and find a copy of the return for the year named on it. If you never filed that return, the service is where you tell the IRS so. You sign in to your IRS online account, answer the questions, and once you are verified you generally do not need Form 14039 unless the IRS says otherwise.
How an Identity Protection PIN helps
An Identity Protection PIN, or IP PIN, is a six-digit number that keeps anyone else from filing a federal return with your Social Security number or ITIN. Only you and the IRS know it. Here is how it works:
- Anyone with an SSN or ITIN who can verify their identity can get one.
- The fastest way is the IP PIN section of your IRS online account. You register and verify your identity first.
- A new number is created every year and is good for one calendar year.
- You must use it on any federal return you file during that year, including returns for earlier years.
- A missing or wrong PIN gets an e-filed return rejected and delays a paper return.
Treat it like a house key. Share it only with your tax professional, and only when you are ready to sign and submit. The IRS says it will never ask for your IP PIN, so any call, email or text asking for it is a scam. For more on spotting those, read our guide to tax scams to watch for.
What our preparers can and cannot do
Our preparers prepare returns. They do not speak to the IRS for you, and they cannot take over an identity theft case. If you want someone to deal with the IRS on your behalf, look for a qualified professional who does representation.
What our preparers can do is prepare an accurate return once you know where things stand, tell you what documents they need, and ask for your IP PIN only at the moment you are ready to sign. If you owe a return for a year that was affected, bring the same paperwork you would bring any other year. Our tax documents checklist covers the basics.
What to gather while you sort this out
A tidy folder makes every step easier, whether you are talking to the IRS yourself or handing us your return:
- Every IRS letter or notice, with the notice number from the corner of the page
- A copy of any return you filed for the affected year
- Any W-2, 1099 or 1099-G you did not expect
- A written list of calls and emails with dates
- Your IP PIN, once you have one
- A photo ID for identity checks
Keep these in one place and do not email them in plain text. When your folder is ready, you can start your return and our preparers will tell you what is still missing.
FAQ
Do I still have to file my return if someone stole my identity?
Yes. The IRS steps for victims include filing your returns and paying your tax as usual. Report the theft and follow the recovery steps at the same time, but do not skip your own filing.
Does a rejected return mean my identity was stolen?
Not always. The IRS lists a rejected return as a warning sign, and it also says the signs do not always mean you were affected. Check your details for typos first, then look into the cause if everything matches.
Can I get an IP PIN if nothing has happened to me?
Yes. The IRS says anyone with an SSN or ITIN who can verify their identity can get one. It adds a layer of protection before a problem starts.
A caller asked for my IP PIN to fix my account. Is that real?
No. The IRS says it will never ask for your IP PIN, so a call, email or text asking for it is a scam. Share the number only with your tax professional when you are ready to sign and submit your return.
Sources
- irs.gov/newsroom/taxpayer-guide-to-identity-theft
- irs.gov/identity-theft-central
- irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin
- irs.gov/identity-theft-fraud-scams/identity-and-tax-return-verification-service
Keep reading
- Does Filing an Amended Return Trigger an Audit
- Behind on Taxes for Several Years? Where to Actually Start
- Can Your Tax Preparer Represent You in an Audit?
Serving Longwood, Seminole County and clients in all 50 states remotely. See where we work.
General information, not tax advice for your specific situation. Rules can change, and a human preparer reviews your facts before any return is filed. Zero Fuss Taxes is a PTIN-holding tax preparation firm. We are not a CPA firm, enrolled agents or attorneys.