Tax planning

Tax Identity Theft: What to Do If Someone Filed as You

Updated October 24, 2026

Tax identity theft means someone used your name and Social Security number to file a return or claim a refund. If you suspect it, stop dealing with whoever contacted you, report it through the IRS, follow the recovery steps at IdentityTheft.gov, and get an Identity Protection PIN. You still file your own return and pay what you owe as usual.

What tax identity theft looks like

Tax identity theft happens when someone uses your Social Security number, or another taxpayer number of yours, to file a return or collect a refund. Many people learn about it only after something odd shows up. The IRS lists these as warning signs. None of them proves you were targeted, but each deserves a closer look:

  • Your return is rejected when you try to file.
  • You receive a W-2 or 1099 from an employer you never worked for.
  • You receive a 1099-G for unemployment benefits you never applied for.
  • An employer identification number was applied for in your name.
  • You get an unreported income notice, such as a CP2000 series notice.
  • Someone offers to "help" you with your IRS online account.
  • You see log-in or password reset alerts you did not ask for.
  • A data breach exposed your information.
  • Your Social Security account shows wages you never earned.

A rejected return does not always mean theft. A typo or a name that does not match can do the same thing. But if every detail is right and the return still bounces, find out why before you try again. Our guide to the CP2000 notice explains what that letter is, since it can also point to a plain reporting mismatch.

Your first steps, in the order the IRS lists them

The IRS gives a short sequence for victims. Work through it from the top:

  1. Stop dealing with the person who contacted you. Do not send money, personal details or financial details, and do not click unknown links. If you already clicked one, run antivirus software on that device.
  2. Change your IRS online account password to a complex one that you use nowhere else.
  3. Follow the directions in any IRS letter or notice you received about the problem.
  4. Report the identity theft through the fraud reporting pages on irs.gov.
  5. Follow the recovery steps the IRS points to at IdentityTheft.gov.
  6. Get an Identity Protection PIN. More on that below.
  7. Keep a record of every letter, call and email.
  8. Keep filing your returns and paying your tax as usual.
  9. Check with your state tax agency for any extra steps it asks for.

Number eight surprises people. A theft problem does not excuse you from your own filing and payment duties, so do not let it stall your return.

Start your return with our preparers

A real preparer reviews and signs your return. You get a free quote.

Get my quote

Do you actually need Form 14039?

Most people do not. Form 14039 is the Identity Theft Affidavit. The IRS says to file it in only three situations:

  • The IRS tells you to.
  • You cannot use the Identity and Tax Return Verification Service.
  • You want to report possible tax identity theft the IRS may not know about yet, for example after a data breach.

Skip it if you already sent one, if the IRS has already sent you a letter or notice about the problem, or if you are using the verification service.

That service is an online tool, and the IRS says to use it only if you received a CP5071 series notice or letter 5447C. Keep the notice next to you and find a copy of the return for the year named on it. If you never filed that return, the service is where you tell the IRS so. You sign in to your IRS online account, answer the questions, and once you are verified you generally do not need Form 14039 unless the IRS says otherwise.

How an Identity Protection PIN helps

An Identity Protection PIN, or IP PIN, is a six-digit number that keeps anyone else from filing a federal return with your Social Security number or ITIN. Only you and the IRS know it. Here is how it works:

  • Anyone with an SSN or ITIN who can verify their identity can get one.
  • The fastest way is the IP PIN section of your IRS online account. You register and verify your identity first.
  • A new number is created every year and is good for one calendar year.
  • You must use it on any federal return you file during that year, including returns for earlier years.
  • A missing or wrong PIN gets an e-filed return rejected and delays a paper return.

Treat it like a house key. Share it only with your tax professional, and only when you are ready to sign and submit. The IRS says it will never ask for your IP PIN, so any call, email or text asking for it is a scam. For more on spotting those, read our guide to tax scams to watch for.

What our preparers can and cannot do

Our preparers prepare returns. They do not speak to the IRS for you, and they cannot take over an identity theft case. If you want someone to deal with the IRS on your behalf, look for a qualified professional who does representation.

What our preparers can do is prepare an accurate return once you know where things stand, tell you what documents they need, and ask for your IP PIN only at the moment you are ready to sign. If you owe a return for a year that was affected, bring the same paperwork you would bring any other year. Our tax documents checklist covers the basics.

What to gather while you sort this out

A tidy folder makes every step easier, whether you are talking to the IRS yourself or handing us your return:

  • Every IRS letter or notice, with the notice number from the corner of the page
  • A copy of any return you filed for the affected year
  • Any W-2, 1099 or 1099-G you did not expect
  • A written list of calls and emails with dates
  • Your IP PIN, once you have one
  • A photo ID for identity checks

Keep these in one place and do not email them in plain text. When your folder is ready, you can start your return and our preparers will tell you what is still missing.

FAQ

Do I still have to file my return if someone stole my identity?

Yes. The IRS steps for victims include filing your returns and paying your tax as usual. Report the theft and follow the recovery steps at the same time, but do not skip your own filing.

Does a rejected return mean my identity was stolen?

Not always. The IRS lists a rejected return as a warning sign, and it also says the signs do not always mean you were affected. Check your details for typos first, then look into the cause if everything matches.

Can I get an IP PIN if nothing has happened to me?

Yes. The IRS says anyone with an SSN or ITIN who can verify their identity can get one. It adds a layer of protection before a problem starts.

A caller asked for my IP PIN to fix my account. Is that real?

No. The IRS says it will never ask for your IP PIN, so a call, email or text asking for it is a scam. Share the number only with your tax professional when you are ready to sign and submit your return.

Sources

Keep reading

Serving Longwood, Seminole County and clients in all 50 states remotely. See where we work.

General information, not tax advice for your specific situation. Rules can change, and a human preparer reviews your facts before any return is filed. Zero Fuss Taxes is a PTIN-holding tax preparation firm. We are not a CPA firm, enrolled agents or attorneys.

Start My Tax Return   Call 689-331-5723

Ready to file without the runaround?

Start your guided intake in a couple of minutes, or call our office.

Start My Tax ReturnCall 689-331-5723
Printable guide

Small Business Tax Document Checklist

Checklist for Schedule C, LLCs, and small business owners. No cost, no obligation.

Get the guide →

Zero Fuss Taxes is a PTIN-holding tax preparation firm. We are not a CPA firm, enrolled agents or attorneys.