Key Takeaways:
- Start by verifying an unexpected IRS notice and following the official instructions for your situation.
- Form 14039 is not the right first step for every identity-theft concern.
- An Identity Protection PIN can help prevent someone else filing a federal return using your identity.
- Keep a case record and continue meeting filing and payment obligations while the matter is unresolved.
An unexpected tax-return rejection or notice can have several causes. Treat it as a problem to investigate, rather than assuming it proves identity theft or that every affected taxpayer should submit the same form.
Identify what happened before responding
Record the notice number, date, tax year and response deadline. Reach IRS.gov directly to check the relevant notice or identity-theft guidance. Avoid using an unsolicited message’s link to submit identity documents or account credentials.
Keep the original message or letter and a separate note of how you verified the response route. If something seems inconsistent, resolve that uncertainty through an official IRS channel before sending documents. A realistic logo or urgent wording does not establish that a request is genuine.
Use the correct verification or reporting route
The IRS says to use its Identity and Tax Return Verification Service when directed by an IRS letter or notice. It also says not to file Form 14039 when using that service. The agency lists several other situations in which the affidavit is unnecessary, including when it already has the report or has sent you a letter or notice.
Read the current IRS instructions before choosing a form. If you cannot complete a requested verification, follow the official help route for that notice. Repeatedly sending the same affidavit is not a substitute for resolving a specific request.
Check protection for future filings
An IRS Identity Protection PIN is a six-digit code used to help verify identity when a federal return is filed. Eligible people can request one proactively; a confirmed theft is not required. The IRS offers alternatives if online enrollment cannot be completed.
A new IP PIN is generated each year. Follow IRS instructions for obtaining the current code and using it on returns filed during that calendar year, including prior-year returns. Keep it secure and use only the official process for retrieving a missing code. An IP PIN protects a tax-filing step; it does not freeze a credit report or resolve every kind of identity misuse.
Keep one working case log
- The affected tax year and the issue you observed.
- Each verified notice, its deadline and your response.
- Dates of calls or submissions and any official reference numbers.
- Copies of documents supplied and the method used.
- The next requested action and when you will check progress.
Store the log and identity documents securely. Keep a redacted summary for ordinary planning rather than distributing full tax records when asking a general question. Review any state-tax steps separately.
Continue the rest of the recovery work
The IRS instructs affected taxpayers to file returns and pay tax as usual. Follow its specific instructions if identity misuse interferes with filing. Do not assume an open identity-theft case pauses a deadline or guarantees a refund date.
For broader misuse, use the FTC’s IdentityTheft.gov recovery process to build a plan based on what happened. Separate credit-account protection from the tax case so that progress on one does not leave the other unaddressed.
Next step: match the actual notice or warning sign to the current official instructions, then record the next action and its deadline.
Official sources
- IRS: Identity theft guide and response routes
- IRS: Get and use an IP PIN
- FTC: Identity theft reporting and recovery
Related reading
- Protect Against Identity Theft: Start with Free Credit Freezes
- Your Social Security Account: Check Access, Earnings and Benefit Estimates
