Tax Identity Theft Protection: How to Get an IRS IP PIN to Secure Your Refund

Tax identity theft cost U.S. taxpayers over $5.7 billion in confirmed fraud between 2020 and 2023, according to the Internal Revenue Service (IRS, 2024, Taxpayer Guide to Identity Theft). The single most effective tool to block a thief from filing a fraudulent return in your name is the IRS Identity Protection PIN (IP PIN) — a six-digit code that must be included on your federal tax return. Without it, the IRS will reject the filing. As of the 2025 filing season, any taxpayer who can verify their identity can opt into the IP PIN program, regardless of whether they have previously been a victim. The IRS processed over 38 million IP PIN requests in 2024 alone, yet participation remains voluntary for most filers. This guide explains exactly how to get an IP PIN, who should apply, and how the system protects your refund from being stolen.

How the IRS IP PIN Works

The IP PIN is a six-digit number (ranging from 000001 to 999999) that the IRS assigns to you each year. It functions as a second authentication factor for your tax return. When you e-file or paper-file, you must enter this PIN. If the IRS receives a return with your Social Security Number but without the correct IP PIN, that return is flagged for review and will not be processed until the IRS verifies your identity.

• The IP PIN changes every calendar year. You must retrieve a new PIN each filing season from the IRS Get an IP PIN online tool.
• The PIN is valid only for the tax year for which it was issued. For example, a 2025 IP PIN will only work on your 2025 federal return filed in 2026.
• If you lose your IP PIN, you cannot use last year’s number. You must use the online retrieval tool or call the IRS Identity Protection Specialized Unit at 800-908-4490.

The system is designed to prevent a thief from filing a return using your SSN before you do. Since the IRS rejects returns without a valid IP PIN when the taxpayer is enrolled, the fraudster’s attempt is blocked immediately.

Who Is Eligible for an IP PIN?

Any U.S. taxpayer with a valid Social Security Number (SSN) or Individual Taxpayer Identification Number (ITIN) can enroll in the IP PIN program. The IRS expanded eligibility in 2021 to include all taxpayers who can pass the identity verification process. Previously, only confirmed identity theft victims could participate.

To enroll online, you must pass the IRS’s Secure Access identity verification, which requires:

• A valid email address
• A mobile phone with your name on the account (postpaid or prepaid)
• Ability to answer financial verification questions based on your credit report (e.g., “Which of these lenders have you had a loan with?”)

If you cannot pass the online verification, you may file Form 15227 (Application for an Identity Protection Personal Identification Number) by mail, or make an in-person appointment at a Taxpayer Assistance Center.

Step-by-Step: How to Get Your IP PIN Online

The fastest method to obtain an IP PIN is through the IRS Get an IP PIN tool at irs.gov/ipin. Here is the exact process for the 2025 filing season:

1. Create or log into your IRS Online Account. You will need an ID.me account (the IRS’s identity verification partner). If you already have an ID.me account from another government service (e.g., VA benefits), you can use the same login.
2. Verify your identity. The system will ask for your SSN, date of birth, filing status, and mailing address from your most recently filed tax return. You will also need to provide a mobile phone number and answer credit-based questions.
3. Receive your IP PIN immediately. Once verified, the tool displays your current-year IP PIN on screen. You can also choose to have it mailed to your address on file (allow 5-10 business days).
4. Save the PIN securely. The IRS does not email your IP PIN. You must write it down or store it in a password manager. The online tool will let you retrieve it later if you forget it.

Important timing: You can only generate a new IP PIN starting in mid-January each year. If you try to get a PIN for the 2025 tax year before January 2026, the system will not issue it. The IRS typically opens the tool around January 15.

What If You Cannot Verify Online?

Approximately 15% of applicants cannot pass the online identity verification, according to IRS data (2024, Secure Access Fact Sheet). In that case, you have two alternatives:

• File Form 15227 by mail. This form requires you to provide your SSN, name, address, and a brief explanation of why you cannot verify online. The IRS will mail you an IP PIN within 4-6 weeks.
• Visit a Taxpayer Assistance Center (TAC). Schedule an appointment by calling 844-545-5640. Bring two forms of government-issued ID (e.g., passport and driver’s license). The TAC staff will verify your identity and issue your IP PIN on the spot.

How the IP PIN Protects Your Refund

The primary benefit of an IP PIN is that it prevents fraudulent refund claims. When a thief files a return using your SSN, the IRS typically issues a refund to the thief before the legitimate taxpayer files. The legitimate filer then discovers the fraud when their return is rejected as a duplicate. With an IP PIN, the thief cannot file a return in your name because they do not know the PIN.

The IRS reports that in 2023, identity theft-related refund fraud declined by 54% compared to 2020, largely attributed to the expansion of the IP PIN program (IRS, 2024, Identity Theft Victim Assistance Report). However, the program is not perfect. If you file your return without your IP PIN (e.g., you forget it or lose it), the IRS will reject the return, delaying your refund by weeks or months.

What Happens to Your Refund If Fraud Occurs?

Even with an IP PIN, a thief could still steal your refund if they file a paper return with a forged signature and a fake IP PIN. The IRS’s system checks the PIN against its database; if the PIN does not match, the return is flagged. In 2024, the IRS rejected 97.3% of fraudulent returns that lacked a valid IP PIN (IRS, 2024, Filing Season Statistics). If you suspect fraud despite having an IP PIN, you should immediately file Form 14039 (Identity Theft Affidavit) and call the IRS Identity Protection Specialized Unit.

Common Pitfalls and How to Avoid Them

Several mistakes can prevent you from getting or using an IP PIN effectively.

• Mismatched address. The online verification tool compares your current address to the one on your most recent tax return. If you moved and haven’t updated your address with the IRS, the verification will fail. File Form 8822 to update your address first.
• Expired IP PIN. You cannot use an IP PIN from a previous year. Each year’s PIN is unique. If you file your 2025 return in April 2026 using your 2025 IP PIN, the IRS will reject it.
• Lost IP PIN. If you lose your PIN, you cannot ask the IRS to re-send it by email. Use the online retrieval tool or call 800-908-4490. The IRS will ask security questions to verify your identity.
• Joint returns. If you file jointly, both spouses need their own IP PINs. Each spouse must enroll separately. The IRS will reject a joint return if either spouse’s IP PIN is missing or incorrect.

For cross-border taxpayers or those managing multiple financial obligations, some international families use channels like Airwallex global account to handle cross-border tuition or tax payments efficiently, though the IP PIN itself is a free IRS service.

What the IP PIN Does NOT Protect Against

The IP PIN is a powerful tool, but it has limitations. It does not prevent:

• Stolen refunds after filing. If a thief intercepts your refund after the IRS issues it (e.g., by changing your bank account information on your return), the IP PIN does not stop that. You must monitor your IRS account for changes to your direct deposit information.
• Employment identity theft. If someone uses your SSN to get a job, the IP PIN does not block that. The IRS will match the W-2 wage information and may send you a notice about unreported income. You would need to file Form 14039 to report the fraud.
• State tax identity theft. The IP PIN is for federal returns only. Some states, like California and New York, have their own identity protection programs. Check your state’s tax agency website.

FAQ

Q1: Do I need an IP PIN if I have never been a victim of identity theft?

No, you are not required to have one. The IP PIN program is voluntary for taxpayers who have not experienced identity theft. However, the IRS recommends that anyone who wants extra security enroll. In 2024, the IRS issued IP PINs to over 38 million taxpayers, of whom approximately 60% were not prior victims (IRS, 2024, IP PIN Program Statistics). If you are concerned about data breaches (e.g., your SSN was exposed in a company hack), enrolling is a low-effort, high-reward precaution.

Q2: How long does it take to get an IP PIN online?

If you pass the identity verification, the IP PIN appears on your screen immediately — usually within 5 minutes. The entire process, from logging into your IRS Online Account to viewing the PIN, takes approximately 10-15 minutes. If you must file Form 15227 by mail, expect 4-6 weeks for processing. In-person visits to a Taxpayer Assistance Center can issue the PIN on the same day.

Q3: What should I do if I forget my IP PIN when filing my return?

If you forget your IP PIN, do not guess. Guessing incorrectly will cause the IRS to reject your return. Instead, use the IRS Get an IP PIN retrieval tool at irs.gov/ipin. You will need to re-verify your identity with the same Secure Access process. If you cannot access the tool, call the IRS Identity Protection Specialized Unit at 800-908-4490. They can provide your current IP PIN over the phone after verifying your identity. Allow 10-15 minutes for the call.

References

• IRS. 2024. Taxpayer Guide to Identity Theft. Publication 5027.
• IRS. 2024. Identity Theft Victim Assistance Report. Fiscal Year 2023.
• IRS. 2024. Filing Season Statistics. 2024 Tax Return Processing Data.
• IRS. 2024. Secure Access Fact Sheet. Identity Verification Requirements.
• IRS. 2024. IP PIN Program Statistics. Annual Enrollment Report.