If your Social Security number is compromised and you know or suspect you are a victim of tax-related identity theft, the IRS recommends these actions:

• Respond immediately to any IRS notice: Call the number provided.
• If your e-filed return is rejected because of a duplicate filing under your Social Security number, or if the IRS instructs you to do so, complete IRS Form 14039, Identity Theft Affidavit (PDF).  Use a fillable form at IRS.gov, print, then attach the form to your return and mail your return according to instructions.
• Visit IdentityTheft.gov for steps you should take right away to protect yourself and your financial accounts.

See Identity Theft Victim Assistance: How It Works for more information about how the IRS can help you.

If you previously contacted the IRS and did not have a resolution, contact us for specialized assistance at 1-800-908-4490. We have teams standing by to help you.

Fraudulent Returns

If you believe someone has filed a fraudulent return in your name, you can get a copy of the return. See Instructions for Requesting a Copy of Fraudulent Returns.

Dependents

If you e-file your tax return and get a message telling you that a dependent on your return has been claimed on another tax return or their own, or if you receive an IRS Notice CP87A, you’ll need to find out why someone else claimed your dependent. Learn more at What to Do When Someone Fraudulently Claims Your Dependent.

Not all data breaches or computer hacks result in tax-related identity theft. It’s important to know what type of personal information was stolen.

If you’ve been a victim of a data breach, keep in touch with the company to learn what it is doing to protect you and follow the “Steps for victims of identity theft.” Data breach victims should submit a Form 14039, Identity Theft Affidavit (PDF), only if your Social Security number has been compromised and your e-filed return was rejected as a duplicate or the IRS instructs you to file the form.

If you believe someone has been using your Social Security number for employment purposes (as opposed to filing fraudulent tax returns for refunds in your name) see our Guide to Employment-Related Identity Theft.

The IRS, state tax agencies and the tax industry need your help to fight back against identity thieves. See Taxes. Security. Together.

Some tips:

• Use security software and make sure it updates automatically; essential tools include virusVirus A computer program that can replicate itself and spread from computer to computer or file to file. It comes to life only when you take a specific action, such as running a particular program./malwareMalware Short for "malicious software," this term means computer viruses and other types of programs that cybercriminals use to disrupt or access your computer, typically with the aim of gathering sensitive files and accounts. protection and a firewall.
• Use encryption programs to protect sensitive digital data.
• Treat your personal information like cash; don’t leave it lying around.
• Use strong, unique passwords; consider a password manager.
• Use multi-factor authentication when it’s offered.
• Give personal and financial information only over encrypted websites; look for “https” addresses.
• Back up your files.

Identity thieves use phishing emails to trick users into giving up passwords and other information. Don’t take the bait. Look for emails that:

• Pose as a trusted source such as a bank or a tax provider.
• Contain an urgent message (such as “Update your account now!”) with instructions to open a link or attachment.

And remember these good guidelines:

• Never download software or appsApps Applications or Apps An application (software), commonly referred to as an ‘app’ is a program on a computer, tablet, mobile phone or device. Apps are designed for specific tasks, including checking the weather, accessing the internet, looking at photos, playing media, mobile banking, etc. Many apps can access the internet if needed and can be downloaded (used) either for a price or for free. Apps are a major point of vulnerability on all devices. Some are designed to be malicious, such as logging keystrokes or activity, and others can even transport malware. Always be careful about any app you are thinking about installing. from pop-up advertising.
• Talk to family about online security for their computers and their mobile devices.

Report suspicious online or emailed phishing scams to phishing@irs.gov.

Report IRS impersonationImpersonation An impersonator is someone who imitates or copies the behavior or actions of another. There are many reasons for impersonating someone, such as: part of a criminal act such as identity theft, online impersonation scam, or other fraud. This is usually where the criminal is trying to assume the identity of another, in order to commit fraud, such as accessing confidential information or to gain property not belonging to them. Also known as social engineering and impostors. scams to the Treasury Inspector General for Tax Administration’s IRS Impersonation Scams Reporting.

Create strong passwords that follow these simple guidelines:

• Use long phrases that you can remember, combined with characters and numbers. Example: SomethingYouCanRemember@30.
• Use a different password for each account and use a password manager.
• When possible, don’t use your email address as your login ID.
• Use two-factor authentication whenever it’s offered. This is particularly important for protecting your email, financial and social media accounts.

If you filed a federal tax return last year from one of 20 locations, you may be eligible to opt-in to the IP PIN program. The IP PIN is a 6-digit PIN that offers additional protection for your Social Security number on your tax return.

To obtain an IP PIN, you must be able to verify your identity through a rigorous Secure Access process. Review the Secure Access requirements before you start to learn more about the IP PIN and how to use the Get an IP PIN tool.

At the start of the 2020 filing season, taxpaying residents of these locations will be eligible for the IP PIN program: Arizona, California, Colorado, Connecticut, Delaware, District of Columbia, Georgia, Florida, Illinois, Maryland, Michigan, Nevada, New Jersey, New Mexico, New York, North Carolina, Pennsylvania, Rhode Island, Texas, and Washington.