IRS Identity Protection PIN: If a criminal files a fake tax return using your Social Security number this year, be prepared to wait a very long time to get your real refund back. According to a recent report from the National Taxpayer Advocate, more than 500,000 Americans are currently stuck waiting for the IRS to resolve a tax-related identity theft case, and the average resolution now takes roughly 20 months, nearly two full years. The report ties much of that delay directly to a 27% reduction in IRS staffing over the past year, a workforce collapse that’s left the agency’s identity theft unit drowning in a backlog it can’t process fast enough.
There is one tool the IRS itself consistently points to as the single most effective defense against this exact scenario: the Identity Protection PIN, commonly called an IP PIN. It’s a free, six-digit code that makes it nearly impossible for a thief to file a fraudulent return in your name, and yet a relatively small share of eligible taxpayers actually use one. With refund fraud complaints reportedly climbing and resolution times stretching toward two years, understanding exactly how to get an IP PIN, and why it matters more this year than most, is worth the ten minutes it takes to set up. We’ll be updating this article monthly as the IRS releases new IP PIN program updates and identity theft resolution data.
Latest Update: The State of Tax Identity Theft and IP PIN Protection
Here is the complete, current picture of why this protection matters right now and how the program works.
| Detail | Information |
|---|---|
| Pending tax identity theft cases (National Taxpayer Advocate report) | More than 500,000 |
| Average case resolution time | Approximately 20 months |
| IRS staffing reduction cited as a contributing factor | 27% year-over-year |
| Reported increase in tax identity theft complaints (FBI IC3) | 26% year-over-year |
| Who can get an IP PIN | Anyone with a valid SSN or ITIN who can verify their identity |
| Cost to enroll | Free |
| IP PIN validity period | One calendar year; a new one is required annually |
| Fastest enrollment method | Online via your IRS Online Account |
| Enrollment options available since 2026 | Continuous enrollment or one-time (single year) enrollment |
| Where to enroll | IRS.gov/ippin |
What Is an IRS Identity Protection PIN and Why It Matters
An Identity Protection PIN is a unique six-digit number known only to you and the IRS. Once you’re enrolled, the IRS will not accept an electronically filed tax return under your Social Security number or Individual Taxpayer Identification Number unless that exact PIN is entered correctly. Paper returns filed without a required IP PIN aren’t rejected outright, but they’re flagged for manual identity verification, which significantly slows down processing.
This matters because tax identity theft typically works through a simple, ugly mechanic: a criminal who obtains your SSN files a fraudulent return early in the season, before you file your real one, directing the fraudulent refund to an account or address they control. Once that happens, your legitimate return gets flagged as a potential duplicate, triggering the exact kind of drawn-out identity verification process now taking the IRS close to two years to resolve. An IP PIN closes that door before it opens, since a thief without your current-year PIN simply cannot get a fraudulent return accepted in the first place.
Who Is Eligible for an IP PIN
Eligibility has expanded considerably since the program’s original 2011 launch, when it was limited to confirmed identity theft victims in a small number of states. As of the current program, anyone with a valid Social Security number or Individual Taxpayer Identification Number who can verify their identity is eligible to voluntarily opt in, including:
- The primary taxpayer listed first on a joint return
- The secondary taxpayer listed second on a joint return
- Any dependent claimed on a return, provided their identity can be verified
- Taxpayers living abroad, who remain eligible despite being outside the country
- Anyone not required to file a tax return, since the IP PIN can still be requested as a proactive protective step
If you’ve already been confirmed as a victim of tax-related identity theft, the IRS automatically enrolls you in the program rather than requiring you to opt in voluntarily.
$200 Extra Social Security Payment: When Is It Being Approved, and Who Can Get It?
VA Benefits Lawyer: For Which Claims Do You Need One, and How Much Can They Cost?
Tax Extension Deadline October 15: What Filing Late Actually Costs You
New Canada Prescription Drug Rules October 2026: What Every Patient and Pharmacy Needs to Know
How to Get an IP PIN: Three Methods, Ranked by Speed
Method 1: Online Through Your IRS Account (Fastest)
This is by far the quickest path, and the one the IRS recommends for most taxpayers. Visit IRS.gov/ippin, sign in to or create an IRS Online Account, and complete identity verification, currently handled through ID.me. Once your identity is confirmed, your IP PIN displays immediately in the IP PIN section of your account profile page. This method gets you a usable PIN the same day, with no waiting for anything to arrive by mail.
Method 2: In Person at a Taxpayer Assistance Center
Taxpayers who can’t complete the online identity verification process, whether due to insufficient credit history, a lack of the required documentation, or general difficulty with the online tool, can schedule an appointment at a local IRS Taxpayer Assistance Center. You’ll need to bring two forms of identification, and once your identity is verified in person, the IRS mails your IP PIN, generally arriving within about three weeks.
Method 3: Form 15227 (Income-Limited, Phone-Based Verification)
For taxpayers who meet specific income thresholds and can’t verify online, Form 15227, Application for an Identity Protection Personal Identification Number, offers a third path. After submitting the form, an IRS representative calls the phone number provided to verify your identity over the phone. Once verified, your IP PIN arrives by mail, typically within four to six weeks, a notably longer wait than either of the other two methods.
Continuous vs. One-Time Enrollment: A Newer Choice Worth Understanding
A detail that’s changed relatively recently in the program’s structure gives taxpayers more control over how long their enrollment lasts. As of current IRS guidance, you can choose between two enrollment paths:
| Enrollment Type | What It Means |
|---|---|
| Continuous enrollment | You remain in the IP PIN program for the current year and all future years automatically |
| One-time enrollment | You’re enrolled only for the current calendar year, then automatically opted out at year’s end |
Most taxpayers choosing to proactively protect themselves opt for continuous enrollment, since it removes the need to re-enroll manually every January. Regardless of which option you choose, a brand-new six-digit PIN is generated every year, even for continuously enrolled taxpayers, so you’ll always need to retrieve your current-year PIN before filing, rather than reusing a prior year’s number.
How You Receive Your IP PIN Each Year
Where your annual PIN comes from depends on how you originally enrolled. If you opted in online and retrieved your PIN through your IRS Online Account, you will not receive anything by mail in subsequent years, you’re expected to log back into your account each year to retrieve the new PIN yourself. If you enrolled through Form 15227, an in-person Taxpayer Assistance Center visit, or because you were identified as a confirmed identity theft victim, the IRS mails you a CP01A Notice containing your new PIN each year, generally between mid-December and early January.
Common Mistakes That Undermine IP PIN Protection
The IRS and tax professionals consistently flag a few recurring errors that reduce or eliminate the protection an IP PIN is supposed to provide.
- Forgetting to enter it on your return. A missing IP PIN on an e-filed return triggers an automatic rejection; on a paper return, it triggers a manual identity verification delay.
- Sharing your IP PIN with anyone other than a trusted tax preparer. The IRS will never call, email, or text asking for your IP PIN. Any such request is a scam, full stop.
- Assuming last year’s PIN still works. A new PIN generates every single year; using an expired one has the same practical effect as leaving the field blank.
- Waiting until the current tax season has already started. The IP PIN tool is generally most reliably available starting in mid-January, and enrolling well before you plan to file avoids any last-minute access issues.
- Not enrolling dependents who are old enough to have their identity separately targeted. Parents and legal guardians can request an IP PIN for a dependent, an option worth using for teenagers or young adults whose SSNs are increasingly targeted for exactly this kind of fraud.
What to Do If You’re Already a Victim of Tax Identity Theft
If you suspect or have confirmed that someone has already filed a fraudulent return using your information, the response sequence matters, and moving quickly can meaningfully affect your resolution timeline given the current backlog.
- Respond immediately to any IRS notice referencing a duplicate return or suspicious activity on your account.
- File IRS Form 14039, Identity Theft Affidavit, to formally report the fraud to the IRS.
- File your legitimate tax return by paper if your e-filed return was rejected due to a duplicate SSN already on file.
- Report the incident to the FTC at IdentityTheft.gov, which generates an official recovery plan.
- Contact the Social Security Administration if you believe your SSN itself has been compromised more broadly.
- Place a credit freeze with all three major credit bureaus to prevent related identity theft beyond your tax return.
- Enroll in the IP PIN program, since confirmed victims are typically auto-enrolled once the IRS resolves the immediate case, but proactively requesting one can help going forward.
- Monitor all IRS correspondence closely and follow up periodically, given current processing delays.
How to Apply for an IP PIN: Step-by-Step Summary
- Go to IRS.gov/ippin and choose your enrollment method based on your ability to verify identity online.
- Complete identity verification through your IRS Online Account (fastest), an in-person Taxpayer Assistance Center visit, or Form 15227 if you meet the income requirements.
- Retrieve your six-digit PIN immediately (online) or wait for it to arrive by mail (three weeks for in-person verification; four to six weeks for Form 15227).
- Choose continuous or one-time enrollment based on whether you want ongoing automatic protection.
- Enter your PIN correctly on every federal return you file during the calendar year it’s valid for, including any late-filed prior-year or amended returns.
OAS Payment Increase September 2026: Confirmed Amounts, Payment Date, and the Annual GIS Reset !
Ohio SNAP Food Ban starts October 1, 2026: What’s Banned, Court Update & Rules
UK Free Bus Pass Rules 2026: What’s Officially Changing
SSDI Pay Chart: The Least Amount You Can Get Per Month and the Most Common Disabilities
Processing Time: Why This Matters More Than Ever Right Now
Getting an IP PIN itself takes anywhere from same-day (online) to about six weeks (Form 15227). That’s a stark contrast to what happens if you skip this step and become a victim instead: the current identity theft resolution backlog sits at more than 500,000 cases with an average wait of 20 months. Put simply, the small time investment required to enroll in the IP PIN program now is measured in minutes to weeks, while the cost of not having one, should your identity actually be stolen, is currently measured in years.
What This Means for Your Refund and Payment Schedule
An IP PIN doesn’t change your refund amount or your standard processing timeline for a legitimate, correctly filed return. What it protects is the integrity of that timeline in the first place, preventing a fraudulent return from being accepted under your SSN and triggering the kind of duplicate-filing dispute that can delay a genuine refund by months or, under current backlog conditions, years. For taxpayers who depend on their refund for near-term financial needs, this protection is less about speeding up your legitimate refund and more about preventing a catastrophic delay that could otherwise happen without warning.
Why the IRS Identity Theft Backlog Got This Bad
Understanding the scale of the current problem helps explain why tax professionals and taxpayer advocates are pushing IP PIN enrollment harder than usual this year. The National Taxpayer Advocate’s report ties the growing backlog directly to a workforce that’s shrunk by roughly 27% over the past year, a reduction that’s hit specialized units, including the identity theft victim assistance team, particularly hard. Resolving a tax identity theft case isn’t a simple, automated process: it requires a human caseworker to verify the legitimate taxpayer’s identity, untangle which return is fraudulent, correct the taxpayer’s account, and release any refund that was wrongly held or redirected. With fewer caseworkers handling a growing case volume, each individual case simply sits in queue longer, and that queue has now stretched to nearly two years on average.
This creates a genuinely difficult situation for lower-income filers in particular. A survey cited alongside the Taxpayer Advocate’s findings found that 46% of tax filers depend on their refund for near-term expenses, a share that’s grown noticeably compared to just a few years earlier. For someone counting on a refund to cover rent, bills, or other immediate costs, a wrongful hold lasting close to two years isn’t a minor inconvenience, it’s a genuine financial hardship, which is exactly the scenario an IP PIN is designed to prevent from happening in the first place.
Watch for IP PIN-Specific Scams
Ironically, the very existence of a security tool like the IP PIN has created its own scam ecosystem, and it’s worth understanding the specific tactics fraudsters use to try to defeat it. Because a correctly entered IP PIN is what makes a fraudulent return get rejected, scammers have increasingly shifted toward social engineering attacks aimed at extracting the PIN directly from the legitimate taxpayer, rather than trying to guess or bypass it technically. This typically shows up as an unsolicited phone call, text message, or email claiming to be from the IRS, asking you to “verify” or “confirm” your IP PIN, sometimes paired with a threat of an audit, a frozen refund, or legal action if you don’t respond immediately.
The IRS has been unambiguous on this point: it will never initiate contact this way to request your IP PIN. Legitimate use of your IP PIN happens only when you personally enter it while filing your own return, or when you provide it directly to a trusted tax professional you’ve hired to prepare your return, and only at the point you’re actually signing and submitting it. If you receive any unsolicited communication asking for your IP PIN outside of that specific context, the correct response is to not respond, not click any included links, and report the attempt directly to the IRS and, if it involves a suspicious website or email, to phishing@irs.gov.
Official Resources for the IP PIN Program
Always enroll and manage your IP PIN directly through these official IRS channels.
| Resource | Purpose | Official Link |
|---|---|---|
| Get an IP PIN tool | Enroll and retrieve your PIN online | irs.gov/ippin |
| IRS Online Account (login) | Manage your tax account, including IP PIN retrieval | irs.gov/account |
| Form 15227 | Phone-verification enrollment for eligible income levels | irs.gov/forms-pubs/about-form-15227 |
| Form 14039, Identity Theft Affidavit | Report suspected or confirmed tax identity theft | irs.gov/forms-pubs/about-form-14039 |
| Find a Taxpayer Assistance Center | In-person identity verification locations | irs.gov/help/contact-your-local-irs-office |
| Report identity theft | Federal Trade Commission recovery plan | identitytheft.gov |
| Report tax fraud complaints | FBI Internet Crime Complaint Center | ic3.gov |
$400 Inflation Refund Checks 2026: New York’s Real Program, Fact-Checked
Stimulus Check 2026: Fact-Checking Every Viral Payment Claim (Tracker)
Social Security SSI Payment Date September 2026 Confirmed by SSA- Check Full Schedule here!
Express Entry Draw Update: CEC Cut-Off Falls To 521, Physicians Round Drops To 198 CRS
Conclusion
The math behind the IRS Identity Protection PIN is about as one-sided as personal financial security decisions get: a free program that takes anywhere from a few minutes to a few weeks to set up, weighed against a current identity theft resolution backlog of more than 500,000 cases and an average wait time pushing 20 months. With IRS staffing down 27% and reported tax fraud complaints climbing, the gap between taxpayers who proactively enroll and those who wait until after something goes wrong has never been more consequential. Whether you file every year or haven’t needed to file in years, requesting your IP PIN through your IRS Online Account today remains one of the simplest, most effective steps you can take to keep your Social Security number, and your refund, out of a fraudster’s hands.
FAQs About IRS Identity Protection PIN
Is the IRS Identity Protection PIN free?
Yes. Enrolling in the IP PIN program costs nothing. It’s a free security feature offered directly by the IRS to any eligible taxpayer.
How long does it take to get an IP PIN?
If you verify your identity online through your IRS Online Account, you receive your PIN immediately. In-person verification at a Taxpayer Assistance Center takes about three weeks by mail, while Form 15227 applicants generally wait four to six weeks.
Do I need to request a new IP PIN every year?
Yes. A new six-digit PIN is generated annually for every enrolled taxpayer, whether you chose continuous or one-time enrollment. You must retrieve or receive your current-year PIN before filing.
What happens if I forget to include my IP PIN on my tax return?
An e-filed return missing a required IP PIN will be automatically rejected. A paper return missing one will be delayed while the IRS manually verifies your identity, adding significant processing time.
Can I get an IP PIN for my child or dependent?
Yes. Parents and legal guardians can request an IP PIN on behalf of a dependent, provided the dependent’s identity can be verified using acceptable documentation such as a birth certificate and Social Security card.
Why is getting an IP PIN especially important right now?
A recent National Taxpayer Advocate report found more than 500,000 tax identity theft cases currently pending, with average resolution taking approximately 20 months, a delay linked partly to a 27% reduction in IRS staffing. An IP PIN is the IRS’s own recommended defense against becoming part of that backlog.
Will the IRS ever call, text, or email me asking for my IP PIN?
No. The IRS will never contact you by phone, email, or text requesting your IP PIN. Any such request is a scam, and you should not respond or provide any information.
Can I still get an IP PIN if I’m not required to file a tax return this year?
Yes. The IP PIN can be requested proactively as a protective measure even if you have no current filing requirement, since it protects your SSN or ITIN from being used fraudulently regardless of your own filing status.
Trump Accounts Dell $250 Grant: Did Deposits Actually Start Monday? Here’s Who’s Actually Been Paid
2027 Social Security COLA Forecast: Latest 3.6% Estimate and How Much Retirees Could Get
$2000 Stimulus Payment September 2026 Fact-Check: Is It Really Coming?
StayNJ Income Cap Drops From $500,000 to $200,000: Why Your Check Already Got Smaller
New York POWER Rebate Checks: $100 to $200 Payments Begin Landing in Mailboxes This Fall
