How to check if your tax information was stolen
If your tax return is suddenly rejected, a refund disappears, or the IRS says a return was already filed in your name, tax identity theft may already be in progress.
Knowing how to check if your tax information was stolen can help you catch fraud early and limit damage to your refund, credit, and personal records.
Tax-related identity theft often starts quietly, and the first clue is not always a hacked IRS account.
It may show up as an unfamiliar tax transcript, an IRS notice, or a return that was filed before you did.
What tax information thieves usually target
Tax criminals typically want data that lets them file a fraudulent return or access sensitive financial accounts.
The most valuable information usually includes your Social Security number, date of birth, current and previous addresses, and wage or employer details.
They may also look for:
- W-2 or 1099 forms
- Prior-year tax returns
- IRS online account credentials
- Bank account and routing numbers
- Employer identification details
- Personal data from data breaches and phishing emails
Because tax filing relies on identity verification, even partial data can be enough for a scammer to submit a return or impersonate you with the IRS.
Clear signs your tax information may have been stolen
Some warning signs are direct, while others are subtle.
If you are trying to determine how to check if your tax information was stolen, start by looking for these red flags.
You cannot e-file because a return was already filed
If your e-file is rejected with a message saying your Social Security number has already been used, that is one of the strongest signs of tax identity theft.
It may mean someone filed a fake return using your personal details.
You receive IRS notices for returns you did not file
Letters such as IRS Letter 5071C, 4883C, or CP01A can indicate suspicious activity.
These notices may ask you to verify your identity, confirm a return, or respond to account-related changes you did not make.
Your IRS account shows unfamiliar activity
Unexpected changes to your online IRS account, such as a new address, bank account, or email, can signal unauthorized access.
Review profile details, transcript history, and account alerts if available.
You stop receiving expected tax documents
If a W-2, 1099, or other tax form never arrives, someone may have changed your mailing address or intercepted your mail.
Missing forms can also delay your ability to spot that a fraudulent return was filed.
You get an IRS wage or income transcript you did not request
An unfamiliar transcript request or a transcript that lists wages, employers, or income sources you do not recognize can point to misuse of your tax identity.
Income transcript records are useful for spotting filed returns and tax filing discrepancies.
How to check if your tax information was stolen step by step
Use a structured review if you suspect fraud.
The goal is to confirm whether your tax identity, return data, or IRS account has been compromised.
1. Review IRS notices and account messages
Read every IRS letter carefully and note the notice number, date, and requested action.
Compare the notice with your own filing status and recent activity.
If a notice refers to a return, payment, or address change you do not recognize, treat it as suspicious.
2. Pull your IRS tax transcript
Request your transcript through the IRS Online Account or by mail.
Compare the transcript to your records, including reported wages, filing status, dependents, and refund or payment entries.
Unfamiliar employer names, duplicate filings, or an incorrect adjusted gross income can indicate fraud.
3. Check your tax software and email activity
If you use tax preparation software, review login history, password resets, and connected email accounts.
A thief who gained access to your email may have reset tax-related passwords, intercepted verification links, or retrieved prior returns.
4. Confirm whether your return was rejected for duplicate filing
If you tried to file electronically, the rejection code matters.
A duplicate filing rejection is often a direct indicator that a return already exists under your Social Security number.
Save the rejection notice and the exact code for reporting.
5. Look for data-breach exposure
Check whether your email address, phone number, or other personal details were involved in a known breach.
Breaches involving payroll providers, healthcare companies, schools, and tax preparers can expose information used for tax fraud.
If your data was breached, assume your tax details may also be at risk.
IRS tools that help you confirm suspicious tax activity
The IRS offers several ways to verify what has happened.
These tools are especially useful when you are trying to separate a filing error from identity theft.
- IRS Online Account: review notices, balances, and some profile information.
- Tax transcripts: compare wage and filing data against your records.
- Identity Verification notices: respond promptly if the IRS asks you to confirm who you are.
- Identity Protection PIN (IP PIN): helps prevent future fraudulent filings.
If you already have an IP PIN, keep it secure and use it every year.
An IP PIN adds an extra authentication layer that helps block unauthorized e-filing under your name.
What to do immediately if your tax information was stolen
Fast response can reduce further damage.
If you confirm or strongly suspect fraud, take these steps in order.
- Contact the IRS Identity Theft line at 800-908-4490.
- File IRS Form 14039, Identity Theft Affidavit, if directed.
- Report any stolen refund or unauthorized return to the IRS and, if needed, the Federal Trade Commission.
- Change passwords for your email, tax software, and financial accounts.
- Place a fraud alert or credit freeze with the major credit bureaus if broader identity theft is possible.
- Keep copies of notices, screenshots, and transcripts for your records.
If a preparer or employer caused the problem, document every communication.
Clear records help the IRS and your financial institutions understand the sequence of events.
How to prevent tax identity theft in the future
Prevention matters because tax theft is often repeatable once criminals have your data.
A few habits can make your information much harder to misuse.
- File taxes early in the season whenever possible.
- Use strong, unique passwords for tax and email accounts.
- Enable multi-factor authentication on all financial services.
- Shred old tax documents instead of throwing them away.
- Monitor your mailbox and use a secure delivery location.
- Review IRS and state tax notices as soon as they arrive.
- Ask your tax preparer about data security practices and client portal protections.
If you have been the victim of tax identity theft before, consider requesting an IP PIN every year and checking your IRS transcript at least once before filing.
That habit can reveal suspicious activity before it affects your refund.
When to contact a tax professional or identity theft specialist
If you find multiple signs of compromise, or if your case involves a false return, stolen refund, or repeated notices, a qualified tax professional can help you document the issue and communicate with the IRS.
Identity theft recovery may also require a consumer protection or credit specialist if the theft extends beyond tax records.
You should seek help if:
- Your return is repeatedly rejected
- IRS notices do not match your records
- You see unauthorized wage or income entries
- Your refund was issued to another account
- Your personal data appears in multiple breaches
Handling the problem early gives you the best chance of correcting the record, stopping future misuse, and restoring control over your tax identity.