Tax identity theft occurs when someone uses stolen personal information to file a fraudulent return or claim a refund. A duplicate-return e-file rejection or IRS identity letter requires a specific response. Most people should not automatically file Form 14039: the IRS says to use it when instructed or for qualifying tax-related identity theft not already being handled through its identity-verification service.
Information checked: September 10, 2026.
Recognize the signal
Warning signs include an e-file rejection for a return already filed, a transcript showing an unknown return, an IRS notice about income or an account you do not recognize, or a dependent SSN used on another return. Confirm letters through IRS.gov or a published phone number before providing information.
When Form 14039 is appropriate
The February 2026 Form 14039 instructions say not to submit another affidavit for the same incident. The IRS identity guide also says not to use it when a notice directs the Identity and Tax Return Verification Service or when the theft is not tax-related. Business cases use Form 14039-B.
File the real return
A victim blocked from e-filing may need to mail a paper return with the affidavit under current instructions. Sign the return, attach required forms and use tracked delivery to the correct address. Do not omit a required return while waiting for the fraudulent one to be removed.
Use an IP PIN
An IP PIN is a six-digit number required on federal returns for the taxpayer when assigned. It changes for each filing year. Retrieve it through the IRS Online Account and include it on original and amended returns as instructed. Filing without an assigned IP PIN can reject e-file or delay paper processing.
Protect and monitor
Create an IdentityTheft.gov recovery plan, freeze credit files, change financial and email passwords, review wage-and-income transcripts and respond promptly to IRS correspondence. Recovery timing varies by case; do not trust anyone promising an instant refund for a fee.
Action checklist
Open the official pages below and confirm the rule for your state, policy, account, vehicle, property, tax year, or filing status. Record the deadline and what starts it. Save notices, contracts, photographs, estimates, statements, submission receipts, delivery proof, and the names of representatives. Correct factual errors in writing and calendar the next review, appeal, repair, filing, or payment date. Do not pay an unofficial intermediary merely to access a government form or status tool.
Common mistakes to avoid
Do not accept an undated search result, viral chart, contractor promise, or tax-software estimate as an agency decision. Avoid signing a broad release before the amount and remaining rights are clear. Never repeat a filing merely because the status has not updated, and do not ignore a mailed notice while watching an online tracker. Keep claim, repair, tax, loan, registration, and court deadlines separate because action on one does not automatically extend another.
Frequently asked questions
Should every data-breach victim file Form 14039?
No. Use the IRS screening instructions; most people do not need the form.
Can I submit Form 14039 twice to speed it up?
No. The form says not to resubmit for the same incident.
Does an IP PIN stay the same?
No. A new six-digit IP PIN is issued for each filing year.
Summary
Follow the exact IRS notice or duplicate-return procedure, submit Form 14039 only once when appropriate, continue filing the legitimate return as instructed, and obtain an Identity Protection PIN to block future returns that omit the six-digit number. Use the current official instructions before acting.