How to Get an IRS IP PIN and Protect Your Tax Return From Identity Theft

What an IRS IP PIN is and why you might need one

An IP PIN (Identity Protection Personal Identification Number) is a six-digit code the IRS issues to you to prevent someone else from filing a tax return in your name. When you file your return, you enter this PIN along with your Social Security number. If a thief tries to file using your SSN without the PIN, the IRS rejects their return.

You need an IP PIN if your Social Security number has been compromised — either because you know your identity was stolen, or because the IRS notified you that someone filed a fraudulent return under your name. You may also want one if you've been the victim of a data breach that exposed your SSN, or if you straightforward want an extra layer of protection.

The IRS does not automatically issue IP PINs to everyone. You request one through a specific process, and the PIN is valid for one tax year only. You will need to request a new one each year if you want continued protection.

Key Takeaways

You can request an IP PIN through the IRS website using an online tool called the IP PIN retrieval system, or by calling the IRS Identity Theft Hotline at 1-800-908-4490.
The online method requires you to verify your identity by answering security questions or using ID.me, a third-party identity verification service.
If the IRS has already flagged your account for identity theft, you will receive a letter in the mail with instructions on how to get your PIN.
Once you have your IP PIN, you must enter it on your tax return when you file, or the IRS will reject your return as incomplete.
An IP PIN is valid only for the tax year it was issued for; you must request a new one each year if you want to keep this protection.

How to request an IP PIN online through the IRS

The fastest way to get an IP PIN is through the IRS IP PIN retrieval system on the IRS website. Go to irs.gov and search for "IP PIN" — this will take you to the retrieval tool. You will need your Social Security number, date of birth, and filing status from your most recent tax return.

The system will ask you to verify your identity. You can do this in two ways: by answering security questions based on your credit history, or by using ID.me, a service that verifies your identity using your driver's license or state ID. The ID.me method is usually faster. Once you verify, the system generates your six-digit PIN when ready and displays it on screen. Write it down or take a screenshot — you will need it when you file.

The online tool is available year-round, but the IRS typically makes it available starting in late January for the current tax year. If you try to access it before the IRS opens it, you will see a message saying the tool is not yet available.

Requesting an IP PIN by phone or mail

If you cannot verify your identity online, or if you prefer to speak with someone, you can call the IRS Identity Theft Hotline at 1-800-908-4490. Have your Social Security number, date of birth, and a copy of your most recent tax return ready. The IRS representative will verify your identity over the phone and issue your PIN verbally. Write down the number when ready.

You can also request an IP PIN by mail by sending Form 14039, Identity Theft Affidavit, to the IRS address listed in the form instructions. This method is slower — it can take several weeks to receive your PIN by mail — so use it only if you cannot access the phone line or online tool.

What to do if the IRS already notified you of identity theft

If the IRS sent you a letter saying someone filed a fraudulent return under your name, that letter will include instructions for getting your IP PIN. Follow those instructions exactly, as they may differ slightly from the standard process. The IRS may have already assigned you a PIN and included it in the letter itself.

If you received a letter but lost the PIN or the instructions, call the IRS Identity Theft Hotline at 1-800-908-4490 and tell them you received a notice of fraudulent filing. Have the letter in front of you when you call. The representative can look up your case and provide your PIN or reissue one if needed.

Do not ignore a letter from the IRS about identity theft. Even if you think the matter is resolved, you need to follow their process to protect your account going forward.

How to use your IP PIN when you file your tax return

When you file your return — whether you use tax software, a tax preparer, or paper forms — you will be asked to enter your IP PIN. Tax software like TurboTax, H&R Block, and TaxAct all have a field for this. If you are filing on paper, you enter the PIN on the line marked "IP PIN" on Form 1040 or whichever form you use.

If you file through a tax preparer or accountant, give them your IP PIN before they file. They need it to submit your return to the IRS. If you forget to include it, the IRS will reject your return and send it back to you. You will then have to resubmit with the PIN included.

Keep your IP PIN confidential, just as you would your Social Security number. Do not share it with anyone except your tax preparer or the IRS.

What happens if you lose your IP PIN or it expires

IP PINs are valid only for the tax year they were issued for. If you received a PIN for the 2024 tax year, you cannot use it to file your 2025 return. You must request a new PIN each year.

If you lose your PIN before you file, you can retrieve it again through the online tool or by calling the IRS. The IRS will issue you the same PIN you received before, so you do not have to go through a full verification process again — though you may still need to answer a few security questions.

If you request a PIN but then decide you do not need it, you can still file your return without entering it. However, if you requested a PIN, the IRS expects you to use it. Filing without it when you have one on file may cause delays in processing your return.

Protecting yourself beyond an IP PIN

An IP PIN is one layer of protection, but it is not the only step you should take if your identity has been compromised. Place a fraud alert on your credit report by contacting one of the three credit bureaus — Equifax, Experian, or TransUnion. A fraud alert tells lenders to verify your identity before opening new accounts in your name.

You can also place a credit freeze, which blocks lenders from accessing your credit report entirely unless you temporarily lift it. This is stronger protection than a fraud alert, but it requires more steps on your part when you want to open a legitimate account.

Monitor your credit report regularly for accounts you did not open. You can view your report for free once per year at annualcreditreport.com, which is the official government site. If you see fraudulent accounts, dispute them with the credit bureau and the creditor.

Frequently Asked Questions

Can I get an IP PIN if I have not been a victim of identity theft?

Yes. The IRS allows anyone to request an IP PIN for added security, even if there is no evidence your identity has been stolen. Some people request one after a data breach that exposed their SSN, or straightforward as a precaution. The process is the same whether or not you have been a victim.

What if I file my return and forget to include my IP PIN?

The IRS will reject your return as incomplete and send it back to you. You will need to resubmit it with the PIN included. This can delay your refund by several weeks. If this happens, refile as soon as possible with the PIN added.

Do I need an IP PIN every year?

Only if you want the protection every year. IP PINs expire at the end of each tax year. If you received one for 2024, you must request a new one for 2025 if you want to keep using this protection. Many people who have been victims of identity theft request a new PIN every year as a precaution.

What if I cannot verify my identity online?

Call the IRS Identity Theft Hotline at 1-800-908-4490. A representative can verify your identity over the phone using security questions and issue your PIN verbally. This usually takes 10 to 15 minutes. If you cannot reach the phone line, you can mail Form 14039 to the IRS, though this takes several weeks.

Can someone use my IP PIN to file a return in my name?

No. The IP PIN is tied to your Social Security number. A thief would need both your SSN and your PIN to file a fraudulent return. If they have your SSN but not your PIN, the IRS rejects their return. This is why you must keep your PIN confidential.

This guide is for general information only and is not medical, financial, legal, or other professional advice. For decisions specific to your situation, consult a qualified professional. See our Editorial Policy.