Tax Identity Theft Lawyer

Tax identity theft occurs when someone uses another person’s Social Security number or other identifying information to file a fraudulent tax return, claim a refund, or otherwise misuse that person’s identity within the tax system.

A victim may discover the fraud only after attempting to file a legitimate return and learning that the IRS has already received one using the same Social Security number. Others first become aware of the problem after receiving an IRS notice concerning a return they never filed.

Tax identity theft is one form of identity theft, but resolving it can require dealing directly with the IRS in addition to addressing the underlying compromise of personal information.

Net Law Advocates represents individuals nationwide in identity theft, data breach, and privacy matters. When tax identity theft follows a data breach or another incident involving Social Security numbers and personal information, determining where the information came from may also be relevant to potential legal claims.

What Is Tax Identity Theft?

Tax-related identity theft generally occurs when someone uses another person’s stolen identifying information to file a fraudulent tax return.

The Social Security number is particularly important because federal tax returns are tied to a taxpayer’s SSN or Individual Taxpayer Identification Number.

A thief who obtains enough identifying information may attempt to file a return under the victim’s identity and direct a fraudulent refund elsewhere.

The IRS defines tax-related identity theft as the use of a taxpayer’s stolen SSN to file a tax return claiming a fraudulent refund.

The victim may still need to file a legitimate return. The fraudulent filing creates the additional problem of proving which return actually belongs to the taxpayer.

How Do People Discover Tax Identity Theft?

One of the clearest warning signs occurs during tax filing.

You prepare and electronically submit your federal return, but the return is rejected because another return has already been filed using your Social Security number.

That does not necessarily mean the IRS paid a fraudulent refund. It can, however, indicate that someone submitted a return using your identity.

Other warning signs can include:

• An IRS notice concerning a tax return you did not file
• A request from the IRS to verify a return you do not recognize
• A tax transcript containing unfamiliar information
• A refund associated with a return you did not submit
• Problems filing because your SSN has already been used
• A dependent’s SSN being used on another tax return without authorization
• Changes to an IRS online account that you did not make

The IRS currently uses several notices when it needs taxpayers to verify their identity and determine whether a return filed under their SSN or ITIN is legitimate.

Why Social Security Numbers Matter in Tax Identity Theft

A Social Security number connects an individual to federal tax records.

Someone who obtains an SSN along with a name, date of birth, address, or other identifying information may have information useful for impersonating the taxpayer.

This creates a direct relationship between tax identity theft and Social Security identity theft.

The difference is scope.

Social Security identity theft includes many potential uses of a stolen SSN, such as credit fraud, employment misuse, or benefits fraud. Tax identity theft specifically concerns misuse within the tax system.

The same stolen SSN can potentially be used for more than one purpose.

How Can Tax Identity Theft Follow a Data Breach?

Employers, payroll companies, financial institutions, healthcare organizations, government entities, educational institutions, and other organizations may maintain Social Security numbers and related identifying information.

If that information is compromised, it may potentially be used for several forms of identity theft.

Tax identity theft is one possibility.

An SSN exposed in a data breach does not mean a fraudulent tax return will be filed. Exposure and actual misuse are separate events.

But when a person receives a breach notice identifying an SSN as compromised and later discovers a fraudulent tax return, the relationship between those events may warrant investigation.

What Should You Do If Someone Filed a Tax Return Using Your Identity?

The correct response depends partly on how the IRS identified the problem.

Follow the Instructions in Any IRS Notice

If the IRS sends a notice asking you to verify your identity or a tax return, follow the instructions provided with that notice.

The IRS currently offers an Identity and Tax Return Verification Service for taxpayers who receive certain verification notices. If the taxpayer did not file the return at issue, the service allows the taxpayer to tell the IRS that someone may have used their information.

Do not ignore an IRS identity-verification notice simply because you know you did not file the questionable return.

Telling the IRS that the return is fraudulent is part of resolving the problem.

File Your Legitimate Tax Return

Identity theft does not eliminate your obligation to file a legitimate return when one is otherwise required.

A fraudulent return may prevent electronic filing, so the process for submitting the correct return can differ depending on the circumstances.

Follow current IRS instructions or the directions contained in the notice you receive.

Preserve the IRS Correspondence

Keep every notice, letter, tax transcript, rejected-return message, and other document connected to the identity theft.

Those records can help establish when the fraud was discovered and how the stolen identity was used.

Do You Need to File IRS Form 14039?

Not everyone who experiences tax identity theft should automatically file Form 14039, Identity Theft Affidavit.

This is important because older identity-theft guidance often instructed victims broadly to complete the form.

Current IRS guidance is more specific.

As of 2026, the IRS states that most people do not need to file Form 14039. Among other circumstances, a person generally should not file it if the IRS has already sent a relevant identity-theft letter or notice or if the taxpayer used, or was instructed to use, the Identity and Tax Return Verification Service.

The current February 2026 version of Form 14039 can be appropriate when the IRS instructs the taxpayer to file it, when the taxpayer cannot use the verification service, or when the taxpayer wants to report possible tax-related identity theft that the IRS does not already have on file, including certain situations involving a data breach.

Following the IRS procedure applicable to your specific situation can help avoid unnecessary delays.

What Is an IRS Identity Protection PIN?

An Identity Protection PIN, commonly called an IP PIN, is a six-digit number used to help prevent someone else from filing a federal tax return using your SSN or ITIN.

The number allows the IRS to authenticate the legitimate taxpayer.

An IP PIN is valid for one calendar year, and the IRS generates a new one each year.

The program is no longer limited to confirmed identity-theft victims. Anyone with an SSN or ITIN who can successfully verify their identity can enroll.

An IP PIN can therefore be useful both after tax identity theft and proactively when someone knows that sensitive identifying information has been compromised.

Does an IP PIN Stop Other Forms of Identity Theft?

No.

An IP PIN is designed specifically to help protect against fraudulent federal tax filings.

It does not prevent someone from using a Social Security number to apply for credit, seek employment, open financial accounts, or engage in other forms of identity theft.

Someone whose SSN was compromised may therefore need to consider protections outside the tax system as well.

Credit monitoring, fraud alerts, credit freezes, account security, and other measures address different risks.

Can Someone Use a Child’s Social Security Number on a Tax Return?

Yes.

Tax identity theft can affect dependents as well as adults.

A parent may discover the problem when attempting to claim a child and learning that the child’s Social Security number was already used on another return.

The current IRS Form 14039 specifically addresses situations involving a dependent whose SSN was used without permission or who was fraudulently or incorrectly claimed as a dependent.

Children and other dependents can also receive IP PINs. Current IRS rules require IP PINs for qualifying dependents to be included where applicable on electronically filed returns.

Because children may not otherwise use their Social Security numbers for credit or employment, some forms of identity misuse can remain undetected for significant periods.

Tax Identity Theft and Employment Identity Theft Can Overlap

Tax records can sometimes reveal a different form of Social Security number misuse.

Someone may use another person’s SSN for employment rather than to file a fraudulent tax return.

The IRS recognizes employment-related identity theft as a separate issue and currently uses notices to alert some taxpayers when its records indicate that another person may have used their SSN for employment.

The distinction matters.

A fraudulent return involves someone filing taxes using the victim’s identity. Employment identity theft involves someone using the victim’s SSN for employment purposes.

Both may affect tax records, but they are different forms of misuse.

Tax Identity Theft Can Be Part of a Larger Pattern

A fraudulent tax return may not be the only way a stolen identity is being used.

Someone who possesses a Social Security number, date of birth, address, and other identifying information may potentially use that information for financial fraud or other forms of impersonation.

After discovering tax identity theft, it can therefore be appropriate to review credit reports and financial accounts for additional suspicious activity.

An isolated fraudulent tax return and a broader identity-theft event may require different recovery steps.

What Information Should You Preserve?

Tax identity theft can generate records from the IRS, tax-preparation software, credit bureaus, breached organizations, and other sources.

Preserve documentation such as:

• IRS notices and letters
• Rejected electronic filing messages
• Copies of legitimate tax returns
• Tax transcripts containing suspicious information
• Form 14039, if applicable
• IP PIN correspondence
• Data breach notification letters
• FTC identity-theft documentation
• Credit reports
• Records of other identity fraud
• Communications with tax preparers
• Records showing expenses or other losses associated with the incident

Keep the original breach notice when tax identity theft follows a known data breach.

The information listed as compromised in that notice may later be relevant when evaluating how the thief obtained the identity information.

Can You Obtain a Copy of the Fraudulent Tax Return?

Identity-theft victims may be able to request certain information from a fraudulent federal tax return filed using their name and Social Security number.

The IRS provides Form 4506-F, Request for a Copy of a Fraudulent Tax Return, for qualifying identity-theft victims or authorized representatives seeking a redacted copy of the fraudulent return. The availability of information is subject to IRS disclosure rules.

A fraudulent return may contain information that helps a victim understand how the stolen identity was used.

Who May Be Responsible When Tax Identity Theft Follows a Data Breach?

The person who fraudulently files the return is responsible for the identity theft itself.

A separate legal issue is whether another organization may bear civil responsibility for the compromise of the personal information used to commit that fraud.

Suppose an employer experiences a breach involving employees’ names, Social Security numbers, addresses, and tax information. An affected employee later discovers that someone filed a fraudulent return using the employee’s identity.

An attorney evaluating a potential claim may examine:

• What information was compromised
• Whether the information was accessed or acquired
• Whether the breached information matches what was used in the fraud
• When the breach and fraudulent filing occurred
• How the organization protected the information
• Whether a vendor or another party was involved
• What legal duties applied
• What harm resulted from the identity theft

The sequence can be important, but a fraudulent tax return occurring after a breach does not by itself establish that the breach caused the identity theft.

Can You Sue After Tax Identity Theft?

Potentially, depending on how the identity information was obtained and who may be legally responsible.

A claim against an organization that experienced a data breach requires analysis beyond the existence of a fraudulent tax return.

The applicable law, the organization’s conduct, the information involved, causation, and the victim’s injuries can all matter.

Actual misuse of a Social Security number to file a fraudulent return may provide evidence of concrete identity theft, but it does not automatically establish liability against the company or organization that previously possessed the information.

Different state and federal laws may also affect what claims and remedies are available.

What Harm Can Tax Identity Theft Cause?

The consequences can vary.

A victim may experience delays in processing a legitimate return or refund, time spent resolving the identity theft, expenses related to the recovery process, and other effects.

The stolen information may also be used for additional forms of identity theft.

Not every inconvenience or expense is necessarily recoverable in a civil lawsuit. Available damages depend on the legal claim, jurisdiction, causation, and circumstances of the case.

Documenting the consequences can nevertheless be important.

When May Attorney Review Be Appropriate?

Attorney review may be worthwhile when tax identity theft follows a known breach involving a Social Security number or other information capable of identifying the taxpayer.

Review may be particularly useful when there is evidence of additional identity theft, significant financial consequences, or a close factual relationship between the information compromised in a breach and the information later used for fraud.

The purpose is to investigate the source of the information, determine whether another party may bear legal responsibility, and evaluate whether applicable law provides a viable civil claim.

Speak With Net Law Advocates About Tax Identity Theft

A fraudulent tax return can be one indication that a Social Security number or other sensitive identity information has moved beyond exposure and is actually being misused. Resolving the tax issue with the IRS is important, but when the information came from a data breach or another security failure, there may also be questions about how it was compromised.

Net Law Advocates represents plaintiffs nationwide in identity theft, data breach, and privacy matters. If someone used your identity to file a fraudulent tax return and you believe compromised personal information contributed to the fraud, contact Net Law Advocates at 888-913-2318 for a free, confidential consultation.