Tax scams and refund identity theft: locking your tax life before someone else files it

Tax identity theft is brutally simple: a criminal with your name and Social Security number e-files a fake return in January, claims a fat refund to a prepaid card, and vanishes. You discover it in March when YOUR e-filed return bounces with 'a return has already been filed for this SSN' — then spend months proving you're you while your real refund waits. Add the ecosystem of IRS impersonation calls, phishing texts, ghost preparers, and too-good-to-be-true credit schemes, and tax season is high season for fraud. The good news: the strongest defenses are free and take about an afternoon.

How refund fraud actually works

Fraudsters don't need your W-2 — they need your SSN, name, and birthdate (routinely available from data breaches), and they need to file BEFORE you do. They invent plausible income numbers, claim refundable credits, and direct the refund to accounts they control. The IRS catches a lot of it with filters, but the arms race is ongoing, and the person left untangling a flagged SSN is you. That mechanic explains the two best defenses: file early (beat them to your own SSN) and use an Identity Protection PIN (make your SSN unfileable without a code they don't have).

1. 1
   Get an IP PIN

   The Identity Protection PIN is a six-digit code, free from the IRS, without which nobody — including you — can e-file a return under your SSN. Sign up once at irs.gov via your IRS online account; a new PIN generates each year. This single step effectively ends refund fraud against you. Get one for your spouse and dependents too — dependents' SSNs get hijacked for credit claims.

2. 2
   Create your IRS online account (before someone else does)

   Claim your identity at irs.gov with ID.me verification. You'll see transcripts, notices, and any return activity on your SSN — and an account you control is an account a fraudster can't create in your name.

3. 3
   File early

   The fake return only works if it arrives first. Filing in late January or February closes the window. (Balance this against waiting for corrected 1099s if you have brokerage accounts — early doesn't mean day one.)

4. 4
   Freeze your credit

   Free at all three bureaus, and it blocks the adjacent crimes — loans and cards opened with the same stolen data. Thaw it temporarily when you actually need credit.

The scam catalog: what the IRS will never do

• The IRS initiates contact by POSTAL MAIL. It does not call to demand immediate payment, text refund links, email about 'unclaimed funds,' or DM you on social media.
• Nobody legitimate demands payment via gift cards, wire transfers, crypto, or payment apps — that sentence alone defuses the classic phone scam.
• The IRS doesn't threaten same-day arrest, deportation, or license revocation. Fear plus urgency plus unusual payment method = scam, every time.
• 'Verify your identity to release your refund' texts and emails are phishing for exactly the credentials used in refund fraud. Type irs.gov yourself; never tap the link.
• Social media 'credit hacks' — fuel tax credits for commuters, fake household employees, inflated withholding — are fraud with YOUR signature on it. The promoters vanish; the penalties (up to $5,000 per frivolous return, plus repayment) land on the filer.

If it's already happened

1. E-file rejected for a duplicate SSN: paper-file your true return with Form 14039 attached, and keep paying/withholding as normal — your actual tax obligations continue while the case resolves.
2. Got an IRS letter about a return or income you don't recognize (5071C identity-verification letters are common): respond through the official verification process at irs.gov or the number printed on the notice — never a number from a call or text.
3. Report impersonation scams to TIGTA (the IRS's inspector general) and phishing to phishing@irs.gov.
4. Visit IdentityTheft.gov for the FTC's recovery plan covering the non-tax fallout, and place fraud alerts or freezes at the bureaus.
5. A W-2 from an employer you never worked for means someone used your SSN for a JOB — address both the IRS side and the Social Security earnings record.
6. Stuck for months with a refund you need? The Taxpayer Advocate Service exists for exactly this hardship.

Scam or real? A field guide

The pattern behind every fraud in this article is manufactured urgency meeting unverified identity. The IRS moves at the speed of certified mail; scammers need you to act in the next ten minutes, before you think or check. Adopting a one-sentence household policy defeats nearly all of it: anything tax-related gets verified by logging into the IRS account directly or calling the number on irs.gov — never through a link, a caller's callback number, or a payment app. Teach it to the most trusting person in your family; that's who the scripts are written for.

The bottom line

Tax fraud has two flavors: strangers filing as you, and strangers scaring you into paying them. An IP PIN and an IRS online account neutralize the first; knowing the IRS communicates by mail — never by gift card demand — neutralizes the second. Add early filing, a credit freeze, and a preparer who actually signs the return, and you've closed every common door for the cost of one afternoon. In tax fraud, unlike taxes, prevention really is nearly free.