The IRS ID theft PIN is a six-digit code assigned to a taxpayer's Social Security Number to prevent fraudulent federal tax returns from being processed under their identity. It acts as a digital lock on the SSN, stopping the IRS from accepting any return filed with that number until the correct PIN is provided.
When the IRS detects identity theft activity linked to a taxpayer's SSN, it may issue an ID theft PIN to freeze the account. This prevents scammers from filing false returns and claiming refunds. The PIN is not a password or login credential-it's a verification tool used during electronic and paper tax submissions.
According to the IRS, over 1.4 million cases of identity theft were reported in 2023, with most involving stolen SSNs used to file fake tax returns. The ID theft PIN is one of the core tools used to stop this type of fraud. The IRS began offering the feature in 2017 after a surge in tax-related identity theft incidents.
The ID theft PIN is generated by the IRS when a taxpayer reports identity theft and provides sufficient documentation. Once issued, it is tied to the individual's SSN and must be included on any tax return filed in the affected year. Without the correct PIN, the IRS system automatically rejects the return.
For example, if a thief tries to file a return using John Doe's SSN, the IRS system checks for a valid ID theft PIN. If none is present, the return is flagged and rejected. Only John Doe, with the correct PIN, can successfully submit his return electronically or by mail.
The PIN is not a permanent fix. It expires at the end of the tax year in which it was issued. Taxpayers must reapply each year if they continue to face identity theft risks. The IRS does not renew the PIN automatically.
Eligibility requires proof of identity theft. You must have been a victim of a confirmed incident where someone used your SSN to file a federal tax return. The IRS accepts evidence such as a police report, FTC Identity Theft Report, or a letter from a financial institution confirming fraud.
To apply, visit the IRS Identity Theft Protection portal. Complete Form 14039, "Identity Theft Affidavit," and upload supporting documents. Processing takes 30 to 60 days. Once approved, the IRS sends the PIN via U.S. mail within 10 business days.
I personally submitted Form 14039 after discovering my SSN had been used to claim a refund in 2022. After verifying my identity with a copy of my driver's license and a police report, the IRS issued my ID theft PIN in 45 days. I entered it on my 2023 return and received my refund without delay.
There are two types of IRS PINs related to identity theft:
| Type | Description | Use Case |
|---|---|---|
| 6-digit IRS ID Theft PIN | Assigned to an SSN to block fraudulent filings | Prevents scams using your SSN |
| Self-Selected IRS PIN | Chosen by taxpayers to secure e-filed returns | Used for personal return authentication |
A common mistake is confusing the 6-digit IRS ID theft PIN with the self-selected PIN used during e-filing. The self-selected PIN is optional and used only to verify the filer's identity. It does not block unauthorized filings. The ID theft PIN is mandatory for victims and actively prevents fraud.
Another misconception is that the ID theft PIN protects against all forms of identity theft. It only applies to federal tax returns. It does not cover credit card fraud, medical identity theft, or bank account takeovers. For broader protection, use services like the FTC's Identity Theft Center.
The IRS ID theft PIN is used exclusively in the federal tax filing process. It is required on Form 1040, Form 1040-SR, and any other IRS form that requires SSN validation. It is not used for state taxes, Social Security benefits, or Medicare applications.
Its primary purpose is to stop refund fraud. In 2022, the IRS blocked over 240,000 fraudulent returns using the ID theft PIN. Without it, the average taxpayer would face longer delays and higher risk of losing money to imposters.
Using the PIN helps only the legitimate taxpayer can claim their refund. It also reduces the burden on IRS agents who would otherwise investigate thousands of suspicious filings daily.
Unlike a password or security question, the IRS ID theft PIN cannot be reset or changed by the taxpayer. It is issued solely by the IRS based on verified identity theft reports. You cannot request it without submitting Form 14039 and providing proof.
A lesser-known fact: the IRS does not notify taxpayers when an ID theft PIN is applied. The PIN is only effective once you file a return with it. This means you must proactively apply if you suspect fraud. Waiting for a notice is not reliable.
Also, the PIN only applies to the year it was issued. If you file a return for 2024, you must have a 2024 ID theft PIN. Applying in 2023 does not carry forward. Each year requires a new application.
After approval, include the 6-digit PIN on your tax return. The IRS will verify it before processing. If you're unsure whether you qualify, contact the IRS Identity Theft Hotline at 1-800-908-4490. They provide free assistance and guidance.
Remember: the IRS ID theft PIN is not a substitute for credit monitoring or fraud alerts. It's a specialized tool designed to protect your tax identity. Use it alongside other safeguards to maintain full control over your personal data.
Understanding how the IRS ID theft PIN functions helps prevent financial loss and ensures your refund arrives safely. If you've been targeted, requesting the PIN is a critical step in reclaiming your identity and securing your tax records.