TL;DR: The IRS Security Summit concluded its September 2026 awareness series by warning taxpayers and tax professionals to strengthen defenses against tax identity theft using tools like Identity Protection PINs, multifactor authentication, and Form 14039. If you already have a tax balance and your account is compromised, you can still pursue tax debt relief options while the IRS investigates the fraud on your account. Acting quickly, filing Form 14039, and securing an IP PIN are your first critical steps.
By Fresh Start Initiative
Why This Warning Matters Right Now
If you already owe the IRS money and you learn that a thief has also gotten into your tax account, the panic can feel overwhelming. You are juggling an existing tax balance and now facing potential fraudulent returns filed under your name. That is a real and serious situation, and you are not alone in facing it.
The good news is that the IRS has tools designed exactly for this moment, and there are tax debt relief paths available even when identity theft complicates your account. The first step is understanding what the IRS just told everyone, and the second step is acting on it.
IR-2026-111, issued September 16, 2026, wrapped up the IRS Security Summit’s five-week “Protect Your Clients; Protect Yourself” summer awareness campaign. The message was blunt: identity thieves are getting more sophisticated, and both taxpayers and tax professionals need to act now.
What the IRS Security Summit Actually Said
The Security Summit is not just an IRS project. It is a public-private partnership of tax professionals, industry partners, state tax agencies, and the IRS that has worked since 2015 to protect the tax system from identity theft and fraud. Now in its 11th year, it brings real enforcement muscle and real-world data to the fight against fraud.
The September campaign highlighted three specific defensive tools for every taxpayer: multifactor authentication (MFA) on all accounts, Identity Protection PINs (IP PINs), and secure IRS Online Accounts. The IRS also called out a growing list of scams that taxpayers need to recognize before they become victims.
The September 4, 2026 release (IR-2026-106) put it plainly: “Taxpayers and tax professionals should take advantage of the powerful tools available to help protect against identity theft.” That advice applies equally whether you are current on your taxes or carrying a balance.
Warning Signs Your Tax Account Has Been Compromised
Tax identity theft does not always announce itself loudly. Sometimes you only find out when something goes wrong during filing, or when an unexpected IRS notice arrives in your mailbox. Knowing the warning signs is the first line of defense.
Watch for these red flags:
- Your e-filed return is rejected because a return using your Social Security number was already submitted.
- You receive an IRS notice about wages from an employer you do not recognize.
- You get a notice claiming you owe additional taxes for a year you did not file a return.
- An IRS Online Account is created in your name without your authorization.
- You receive an unrequested tax transcript or a refund you never expected.
- You receive IRS Letter 5071C asking you to verify your identity online, or Letter 4883C asking you to call the IRS.
If any of these happen, do not wait. The IRS has confirmed that tax professionals and taxpayers who suspect a breach should report it immediately. The same urgency applies to individual taxpayers managing their own accounts.
Free Eligibility Check
See if you qualify for tax debt relief
Take 60 seconds to find out which IRS programs you may qualify for. No obligation, no cost.
Check Your Eligibility →The Three Tools the IRS Says Every Taxpayer Needs Now
The September Security Summit releases focused on three specific protections. These are not optional extras. For anyone with an existing tax balance, they are especially critical, because a compromised account on top of existing debt can create serious processing delays in any resolution plan.
| Protection Tool | What It Does | Who Can Use It | Where to Get It |
|---|---|---|---|
| Identity Protection PIN (IP PIN) | A six-digit code required on your return to prevent anyone else from filing under your SSN or ITIN | Any taxpayer with an SSN or ITIN who can verify their identity; spouses and dependents are also eligible | IRS.gov/IPPIN |
| Multifactor Authentication (MFA) | Requires at least two forms of identity verification to access tax accounts and software | All taxpayers and tax professionals; required for tax firms under the FTC Safeguards Rule | Enabled through your IRS Online Account and tax software settings |
| IRS Online Account | Gives you real-time visibility into your tax records, balances, notices, and IP PIN status | Any taxpayer who can complete IRS identity verification | IRS.gov Online Account |
| Form 14039 (Identity Theft Affidavit) | Officially notifies the IRS that your identity has been used fraudulently and triggers an account investigation | Taxpayers whose SSN or ITIN was used to file a fraudulent return, or those instructed by the IRS to file it | IRS Form 14039 |
An IP PIN is a six-digit number that prevents someone else from filing a tax return using your Social Security number or ITIN. It is known only to you and the IRS. Once you have one, it must appear on every federal tax return you file, and a new one is issued each year for added security. Critically, the IRS will never call, email, or text you to ask for your IP PIN. If anyone contacts you claiming to need your IP PIN, that is a scam.
Step-by-Step: What to Do If Your Account Is Hit While You Already Owe
Carrying a tax balance when identity theft strikes requires you to manage two problems at once. The steps below are designed to help you address both without letting either one spiral out of control. Moving fast matters because fraudulent filings can slow down IRS processing of your legitimate account, which can in turn delay any payment plan or tax debt relief arrangement you are pursuing.
- Do not ignore unexpected IRS notices. Letter 5071C, Letter 4883C, or any notice about a return you did not file is a signal to act immediately. Call the number on the notice or visit IRS.gov to respond.
- File Form 14039, the Identity Theft Affidavit. This officially puts the IRS on notice that your identity was used fraudulently. It triggers an account marker that flags suspicious activity and starts an investigation. Attach it to a paper return or submit it as directed by the IRS.
- Get an IP PIN right away. Visit IRS.gov and use the “Get an IP PIN” tool. Verify your identity through your IRS Online Account. Even if a thief already filed under your name, an IP PIN protects all future tax years.
- Secure your IRS Online Account with multifactor authentication. Enable MFA so that no one else can access your account information. Check your account for unauthorized changes, unknown addresses, or unfamiliar payment arrangements.
- Notify your tax professional immediately. If you use a preparer, alert them. They need to know your account has been flagged so they do not inadvertently submit information that conflicts with an open investigation.
- Keep pursuing your existing tax debt resolution. Identity theft does not erase the balance you legitimately owe. It may temporarily complicate processing, but IRS programs like installment agreements and Offer in Compromise remain available. Explore your tax debt relief options while the identity theft case is being resolved in parallel.
- Document everything. Keep copies of all IRS letters, your Form 14039 submission, any police reports you file, and correspondence with credit bureaus. This paper trail protects you throughout the resolution process.
- Consider professional help. When you have both identity theft and an outstanding tax balance, the complexity can escalate quickly. A tax debt relief professional can communicate with the IRS on your behalf and make sure neither issue derails the other.
Free Eligibility Check
See if you qualify for tax debt relief
Take 60 seconds to find out which IRS programs you may qualify for. No obligation, no cost.
Check Your Eligibility →How Identity Theft Interacts With an Existing Tax Balance
One of the most stressful questions taxpayers ask is whether identity theft will make their existing debt worse. The answer: it can complicate things, but it does not create new legitimate liability. If someone files a fraudulent return under your name showing income you did not earn, the IRS will investigate. That process takes time, and during that time, some account actions may be slowed.
The important distinction is between fraudulent debt, which the IRS works to remove once identity theft is confirmed, and your real tax balance, which remains your responsibility. You can and should continue working toward tax debt relief on your legitimate balance. Programs like installment agreements, Currently Not Collectible status, or an Offer in Compromise can run alongside an identity theft investigation. The IRS does not require you to resolve one before addressing the other.
If you receive collection notices while an identity theft case is open, you have the right to explain your situation to the IRS. If the notices are related to the fraudulent activity, the IRS should pause collection on those specific items. See how IRS payment plans and resolution programs work so you understand what is available to you.
The Scams the IRS Is Watching Right Now
The Security Summit’s final September release specifically named the scam types most actively targeting taxpayers and tax professionals. Knowing these schemes protects your account and your existing tax debt resolution plan from being disrupted.
Common active schemes include “new client” scams, where fraudsters pose as prospective clients or taxpayers and send malicious links or attachments disguised as tax documents. EFIN, PTIN, and CAF scams target preparer identification numbers. IRS impersonation arrives through email, text, direct messages, spoofed phone calls, and automated calls designed to steal credentials or deliver malware.
Remember: the IRS will never contact you by email, text, or social media to request your IP PIN, Social Security number, or payment information. Legitimate IRS contact almost always starts with a mailed letter.
Frequently Asked Questions
What should I do first if I suspect someone filed a tax return using my Social Security number?
File Form 14039, the IRS Identity Theft Affidavit, as soon as possible. This officially alerts the IRS to the fraud and triggers an account investigation. You should also get an IP PIN through your IRS Online Account at IRS.gov/IPPIN to prevent the thief from filing under your name in future years. If your e-filed return was rejected because a duplicate return was already filed, attach Form 14039 to a paper return and mail it to the IRS.
Will identity theft on my account make my existing tax debt worse?
No. Identity theft does not create new legitimate tax liability for you. The IRS distinguishes between fraudulent activity and your real tax balance. If a fraudulent return generated a fake debt, the IRS works to remove that once the identity theft is confirmed. Your actual balance remains separate, and you can continue pursuing tax debt relief on that balance while the fraud investigation proceeds.
Can I still get an installment agreement or Offer in Compromise while an identity theft case is open?
Yes. An open identity theft investigation does not automatically block you from IRS resolution programs. Tax debt relief programs like installment agreements, Currently Not Collectible status, and Offer in Compromise can be pursued in parallel with a fraud investigation. A tax debt relief professional can help you manage both tracks simultaneously and communicate with the IRS on your behalf.
What is an IP PIN and do I really need one if I already have a tax balance?
An IP PIN is a six-digit number issued by the IRS that must appear on your tax return to verify your identity. It prevents anyone else from filing a return under your Social Security number or ITIN. Yes, you need one regardless of whether you carry a tax balance. In fact, having a balance makes getting an IP PIN more important, not less, because a fraudulent filing can disrupt your account and complicate any payment or resolution plan you have in place. Get yours at IRS.gov/IPPIN.
What are the warning signs that my tax account has already been compromised?
The most common signs include a rejected e-filed return because a return using your SSN was already filed, an IRS notice about income from an employer you do not recognize, an IRS letter claiming you owe taxes for a year you did not file, or a notice that an IRS Online Account was created without your knowledge. IRS letters 5071C and 4883C are identity verification requests the IRS sends when it detects suspicious activity tied to your SSN.
Will the IRS ever contact me by phone or text about my IP PIN or my tax account being compromised?
No. The IRS will never call, email, text, or reach out through social media to request your IP PIN or to tell you your account has been hacked. If you receive any such contact, treat it as a scam and do not respond. Legitimate IRS communication about identity theft and account security always begins with a mailed letter.
