The short version

You went to file your taxes, hit submit, and the return bounced back rejected. The reason: a return using your Social Security number has already been filed. You did not file it. Someone else did, usually to steal your refund.

This is tax-related identity theft, and it is one of the most common ways people discover their identity has been stolen. The good news is that you do not lose your refund permanently and there is a defined path to fix it. The hard news is that the fix is slow right now, and the single best move you can make once it is resolved is to lock your account so it never happens again. This walks through the exact sequence.

What the law actually says (primary authority first)

The IRS names this problem directly. In its Taxpayer Guide to Identity Theft, a rejected return sits at the top of the warning-sign list, alongside a “Form W-2 or Form 1099 from employer you didn’t work for” and an “Unreported income alert, like a CP2000 series notice.” The IRS is blunt that this is not only an adults-with-refunds problem: “Targets of identity theft could be you, your children, other dependents and nonfilers.”

The formal way you tell the IRS you are a victim is Form 14039, the Identity Theft Affidavit. The IRS is specific about when to use it. Per Publication 5027, its taxpayer identity-theft guide, you “Complete IRS Form 14039, Identity Theft Affidavit, if your e-file return rejects because of a duplicate filing under your SSN or you are instructed to do so.” You do not file a 14039 just because you are worried; you file it when your return was actually rejected as a duplicate, or when the IRS tells you to.

The tool that stops this from recurring is the Identity Protection PIN. The IRS defines it plainly: “An identity protection PIN (IP PIN) is a six-digit number that prevents someone else from filing a tax return using your Social Security number (SSN) or individual taxpayer identification number (ITIN).” It used to be limited to confirmed victims. It is now open to everyone: “Anyone who has an SSN or individual taxpayer identification number (ITIN) and is able to verify his/her identity is eligible to enroll into the IP PIN program.” Once you have one, a return filed without it gets stopped.

How it works in practice

Here is the sequence, in order.

1. Confirm it is really a duplicate-SSN rejection. Read the rejection carefully. An identity-theft rejection specifically says a return with your SSN has already been filed (common e-file codes are in that family). A different rejection reason, a typo in a dependent’s SSN, a name mismatch, is a different problem and does not call for Form 14039.

2. File Form 14039, the Identity Theft Affidavit. This is the document that opens your identity-theft case with the IRS. When your e-file was rejected, you attach Form 14039 to a paper copy of your real return and mail them together.

3. File and pay anyway, on paper, by the deadline. Identity theft does not pause your filing obligation. The IRS guidance is to “File returns and pay tax as usual,” on paper if e-file is blocked. Filing on time protects you from separate late-filing and late-payment problems while the identity-theft case works through the system.

4. Respond to every IRS notice. If the IRS suspects a fraudulent return, it may send you a notice on its own. “Follow IRS instructions from your letter, notice or representative.” Keep copies of everything.

5. Once resolved, get an IP PIN and keep it every year. After the case closes, enroll in the IP PIN program so a thief cannot do this again. The fastest route is “through your online account, in the IP PIN section of your profile page.” It is valid for one calendar year, and a new one is generated each year, so this becomes an annual habit. One security rule matters above all: “The IRS will never ask for your IP PIN. Phone calls, emails or texts asking for your IP PIN are scams.”

A note on what kind of identity theft this is. The sequence above is for refund fraud, someone filing a fake return to grab your refund. A related but different problem is employment identity theft, where someone uses your SSN to get a job and their wages show up as income you never earned, often surfacing as a CP2000 phantom-income notice. And if it is a business return filed under your EIN, the affidavit is Form 14039-B, not 14039. Those are separate paths worth their own walkthrough.

The numbers

The reason to set expectations honestly: the IRS unit that resolves these cases, Identity Theft Victim Assistance (IDTVA), has gotten much slower.

Metric	Figure	Source (year)
Average IDTVA case resolution, FY2022	399 days	Taxpayer Advocate Service, NTA (2024)
Average IDTVA case resolution, FY2023	556 days	Taxpayer Advocate Service, NTA (2024)
Average IDTVA case resolution, FY2024	676 days (nearly two years)	Taxpayer Advocate Service, NTA (2024)
IRS internal goal for resolution	120 days	Taxpayer Advocate Service, NTA (2024)
IP PIN length and validity	6 digits, valid one calendar year	IRS, Get an Identity Protection PIN (2025)

What this means for you

Move fast on the parts you control, and be patient on the part you do not. What you control is the front end: confirm the rejection, get Form 14039 and a paper return in the mail quickly, and answer every notice. What you do not control is the back end: as the table shows, the IRS took an average of 676 days to close these cases in FY2024, well beyond its own 120-day goal. Anyone who promises you a fast refund on a stolen-identity case is not being straight with you.

Do not skip the IP PIN once your case clears. It is the one durable fix. It is free, it now covers every taxpayer who can verify their identity, and it turns a repeatable theft into a stopped one. Treat the annual renewal as part of your tax routine.

And stay alert to the second scam that rides on the first. Thieves know victims are anxious and will call, text, or email posing as the IRS to “help” with your case or to ask for your IP PIN. The IRS does not do that. When in doubt, stop, and verify through your own IRS online account rather than any link or number someone sent you.

How Sheepdog Tax Resolution can help

If your return just got rejected and you are staring at the words “already filed,” I can help you get the response moving the same week. I start with a short diagnostic: confirm it is a duplicate-SSN identity-theft rejection and not something simpler, get Form 14039 and a correct paper return prepared, make sure your filing and payment are protected while the case runs, and set you up with an IP PIN once you are eligible so it does not happen again.

I am a CPA and Certified Fraud Examiner, veteran-owned, and I will be honest with you about timing: the IRS controls how long the case takes, and right now that is long. I cannot guarantee any specific outcome or timeline; the IRS decides these cases on the facts. What I can do is make sure your side is done correctly and completely from day one, so nothing you did adds delay, and handle the IRS correspondence so you are not doing it alone. To start, email noah@sheepdogtax.com with a short description and the rejection notice.

Sources (primary authority first, then secondary commentary)

IRS, Taxpayer Guide to Identity Theft. https://www.irs.gov/newsroom/taxpayer-guide-to-identity-theft
IRS, Publication 5027, Identity Theft Information for Taxpayers. https://www.irs.gov/pub/irs-pdf/p5027.pdf
IRS, Form 14039, Identity Theft Affidavit. https://www.irs.gov/pub/irs-pdf/f14039.pdf
IRS, Get an Identity Protection PIN (IP PIN). https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin
IRS, Identity Theft Central. https://www.irs.gov/identity-theft-central
Internal Revenue Manual 25.23.2, Identity Protection and Victim Assistance, General Case Processing. https://www.irs.gov/irm/part25/irm_25-023-002r
Taxpayer Advocate Service, National Taxpayer Advocate blog, Identity Theft Victims Are Waiting Nearly Two Years to Receive Their Tax Refunds (June 2024). https://www.taxpayeradvocate.irs.gov/news/nta-blog/identity-theft-victims-are-waiting-nearly-two-years-to-receive-their-tax-refunds/2024/06/

Prepared by Noah Green, CPA, CFE.

Someone Already Filed a Tax Return Under Your Social Security Number. Here Is What to Do.