Identity Theft and the IRS: What Is an IP PIN, and Do I Need One?

Tax-related identity theft happens when someone uses your name and Social Security number (SSN), or your individual taxpayer identification number (ITIN), to file a tax return or claim a refund. An identity protection PIN, called an IP PIN, is a tool that helps block this. It is a six-digit number that only you and the IRS know. The IRS uses it to confirm that a return really came from you.

This post covers the basics. For the full IRS guide, see IRS: Identity theft guide for individuals.

Warning signs

The IRS lists these signs that your information may be misused:

• Your tax return is rejected.
• You get a Form W-2 or Form 1099 from an employer you never worked for.
• You get a Form 1099-G for unemployment benefits you did not get or apply for.
• An employer identification number (EIN) you never applied for appears in your records.
• You get a CP2000 notice about income you did not earn.
• Your Social Security statement shows wages you did not earn.

Each of these can have another cause. Check it, and act if you cannot explain it.

What to do now

1. Stop talking to anyone who contacted you about this. Do not send money or share personal or financial information. Do not click links in messages.
2. Change your IRS Online Account password to one that is complex and unique.
3. Follow the instructions in any IRS letter or notice. To confirm a letter is from the IRS, search for it online or call 800-829-1040.
4. Report the identity theft. Check whether you should file Form 14039, Identity Theft Affidavit. Then follow the recovery steps on IdentityTheft.gov.
5. Get an IP PIN to protect your tax account.
6. Keep records of every letter, call, and email.
7. File your returns and pay tax as usual.
8. Ask your state tax agency about any other steps.

What an IP PIN does

An IP PIN keeps someone else from filing a return with your SSN or ITIN. When you file, you enter the six-digit number, or you give it to your tax professional. If the number is missing or wrong, an electronic return is rejected. A paper return is delayed while the IRS checks your identity.

• Anyone with an SSN or ITIN who can verify their identity can enroll. Parents and legal guardians can request one for a dependent.
• An IP PIN is valid for one calendar year. A new one is generated each year.
• It is used only on Forms 1040, 1040-NR, 1040-PR, 1040-SR, and 1040-SS.
• It must be used on any federal return filed during the year, including returns for prior years.

How to get one

The fastest way is online. Sign in to your IRS Online Account, then find the IP PIN section on your profile page. If you do not have an account, you must create one and verify your identity first.

If you cannot set up an online account, there are two other routes:

• Form 15227. This route is for people whose adjusted gross income on their last filed return is below the limit listed on the IRS page. The IRS calls you to verify your identity, then mails the PIN. The IRS says this usually takes four to six weeks. IRS: Form 15227
• An in-person visit. Make an appointment at a Taxpayer Assistance Center. Bring the identification the IRS lists.

If you or your dependent is under 18, you must use one of the alternative enrollment routes, not the online option.

Lost your IP PIN?

Sign in to your online account or the IRS app. Your PIN is on your profile page. Do not file Form 15227 if you already have an IP PIN. That form is only for new requests.

If you cannot see it online, call 800-908-4490, Monday through Friday, 7 a.m. to 7 p.m. local time. If the phone assistor verifies you, the IRS says the PIN will be mailed within 21 days. The IRS notes that mailed reissues are not available during the end-of-year maintenance period, which usually runs from November through mid-January.

Scams to watch for

The IRS will never ask for your IP PIN. A call, email, or text that asks for it is a scam. Share your PIN only with your tax professional, and only when you are ready to sign and submit your return.

Worked example

Illustration only: Jordan gets a letter from the IRS about a return he did not file. He calls 800-829-1040 to confirm the letter is real. He changes his online password and follows the letter's instructions. He files Form 14039, as the IRS guide suggests, and then gets an IP PIN for his future returns.

Jordan keeps copies of the letter and the form he sent in one folder.

Checklist

1. Check the warning signs against your records and mail.
2. Verify any IRS letter before you act on it.
3. Change your Online Account password, then report the theft and follow the recovery steps.
4. Get an IP PIN, and enter it only on a return you file yourself or give to your tax professional.

General information, not advice for your return.

Sources: IRS, Identity theft guide for individuals (https://www.irs.gov/identity-theft-central/identity-theft-guide-for-individuals); IRS, Get an identity protection PIN (https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin); IRS, Didn't receive or lost your IP PIN (https://www.irs.gov/identity-theft-fraud-scams/didnt-receive-or-lost-your-identity-protection-pin-ip-pin); IRS, Form 15227 (https://www.irs.gov/dmaf/form/f15227); IRS, Form 14039 (https://www.irs.gov/pub/irs-pdf/f14039.pdf); IdentityTheft.gov (https://www.identitytheft.gov) This is general information, not advice about your specific return.

← Back to the blog · Leer en español