Can anyone get an IP PIN, or only identity theft victims?

Anyone with a Social Security number or ITIN can voluntarily opt in. The program was originally limited to confirmed identity theft victims, but the IRS opened it to all taxpayers who can verify their identity. Confirmed victims are enrolled automatically and cannot opt out.

How long is an IP PIN valid?

An IP PIN is valid for one calendar year only. A new six digit number is generated each year, typically available in your IRS Online Account in early January. Using the prior year number on the current year return will cause the return to reject.

What happens if I lose my IP PIN?

Retrieve it through your IRS Individual Online Account, which shows the current year number immediately. If you cannot access the account, you can request a reissue by phone after identity verification, though that route mails the number and takes considerably longer.

Do I need to give my IP PIN to my tax preparer?

Yes, if you want the return to be accepted electronically. The number must be entered on the return itself. The IRS will never call, email, or text you asking for it, so any unsolicited request for your IP PIN is a scam regardless of how official it looks.

What is Notice CP01A?

Notice CP01A is the letter the IRS mails to enrolled taxpayers each year containing the IP PIN for that year. If you are enrolled and did not receive it, retrieve the number from your IRS Online Account rather than waiting for a replacement letter, because the mailing does not always reach people who have moved.

IRS Form Guide

IRS Identity Protection PIN

A six digit number that makes it effectively impossible for someone else to file a tax return in your name. Free, voluntary, and available the same day.

Book a Free Initial Consultation

A guide by Taxstra Tax & Accounting · CPA-led tax strategy for business owners

Your Guide

01What an IP PIN Actually Does 02Three Ways to Get One 03The Annual Renewal Nobody Expects 04If You Are Already a Victim 05Frequently Asked Questions

IRS Form Guides>IRS IP PIN

Written by Bryan Martin, CPA, Managing Partner and Founder of Taxstra. Last updated August 15, 2026.

Quick answer

An IRS Identity Protection PIN is a six digit number that must appear on your tax return for it to be accepted. Without it, a fraudulent return filed in your name is rejected. Any taxpayer can opt in through the Get an IP PIN tool in their IRS Online Account, and the number changes every year.

Tax-related identity theft works because filing a return requires very little that is actually secret. A name, a Social Security number, and a date of birth are enough, and all three are widely available after two decades of data breaches.

An Identity Protection PIN closes that gap. It adds a number the IRS knows and a thief does not, and without it an electronically filed return in your name is rejected outright. It costs nothing and takes about ten minutes.

What an IP PIN Actually Does

It moves you from detecting fraud afterward to preventing it up front.

Without an IP PIN

A thief files early using your Social Security number
They claim a refund and it gets paid
Your real return is rejected as a duplicate
You file Form 14039 and switch to paper
Your legitimate refund is delayed, often for months

With an IP PIN

A thief files without the number
The return is rejected immediately
No fraudulent refund is issued
Your return processes normally
You never find out it happened

Why it works

The IP PIN is not a password you create, it is a number the IRS generates and stores against your account. There is nothing to guess and nothing that leaks in a breach of a third party, because no third party has it.

Three Ways to Get One

Only the first is immediate.

Online, same day

Use the Get an IP PIN tool inside your IRS Individual Online Account. Identity verification requires a photo ID and, usually, a selfie match. The number appears immediately once you are through. This is the route to use.

Form 15227, by mail

Available if your income is below the published threshold and you cannot verify online. The IRS calls you to verify, then mails the number, and it applies to the following filing season rather than the current one.

In person at a Taxpayer Assistance Center

Requires an appointment and two forms of identification. The fallback when online verification fails and Form 15227 does not apply.

Taxstra CPA Tip

Taxstra Tip

Enroll every member of the household who has a Social Security number, including dependents. Child identity theft is common precisely because nobody checks a seven year old's credit, and a fraudulent dependent claim can block your own return from being accepted.

The Annual Renewal Nobody Expects

The number changes every January, and last year's will reject your return.

An IP PIN is valid for one calendar year. The IRS generates a new one each year and makes it available in your Online Account in early January. Enrolled taxpayers also receive Notice CP01A by mail with that year's number.

Watch Out

The most common IP PIN failure

Someone enrolls, saves the number somewhere sensible, and uses it again the following year. The return rejects with an IP PIN mismatch, which looks alarming and is entirely routine. Pull the current year number from your Online Account and refile.

Do not rely on the CP01A letter arriving. It goes to your address of record, which is whatever address was on your last filed return, and it is one of the more commonly lost pieces of IRS mail. The Online Account is authoritative and always current.

If You Are Already a Victim

The sequence matters, and an IP PIN is not the first step.

If your electronically filed return was rejected because a return already exists under your Social Security number, you are past prevention and into remediation. Confirmed victims are enrolled in the IP PIN program automatically once the case is resolved, so applying is not the immediate task.

1. File Form 14039, the Identity Theft Affidavit

This opens the case with the IRS Identity Theft Victim Assistance unit.

2. File your real return on paper

Electronic filing stays blocked while the duplicate exists. Your return is still due, and filing it protects your refund claim.

3. Pull a tax account transcript

It shows what the fraudulent return claimed, which is how you know what has to be unwound.

4. Expect a long resolution timeline

These cases historically take many months. Keep filing on time each year while it is open.

Step three is where the tax account transcript earns its keep, since it shows exactly what was filed and what was paid out. If the transcript instead shows assessments for years you never filed, that is usually a substitute for return rather than identity theft. And if a letter prompted all of this, check it against the CP14 balance due notice or the CP3219A notice of deficiency before responding, because the deadlines differ sharply between them.

Return Rejected Because One Was Already Filed?

That is identity theft, and the recovery process has a specific sequence that matters. A Taxstra CPA can walk you through it. The initial consultation is free.

Frequently Asked Questions

The fastest route is the Get an IP PIN tool in your IRS Individual Online Account, which issues the number immediately after identity verification. If you cannot verify online and your income is under the published threshold, you can file Form 15227 and receive it by mail. In-person verification at a Taxpayer Assistance Center is the fallback.

Protecting the Return Is the Floor, Not the Strategy

Once your filing is secure, the question becomes whether you are paying more than the law requires. Book a free initial consultation with a Taxstra CPA.

Next Steps

Filing it yourself is fine. Optimizing it is where the money is.

Getting the form right keeps you out of trouble. The strategies below are what actually lower the bill.

Want a CPA to run the numbers for you?

Free 30-minute call with a Taxstra CPA. No pressure, just the math for your situation.

Book a Free Consultation

Authoritative Sources

Citations reflect U.S. federal tax law as of the article's last reviewed date.

Related IRS Account and Security Guides

IRS Tax Transcripts

How to see exactly what the IRS has on file under your Social Security number.

IRS Notice CP14

The balance due notice, and how to tell a real one from a scam letter.

IRS Notice CP3219A

The statutory notice of deficiency and the deadline that comes with it.

IRS Substitute for Return

What the IRS files when nobody else does, and why it usually overstates the tax.