Someone files a tax return in your name before you do. The refund goes to an account you have never seen. You find out when your own return gets rejected. An Identity Protection PIN, or IP PIN, is the IRS tool built to make that harder.

What an IP PIN is and why it exists

An IP PIN is a six-digit number the IRS assigns to eligible taxpayers. It helps keep a thief from using your Social Security number on a fraudulent federal return. Only you and the IRS are supposed to know it. When you file, the number helps confirm the return really came from you.

Think of the usual scam setup. A criminal has your Social Security number from a data breach or a phishing message. That used to be enough to try a fake return. With an IP PIN assigned, the number alone has a harder time getting through.

The PIN changes every year. It is valid for one calendar year only, so last year's number will not work this year. Confirmed victims of tax-related identity theft are enrolled automatically and get a new PIN each year, according to the IRS.

Who can get one and how enrollment works

Anyone with a Social Security number or an Individual Taxpayer Identification Number who can verify their identity may enroll. Parents and legal guardians can request one for a dependent. That detail surprises people.

The most complete route is an IRS Online Account. If you do not have one, you register and validate your identity first. The Profile tab lets you enroll, check whether a current PIN is assigned, and retrieve one you lost or never received.

A calm kitchen table with a laptop and organized tax paperwork in soft morning light, suggesting someone securing their tax account with an Identity Protection PIN.
A taxpayer at a kitchen table checking a tax account on a laptop beside a folder of paperwork, the kind of setup where a yearly IP PIN gets retrieved.

The IRS describes two enrollment options: continuous and one-time. The choice affects whether you must request a new PIN each year. People who cannot set up an online account have other request methods. The sources reviewed here do not list them all, so check IRS guidance for the full set.

How you receive your yearly IP PIN

If you use an online account, the current PIN is generally displayed from mid-January through mid-November. That covers most of filing season.

Without an online account, the IRS typically mails Notice CP01A from mid-December through early January. It carries that year's six-digit PIN and instructions.

Now the part that trips people up. No notice is mailed in three cases:

  • You opted in online after 2019.
  • You do not have a valid address on file.
  • You have not filed a return in the last three years.

In those cases you retrieve the PIN online or have it reissued by mail. Waiting for an envelope that was never going to arrive is a common way to stall a return. The IRS has a page for lost or missing PINs.

Red flags while you use an IP PIN

Scammers like anything that sounds official and urgent. An IP PIN is a perfect prop. Expect messages claiming your PIN is expired, suspended, or needs verifying.

  • An unexpected email, text, or call asking for your PIN.
  • A link that sends you to a page asking for tax details.
  • Pressure to act today or lose a refund.

The IRS warns about fake messages that imitate the agency and advises sharing sensitive tax information only on official, secure .gov sites. Its reminder on protecting tax information points to reporting pages for suspicious messages. First move: do not click. Type IRS.gov into your browser yourself.

The sources here say little about storing a PIN once you have it. Treat it like any sensitive document and keep it to yourself.

Questions to answer before you file

Work through these in order.

  1. Am I eligible, with an SSN or ITIN and a way to verify my identity?
  2. Did I enroll online after 2019, which means no mailed notice?
  3. Have I filed a return in the last three years?
  4. Is this year's PIN assigned and retrievable in my account?

Some answers are not in the sources used here. That includes fees, the steps for passing identity verification, what happens if a return is rejected over an IP PIN, and whether state returns use the same number. For those, go to current IRS guidance or your state tax agency. This article is general education, not advice for your situation.

Please seek a professional. This article is general information, not financial, tax or insurance advice. Please seek a licensed financial, tax or insurance professional about your own situation.