What Is Tax Identity Theft and How Can It Occur?

Tax identity theft happens when someone files a federal tax return using your Social Security number before you do — and collects your refund before you even know a return went out. It’s not rare, and it’s not slowing down. The IRS’s own fraud filters flagged 1.3 million returns worth $9.9 billion in the 2026 filing season alone, roughly double what they caught the year before. Here’s exactly what it is, every real way it happens, and what to do if it’s already happened to you.

Tax Identity Theft — Key Facts

Question	Answer
What it is	Someone uses your stolen SSN or ITIN to file a tax return and claim your refund
Returns flagged by IRS fraud filters, 2026 filing season	1.3 million, worth $9.9 billion in claimed refunds
Confirmed identity theft cases, 2026 filing season	About 19,000, protecting $138.5 million
Confirmed identity theft cases, 2025 filing season	About 6,000, protecting $53.9 million
FBI complaint trend	Over 1,000 tax-related identity theft complaints in one year, up 26% year over year
Average time to resolve a confirmed case	About 20 months (National Taxpayer Advocate)
Main federal protection tool	IRS Identity Protection PIN (IP PIN) — a 6-digit number only you and the IRS know
Form to file if your e-filed return gets rejected	IRS Form 14039, Identity Theft Affidavit
Last Updated	September 17, 2026

What Is Tax Identity Theft?

Tax identity theft is when someone else uses your Social Security number (or your Individual Taxpayer Identification Number) to file a federal — or state — tax return in your name, usually with a made-up W-2 attached, so the refund gets sent to them instead of you. It’s not the same as someone opening a credit card in your name. The damage doesn’t show up on your credit report. It shows up when the real you tries to file and the IRS rejects your return, because as far as its system is concerned, you already filed.

The IRS caught this happening on a large scale in the 2026 filing season. Its 294 identity theft filters flagged 1.3 million returns claiming $9.9 billion in refunds — nearly double the 678,000 returns and $5.5 billion flagged the year before. Of those, about 19,000 turned out to be confirmed identity theft, protecting $138.5 million that would have gone to thieves instead of the Treasury.

1. Data Breaches at Employers, Banks, and Tax Preparers

Your SSN doesn’t have to be stolen from you directly. It just has to sit in a database somewhere that gets breached — your employer’s payroll system, your bank, your tax preparer’s office, your health insurer. Once a thief has your name, SSN, and date of birth, that’s often all it takes to fabricate a return that looks legitimate enough to clear initial IRS screening. You did nothing wrong here, and there’s nothing about your own habits that would have prevented it.

2. IRS and Tax-Software Phishing Emails and Texts

A message that looks like it’s from the IRS or a tax-prep company, warning about a problem with your refund or account, with a link asking you to “verify” your SSN or login. The IRS has been blunt about this for years: it does not initiate contact by email, text, or social media to request personal or financial information. If a message asking you to “confirm” your SSN shows up in your inbox during filing season, that’s the scam, not a fix for one.

3. W-2 Phishing Aimed at HR and Payroll Departments

This one skips you entirely and goes straight for your employer. A scammer sends an email that looks like it’s from a company executive, asking payroll or HR to send over “the W-2s for all employees” for some urgent review. If the request works, every employee at that company has their SSN and income data exposed in one shot — through no mistake of their own. It’s a version of the same social engineering that fuels broader Social Security number theft, just aimed at the moment your W-2 exists in one convenient spreadsheet.

4. “Ghost” Tax Preparers

A paid preparer is legally required to sign your return and include their Preparer Tax Identification Number (PTIN). A “ghost” preparer does the opposite on purpose: they fill out your return, often inflating your refund with fabricated income or credits, then tell you to sign it yourself and file it as if you prepared it alone. When it unravels, there’s no signature tying them to the fraud — and you’re the one facing IRS penalties, interest, and possibly an audit for numbers you never actually saw calculated. The IRS has prosecuted ghost preparers criminally, including one in Georgia ordered to pay over $540,000 in restitution after a scheme like this.

5. Unemployment Benefits Fraud (Form 1099-G)

If you get a Form 1099-G reporting unemployment compensation you never applied for or received, someone filed a fraudulent unemployment claim using your identity — and the state, not knowing that, reported the “income” to the IRS under your SSN. This isn’t hypothetical; it happened at scale during the pandemic and states are still cleaning up flagged accounts. The fix here is different from most tax identity theft: you contact the state agency for a corrected 1099-G, not the IRS, and you generally don’t need to file Form 14039 for this specific problem unless a separate return gets rejected.

6. Dark Web Resale of Old Breach Data

A breach from years ago doesn’t expire. Stolen SSNs get bundled, sold, and resold on dark web marketplaces long after the original incident made headlines — which is exactly why a data breach notice you filed away in 2022 can still turn into a fraudulent tax return in 2026. The information sits dormant until it’s profitable to use.

7. Stolen Mail and Discarded Documents

W-2s, 1099s, and old tax returns mailed to your home or thrown out intact all carry your SSN in plain text. Mail theft targeting apartment complexes and unlocked boxes spikes every January and February for exactly this reason — that’s when W-2s and 1099s are landing in mailboxes across the country.

8. A Dependent’s Social Security Number Claimed by Someone Else

Sometimes the theft isn’t about your own SSN — it’s about your child’s or another dependent’s. If someone else claims your dependent on their return before you file (an ex-partner, a relative, or a stranger using a stolen number), your e-filed return gets rejected the moment you try to claim that same dependent, because the IRS system only allows one claim per SSN per tax year.

9. Business and EIN-Based Tax Identity Theft

Identity theft doesn’t stop at individuals. Thieves also steal an Employer Identification Number (EIN) or impersonate a business entirely to file fraudulent business tax returns or claim refunds the real business never requested. The IRS Form 14039 process explicitly covers this scenario — reporting the theft of an EIN or business name by someone else — separately from individual SSN theft.

How You’ll Actually Find Out

Almost nobody finds out about tax identity theft the way they’d expect. There’s no alert, no push notification. The signs are almost always administrative:

• Your e-filed return gets rejected because “a return already exists” for your SSN
• You get an IRS notice about a return you never filed, or income you never earned
• You receive a Form 1099-G for unemployment benefits you never applied for
• The IRS tells you that you owe additional tax, or that your refund was already issued, when you know it wasn’t

That gap — between when the fraudulent return gets filed and when you find out — is the whole reason filing early matters. It’s not a productivity tip. It’s the difference between beating the thief to the IRS system or spending the next 20 months proving you’re you.

What to Do If It Happens to You

1. File IRS Form 14039, Identity Theft Affidavit — but only if your e-filed return actually gets rejected for a duplicate SSN, or the IRS specifically instructs you to. It’s not a form to file preemptively for every kind of tax fraud (unemployment 1099-G fraud, for instance, is handled through the state instead).
2. Get an IRS Identity Protection PIN (IP PIN) at IRS.gov. It’s a six-digit number known only to you and the IRS, and once you have one, no return can be filed under your SSN without it — including by you, going forward.
3. File a report at IdentityTheft.gov, the FTC’s tool, if the theft extends beyond your taxes.
4. Contact your state unemployment agency directly if the issue is a fraudulent Form 1099-G, and request a corrected form.
5. Respond to any IRS notice promptly and keep every document — the IRS’s identity theft resolution process runs on paper trails, and missing a response window adds months to an already slow process.
6. Expect it to take a while. Confirmed identity theft cases were taking about 20 months to resolve as of the National Taxpayer Advocate’s most recent report — a number that’s frustrating but worth knowing upfront so you’re not blindsided partway through.

If your SSN was exposed through a breach unrelated to taxes, it’s worth reading how Social Security identity theft happens more broadly, since the same stolen number that shows up on a fraudulent tax return is often being used elsewhere at the same time — new credit accounts, medical claims, or a longer-running synthetic identity built around your number.

Frequently Asked Questions

What is tax identity theft?

It’s when someone uses your stolen Social Security number or ITIN to file a fraudulent tax return and claim a refund in your name, usually discovered only when your own legitimate return gets rejected.

How can tax identity theft occur?

Most often through a data breach exposing your SSN, phishing scams impersonating the IRS, W-2 phishing aimed at employers, or a dishonest “ghost” tax preparer. Stolen mail, dark web resale of old breach data, and fraudulent unemployment claims reported on Form 1099-G are also common paths.

How will I know if I’m a victim?

Usually your e-filed return gets rejected because a return already exists under your SSN, or you receive an IRS notice about income or a filing you don’t recognize.

Do I need to file Form 14039 for every kind of tax-related fraud?

No. File it if your e-filed return is rejected for a duplicate SSN or the IRS tells you to. If the issue is a fraudulent Form 1099-G for unemployment benefits, contact the issuing state agency instead — the IRS says a 14039 generally isn’t required for that specific situation.

What does an IRS Identity Protection PIN actually do?

It’s a six-digit number only you and the IRS know. Once you’re enrolled, any return filed under your SSN must include the current year’s IP PIN, or the IRS rejects it — blocking anyone else from filing under your number, even with your SSN in hand.

How long does it take to resolve a confirmed case?

About 20 months on average, according to the National Taxpayer Advocate’s most recent report to Congress — a timeline that reflects the volume of cases and the manual verification the IRS’s Identity Theft Victim Assistance unit has to do on each one.

Can filing early actually prevent this?

It won’t stop your SSN from being stolen, but it removes the window a thief needs. If your legitimate return is already filed and accepted, a later fraudulent filing under your SSN gets rejected instead of yours.

Sources Used in This Article

• Treasury Inspector General for Tax Administration — Report 2026-400-019, May 2026 (2025 and 2026 filing season identity theft filter data): https://www.oversight.gov/sites/default/files/documents/reports/2026-05/2026400019fr.pdf
• Federal Bureau of Investigation, Internet Crime Complaint Center (IC3) — Public Service Announcement on tax-related identity theft, April 2025: https://www.ic3.gov/PSA/2025/PSA250402
• IRS.gov — “Get an identity protection PIN (IP PIN)”: https://www.irs.gov/identity-theft-fraud-scams/the-identity-protection-pin-ip-pin
• IRS.gov — “Identity theft and unemployment benefits”: https://www.irs.gov/identity-theft-fraud-scams/identity-theft-and-unemployment-benefits
• National Taxpayer Advocate — Mid-Year Report to Congress (case resolution timelines): https://www.taxpayeradvocate.irs.gov/news/tax-news/national-taxpayer-advocate-issues-mid-year-report-to-congress-highlights-successful-2025-filing-season-and-challenges-for-2026/2025/06/

Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against the Treasury Inspector General for Tax Administration’s May 2026 audit report, the FBI’s Internet Crime Complaint Center, and official IRS.gov guidance, as of September 17, 2026. Last Updated: September 17, 2026.

This article is for informational purposes only and does not constitute legal or tax advice. Laws and IRS procedures vary and change. For advice about your specific situation, consult a qualified consumer protection attorney or tax professional.