IRS identity theft (Form 14039): full recovery process
--- Discovering that someone has used your Social Security number to file a fraudulent tax return is a stressful and invasive experience. The immediate confusion over a rejected return or an unexpected IRS notice can quickly turn into concern about your financial security and tax records. The IRS has specific procedures to help taxpayers resolve identity theft, and a key part of that process is Form 14039, Identity Theft Affidavit. This guide walks you through the full recovery process, from recognizing the signs to restoring your tax account and protecting yourself for the future.
Understanding Tax-Related Identity Theft
Tax-related identity theft occurs when someone uses your stolen personal information, including your Social Security number, to file a fraudulent tax return and claim a refund. The legitimate taxpayer often doesn't discover the fraud until they try to file their own return and it's rejected, or they receive an IRS notice about a suspicious tax return.
This crime is distinct from other forms of identity theft, though they can be connected. A thief might use your information to open credit cards or take out loans, but tax identity theft specifically targets your interaction with the IRS. The goal is to intercept a tax refund, and it typically happens early in the filing season before the real taxpayer submits their return.
Common Signs You May Be a Victim
You might suspect tax identity theft if you encounter one of the following situations:
- Your e-filed tax return is rejected. The IRS e-file system may reject your return because a return using your Social Security number has already been filed for that tax year.
- You receive an IRS notice or letter that doesn't match your actions. This includes a notice stating you received wages from an employer you never worked for, that more than one return was filed in your name, or that you have a tax refund, balance due, or collection action for a year you didn't file.
- IRS records show you worked for an unknown employer. This might appear on your IRS Wage and Income Transcript.
- You receive a refund you didn't expect or that doesn't match your calculations, or you receive a paper refund check in the mail that you did not request.
- You can't access your IRS online account because your information doesn't match the IRS records.
- The IRS sends you an Identity Verification notice (such as Letter 5071C, 4883C, or 5747C) asking you to verify your identity, even though you haven't filed yet.
If you experience any of these, it's crucial to act promptly. Ignoring IRS notices can lead to further complications, even if the underlying activity is fraudulent.
Immediate First Steps After Suspecting Identity Theft
Before you even fill out Form 14039, there are critical actions to take. These steps help secure your broader identity and provide documentation for your case.
1. File a Report with the Federal Trade Commission (FTC)
Visit IdentityTheft.gov, the FTC's official resource. This site provides a personalized recovery plan. Filing an identity theft report with the FTC creates an official record of the crime, which you may need for creditors or other agencies. The FTC will provide you with an Identity Theft Report and a recovery plan.
2. Place a Fraud Alert on Your Credit Reports
Contact one of the three nationwide credit bureaus (Equifax, Experian, or TransUnion). By law, the one you contact must notify the other two. Placing a fraud alert is free and makes it harder for an identity thief to open new accounts in your name, as creditors must verify your identity before issuing credit. An initial fraud alert lasts for one year.
3. Consider a Credit Freeze
A credit freeze (or security freeze) is more stringent than a fraud alert. It restricts access to your credit report entirely, making it unlikely that new accounts can be opened. You must contact each credit bureau separately to freeze and unfreeze your credit. This is also free, thanks to federal law.
4. Review Your Credit Reports Carefully
You are entitled to a free credit report every week from each of the three bureaus through AnnualCreditReport.com. Scrutinize these reports for any accounts, inquiries, or personal information you don't recognize. Report any discrepancies immediately to the credit bureau and the associated creditor.
5. Gather Your Key Documents
Start a dedicated file for this incident. You will need:
- Copies of any fraudulent tax returns (if you obtained them) or any IRS notices you received.
- Your legitimate prior-year tax return(s).
- Your Social Security card, driver's license, or other government-issued photo ID.
- Proof of address, such as a utility bill or mortgage statement.
- The FTC Identity Theft Report.
The Core Tool: IRS Form 14039, Identity Theft Affidavit
Form 14039 is the IRS’s official form for reporting that you are a victim of tax-related identity theft. It is not a police report, but an affidavit you submit to the IRS to alert them that your identity has been compromised and to begin the process of securing your tax account.
When Should You File Form 14039?
The IRS instructs taxpayers to file Form 14039 in specific circumstances:
- The IRS notified you that you may be a victim (e.g., via a letter).
- Your e-filed return was rejected because of a duplicate Social Security number.
- You have reason to believe your personal information was used to file a fraudulent return.
- The IRS instructs you to file it after you verify your identity.
Do not file Form 14039 if you are only experiencing identity theft in other areas (like credit cards) but have no evidence of tax fraud. In that case, follow the FTC's steps and monitor your tax records.
How to Complete and Submit Form 14039
You can download the current version of Form 14039 and its instructions from the official IRS website (IRS.gov). Here’s how to approach it:
Section 1: Taxpayer Information. Fill in your name, SSN, address, and contact information exactly as it appears on your legitimate tax return.
Section 2: Identity Theft Information. This is the most critical part. You will check boxes to indicate how you discovered the theft (e.g., "I attempted to e-file my tax return, but it was rejected..."). You must provide a clear, concise description of what happened in your own words. Include details like the date you tried to file, the notice number you received, and any other relevant facts. Attach additional sheets if needed.
Section 3: Affirmation. You must sign and date the form, affirming under penalty of perjury that the information is true.
How to Submit:
- If your e-file was rejected: Print a paper copy of your completed tax return, attach Form 14039 to the front, and mail it to the IRS address for your state listed in the form instructions.
- If the IRS sent you a notice: Follow the instructions on the notice. Typically, you will mail Form 14039 along with a copy of the notice to the address provided.
- If you are filing proactively: Mail the completed form to the IRS address in the instructions.
Always use the mailing address in the current year's form instructions, as it can change. Keep copies of everything you send.
| IRS Notice/Scenario | Likely Action Required | Key Document to Have Ready |
|---|---|---|
| Letter 5071C, 4883C, 5747C (Identity Verification) | Verify identity online at idverify.irs.gov or by phone. You may not need Form 14039 yet. | Government-issued photo ID, prior-year tax return, current-year tax return (if filed). |
| E-file Rejection (Code 902, 903, etc.) | File a paper return with Form 14039 attached. | Completed paper tax return, Form 14039, copies of W-2s/1099s. |
| Notice CP01A (Identity Protection PIN) | Use the provided IP PIN to file your current-year return. This is a protective step, not a fraud alert. | The CP01A notice with your 6-digit IP PIN. |
| Notice CP01F (Possible Identity Theft) | The IRS may have stopped a suspicious return. You may need to file Form 14039. | The CP01F notice, Form 14039, your legitimate tax documents. |
What Happens After You Submit Form 14039?
The recovery process requires patience. The IRS's Identity Theft Victim Assistance division will handle your case.
The IRS Investigation Process
Once the IRS receives your Form 14039, they will: 1. Flag your account. They will place an identity theft indicator on your tax account to alert employees to scrutinize future returns. 2. Open a case. A specialized unit will review your affidavit and any related documents. 3. Begin their work. They will work to identify and separate the fraudulent return from your legitimate tax information. This can involve contacting employers, financial institutions, and other third parties to verify information. 4. Communicate with you. The IRS correspondent will primarily communicate with you via mailed letters. They will provide a case number and may request additional information or documentation. Important: They will never initiate contact via email, text, or social media to ask for personal or financial information.
How to Check on Your Case and Get Help
- Use your case number. All correspondence from the IRS on this matter will reference your case number. Have it ready anytime you need to contact them.
- Call the IRS Identity Theft helpline. The general number is 800-908-4490. Be prepared for long wait times, especially during tax season. Have your case number, Social Security number, and all related letters handy.
- Check your IRS online account. Once your identity is verified, you can create an account at IRS.gov to view your tax records, including transcripts that may show the status of your account.
- Contact the Taxpayer Advocate Service (TAS). If you are facing financial hardship, the IRS process is causing a delay of more than 30 days without resolution, or you are unable to get a response through normal channels, you can contact TAS. This is an independent organization within the IRS that helps taxpayers resolve problems.
Filing Your Legitimate Tax Return
If your e-file was rejected, you must file your correct tax return on paper. Attach Form 14039 to the front and mail it to the appropriate address. Also attach all required supporting documents (W-2s, 1099s, etc.). If you are due a refund, be aware that processing a paper return, especially one flagged for identity theft, can take six months or more. You can check the status of your refund using the "Where's My Refund?" tool on IRS.gov, but understand it will only show status after the paper return has been entered into the system, which takes several weeks.
Securing Your Tax Account for the Future
After resolving the immediate fraud, take proactive steps to prevent it from happening again.
The Identity Protection PIN (IP PIN)
The most powerful tool the IRS offers is the Identity Protection PIN. This is a six-digit number, known only to you and the IRS, that must be entered on your tax return for it to be accepted. Once you enroll in the IP PIN program, you will receive a new, randomly generated PIN each year. It effectively locks your tax account.
- Who can get one? Any taxpayer who can verify their identity is eligible to opt into the IP PIN program. For victims of identity theft whose cases have been resolved, the IRS will often automatically issue one via a CP01A notice.
- How to get one: Visit the "Get an IP PIN" tool on IRS.gov. You must pass a rigorous identity verification process.
- Important: You must use your IP PIN each year when you e-file or mail your return. If you lose it, you can retrieve it through your IRS online account.
Ongoing Vigilance and Recordkeeping
- File your taxes early. The earlier you file, the less opportunity a thief has to file a fraudulent return first.
- Protect your personal information. Shred documents containing your SSN, be cautious online, and use strong, unique passwords.
- Review your Social Security Administration earnings statement. Create an account at SSA.gov to ensure the income reported under your SSN is accurate.
- Maintain your identity theft file indefinitely. Keep copies of Form 14039, IRS letters, the FTC report, and all related correspondence. This may be needed for future reference.
- Be scam-aware. Remember, the IRS will never call you demanding immediate payment via gift card, wire transfer, or cryptocurrency. They will never email or text you out of the blue with links to verify information. All initial contact is by mail.
When to Seek Professional Tax Help
While many taxpayers can navigate this process on their own, consider consulting a qualified tax professional in these situations:
- The fraud is complex, involving multiple tax years or business returns.
- You are facing additional tax complications, such as an audit, balance due, or garnishment related to the fraudulent activity.
- You are not receiving responses from the IRS after a reasonable period and have been unable to get help from the Taxpayer Advocate Service.
- You simply feel overwhelmed by the process and want an expert to handle communications with the IRS on your behalf.
Look for a credentialed professional such as a Certified Public Accountant (CPA), Enrolled Agent (EA), or tax attorney. They have the expertise and rights to represent you before the IRS. Be wary of companies that promise instant fixes or guaranteed results for a large upfront fee.
Recovering from tax-related identity theft is a marathon, not a sprint. By methodically following the official steps—starting with the FTC, using Form 14039 to alert the IRS, and adopting protective measures like the IP PIN—you can reclaim your tax identity and gain greater peace of mind. Always verify information through the official IRS.gov website and protect your personal information as you would any other valuable asset. ---

About the TDL Expert Panel
TDL Expert Panel · TheDigitalLife Editorial Team
TDL Expert Panel is the editorial team behind TheDigitalLife. The team researches, reviews, and creates practical guides to help everyday readers make better decisions about home repair costs, refunds, AI tools, digital safety, productivity, and useful online resources. Each guide is written to be clear, useful, and easy to understand.
