I may be the victim of identity theft, what do I do?

I may be the victim of identity theft, what do I do?

What is tax-related identity theft?

Tax-related identity theft occurs when someone uses your stolen Social Security number to file a tax return claiming a fraudulent refund.You may not be aware this has happened until you efile your return and discover it has already been filed.The IRS may send you a letter informing you of a suspicious return using your SSN.

Know the warning signs

Be alert to possible tax-related identity theft if you are contacted by the IRS or your tax professional/provider about:

  • More than one tax return was filed using your SSN.
  • You owe additional tax, refund offset or have had collection actions taken against you for a year you did not file a tax return.
  • IRS records indicate you received wages or other income from an employer for whom you did not work.

If you suspect you are a victim of identity theft, continue to pay your taxes and file your tax return, even if you must do so by paper.

Steps to take if you become a victim

If you are a victim of identity theft, the Federal Trade Commission recommends these steps:

  • File a complaint with the FTC at identitytheft.gov.
  • Contact one of the three major credit bureaus to place a ‘fraud alert’ on your credit records:
  • Contact your financial institutions, and close any financial or credit accounts opened without your permission or tampered with by identity thieves.

If your SSN is compromised and you know or suspect you are a victim of tax-related identity theft, the IRS recommends these additional steps:

  • Respond immediately to any IRS notice; call the number provided.
  • Complete IRS Form 14039, Identity Theft Affidavit (PDF), if your efiled return rejects because of a duplicate filing under your SSN or you are instructed to do so. Use a fillable form at IRS.gov, print, then attach the form to your return and mail according to instructions.

About data breaches and your taxes

If you’ve been a victim of a data breach, keep in touch with the company to learn what it is doing to protect you and follow the “Steps for victims of identity theft.” Data breach victims should submit a Form 14039, Identity Theft Affidavit, only if your Social Security number has been compromised and your efile return was rejected as a duplicate or IRS has informed you that you may be a victim of tax-related identity theft.

How to reduce your risk

Joint efforts by the IRS, states and tax industry to protect your data. Taxes. Security. Together. Here's how you can help:

  • Always use security software with firewall and anti-virus protections. Use strong passwords.
  • Learn to recognize and avoid phishing emails, threatening calls and texts from thieves posing as legitimate organizations such as your bank, credit card companies and even the IRS.
  • Do not click on links or download attachments from unknown or suspicious emails.
  • Protect your personal information and that of any dependents. Don’t routinely carry Social Security cards, and make sure your tax records are secure.

See Publication 4524, Security Awareness for Taxpayers (PDF), to learn more.

The IRS does not initiate contact with taxpayers by email to request personal or financial information. This includes any type of electronic communication, such as text messages and social media channels.

Report suspicious online or emailed phishing scams to phishing@irs.gov. For phishing scams by phone, fax or mail, call 800-366-4484. Report IRS impersonation scams to the Treasury Inspector General for Tax Administration’s IRS Impersonation Scams Reporting.

See the main Identity Protection page for more information.

Get Tax Advice From The Expert!