The IRS Identity Protection PIN: The Free Step That Blocks Tax Identity Theft

Tax identity theft is simpler than most people assume. A thief gets hold of your Social Security number, files a return before you do, and collects your refund. By the time you try to file, the IRS already has one on record for your SSN. What follows is months of paperwork, delays, and frustration.

The IRS built a direct counter to this: the Identity Protection PIN, or IP PIN. It's a free six-digit number that ties to your SSN and must appear on any federal return filed under your name. Without it, a fraudulent e-filed return gets rejected, and a paper return gets extra scrutiny and delays.

More than 10.4 million taxpayers had an IP PIN as of July 2024, according to the IRS Taxpayer Advocate. If you haven't, this guide covers everything you need to get started.

What is tax identity theft, and why does it happen?

Tax identity theft works partly because the IRS often doesn't have all wage and income data when filing season opens, according to a May 2026 Treasury Inspector General for Tax Administration report. Thieves try to file in that gap.

They don't need your W-2 or your bank login. A name, a Social Security number, and a date of birth are enough to build a fraudulent return around made-up withholding figures. The refund goes to a prepaid card or account they control. You find out when your real return bounces.

The FTC received 1.1 million identity theft reports in 2024, and employment- and tax-related identity theft was among the common types. Consumers also reported losing $12.5 billion to fraud that year (FTC). The financial damage is real, but so is the time cost: the IRS says resolving identity theft cases often takes well over a year, with an average around 580 days.

The IP PIN makes that scheme much harder at step one.

What is an IRS IP PIN, and how does it work?

An IP PIN is a six-digit number assigned by the IRS that must be included on your federal tax return. It's known only to you and the IRS. Think of it as a second lock on your SSN, one that only you have the key to.

Here's what it does in practice: if someone tries to e-file a return using your Social Security number without your IP PIN, the return is rejected automatically. If they submit a paper return, the IRS may take longer to process it and review your identity before paying a refund. Either way, it's much harder for the fraudulent return to go through.

The program started as a victims-only tool, but the IRS opened it to all taxpayers as a voluntary opt-in in 2021. Today, any U.S. taxpayer with an SSN or Individual Taxpayer Identification Number (ITIN) who can verify their identity can enroll, online or through the IRS's mail and in-person options. You don't need to have been a victim of identity theft to participate.

Your IP PIN renews every year. The IRS issues a new one each year. Confirmed identity theft victims get theirs by mail on a CP01A notice, typically from mid-December to early January. Everyone else retrieves the new PIN from their online account starting in mid-January.

Who can get an IP PIN?

Enrollment is open to any taxpayer who meets the following criteria, per the IRS:

• You have a valid SSN or ITIN
• You can verify your identity through IRS Online Account (the fastest path, using ID.me)

Confirmed identity theft victims are automatically enrolled and receive their IP PIN by mail on a CP01A notice, typically from mid-December to early January. For everyone else, enrollment is voluntary and done online through your IRS Online Account, and you can enroll even if you aren't required to file.

A parent or guardian can also request an IP PIN for a dependent who has their own SSN or ITIN. Each person gets their own PIN. Dependents under 18 can't enroll through a parent's Online Account, so a parent or guardian files Form 15227 or visits a Taxpayer Assistance Center in person, while dependents 18 or older can enroll online themselves. This matters because children's SSNs are often stolen and misused for years before anyone notices.

If you can't verify your identity online, the IRS offers two alternatives. You can file Form 15227 if your adjusted gross income on your last return was below $84,000 (single) or $168,000 (married filing jointly) on the 2026 form, and you have a phone, since the IRS calls to verify your identity. Or you can book an appointment at a Taxpayer Assistance Center and bring two forms of ID, including one federal or state photo ID.

How to get your IP PIN: step by step

The online route is the fastest. Here's how it works:

1. Go to IRS.gov and create or sign into your IRS Online Account. You'll be directed through ID.me to verify your identity.
2. Navigate to your profile and select "IP PIN." The option appears once your identity is verified.
3. Retrieve your six-digit IP PIN. Write it down and store it somewhere secure. Do not share it with anyone except your tax preparer.
4. Use it when you file. Enter the IP PIN in the designated field on your federal return. Most major tax software includes a specific IP PIN field.

Your IP PIN is valid for one calendar year. Starting in mid-January, log back into your IRS Online Account to retrieve the new one before you file.

How to use your IP PIN when filing

Every family member with an IP PIN needs to include their number on the return. If you're filing jointly and both spouses have an IP PIN, both numbers must appear.

When using tax software, look for a field labeled "Identity Protection PIN" or "IP PIN" near the personal information section. If you're working with a tax preparer, share your IP PIN with them directly. Do not include it in an email unless the message is encrypted.

If you leave your IP PIN off a paper return, the IRS may take longer to process it or review your identity first. For e-filed returns, a missing IP PIN means the return is rejected until you resubmit with the correct number. The IP PIN goes on federal returns only, so don't enter it on a state return.

Lost your IP PIN? Log into your IRS Online Account to retrieve it. The online tool is generally available from mid-January to mid-November. If you can't access your account, call the IRS Identity Protection Specialized Unit at 1-800-908-4490.

Other steps that help protect your tax identity

The IP PIN is one of the strongest steps you can take before filing season. It's also not the only one.

• File early. The simplest way to beat a fraudulent return is to file yours first, before a thief gets the chance.
• Monitor your credit. A stolen SSN often shows up in other places before it shows up on a tax return. Check your credit report regularly, especially in the months leading up to filing season.
• Use a secure network when filing. Avoid filing your return on public Wi-Fi. If you need to file on the go, use mobile data or a network you trust.
• Watch out for IRS-themed scams. Phishing emails and fake texts that claim to be from the IRS are common during filing season. The IRS doesn't make first contact by email or social media, and sends texts only with your permission. If you get one, don't click anything.

Conclusion

Tax identity theft is common, the cleanup is slow, and the prevention is free. An IRS IP PIN helps block a common form of tax fraud at the source, and most people can enroll online through their IRS Online Account. Whether or not you've been a victim before, enrolling before filing season is one of the most practical things you can do to protect your finances.

Guardio doesn't issue or manage an IP PIN, but it covers a related risk. Browsing protection on your computer and phone blocks phishing and scam sites before they open and explains why, and Email Security flags phishing emails that get past the Gmail spam filter. That matters during filing season, when IRS-themed phishing is common. No tool catches everything.

Get a free security scan with Guardio today and stay protected.