Identity Theft Recovery Steps During Tax Season

Tax identity theft means someone has used your Social Security number — the number that identifies you to the tax system — to file a return, claim a refund, or work under your name, and tax season is when most couples find out. The recovery steps are steady ones: respond to IRS notices, file the IRS identity theft affidavit, protect your credit with both partners in mind, and file your own real return the way the IRS directs. Worked through in that order, with one shared log between you, the problem becomes a paperwork project instead of a panic.

Key Takeaways

Tax identity theft most often surfaces at filing time: your e-file is rejected because a return is already on file under your number, or an IRS letter arrives about income or a return you do not recognize.
The IRS is your first call and your main guide: follow the instructions in any notice you receive, and check the current steps on IRS.gov, because forms and procedures are updated over time.
Filing the IRS identity theft affidavit tells the IRS, in its own format, that your number has been misused, and it starts the process of separating the fraudulent activity from your real account.
Protect the wider picture at the same time: a credit freeze or fraud alert for each partner, and a careful look at both of your credit reports.
Keep filing your own taxes on schedule. A fraudulent return does not cancel your obligation, and the IRS will tell you how it wants your return submitted while your case is open.
One shared log — dates, letters, names, and what you sent — is the single habit that keeps a two-person recovery from dropping steps.

In This Guide

What Tax Identity Theft Actually Is
The Signs Couples Usually See First
Step 1: Work With the IRS, Starting With Any Notice
Step 2: File the Identity Theft Affidavit
Step 3: Protect Your Credit and Your Accounts
Step 4: File Your Real Return and Keep Filing
Doing the Recovery as a Couple
A Worked Example: One Couple’s February Surprise
Habits That Make Next Tax Season Safer
Frequently Asked Questions
Your Next Step
Related Articles

What Tax Identity Theft Actually Is

Tax identity theft comes in two common shapes. In the first, a thief uses your Social Security number to file a fake tax return early in the season, inventing income and deductions so the return shows a refund, which the thief collects. In the second, someone uses your number to get a job, and their wages get reported to the IRS under your name — so the IRS believes you earned money you never saw. Either way, filing season is when the scheme cashes in — which is why the problem so often announces itself between January and April.

For couples, there is an extra wrinkle. If you file a joint return — one return covering both spouses — either partner’s number can be the entry point, and a problem attached to one number can stall the return you share. That is why this guide treats recovery as a two-person project from the start. Your bank cannot fix it; the IRS is the center of the repair, with credit protection wrapped around it.

The Signs Couples Usually See First

Most couples learn something is wrong from one of a handful of signals. None proves theft on its own — honest mistakes happen at the IRS and at employers too — but each one deserves the same response: treat it as real until the IRS tells you otherwise.

Sign	What it can mean	A calm first response
Your e-filed return is rejected	A return is already on file under that Social Security number	Do not keep resubmitting; start the IRS steps below
An IRS letter about a return you did not file	The IRS spotted something suspicious, or a fraudulent return was processed	Follow the letter’s instructions exactly, and keep the letter
A notice about income from an employer you do not know	Someone may be working under your number	Report it through the IRS identity theft process
A tax transcript or online account you did not create	Someone may be probing your tax account	Tell the IRS and secure your accounts
A refund arrives that you were not expecting	A return may have been filed in your name	Do not spend it; contact the IRS for instructions

Step 1: Work With the IRS, Starting With Any Notice

If an IRS notice or letter arrived, treat it as your roadmap. Genuine IRS letters explain what the IRS believes happened, give you a phone number to call, and usually set a deadline for responding. Call the number printed on the notice itself, respond by the date given, and keep the letter with everything else you gather. If you discovered the problem through a rejected e-file and have no letter yet, go to IRS.gov and follow its identity theft guidance — and take contact details from IRS.gov directly, never from a search ad, a text message, or a caller.

That last point matters because tax season is also impersonation season. The IRS generally begins contact about a tax issue by mail, not by an unexpected phone call demanding immediate payment. A caller who threatens arrest, insists on payment by gift card or wire transfer, or refuses to let you hang up and call back is following a scam pattern, not an IRS one. Hang up and go to IRS.gov yourself. Our guide to spotting financial scams and shaky online money advice walks through these impersonation patterns in more depth.

When you do reach the IRS, expect to verify your identity — the agency has to be sure it is talking to the real taxpayer. Follow the verification steps you are given, whether they happen by phone, online, or in person, and write down the date, the name of the person you spoke with, and what they told you to do next. That note is the first entry in your log.

Step 2: File the Identity Theft Affidavit

The IRS identity theft affidavit — Form 14039 — is the form that formally tells the IRS, “my number has been misused; the activity you are seeing is not mine.” You file it if you believe you are a victim, or if the IRS asks you to. If both partners’ numbers were misused, each of you files your own affidavit; if only one number was involved, only that partner files. Because the current version of the form and the ways to send it can change, check IRS.gov for the latest form and instructions before you send anything.

In some situations the IRS directs you to attach the affidavit to a paper copy of your real tax return; in others you send it on its own. Follow the instruction that applies to you rather than guessing. Keep a copy of the completed form and proof of how and when you sent it. Once your case is open, the IRS may also issue you an Identity Protection PIN — a number that must appear on your future returns so the IRS knows they really come from you. If one is issued, guard it like the number it protects; a new one is issued each filing season.

Step 3: Protect Your Credit and Your Accounts

A stolen Social Security number rarely stops at taxes, so while the IRS process runs, protect the rest of your financial life. Our step-by-step guide to getting started with identity theft recovery steps covers the general sequence in full; the essentials are these. Contact each of the three nationwide credit bureaus and place a credit freeze — a restriction that blocks new accounts from being opened in your name until you lift it — or a fraud alert, which asks businesses to take extra steps to verify identity before granting credit. A freeze is the stronger block; both are free to set up, and you can place one for each partner, because a thief who has one spouse’s details often has information about the household.

Next, create an identity theft report with the Federal Trade Commission, which produces a personal recovery plan and a report that many businesses accept as proof you reported the theft. Pull both partners’ credit reports and read them for accounts or addresses you do not recognize, and dispute anything wrong in writing, keeping copies. Finally, change the passwords on your email and financial accounts — email first, because password resets for everything else flow through it — and turn on two-factor authentication, the extra proof of identity, such as a code sent to your phone, that accounts ask for in addition to a password.

Step 4: File Your Real Return and Keep Filing

Identity theft does not pause your own tax obligations. You still file your real return, on time, for the correct amounts. Depending on the state of your case, the IRS may accept your electronic filing or may direct you to file on paper with the affidavit attached — follow whichever instruction the IRS gives you. Keep a complete copy of everything you file, because you may need to prove later what your genuine return said.

Be prepared for the process to be slower than a normal year. Sorting out two returns under one number takes the IRS time, and there is no set timeline anyone can honestly promise you. What you can control is responsiveness: open every IRS letter promptly, answer requests for information promptly, and note each contact in your log. In later filing seasons, file as early as you reasonably can and use your Identity Protection PIN if one was issued.

Doing the Recovery as a Couple

Recovery involves two streams of work — the IRS stream and the credit-and-accounts stream — and couples do best when each stream has an owner. One workable split: one partner tracks everything IRS-related (notices, calls, the affidavit, the real return), while the other handles the bureaus, the credit reports, and the password changes. Both of you write into one shared log with four columns: the date, who you dealt with, what happened, and what happens next.

Two habits protect the relationship while you do this. First, open tax mail together during the recovery, because a notice addressed to one spouse often concerns the joint return you both signed. Second, aim your frustration at the situation, not at each other. Numbers get stolen from careful people; a number can be exposed in a breach at a company you have never heard of.

A Worked Example: One Couple’s February Surprise

Meet Nadia and Peter, a fictional couple invented for this example. In early February they sit down to file their joint return, expecting a refund of $1,800 — an invented round number used for illustration only. Their e-file is rejected within the hour: a return has already been filed under Nadia’s Social Security number. After the first ten minutes of disbelief, they work the steps in order: no resubmitting; straight to IRS.gov and its identity theft guidance, calling the number published there. Peter starts a notebook page as their log.

Over the next few evenings they complete the set: Nadia files the identity theft affidavit for her number; both place credit freezes with the three bureaus, since the thief clearly had household information; they read both credit reports, find one inquiry neither recognizes, and dispute it in writing; and they change their email and bank passwords and turn on two-factor authentication. Following the IRS’s direction, they file their real joint return on paper with the affidavit attached, keeping copies of everything. The case takes time to unwind, but every step is in the log — and when Nadia’s Identity Protection PIN arrives for the next filing season, it goes straight into the folder.

Habits That Make Next Tax Season Safer

File as early as you reasonably can. A legitimate return already on file makes a fraudulent one harder to slip through.
Consider an Identity Protection PIN for each partner before filing season. IRS.gov explains who can request one and how; the PIN adds a check that a return filed under your number really came from you.
Treat tax documents like cash. W-2s — the forms your employers send summarizing your pay — tax returns, and anything showing a Social Security number should be stored securely, and paper copies you no longer need should be shredded, not binned.
Keep Social Security cards out of wallets, and share the numbers only when you are sure who is asking and why.
Be skeptical of “IRS” contact that arrives by call, text, email, or social media, especially anything demanding urgent payment. The IRS generally starts by mail; verify everything through IRS.gov.
Remember children’s numbers too. A child’s Social Security number can be misused quietly for years; the credit bureaus can tell you whether a credit report exists for your child, which it normally should not.

Frequently Asked Questions

Our e-file was rejected. Does that definitely mean identity theft?

Not definitely. A rejection can also come from a simple error — a mistyped digit, or a dependent claimed on another return. But a rejection saying a return is already on file under your number is one of the classic signs, so treat it seriously: do not keep resubmitting, and follow the IRS identity theft steps on IRS.gov so the agency can tell you which it is.

Can we still receive our refund if a fraudulent return was filed?

The IRS works to sort out which return is the real one and to put your account right, and filing your genuine return with the affidavit is how you start that process. Expect it to take longer than a normal filing, and do not rely on informal timelines — the IRS will communicate with you by letter as your case moves, and IRS.gov explains how to check on your account.

Do both of us need to file an affidavit if we file a joint return?

Each person whose Social Security number was misused files their own affidavit. If only one partner’s number was involved, only that partner files, even though you file your taxes jointly. If you are unsure whose number was used, the IRS can tell you when you contact it — follow its direction rather than filing duplicates.

We received a notice about wages from a job neither of us has ever had. What is that?

That points to the employment kind of tax identity theft: someone working under your number, with their wages reported to the IRS under your name. Report it through the same IRS identity theft process. It is also worth checking your earnings record with the Social Security Administration — SSA.gov explains how — so your Social Security record, which your future benefits rest on, stays accurate.

Is a credit freeze better than a fraud alert?

They do different jobs. A fraud alert flags your file and asks businesses to verify identity more carefully before opening accounts; a freeze blocks access to your credit report itself, which stops most new accounts from being opened at all until you lift it. Many couples in this situation choose freezes for both partners because the block is stronger, and lift them temporarily only when they themselves apply for credit.

Someone called claiming to be the IRS and said we must pay today. Is that real?

Almost certainly not. The IRS generally begins contact about a balance or a problem by mail, and it does not demand immediate payment by gift card, wire transfer, or payment app, or threaten instant arrest. Hang up, do not call back any number the caller gave you, and if you are worried there is a real issue, find the IRS’s number yourself on IRS.gov.

Your Next Step

Do this tonight, before anything else: gather every IRS letter and notice in the house into one folder, start your shared log with today’s date and what you already know, and then read the IRS’s current identity theft guidance on IRS.gov. Those three small moves turn a frightening surprise into an organized project with a first page — and every later step in this guide hangs off them.

This article is for general educational purposes only and is not financial, tax, legal, or investment advice. Consult a licensed professional about your situation.

Identity Theft Recovery Steps During Tax Season: A Planning Guide for Couples