Tax Refund Theft
How thieves use a stolen Social Security number to file fraudulent tax returns — and how to lock your tax identity so it can never happen to you.
How the Scam Works
Tax refund theft happens when a criminal files a fraudulent tax return using your Social Security number, claims a large refund, and has the IRS send it to their bank account or prepaid debit card. By the time you go to file your own return, the IRS rejects it because — according to their records — you have already filed.
The thief usually gets your information from a data breach, a phishing email, or by purchasing your Social Security number on the dark web. They file early — often as soon as the IRS opens filing in late January — because the first return submitted with a given SSN is the one the IRS pays. Their fake return claims a large refund using fabricated income, deductions, and credits. The money is loaded onto a prepaid debit card or sent to a temporary bank account that closes within days.
Victims typically discover the fraud months later when they try to file their own return and receive a rejection notice (IRS Reject Code 0902 or 0510). At that point, recovering your refund requires filing a paper return, an Identity Theft Affidavit (Form 14039), and waiting 9 to 18 months for the IRS to investigate. During this time, your refund is held back, and the criminal usually escapes prosecution.
Tax-related identity theft surged after the IRS made e-filing universal. The FTC reports that adults 60+ are three times more likely to be victims of tax-refund theft than younger taxpayers. The good news: there is a free federal tool — the IRS Identity Protection PIN (IP PIN) — that essentially eliminates this risk.
Real-World Example
💵 Real Case
A 71-year-old retired teacher in Ohio filed her 2023 tax return in March 2024 and received an immediate rejection from her tax software: "A return with this SSN has already been filed." Someone had filed a fraudulent return in January claiming a $7,400 refund — using a made-up "tax preparer fee" deduction and a fake W-2 for a job she had never had. The money was loaded onto a Green Dot prepaid card. Recovering her real refund took 14 months, three identity-theft affidavits, and ten phone calls to the IRS Identity Protection Specialized Unit. She now uses an IP PIN every year and has never had another problem.
Warning Signs
- •Your e-filed tax return is rejected because someone already filed with your SSN.
- •You receive an IRS letter about a tax return you didn't file — often a Notice CP01A, CP01H, 5071C, 5447C, or 4883C.
- •You get a W-2 or 1099 from an employer you never worked for.
- •You receive a tax transcript by mail you didn't request.
- •Your refund is delayed for "additional review" with no clear reason.
- •An "IRS letter" arrives demanding payment for taxes owed on income you never earned.
The IRS IP PIN — Your Best Defense
🛡️ Use the Free IRS Identity Protection PIN
The IRS Identity Protection PIN (IP PIN) is a 6-digit number known only to you and the IRS. It changes every year. No tax return can be filed in your name without it. Sign up free at IRS.gov/IPPIN. Once enrolled, you receive a new PIN every January. This essentially eliminates tax-refund theft.
How to Protect Yourself
- ✓Get an IRS IP PIN at IRS.gov/IPPIN — free, takes 15 minutes, eliminates this scam.
- ✓File your taxes early. Beat the criminals to the punch.
- ✓Never give your SSN over the phone unless you initiated the call.
- ✓Freeze your credit at all three bureaus (Equifax, Experian, TransUnion). This won't stop tax fraud but stops the related identity theft.
- ✓Shred tax documents. Old returns, W-2s, and 1099s contain your SSN.
- ✓Watch out for phishing emails claiming to be from the IRS, TurboTax, or H&R Block.
- ✓If you're a victim: Complete IRS Form 14039 (Identity Theft Affidavit) and report at IdentityTheft.gov. Call the IRS Identity Protection Specialized Unit at 1-800-908-4490.
Think Your Identity Is Compromised?
Use our free Scam Checker to instantly analyze any phone number, email, or website for known scam patterns.
🔍 Check It Now →