top of page
Search

A Scammer Could Get Your Tax Refund Before You Do: How an IRS IP PIN Can Help Protect You

Sep 9
3 min read

Tax-related identity theft can happen when someone uses your personal information to file a fraudulent tax return in your name — potentially before you file your legitimate return.

On September 4, 2026, the IRS and the Security Summit issued a new reminder encouraging taxpayers and tax professionals to strengthen their protection against tax-related identity theft. Among the tools highlighted by the IRS are Identity Protection PINs (IP PINs), multifactor authentication, and secure IRS Online Accounts.

One of the most important tools for individual taxpayers is the IP PIN.



What Is an IRS IP PIN?


An Identity Protection PIN, commonly called an IP PIN, is a six-digit number known only to the taxpayer and the IRS.

It provides an additional layer of identity verification when a federal tax return is filed.

The purpose is simple: if someone obtains enough of your personal information to attempt to file a fraudulent tax return in your name, the IP PIN makes it more difficult for that fraudulent return to be successfully filed using your identity.


You Don't Have to Be a Victim of Identity Theft to Get One


This is something many taxpayers may not realize.

You do not have to wait until someone steals your tax identity to use an IP PIN.

Taxpayers can voluntarily opt in and obtain an IP PIN through the IRS. Confirmed victims of tax-related identity theft automatically receive a new IP PIN each year.

An IP PIN is valid for one calendar year, and a new number is generated annually.


Your Accountant Cannot Get Your IP PIN for You


Even if you work with a tax professional, your accountant or tax preparer cannot obtain an IP PIN on your behalf.

The taxpayer must obtain the IP PIN directly.

When it is time to prepare your tax return, you can provide the current IP PIN to your trusted tax preparation provider so it can be included with the return when required.

Because the IP PIN is sensitive information, it should be protected carefully.

According to the IRS, you should share it only with the IRS and your trusted tax preparation provider.

And there is an important warning:

The IRS will never call, email, or text you asking for your IP PIN.

If someone contacts you unexpectedly and asks for this number, do not provide it.


Create an IRS Online Account


The IRS also encourages taxpayers to establish an IRS Online Account.

An online account allows taxpayers to securely access tax account information and can also help protect against fraudsters attempting to create an IRS account using someone else's identity.

For taxpayers, having direct access to their IRS information is becoming an increasingly important part of managing and protecting their tax records.


Multifactor Authentication Matters Too


Passwords alone may not provide sufficient protection for accounts containing sensitive financial and tax information.

Multifactor authentication, or MFA, requires more than one method of identity verification. Depending on the service, that could include a password plus a security code, authentication device, or biometric verification.

The IRS specifically recommends using MFA for services and accounts containing sensitive information.

For tax professionals, the issue is even more significant. The September 2026 IRS guidance notes that tax preparation firms are generally required under the Federal Trade Commission's Safeguards Rule to use multifactor authentication to protect access to customer information, unless an appropriate equivalent control has been approved as provided under the rule.


Tax Identity Protection Should Be Part of Your Financial Security


Most people understand the importance of protecting their bank accounts and credit cards.

Tax information deserves the same attention.

Your Social Security number, tax records, income information, and other personal data can be extremely valuable to identity thieves.

Tools such as an IRS IP PIN, IRS Online Account, strong passwords, and multifactor authentication can add important layers of protection.

You may never need them because someone attempted to steal your tax identity.

That is exactly the point.

It is better to add protection before fraud happens than to discover the problem when you try to file your own tax return.


How to Get an IP PIN


Taxpayers who want to voluntarily obtain an IP PIN can use the IRS Get an Identity Protection PIN service.


You can also create and access your secure IRS Online Account here:


Source: IRS News Release IR-2026-106, September 4, 2026.

This article is for general informational and educational purposes only and should not be considered individual tax, legal, or cybersecurity advice.

 
 
 

Comments


bottom of page