Tax identity theft occurs when someone uses your Social Security number or personal information to file a false tax return in your name

A thief files a return claiming refunds or credits they are not may have access to to, and the IRS sends the refund to an account or address the thief controls. You discover the problem when you file your own return and the IRS rejects it because a return was already filed under your number that year. The theft does not require access to your actual tax documents — only your name, Social Security number, and sometimes a date of birth.

The IRS processes millions of returns each year and cannot verify every Social Security number before issuing refunds. This gap is what makes tax identity theft possible. Once a false return is filed, unwinding it takes months and involves paperwork with both the IRS and sometimes law enforcement.

Key Takeaways

  • Tax identity theft happens when someone files a return using your Social Security number to claim a refund you did not earn.
  • Thieves often obtain Social Security numbers through data breaches, phishing emails, or unsecured documents like mail or trash.
  • You may not know you are a victim until you file your own return and the IRS tells you one was already filed under your number.
  • Filing your return early in the tax season reduces the window for a thief to file first under your number.
  • If you suspect theft, contact the IRS Identity Theft Hotline at 1-800-908-4490 and file a report with the Federal Trade Commission.

How thieves obtain your Social Security number

Your Social Security number is the most valuable piece of information a tax thief needs. They acquire it through several common routes. Data breaches at retailers, healthcare providers, employers, and government agencies expose millions of Social Security numbers at once. A single breach can put your number in circulation for years.

Phishing emails that look like they come from your bank, employer, or the IRS itself trick you into entering your Social Security number on a fake website. Mail theft — stealing documents from your mailbox or trash — gives thieves access to tax forms, W-2s, and other papers with your number printed on them. Public records, including court documents and property records, sometimes contain Social Security numbers.

Thieves also buy stolen Social Security numbers in bulk from criminal marketplaces online. A single number may cost only a few dollars, making it cheap to attempt many fraudulent returns.

What happens when a thief files under your number

The thief prepares a false tax return claiming a large refund. They may claim dependents you do not have, inflated business losses, or tax credits like the Earned Income Tax Credit that they do not may have access to for. They file electronically, which is fast, and provide a bank account or address where they want the refund sent.

The IRS processes the return and issues the refund without verifying that the person filing is actually you. The refund goes to the thief's account or a prepaid card. Weeks or months later, you file your own legitimate return using the same Social Security number. The IRS system flags the duplicate and rejects your return, or holds it while investigating.

At this point you learn that a return was already filed in your name. The IRS will not process your return until the false one is resolved. This can delay your legitimate refund by months and require you to prove your identity and income to the IRS.

Why the IRS cannot stop all false returns before issuing refunds

The IRS receives over 150 million returns each year. It does not verify the identity of the person filing before issuing refunds on most returns. The agency relies on matching information like Social Security numbers, names, and addresses against its own records, but this system has gaps.

A thief who has your Social Security number and knows your name can pass basic matching checks. The IRS does not call you to confirm that you filed a return or that the refund amount is correct. It simply processes the return and sends the money. By the time the IRS discovers the fraud — usually when you file your own return — the thief has already received the refund.

The IRS has increased identity verification requirements in recent years, particularly for returns claiming certain credits. However, these checks still do not catch every false return before refunds are issued.

Who is most at risk for tax identity theft

Anyone with a Social Security number is at risk, but certain groups face higher danger. Children are frequent targets because their Social Security numbers are rarely used for tax purposes, so the theft may go unnoticed for years. Elderly people and retirees are targeted because they file simpler returns that are easier to forge convincingly.

People who have experienced data breaches — such as those affected by major retail or healthcare breaches — face elevated risk because their Social Security numbers are already in criminal circulation. Homeless individuals and people experiencing housing instability are vulnerable because they may not file taxes regularly and may not discover the theft quickly.

Immigrants and people with limited English proficiency are sometimes targeted because language barriers can make it harder to navigate the IRS process to report and resolve the theft.

Steps to reduce your risk of tax identity theft

File your tax return as early in the season as possible. The earlier you file a legitimate return under your Social Security number, the harder it is for a thief to file first. Most tax identity theft is discovered when the victim files their return and finds one already filed.

Protect your Social Security number in daily life. Do not carry your Social Security card in your wallet. Shred documents containing your number before discarding them. Do not provide your Social Security number over the phone unless you initiated the call to a known organization. Be cautious with emails claiming to be from the IRS, your employer, or your bank — the IRS does not initiate contact by email.

Monitor your credit reports for accounts you did not open. You can obtain free credit reports from each of the three major credit bureaus once per year at annualcreditreport.com. Consider placing a credit freeze with the bureaus, which prevents new accounts from being opened in your name without your permission.

What to do if you suspect tax identity theft

Contact the IRS Identity Theft Hotline at 1-800-908-4490. Have your Social Security number, date of birth, and filing status ready. The IRS will tell you whether a return was filed under your number and will walk you through next steps. You may be asked to file Form 14039, Identity Theft Affidavit, which tells the IRS you did not file the return in question.

File a report with the Federal Trade Commission at IdentityTheft.gov. This creates an official record and may help you if you need to dispute fraudulent accounts or charges. Keep copies of all correspondence with the IRS and the FTC.

If you have already filed your own return and it was rejected because of the theft, the IRS will work to resolve the duplicate filing. This process typically takes several months. Do not file a paper return as a workaround — the IRS will reject it as well until the false return is cleared from the system.

Frequently Asked Questions

Can a thief file a tax return using my Social Security number if I am still alive?

Yes. Tax identity theft does not require your death. A thief simply needs your Social Security number and can file a return claiming to be you. The IRS does not verify that the person filing is actually the person whose number is on the return before processing most returns.

Will I owe taxes on the refund the thief received?

No. You are not responsible for taxes on money stolen in your name. Once the IRS confirms the return was fraudulent, the false refund is treated as a criminal matter, not a tax debt you owe.

How long does it take to resolve tax identity theft?

Resolution typically takes three to six months, though complex cases can take longer. The IRS must investigate the false return, confirm your identity, and process your legitimate return. During this time your refund will be delayed.

Can I prevent tax identity theft completely?

No method is foolproof, but filing early and protecting your Social Security number significantly reduce your risk. The IRS has also expanded identity verification for certain high-risk returns, which catches some fraud before refunds are issued.

What if the thief used my Social Security number to open credit accounts, not just file taxes?

Tax identity theft and credit identity theft are separate crimes that often happen together. Report both to the FTC at IdentityTheft.gov and contact your banks and credit card companies directly. You may need to dispute fraudulent accounts and place a fraud alert on your credit file.