Identity Theft
Form 14039 Identity Theft Affidavit: When and How to File It (2025)
The short answer: Form 14039 is the IRS Identity Theft Affidavit. You file it when someone has used your Social Security number to file a tax return — usually discovered when your own e-filed return is rejected as a duplicate. It tells the IRS you're the real taxpayer and starts the process of clearing your account.
⏱ What to know about timing: there's no hard "file by" date for Form 14039 — file it as soon as you discover the fraud. But the IRS has said identity theft cases can take roughly 120 days or longer to resolve, so the sooner you file, the sooner your refund and account get fixed.
What Form 14039 is and why it matters
Form 14039, the IRS Identity Theft Affidavit, is the document you use to tell the IRS that someone stole your identity to commit tax fraud — most often by filing a fake return under your Social Security number (SSN) to grab a refund. Filing it is how you put a flag on your account, separate the fraudulent return from your real one, and protect future filings.
You can read the IRS's own overview on the Identity Theft Central page, and the form itself lives at About Form 14039 on IRS.gov.
Tax-related identity theft is scary, but it is also a well-worn path for the IRS. There's a whole unit built to handle it. Your job is to report it clearly and quickly, then be patient while the process runs.
When you should — and shouldn't — file Form 14039
Here's the part most people get wrong. You don't file this form just because you're worried, and you usually don't file it if the IRS already reached out to you. File it in these situations:
- Your e-filed return was rejected because a return using your SSN was already filed.
- You got a notice about a return you didn't file — for example, the IRS says you owe tax on income or a refund you never claimed.
- You can't access your IRS online account and suspect fraud, or you see filings on your transcript you don't recognize.
Do not file Form 14039 if the IRS already sent you an identity-verification letter such as a 5071C, 4883C, or CP01. Those mean the IRS already caught the suspicious activity — just follow the instructions in that letter. Filing a duplicate affidavit only slows things down.
What happens if you ignore the problem
Tax identity theft doesn't fix itself. If you do nothing after a fraudulent return is filed under your number, the problems stack up:
- Your refund is frozen. The IRS won't release a refund while two returns claim the same SSN.
- Your real return can't process until the fraud is sorted out, which can push your filing — and any refund — back many months.
- The IRS may send balance-due notices based on income the thief reported, or hold your account in limbo while it investigates.
- The thief may strike again next year. Without an IP PIN on file, the same SSN stays exposed.
None of this is a punishment aimed at you — it's an automated system trying to protect against fraud. But the system won't move until you report the theft and identify yourself as the real taxpayer.
How to file Form 14039, step by step
- Confirm it's really identity theft. A rejected e-file or a notice about an unknown return is a strong sign. If you simply got an IRS verification letter, follow that letter instead of filing the affidavit.
- Fill out Form 14039. Download the current version from IRS.gov. You'll provide your name, SSN, contact information, and a short description of what happened.
- Submit it the right way. The fastest route for most people is the federal portal at IdentityTheft.gov, which can generate and route an affidavit for you. Otherwise, if your e-file was rejected, attach the paper Form 14039 to a paper copy of your tax return and mail both to the IRS address for your area. If you're responding to a notice, follow the mailing or fax instructions on that notice.
- File your real tax return anyway. Don't wait for the case to close. File on paper if you must, and pay any tax you owe on time. Your own filing duties don't pause because of the theft.
- Keep copies of everything — the form, your return, any notices, and proof of mailing. You'll want a paper trail if the case drags on.
- Watch for follow-up. The IRS will send a confirmation that it received your affidavit, then updates as the case moves. Resolution commonly takes around 120 days or more.
Not sure if Form 14039 is the right move?
Identity theft and a normal IRS notice can look the same when you're scared and holding a letter. An experienced tax professional can read your situation in minutes and tell you exactly what to file — free, confidential, no pressure.
After you file: the IP PIN and getting your refund
Once the IRS confirms you're the real taxpayer and removes the fraudulent return, two good things happen. First, it processes your legitimate return and releases any refund you're owed — the money isn't lost, just delayed. Second, the IRS issues you an Identity Protection PIN (IP PIN): a six-digit number you enter on future returns so no one can file under your SSN again. You'll get a fresh IP PIN each year.
If your refund is badly delayed and you're facing real hardship — you can't pay rent or buy food while you wait — the Taxpayer Advocate Service is a free, independent part of the IRS that can sometimes help move a stuck case. It's worth a call when normal channels stall.
If the fraudulent return also left a balance or confusing notice on your account, don't ignore it. Our guides on why you got a letter from the IRS and how to tell if an IRS letter is real can help you sort out what's legitimate before you respond to anything.
Form 14039 identity theft, answered
Do I need to file Form 14039 if the IRS already contacted me about identity theft?
Usually no. If you got a notice like CP01, a 5071C, or a 4883C asking you to verify your identity, the IRS already flagged your account — just follow the steps in that letter. You only file Form 14039 when you discover the problem yourself, such as an e-filed return being rejected because a return already exists under your Social Security number.
How long does it take the IRS to resolve a Form 14039 identity theft case?
Identity theft cases are slow. The IRS has said resolution can take roughly 120 days or longer, and in busy years many cases stretch well past that. If your refund is delayed and you're facing real financial hardship, the Taxpayer Advocate Service can sometimes help move things along.
Can I still get my refund after filing Form 14039?
Yes. Filing Form 14039 does not cost you your refund. Once the IRS confirms you are the real taxpayer and removes the fraudulent return from your account, it will process your legitimate return and release any refund you're owed. The delay is frustrating, but the money you're entitled to is not lost.
Will I get an IP PIN after reporting identity theft?
Yes. Once the IRS resolves a confirmed identity theft case, it will issue you an Identity Protection PIN (IP PIN) — a six-digit number you enter on future returns so no one else can file using your Social Security number. You'll receive a new IP PIN each year, and any return filed without it is rejected or held.
Should I still file my tax return if I'm a victim of identity theft?
Yes. File and pay your taxes as you normally would, even if you have to file a paper return because your e-file was rejected. Attach Form 14039 to that paper return when you discovered the theft through a rejected filing. Don't skip filing — your own obligations don't pause just because someone misused your information.
This guide is general information, not tax or legal advice for your specific situation. Eligibility for IRS programs depends on individual facts and circumstances; no outcome is guaranteed.