Fraud Cleanup

What the IRS Says to Do About Identity Theft

Someone used your identity for tax fraud. Here is the IRS's own guidance: the warning signs, the phone numbers, the forms and the PIN that stops a thief from filing.

Someone filed a tax return with your Social Security number. Or the IRS sent a letter you do not understand. Take a breath, then move fast. The IRS guide says to stay calm and act fast if you suspect identity theft. This page walks through what the IRS itself tells you to do, step by step. For a wider view of the problem, start with tax identity theft.

What tax identity theft looks like to the IRS

The IRS identity theft central page covers what happens when a thief steals your information to commit tax fraud. It also tells you how to report identity theft, tax scams and fraud. Targets could be you, your children, other dependents and nonfilers. Thieves do not always file a fake return. They can also use your information to apply for a job.

Warning signs the IRS guide names

The IRS guide lists warning signs of identity theft. Watch for these:

  • A tax return that is rejected when you e-file.
  • Form 1099-G unemployment benefits you did not get or apply for.
  • An employer ID number you never asked for.
  • An unreported income alert, like a CP2000 series notice.
  • A Social Security account showing wages you did not earn or expect.
  • Accounts created or accessed that you did not create or access.
  • Alerts about password resets or log-in checks.

The guide adds a caution. These signs do not always mean you have been affected by identity theft, but you should still be cautious.

Sometimes IRS mail is your first sign. The IRS sends a letter or notice when it suspects identity theft on a return. If one shows up, read it before anything else. Our page on the IRS identity theft letter goes deeper on that.

What to do first when you suspect tax identity theft

The IRS guide gives a short list of first steps:

  • If you got an IRS letter, notice or fax, immediately follow the IRS instructions in it.
  • Follow the recovery steps at IdentityTheft.gov.
  • Keep records of letters, phone calls and emails.
  • Check with your state tax agency for other steps.

If your e-filed return was rejected, that rejection is one of the warning signs above.

IRS phone numbers for specific situations

The IRS guide names different numbers for different problems. Pick the one that fits:

  • Call the IRS to verify your identity and tax return status.
  • Call the IRS for tax account answers, or to verify your notice or letter. You can also search for the notice online.
  • Does a letter or notice tell you to use the Identity and Tax Return Verification Service? Use that.
  • To get a copy of your return if needed, check your Online Account.

The forms the IRS uses for identity theft

The main form is Form 14039, the Identity Theft Affidavit. The IRS guide says to check if you should file it if your dependent's identity was stolen. It also says to consider filing Form 14039 if a data breach leaked your information.

If someone filed a fraudulent return in your name, the guide says to send Form 4506-F to get a copy of it.

Businesses are different. The guide says a business, trust, estate or tax-exempt group should use Form 14039-B, the Business Identity Theft Affidavit.

The Identity Protection PIN

An identity protection PIN stops anyone else from filing a return with your tax ID number. The IRS guide says to get one. You can read more on our page about the IRS identity theft protection PIN.

You must register and validate your identity before you can request an IP PIN through an online account. If you cannot access or create an online account, you can request an IP PIN by filing Form 15227 online.

If you already have an IP PIN, use that to e-file your return. If you have dependents, note that a dependent does not need an IP PIN unless one was previously issued to them.

Special cases: dependents, employment identity theft and deceased persons

Dependents

A dependent's information can be used to get a tax credit. The IRS notifies you by mail if they find duplicate claims, and you should immediately follow their instructions. Before you file, work out who can claim the dependent. Then check that the dependent's details on the return are right.

If you cannot e-file, fill out a paper return. Add papers that back up your claim. Then mail the whole package. If the IRS audits your claim, you will need to provide proof you can claim the dependent.

One limit surprises people. Privacy laws mean the IRS cannot tell you who claimed your dependent. The IRS can only share details for the main taxpayers listed on a return.

Employment identity theft

Identity thieves can use your information to apply for a job. Employment identity theft can hurt your taxes, your Social Security benefits and your work record. Did a Form W-2 or Form 1099 come from an employer you never worked for? Contact the Social Security Administration. Do the same if your Social Security income is more than you earned or expected.

Deceased persons

The IRS guide says to send credit bureaus a copy of the death certificate for a deceased person's identity theft. Keep too much detail out of an obituary. Thieves could use it. And file the deceased person's final tax returns when due.

How to protect yourself going forward

The IRS guide ends with prevention. Secure your Online Account with a complex, unique password. Protect your personal and financial information. This includes Social Security numbers, usernames and passwords. It also covers data for dependents and people who have died. Monitor your accounts and reports for taxes, Social Security, credit and finances. Be cautious about someone wanting to help with your Online Account.

Read up on the IRS Identity Theft Victim Assistance Program. And if you spot tax fraud, a scam or a law violation, report it. The IRS identity theft central page tells you how.

Sources