How Do I Find Out If Someone Used My SSN to File Taxes?

Tax-related identity theft occurs when a thief uses a stolen Social Security number (SSN) to file a fraudulent tax return and claim a refund. Victims often only discover the crime when they attempt to file their own legitimate tax return. The Internal Revenue Service (IRS) has established specific procedures to help victims report the crime and resolve their tax accounts.

Identifying Signs of Tax Identity Theft

The most common way people discover tax identity theft is when their electronically filed tax return is rejected. The rejection notice will often indicate that a return has already been filed for that same Social Security number. This is a direct sign that a fraudulent return has been submitted to the IRS.

Another clear indicator is receiving unexpected correspondence from the IRS. You might receive a notice stating that more than one tax return was filed for your SSN, or that you owe additional tax for a year you did not file. Similarly, the IRS may send a letter about an online account created in your name that you did not authorize. You might also receive tax documents like a Form W-2 or 1099-NEC from an employer you have never worked for.

To check for fraudulent activity, you can obtain an IRS tax account transcript online, which provides a detailed record of all transactions. After creating an account on the IRS website, look for a transaction with “Code 150” and a description like “Return Filed.” If you see this for a tax year you have not yet filed, a fraudulent return has likely been processed.

The transcript will show the date the fraudulent return was received and processed by the IRS. It may also show subsequent transactions, such as a “Code 846” for a refund being issued to the thief. This document gives you concrete evidence to provide to the IRS.

Required Documentation for Reporting Identity Theft

When you confirm that your identity has been compromised for tax purposes, your primary tool for notifying the IRS is Form 14039, the Identity Theft Affidavit. This form officially alerts the IRS to the fraudulent activity and initiates their investigation. It is a sworn statement that you did not file the tax return in question.

Before filling out Form 14039, you need to gather specific information. You will need your personal details, including your full name, address, and SSN. The form requires you to specify the tax year that was affected and provide details about how you became aware of the problem, such as your e-filed return being rejected.

You must attach a copy of any IRS notice you received, as this provides context for the agency. You must also provide a copy of a government-issued identification document, such as a driver’s license, passport, or state ID card. The IRS uses this to verify your identity, so make sure the copy is clear and legible.

Submitting Your Report and Filing Your Tax Return

After completing Form 14039, you must file a paper copy of your legitimate tax return, as you cannot e-file. Your mailing package to the IRS should contain several items:

• Your correctly prepared paper tax return (Form 1040)
• All your supporting income documents, such as your Forms W-2 and 1099
• The completed Form 14039 attached to the front of your return
• A photocopy of your government-issued ID

You must mail this package to a specific IRS address designated for identity theft cases, which differs from the standard address for paper returns. The correct address can be found in the instructions for Form 14039 on the IRS website.

Once the IRS receives your submission, they will send you a letter acknowledging receipt. The agency will then begin its investigation to validate your identity and process your legitimate tax return. This process can take several months, and the IRS will correspond with you by mail as they work to resolve the fraudulent activity.

Additional Steps to Protect Your Identity

A protective measure is to voluntarily opt into the IRS’s Identity Protection PIN (IP PIN) program. An IP PIN is a six-digit number known only to you and the IRS that adds an extra layer of security when you file. You can request an IP PIN through the IRS website, and it will be required on all future federal tax returns you file.

You should also file a formal identity theft report with the Federal Trade Commission (FTC) at IdentityTheft.gov. This report creates an official record of the crime and provides you with a personalized recovery plan. The FTC report is a valuable document to have if you need to dispute fraudulent accounts or transactions.

Finally, contact the three major credit bureaus—Equifax, Experian, and TransUnion—to place a fraud alert on your credit files. A fraud alert encourages lenders to take extra steps to verify your identity before extending new credit. For stronger protection, you can request a credit freeze, which restricts access to your credit report and makes it much more difficult for identity thieves to open new accounts in your name.