IRS Identity Protection PIN: How to Request One to Prevent Refund Fraud
Published Thu, Jul 2 2026 · 2:25 PM ET | Updated 20 seconds Ago
Fact-Checked & Reviewed by Adarsha Dhakal
Adarsha Dhakal is the Founder and Editor of Investozora, an independent U.S. financial news publication he launched in August 2025. He covers IRS tax refunds, Social Security benefit payments, federal payment systems, Federal Reserve policy, and U.S. Treasury operations, explaining how government financial decisions affect the daily lives of American households. All reporting is sourced directly from official government records including IRS.gov, SSA.gov, FederalReserve.gov, and fiscal.treasury.gov.

Read More →

Taxpayer entering a six digit IRS Identity Protection PIN while filing taxes securely on a laptop

An IRS Identity Protection PIN adds a six digit verification step that helps prevent fraudulent tax filings.

Google Prefer Investozora on Google

Get real-time financial updates.

An IRS Identity Protection PIN is a six digit code the government adds to your tax return so nobody else can file using your Social Security number. You get a new one every year.

If a criminal tries to file first using your name, the wrong PIN stops that fraudulent return from going through before it ever reaches processing. Tax identity theft doesn’t just cost money, it costs time, sometimes months of it, while the IRS untangles a fraudulent filing from a legitimate one.

The IRS Identity Protection PIN program is one of the agency’s strongest tools for preventing that scenario before it starts, and unlike many federal identity programs, it is now available to almost anyone who wants one, not just confirmed victims. This guide walks through exactly what the IP PIN does, who should request one, how to get it, and what to do if you ever lose it.

What An IP PIN Does

An IP PIN is a six digit number issued by the Internal Revenue Service that verifies your identity the moment you file a federal tax return. It doesn’t replace your Social Security number, your IRS Online Account, or your signature, it works alongside all of them as an extra authentication layer specific to that year’s filing.

It only applies to federal returns, so it has no bearing on state tax filings, and it must be entered correctly every single time you file, whether electronically or on paper, or the return gets flagged.

Why The IRS Built This Program

Tax related identity theft became a persistent, costly problem as more of the filing process moved online and stolen Social Security numbers became easier for criminals to obtain through data breaches.

The IP PIN program began as a narrow tool limited to confirmed victims, then expanded so any taxpayer could opt in voluntarily as a preventive measure, following guidance detailed on Identity Theft Central.

That expansion matters because identity theft doesn’t announce itself in advance. Someone with clean, unstolen credentials today can still become a target tomorrow, and the IP PIN gives every taxpayer a way to close that door before it’s ever tested.

Who Should Request One

Anyone with a Social Security number or Individual Taxpayer Identification Number is eligible to voluntarily enroll, regardless of income, filing history, or whether they’ve ever experienced identity theft. That includes retirees, self employed workers, military members, college students, and even dependents.

Confirmed victims of tax related identity theft don’t need to request anything, since the taxpayer identity theft guide confirms the IRS automatically enrolls them and mails a renewal notice every filing season afterward.

For everyone else, enrollment is optional but strongly encouraged, particularly for anyone who has been part of a data breach notification, uses a shared household filing situation, or simply wants the strongest available layer of protection.

How To Request Your PIN

The fastest method is the IP PIN tool available through your IRS Online Account, generally accessible for most of the year outside a brief winter maintenance window. Create or sign in to your account, complete identity verification if it’s your first time, and the tool will generate your six digit PIN immediately once your identity is confirmed.

You’ll then choose between two enrollment types. Continuous enrollment keeps you in the program automatically every year going forward. One time enrollment covers only the current calendar year and quietly drops you at year end unless you re-enroll.

If you can’t verify your identity online and your adjusted gross income is below $84,000 filing individually or $168,000 filing jointly, you can instead submit Form 15227 by mail. Taxpayers who don’t meet either path can schedule an in-person visit at a Taxpayer Assistance Center to complete verification face to face.

Retrieving A Lost PIN

If you’ve misplaced your current PIN, sign back into your IRS Online Account and the current year’s PIN will display on your profile page immediately, the same place you originally used to enroll.

Some enrolled taxpayers, particularly confirmed identity theft victims, receive their new PIN automatically each year by mail through a CP01A notice sent between mid-December and early January.

If you enrolled voluntarily online, you generally won’t get a mailed notice at all and must retrieve the new PIN yourself each January. Never guess at a PIN or reuse last year’s number, since an incorrect entry causes an outright e-file rejection rather than a simple delay.

Filing With Your PIN

Your IP PIN goes in a specific field on your federal return, whether you file through commercial tax software, a professional preparer, or fill out a paper form yourself. Joint filers each enter their own PIN if both spouses are enrolled, and any dependent with an assigned IP PIN needs it entered on the return claiming them as well.

If you use a paid preparer, share your PIN with them directly and only them, ideally at the time you hand over your documents rather than over email, where interception risk is higher. The IRS will never call, text, or email asking for your IP PIN, and any message claiming otherwise should be treated as a scam attempt.

What Happens If You File Without It

If the IRS has an IP PIN on file for you and your return arrives without it, or with an incorrect one, electronic filing will be rejected outright rather than simply flagged for review. You can correct the entry and resubmit electronically once you’ve retrieved the accurate PIN.

Paper filing without the correct PIN is technically possible but leads to significant delays, since the return then requires manual identity verification before it can be processed at all, often adding weeks or months compared with a normal filing timeline.

Given how routine the refund timeline already is for accurately filed returns, an avoidable PIN error is one of the more painful, entirely preventable delays a taxpayer can create for themselves.

Does It Change Every Year

Yes. A new six digit IP PIN is generated annually for every enrolled taxpayer, and last year’s PIN will not work on this year’s return under any circumstance. This annual reset is intentional, since a static PIN would eventually become just as vulnerable to theft as the Social Security number it’s protecting.

Voluntary participants who no longer want to be enrolled can opt out through their IRS Online Account, a process that takes up to 72 hours to fully process, provided they’ve never been an identity theft victim. Confirmed victims are enrolled permanently and cannot opt out, since the protection remains necessary for as long as their information stays compromised.

Protecting Your Refund Further

An IP PIN works best as one layer within a broader security routine, not a standalone fix. Pairing it with a strong, unique password on your IRS Online Account, enabling multi factor authentication wherever it’s offered, and watching for phishing emails or texts closes most of the remaining gaps criminals rely on.

Tool What It Protects Changes Yearly
Social Security Number Your core tax identity No
IRS Online Account Access to your IRS records and tools No
Identity Protection PIN Confirms it’s really you filing Yes, every year

If you ever suspect your information has already been compromised, whether through a data breach notice or a rejected return you didn’t file, submitting Form 14039 starts the IRS’s formal identity theft resolution process. The Federal Trade Commission also maintains its own recovery plan tool for identity theft generally, and the cybersecurity agency CISA publishes broader guidance on protecting personal data that extends well beyond tax season alone. Choosing direct deposit timing that lands your refund into a verified account you control, rather than a paper check, closes yet another fraud vector the IRS has been actively working to eliminate.

What is an IP PIN?

An IRS Identity Protection PIN (IP PIN) is a unique six-digit number that proves it’s really you when a federal tax return is filed under your Social Security number or ITIN. It serves as an additional layer of identity verification beyond your name, Social Security number, and tax records. If someone tries to file a fraudulent return without your current IP PIN, the IRS rejects the submission before it can be processed.

Is an IP PIN free?

Yes. The IRS provides the Identity Protection PIN program at no cost to eligible taxpayers. Whether you obtain it through your IRS Online Account, Form 15227, or an in-person identity verification appointment, there are no enrollment or renewal fees. Be cautious of anyone charging money to issue or renew an IP PIN, as the official program is completely free.

Who can get one?

Most taxpayers with a valid Social Security number or Individual Taxpayer Identification Number (ITIN) can request an IP PIN after successfully verifying their identity. Eligibility is not limited to people who have already experienced tax-related identity theft. This means you can enroll proactively to help protect future tax returns before fraud ever occurs.

Does it change yearly?

Yes. The IRS issues a brand-new six-digit IP PIN every calendar year, and only the current year’s PIN is accepted on your federal return. Previous PINs automatically expire and cannot be reused. Checking for your new PIN each filing season is an important step before submitting your tax return.

Can I reuse old PINs?

No. Every IP PIN is valid for only one filing year, so last year’s number will not work on a current return. Entering an expired PIN has the same effect as entering the wrong one, resulting in an electronic filing rejection. Always retrieve your latest IP PIN through your IRS Online Account before filing.

How do I recover it?

If you forget or lose your current IP PIN, sign in to your IRS Online Account to view it instantly. Some taxpayers, particularly those enrolled after identity theft cases, may also receive their annual PIN by mail in a CP01A notice. If you cannot access either option, you’ll need to complete IRS identity verification before a replacement can be provided.

Does it protect states?

No. An IRS Identity Protection PIN only protects federal income tax returns filed with the IRS. State tax agencies operate separately, and many have their own identity verification systems or fraud prevention programs. If you’re concerned about state tax fraud, check whether your state’s tax department offers additional security measures.

Can spouses both enroll?

Yes. On a joint federal tax return, each spouse may have their own separate IP PIN. If both spouses are enrolled, both six-digit PINs must be entered correctly when filing the return. Leaving out either spouse’s PIN can cause the IRS to reject the electronic filing.

Do dependents need one?

Sometimes. If a dependent has been assigned an IP PIN by the IRS, that PIN must also be included on the tax return claiming the dependent. This helps prevent someone else from fraudulently claiming that person for tax benefits. Parents or guardians should verify whether an enrolled dependent has received a new IP PIN before filing each year.

Can I opt out?

Voluntary participants can generally leave the IP PIN program through their IRS Online Account if they decide they no longer want annual PIN protection. The opt-out request typically takes up to 72 hours to become effective. However, taxpayers who were enrolled by the IRS because they were confirmed victims of tax-related identity theft cannot opt out, since the added protection remains permanently attached to their account.

Bottom Line

An IRS Identity Protection PIN (IP PIN) is a free, six-digit code that adds an extra layer of security to your federal tax return and helps stop refund fraud before it happens. Most taxpayers with a Social Security number or ITIN can voluntarily enroll through their IRS Online Account, Form 15227, or an in-person IRS appointment.

Because a new PIN is issued each year, using the correct one is essential to avoid e-file rejection. Combined with strong passwords, multi-factor authentication, and phishing awareness, an IP PIN is one of the simplest and most effective ways to protect your tax identity.

Adarsha Dhakal
Written & Researched by Adarsha Dhakal
Adarsha Dhakal is the Founder and Editor of Investozora, an independent U.S. financial news publication he launched in August 2025. He covers IRS tax refunds, Social Security benefit payments, federal payment systems, Federal Reserve policy, and U.S. Treasury operations, explaining how government financial decisions affect the daily lives of American households. All reporting is sourced directly from official government records including IRS.gov, SSA.gov, FederalReserve.gov, and fiscal.treasury.gov.

Leave a Reply

Your email address will not be published. Required fields are marked *