If someone has filed taxes in your name, your first steps should be filing Form 14039 (the Identity Theft Affidavit) with the IRS, placing a fraud alert with the credit bureaus, and obtaining your credit reports to check for unauthorized accounts. Tax identity theft is a specific form of fraud where a criminal uses your Social Security number to claim a refund before you file your legitimate return, and it requires immediate action on multiple fronts—not just with tax authorities but with credit agencies and law enforcement. This crime affects roughly 2.9 million Americans annually, according to the Treasury Inspector General for Tax Administration, and while the IRS has improved detection systems over the past decade, victims still face months of complications if they don’t respond correctly.
The process of resolving fraudulent tax filings is lengthy and bureaucratic. You’ll likely spend weeks or months proving your identity to the IRS, coordinating with your bank if a refund was deposited into your account, and monitoring your credit to prevent further fraud. The key difference between tax identity theft and other forms of identity theft is that it’s often discovered during tax season when you attempt to file your own return, only to learn the IRS has already received a return filed in your name. Acting decisively in the first weeks can prevent complications like wage garnishment or disputed filing status that might otherwise extend the problem for years.
Table of Contents
- How to Recognize Tax Identity Theft and File a Fraud Report
- Understanding the IRS Investigation Process and Timeline
- Protecting Your Credit and Monitoring for Further Fraud
- Requesting Replacement Documents and Updating Financial Records
- Addressing Wage Garnishment and Other Tax Consequences
- Considering a Police Report and Criminal Complaint
- Long-Term Protection and Future Prevention
- Conclusion
How to Recognize Tax Identity Theft and File a Fraud Report
You may discover fraudulent tax filings in several ways: when you attempt to file your own return and the IRS rejects it as a duplicate, when you receive an unexpected tax refund that you didn’t claim, or when you get a W-2 from an employer you don’t work for. The moment you suspect tax identity theft, contact the IRS Identity Theft hotline at 1-800-908-4490 to verify whether a return was actually filed in your name. The IRS can typically confirm within minutes whether a fraudulent return exists in their system. Your next step is filing Form 14039 with the IRS immediately. This form officially alerts the IRS that you are an identity theft victim and triggers a specific handling process for your case. You can file it online through the IRS website, mail it directly, or submit it with your legitimate tax return.
Filing this form places a “victim indicator” flag on your account, which tells IRS employees to manually review any future filings under your Social Security number rather than processing them automatically. Include detailed information about when you discovered the theft, how much was fraudulently refunded, and the contact information for any banks or other institutions involved. Don’t assume the IRS will automatically find and correct the fraudulent return. Their systems process millions of returns, and while they’ve increased fraud detection capabilities, false returns sometimes slip through. Some victims don’t discover the fraud until months later when they attempt to file their own return, only to face delays and complications because the IRS must now reconcile two conflicting filings. The sooner you report it, the sooner the IRS can flag your account and reduce the likelihood that subsequent fraudulent filings will be accepted.
Understanding the IRS Investigation Process and Timeline
Once you’ve reported the identity theft to the IRS, expect the investigation to take considerable time. The IRS will typically conduct an investigation lasting 90 days to determine whether the return was legitimate or fraudulent. During this period, your legitimate tax return will be held pending the outcome. If you’re owed a refund, you won’t receive it until the investigation concludes. If you owe taxes, the IRS won’t assess penalties or interest during the investigation period, but you should still file your legitimate return on time to avoid additional penalties. A critical limitation of the IRS process is that it operates independently of law enforcement. While the IRS Criminal Investigation division does pursue prosecutions, most tax identity theft cases don’t result in criminal charges because tracking down the perpetrators is difficult.
Victims should not expect the IRS to “solve” the fraud for them. Instead, the IRS’s role is to verify that the fraudulent return wasn’t legitimate and to help you establish your correct tax status. This distinction matters because some victims waste time waiting for the IRS to investigate the criminal aspect when they should be simultaneously working on protecting their credit and pursuing other avenues. The investigation timeline can extend beyond 90 days in complex cases, especially if large refunds were involved or if multiple fraudulent returns were filed in your name. Some victims report waiting six months to a year for full resolution. During this extended period, you may still need to file your legitimate return and respond to IRS correspondence. Keeping detailed records of all communications with the IRS—phone call dates, names of agents, case numbers, and what was discussed—will save you time if you need to escalate the matter or file a complaint with the Taxpayer Advocate Service.
Protecting Your Credit and Monitoring for Further Fraud
Simultaneous with reporting to the IRS, you must take action with credit reporting agencies. Contact Equifax, Experian, and TransUnion and place a fraud alert on your credit file. This alert tells creditors that you may be a victim of identity theft and instructs them to verify your identity before opening new accounts. You can place a fraud alert by calling one bureau and providing your contact information; they are required to notify the other two. The alert typically lasts one year but can be renewed if the fraud continues. After placing a fraud alert, obtain a free credit report from each of the three bureaus through AnnualCreditReport.com. Examine these reports for unauthorized accounts, fraudulent inquiries, or other signs of identity misuse. Tax identity theft sometimes occurs alongside other types of fraud, where criminals use your information to open credit cards, take out loans, or make other financial transactions.
Some victims discover additional fraudulent accounts when they review their credit reports. If you find unauthorized accounts, dispute them immediately with the credit bureaus and the creditors involved. Document everything in writing and request confirmation of the disputes. Consider placing a credit freeze instead of or in addition to a fraud alert. A freeze prevents creditors from accessing your credit file, effectively blocking the opening of new accounts in your name without your knowledge. Unlike fraud alerts, freezes are permanent until you lift them yourself, and they provide stronger protection but may inconvenience you if you need to apply for legitimate credit. Some fraud victims use freezes for extended periods, then lift them when they feel the immediate threat has passed. This approach trades convenience for security but is worth the tradeoff if you know fraudsters have your information.
Requesting Replacement Documents and Updating Financial Records
If the fraudulent return included a refund that was deposited into a bank account, contact your bank immediately to report the fraud. The bank may freeze the account or the specific deposit if the fraud is reported quickly enough. If the refund was already spent, the situation becomes more complicated because the money is no longer in the account. Document all communications with your bank in writing and request that they flag your account for potential future fraud. Your Social Security number may now be compromised. While you cannot easily change your SSN—the Social Security Administration only reassigns numbers in exceptional circumstances—you can request a new Individual Taxpayer Identification Number (ITIN) if you’re not a U.S.
citizen or consider other protective measures. More practically, request an IRS Identity Protection PIN, which you can obtain by contacting the IRS. This PIN is a six-digit number that you must include on your tax return each year, making it significantly harder for fraudsters to file returns in your name even if they still have your SSN. Monitor your financial accounts and credit card statements closely for the next several months. Set up alerts with your banks and credit card companies to notify you of any unusual activity. This vigilance is especially important because criminals who successfully filed fraudulent tax returns have already demonstrated access to enough of your personal information to commit identity theft, so the risk of additional fraud is elevated. Some victims discover months later that their information was sold to multiple fraudsters or used for purposes beyond tax filing.
Addressing Wage Garnishment and Other Tax Consequences
A serious complication arises when the fraudulent filer claims refundable tax credits, particularly the Earned Income Tax Credit (EITC). If a fraudster files a return claiming an EITC in your name, the IRS may issue a large refund to an account they control. This refund represents federal funds, and the government will eventually seek recovery. In some cases, the IRS may attempt to offset a fraudulent refund against your future legitimate refunds, meaning your refund will be reduced or withheld to repay the fraudulent payment. While the IRS is supposed to protect victims of identity theft from this offset, errors occur, and you may need to appeal to get your legitimate refund restored. Wage garnishment is another potential consequence, though it typically occurs when someone else has used your SSN to file fraudulent tax returns and accumulated outstanding tax debt under your number. This is less common than simple refund fraud but happens in cases where identity theft remains undetected for years.
If your wages are being garnished due to a fraudulent tax debt, you’ll need to work with the IRS to prove the debt isn’t yours and have the garnishment lifted. This process is time-intensive and requires detailed documentation proving the fraud, which is why early detection is critical. A significant limitation of IRS protections is that they only apply to your federal tax return. You must separately report identity theft to state tax authorities, as fraudsters sometimes file state returns in victims’ names as well. Contact your state’s department of revenue or equivalent agency and report the fraud. Some states have processes similar to the federal system, while others have less developed protections. This adds another layer of complexity and another set of agencies you must coordinate with to fully resolve the fraud.
Considering a Police Report and Criminal Complaint
While the IRS may not pursue criminal charges against the fraudster, filing a police report creates an official record of the crime and can be helpful in your interactions with financial institutions and credit agencies. Contact your local police department and file a report of identity theft. You don’t need to wait for the police to investigate or solve the case; the report serves primarily as documentation.
Some victims include the police report number in their correspondence with the IRS and credit bureaus to demonstrate that they reported the fraud to law enforcement. You can also file a complaint with the Federal Trade Commission at IdentityTheft.gov. The FTC maintains a database of identity theft complaints and uses this data to identify patterns and pursue enforcement actions against fraudsters and companies that facilitate fraud. Filing with the FTC also generates an identity theft report that you can provide to creditors and financial institutions, which some accept as proof of your victim status and may use to expedite dispute processes.
Long-Term Protection and Future Prevention
After resolving the immediate crisis, consider whether your personal information is compromised beyond repair. In cases where sensitive documents like your Social Security card or tax identification documents were stolen, consider credit monitoring services or identity protection insurance. These services monitor your credit file and dark web marketplaces for your stolen information and may offer restoration services if further fraud occurs. While not essential for all victims, these services provide peace of mind for those whose information was exposed in large data breaches or whose entire identity portfolio has been compromised.
Going forward, prepare for tax season differently. File your taxes as early as possible to minimize the window during which a fraudster could file a return in your name first. If you have an IRS Identity Protection PIN from your case, safeguard it as you would a password and remember to include it on all future returns. Monitor your credit regularly, even after the initial fraud is resolved. Some victims discover additional fraudulent accounts or filings months or years later because their information remained in the possession of the perpetrators or was resold.
Conclusion
Tax identity theft requires immediate action on multiple fronts: notifying the IRS, filing Form 14039, placing fraud alerts with credit bureaus, and reviewing your credit reports. The resolution process is lengthy, sometimes extending to six months or longer, and the IRS investigation is independent of any criminal investigation. You must actively protect your credit during this time, monitor your accounts, and coordinate with both federal and state tax authorities.
Don’t rely on the IRS or law enforcement to fully solve the problem. Instead, take control of the process by documenting everything, responding promptly to all IRS correspondence, and proactively monitoring your financial accounts and credit file. The victims who recover fastest are those who treat tax identity theft as an urgent financial matter rather than waiting passively for government agencies to resolve it.