How tax refund theft happens and what you'll notice first

Tax refund theft usually means someone filed a tax return using your Social Security number before you did, claimed a refund, and had it sent to a bank account or address you don't recognize. You'll find out when you file your own return and the IRS tells you a return was already filed under your number — or when you don't receive a refund you were expecting.

The thief needs three things: your Social Security number, enough personal information to make the return look real to automated systems, and a way to collect the money (a bank account they control, or a mailing address). They often get your Social Security number from a data breach, a stolen wallet, or a discarded tax document. The IRS processes millions of returns quickly, and fraudulent ones sometimes get through before you file.

You might also notice the theft if your employer's records show a W-2 was filed under your number but you never received one, or if you get a notice from the IRS about income you didn't earn.

Key Takeaways

  • Contact the IRS when ready by calling 1-800-829-1040 if you discover a fraudulent return was filed under your Social Security number.
  • File your own legitimate return as soon as possible, even if a fraudulent one exists — the IRS will sort out which is real based on documentation you provide.
  • You may need to file Form 14039, Identity Theft Affidavit, to prove the return was not yours and request the refund be sent to you instead.
  • The IRS can issue you an Identity Protection PIN, a six-digit number only you know that prevents anyone else from filing under your number in the future.
  • Recovery takes weeks to months, not days, because the IRS must investigate and confirm your identity before releasing money.

The first steps: reporting to the IRS

Call the IRS at 1-800-829-1040 as soon as you know or suspect a fraudulent return was filed. Have your Social Security number, date of birth, and filing status ready. Tell them you believe someone filed a return using your number without your permission. The IRS will place a flag on your account and may ask you questions to confirm your identity.

If you have not yet filed your own return, file it when ready with all your real documents — W-2s, 1099s, receipts for deductions, everything. Do not wait. The IRS needs your legitimate return to compare against the fraudulent one. Include a note with your return explaining that you reported identity theft, or file Form 14039 (Identity Theft Affidavit) along with your return.

Keep records of every call you make to the IRS: the date, time, the name of the person you spoke with, and what they told you. Write down your case number if they give you one. You will need this paper trail if the situation gets complicated.

Filing Form 14039 and proving the theft was real

Form 14039, Identity Theft Affidavit, is the official document that tells the IRS you did not file the return they received. You can file it with your tax return, or file it separately if you discover the theft after you've already filed. The form asks you to describe what happened, when you found out, and what steps you've taken.

You do not need to prove who stole your information — the IRS does not expect you to solve a crime. You need to prove that you did not file that return. Bring documents that show your real address, your real employer, your real income. A copy of your driver's license, recent utility bills, and your W-2s all help. If the fraudulent return claimed income from an employer you've never worked for, bring a letter from that employer confirming you were never employed there.

The IRS will compare your legitimate return against the fraudulent one. If yours is clearly real — W-2s match, deductions are reasonable, your address is consistent — they will reject the fraudulent return and process yours instead.

Getting an Identity Protection PIN to prevent future theft

After you report identity theft to the IRS, ask them to issue you an Identity Protection PIN (IP PIN). This is a six-digit number that only you know. Starting the next tax year, anyone filing a return under your Social Security number must enter your IP PIN or the return will be rejected. Even if a thief has your Social Security number, they cannot file without this PIN.

The IRS will mail your IP PIN to the address on file, usually within two weeks of your request. Keep it somewhere safe — write it down and store it separately from your Social Security card. You will need to enter it on your tax return every year until the IRS tells you it is no longer necessary.

If you lose your IP PIN, call the IRS and they will issue a new one. If you forget it when filing, call before you submit your return and have them read it to you over the phone.

How long recovery takes and what to expect

The IRS does not move quickly on identity theft cases. After you report the fraud and file your legitimate return, expect the investigation to take anywhere from four weeks to several months. The IRS must confirm your identity, investigate the fraudulent return, and determine who should receive the refund. During this time, your refund will be held.

You will receive notices in the mail explaining what the IRS is doing. Read them carefully and respond if they ask for more information. If you ignore a notice, the process stalls. If you move during this time, update your address with the IRS when ready so notices reach you.

Once the IRS confirms the fraud, they will either send your refund to you or deny the fraudulent return and process yours. If the thief's bank received the refund before the fraud was discovered, the IRS may pursue the bank to recover the money, but that is a separate process and can take longer.

Protecting yourself from future identity theft

After this happens once, you are at higher risk. Monitor your credit reports by requesting free copies at annualcreditreport.com (the only official site for free reports). Look for accounts you did not open or inquiries from creditors you did not contact. You can place a fraud alert with the three major credit bureaus (Equifax, Experian, TransUnion) — this tells creditors to verify your identity before opening new accounts in your name.

Consider a credit freeze, which locks your credit file so no one can open accounts without your permission. It costs nothing to place or lift a freeze, and you can do it online at each bureau's website. A freeze is stronger protection than an alert, but it also means you have to unfreeze your credit if you want to explore for a loan or credit card yourself.

Keep your Social Security number private. Do not carry your card in your wallet. Do not give your number to anyone who asks unless you initiated the contact and know they are legitimate. Shred documents with your number before throwing them away. If you suspect a data breach — a company you use was hacked, or you lost a wallet — contact the IRS proactively and ask about an IP PIN even if no fraudulent return has been filed yet.

If the refund was already sent to the thief's bank account

If the IRS discovers the fraud after the refund was deposited into the thief's bank account, the IRS will contact that bank and request the money be returned. The bank is usually required to cooperate, but the process is slow. The bank must investigate on their end, confirm the account holder received stolen funds, and reverse the deposit.

You will still receive your refund eventually, but it may take longer — sometimes several additional months. The IRS will send you a notice explaining the delay and what they are doing to recover the money. Do not assume you will never see the refund. Keep following up with the IRS using your case number.

In rare cases where the thief withdrew the money when ready and the bank cannot recover it, the IRS may issue you a refund from the Treasury rather than waiting for the bank to return the stolen funds. This is not may provide, but it is an option the IRS can pursue.

Frequently Asked Questions

Do I have to pay taxes on a refund that was stolen from me?

No. The refund is your money — it belongs to you because you earned the income and paid the taxes. The fact that a thief received it first does not change that. When you receive your refund, it is not taxable income.

What if I filed my return before I knew about the fraud?

The IRS will see two returns under your number. Contact them when ready and explain which one is yours. File Form 14039 if you have not already. The IRS will compare the two returns and determine which is legitimate based on your documentation. Your real return will be processed.

Can I file my return if a fraudulent one is already in the system?

Yes. File your legitimate return with all your real documents. Include a note explaining the situation, or file Form 14039 with your return. The IRS expects this and has systems to handle it. Do not delay filing because of the fraud.

Will the IRS catch the person who stole my refund?

The IRS investigates tax fraud, but catching individual identity thieves is difficult and not always a priority for them. Your focus should be on recovering your refund and protecting yourself going forward. If you want to report the crime to law enforcement, you can file a report with your local police or the FBI's Internet Crime Complaint Center.

How do I know if my Social Security number was used for other fraudulent returns in past years?

When you call the IRS about the current fraud, ask them to check your account history for any other returns filed under your number that you did not file. If they find others, report those as well. You can also check your Social Security statement at ssa.gov to see if earnings were reported under your number that you did not earn.