The short version
There is a free tool from the IRS that makes it almost impossible for a thief to file a tax return in your name, and most people have never heard of it. It is called an Identity Protection PIN, or IP PIN. It is a six-digit code that only you and the IRS know, and a return filed without it gets rejected. It used to be reserved for confirmed identity-theft victims. It is now open to everyone.
If you have read our piece on what to do when someone already filed under your Social Security number, this is the other side of that story: the lock you put on the door so it does not happen in the first place. Getting one takes a few minutes. Here is how, and why it is worth doing before tax season, not after something goes wrong.
What the law actually says (primary authority first)
The IRS defines the tool plainly: “An identity protection PIN (IP PIN) is a six-digit number that prevents someone else from filing a tax return using your Social Security number (SSN) or individual taxpayer identification number (ITIN).” When you have one, your real return must carry the current IP PIN, and any return filed under your number without it is stopped.
The important change is who can get one. For years the program was limited to people who had already been victimized. That limit is gone. In the IRS’s own words, “Anyone who has an SSN or individual taxpayer identification number (ITIN) and is able to verify his/her identity is eligible to enroll into the IP PIN program.” You do not have to wait to be a victim to protect yourself.
Two operating details matter. First, an IP PIN is not permanent: “An IP PIN is valid for one calendar year,” and “A new IP PIN is generated each year for your account.” Second, and this is the rule that saves people from the scam that preys on this program, “The IRS will never ask for your IP PIN. Phone calls, emails or texts asking for your IP PIN are scams.”
How it works in practice
Getting one. The fastest route is your IRS online account: the IP PIN lives “through your online account, in the IP PIN section of your profile page.” You verify your identity once, and the number is issued to you on the spot. If you cannot or prefer not to use the online tool, there are two backups: Form 15227, the paper application to opt into the program, and in-person identity verification at a Taxpayer Assistance Center.
Using it. When you (or your preparer) file, you enter the current IP PIN on the return. That is the whole mechanic. A correct return goes through; a fraudulent one without the PIN does not.
Renewing it. Because the number changes every calendar year, retrieving the current one becomes a small annual habit. You pull it from your online account each filing season. If you lose it and cannot get it online, the IRS can reissue it by phone at 800-908-4490, and “if you can verify your identity with a phone assistor, your IP PIN will be mailed within 21 days.” Build in that time; a lost IP PIN means the IRS “will reject your electronic return,” and a paper return then gets extra identity screening that delays any refund.
For your kids. Dependents can be enrolled too, which matters because children’s Social Security numbers are quiet targets. A minor’s IP PIN cannot be pulled online; you retrieve it by calling 800-908-4490.
The numbers
| Metric | Figure | Source (year) |
|---|---|---|
| IP PIN length | 6 digits | IRS, Get an IP PIN (2025) |
| Validity | 1 calendar year, regenerated annually | IRS, Get an IP PIN (2025) |
| Who is eligible | Any SSN or ITIN holder who verifies identity | IRS, Get an IP PIN (2025) |
| Reissued IP PIN mailed within | 21 days (phone verification) | IRS, Retrieve Your IP PIN (2025) |
| IP PIN reissue phone line | 800-908-4490 | IRS, Retrieve Your IP PIN (2025) |
| Average IRS resolution if a fraud gets through instead (FY2024) | 676 days | Taxpayer Advocate Service, NTA (2024) |
What this means for you
The case for an IP PIN is the last row of that table. If a thief files before you and you do not have this lock, cleaning it up currently takes the IRS an average of 676 days, nearly two years, to resolve and pay your refund. A few minutes in your online account now avoids that entire ordeal. This is one of the rare places in tax where a small, free, up-front step removes a large, slow, expensive risk.
Two habits make it work. Get the IP PIN before you file, ideally early in the year, and retrieve the fresh number each season so a forgotten PIN does not bounce your own return. And treat any message asking you to share your IP PIN as a scam, full stop, because the IRS never asks for it. If you have children, consider enrolling them too.
Related reading
- Someone Already Filed a Tax Return Under Your Social Security Number. Here Is What to Do., the reactive side, for when the lock was not yet on.
- A companion covers employment identity theft, where someone uses your SSN for a job and the phantom wages surface as a CP2000 notice.
- Primary sources are linked inline above: Get an IP PIN, Retrieve Your IP PIN, and Identity Theft Central.
How Sheepdog Tax Resolution can help
Most people do not need help getting an IP PIN; it is designed to be self-service, and if that is all you need, go do it in your IRS online account today. Where I come in is when the identity-verification step trips you up, when you are a past victim trying to lock down the account after a mess, or when identity theft has already tangled your filings and you need both the cleanup and the prevention handled together.
I am a CPA and Certified Fraud Examiner, veteran-owned. I do not make outcome promises; the IRS controls its own processes. What I can do is get your account protected correctly and, if a theft already happened, make sure the reactive cleanup and the IP PIN lock are both done right. To start, email noah@sheepdogtax.com.
Sources (primary authority first, then secondary commentary)
- IRS, Get an Identity Protection PIN (IP PIN). https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin
- IRS, Retrieve Your IP PIN. https://www.irs.gov/identity-theft-fraud-scams/retrieve-your-ip-pin
- IRS, Taxpayer Guide to Identity Theft. https://www.irs.gov/newsroom/taxpayer-guide-to-identity-theft
- IRS, Identity Theft Central. https://www.irs.gov/identity-theft-central
- Taxpayer Advocate Service, National Taxpayer Advocate blog, Identity Theft Victims Are Waiting Nearly Two Years to Receive Their Tax Refunds (June 2024). https://www.taxpayeradvocate.irs.gov/news/nta-blog/identity-theft-victims-are-waiting-nearly-two-years-to-receive-their-tax-refunds/2024/06/
Prepared by Noah Green, CPA, CFE.