Tax Identity Theft Recovery: A Step-by-Step Records and Filing Guide

1. Secure your accounts and preserve the warning

Stop communicating with anyone requesting money, passwords, verification codes, or tax records through a suspicious contact.

Go directly to official websites instead of following links in unexpected messages. Contact affected financial institutions through a trusted number if account information or funds are at risk.

Secure your email and tax-related accounts with unique passwords and available multifactor authentication. If a device may be compromised, use a trusted device and address the security problem.

Save the notice, rejection message, or suspicious communication safely. Do not reopen unsafe attachments just to gather evidence.

Write down when you discovered the issue and what you actually observed. Separate confirmed facts from suspicions about who was responsible.

2. Identify which problem you have

Check for a typo, an authorized preparer’s filing, or an identifiable reporting error before describing the event as confirmed fraud.

This guide concerns individual tax accounts. Businesses and other entities have different procedures, including Form 14039-B when applicable.

3. Follow an identity-verification letter on its own terms

A notice such as a 5071C or CP5071 asks you to confirm your identity and whether you filed the return in question. It can concern a legitimate return as well as a fraudulent one.

Use the online, telephone, or in-person method specified for your notice. Do not assume every verification letter allows the same method.

Gather the letter, affected return, relevant prior-year return if available, and supporting tax documents requested by the instructions.

If you did not file the return, say so during verification. If it is yours, accurately confirm that fact so the IRS can address processing.

Logging into an account is not necessarily the same as completing tax-return verification. Record the completion message or instructions you receive.

The IRS generally says not to file Form 14039 for this verification process unless instructed. Verification also does not guarantee an immediate refund.

4. Build a tax identity theft recovery file

Use a master timeline plus separate sections for each affected tax year. The year a notice arrives may differ from the tax year it concerns.

• Case summary: What happened, discovery date, affected people, and known tax years.
• Legitimate returns: Complete filed copies and acceptance or mailing evidence.
• IRS records: Notices, dated transcripts, verification instructions, and resolution letters.
• Reports: Applicable identity-theft submissions and confirmations.
• Contacts: Dates, agency, representative details when provided, instructions, and next steps.
• Financial effects: Delayed refunds, disputed balances, payments, and hardship evidence.

Keep originals securely and submit only what the applicable instructions require. Use secure official submission methods for sensitive records.

Keep passwords, recovery codes, full identifiers, and IP PINs out of a broadly shared timeline. A representative can receive necessary records through a secure channel.

If needed, review Form 4506-F to request a copy of a fraudulent return. This is separate from reporting the theft or filing your legitimate return.

5. Determine whether Form 14039 is appropriate

Form 14039 is the IRS Identity Theft Affidavit. It is not a universal response to every suspicious event.

Read the current form and IRS guidance for your situation. If you received a notice, follow that notice first; if the IRS directs you to use its verification service, do not add an affidavit unless instructed.

Where an affidavit is appropriate, identify the affected person, known tax years, and factual impact. Explain what you learned, when you learned it, and which records support the account problem.

Use the filing channel and supporting documents required by the current instructions. Keep a copy and proof of submission.

Do not submit duplicate affidavits for the same incident, including one already submitted through IdentityTheft.gov. If new information arises, follow the IRS’s instructions for providing it.

A report to another agency does not necessarily complete the applicable IRS process. Record which reports were actually transmitted and where.

6. Keep your legitimate tax filing on track

Continue meeting your legitimate filing and payment obligations. A theft report does not substitute for your tax return or automatically extend a deadline.

Prepare the correct return using your actual income, deductions, credits, and filing status. Do not change accurate facts simply to bypass an electronic rejection.

If a fraudulent filing prevents electronic submission, follow the IRS’s instructions for your circumstances. A paper return may be necessary; include Form 14039 only when applicable under the reporting instructions.

Confirm the correct filing address and required attachments before mailing. Retain the signed return package and mailing evidence.

Do not automatically file Form 1040-X to amend a return you never filed. The fraudulent-return recovery process and your legitimate return need to be coordinated.

If your own legitimate return also contains an error, document that separately and obtain guidance on the appropriate correction.

7. Handle duplicate-dependent claims carefully

A duplicate-dependent rejection can involve a mistake, competing eligibility claims, or identity theft. Review the child’s information and the tax rules before deciding which applies.

For tax years 2024 and later, IRS guidance provides an electronic filing route for certain duplicate-dependent rejections when the primary taxpayer uses a valid current-calendar-year IP PIN.

This is not a general workaround for a fraudulent primary-taxpayer return. Follow the instructions for the particular rejection.

If you cannot use the electronic route, review the paper-filing instructions. Keep eligibility evidence ready and provide it if requested rather than automatically attaching an entire custody file.

Electronic acceptance does not decide which person is legally entitled to a dependent-related benefit.

8. Investigate unfamiliar income separately

If someone used your identity for work, an unfamiliar Form W-2 or employment-related Form 1099 can affect earnings records.

For confirmed employment identity theft, the IRS says not to add income you did not earn to your return or amend merely to report it. Contact the Social Security Administration about inaccurate earnings records.

Also investigate whether the payer’s name is unfamiliar because of a payroll company or a correctable clerical error. Keep records of payer contacts and correction requests.

If an IRS notice proposes tax on that income, respond through the notice process. A separate report to another agency does not replace the response.

Fraudulent unemployment benefits require contact with the issuing state agency about the Form 1099-G. Use that situation’s guidance rather than assuming every unfamiliar form has the same remedy.

9. Use an IP PIN for filing protection

An identity protection PIN is an IRS-issued six-digit number that helps authenticate a return. Review how to obtain or retrieve it through IRS.gov.

Use the IP PIN valid for the calendar year in which you file, including when filing a prior-year return during that year. Do not reuse an old PIN simply because it matches the tax year on the return.

Review requirements for the taxpayer, spouse, and dependents as applicable. A missing required IP PIN can cause an electronic rejection.

Provide the PIN only to a trusted preparer when needed for filing, and keep it securely.

An IP PIN helps prevent misuse in filing. It does not by itself resolve a previous fraudulent return, correct a credit report, or release a refund.

10. Address financial identity theft beyond the IRS

Use IdentityTheft.gov for a broader recovery plan, report, and sample correspondence. Contact affected companies and dispute unauthorized activity through their verified processes.

The FTC explains that a credit freeze is free and requires contacting each of the three nationwide credit bureaus. An initial fraud alert is also free; contacting one bureau initiates notification to the other two.

A freeze helps restrict new credit accounts. It does not prevent someone from attempting a tax filing in your name or resolve existing account misuse.

Check state tax reporting requirements separately. Keep each agency’s report number and next action in your recovery file.

11. Track recovery without creating duplicate submissions

Record each agency’s instructions and follow-up dates. Respond promptly to legitimate requests, while checking that new correspondence is authentic.

Identity-theft resolution can take longer than ordinary return processing. Check current IRS processing information rather than treating an older estimate as a guaranteed deadline.

Do not use a transcript code or routine refund update as proof that every theft issue is resolved. Compare the resolution letter, legitimate return, account adjustments, and any refund or balance.

If the IRS issues a new notice, address its instructions rather than assuming the existing theft claim covers every response requirement.

If a delay causes serious financial hardship, review whether Taxpayer Advocate Service assistance is available. Gather bills, income records, deadlines, and evidence linking the tax problem to the hardship. Assistance is not a guaranteed immediate refund.

Your recovery checklist

Frequently asked questions

Does a verification letter prove someone stole my identity?

No. The IRS may need to verify a legitimate return. Follow the letter’s instructions.

Should every victim submit Form 14039?

No. The correct route depends on IRS instructions and the situation. Avoid duplicate affidavits.

Should I amend a fraudulent return I never filed?

Do not automatically amend it. Follow the identity-theft process and coordinate your legitimate filing.

Does a duplicate-dependent rejection prove theft?

No. It can also reflect mistakes or competing claims. Confirm the facts and eligibility.

Can I stop filing while the IRS investigates?

A pending investigation does not automatically suspend your filing or payment duties.

Will an IP PIN release my delayed refund?

No. It authenticates filing; resolving an existing case is a separate process.

Should I resend the same affidavit to speed things up?

No. Follow the IRS’s instructions and avoid duplicate submissions for the same incident.

When is recovery complete?

Reconcile the IRS resolution with your legitimate account and returns, then address any remaining state, earnings-record, or financial-account issues.