Yes, someone can steal your tax refund, but the IRS has tools to stop it

Tax refund theft is real. A criminal files a fake return using your Social Security number before you file your own, claims your refund, and the IRS sends the money to them. By the time you file the real return, the IRS has already paid out. The IRS processes returns in the order they arrive, not by who filed first in real life.

The good news: the IRS catches most of this before money leaves. The bad news: if it does slip through, getting your money back takes months and requires you to prove the return wasn't yours. The fastest way to protect yourself is to file your own return as early as possible each year, before a thief can.

Key Takeaways

  • A criminal can file a tax return using your Social Security number and claim your refund before you file your own legitimate return.
  • The IRS processes returns in the order received, so filing early in the tax season gives you the first-filer advantage.
  • If your refund is stolen, you will need to file Form 14039 (Identity Theft Affidavit) and wait for the IRS to investigate, which typically takes several months.
  • You can reduce your risk by filing early, using a strong password on your IRS online account, and monitoring your tax transcript for unauthorized returns.
  • If the IRS paid a thief before you filed, you will receive your refund, but only after the investigation closes and the IRS reverses the fraudulent payment.

How a thief files a fake return in your name

A criminal needs your Social Security number, which they may have from a data breach, a stolen wallet, a phishing email, or a compromised business. They gather basic information—your name, address, date of birth—much of which is public or easily guessed. They do not need your password, your filing PIN, or access to your email.

They file electronically using tax software, claiming a refund. The IRS receives it, processes it, and if no red flags appear, approves it. The refund goes to a bank account or address the thief provided. You find out weeks or months later when you file your own return and the IRS rejects it because a return under your number already exists.

The IRS has filters to catch this—they look for multiple returns filed under the same number, refunds sent to new addresses, and patterns that don't match your history. But filters are not perfect, and the volume of returns is enormous. Some fraudulent returns slip through.

Signs your refund may have been stolen

The most common sign is rejection when you file. The IRS system tells you a return under your Social Security number has already been filed. You did not file it. This is the moment you know there is a problem.

You might also see it earlier if you check your IRS transcript before filing. The IRS maintains a transcript of your tax account, which shows returns filed under your number. You can view this free at IRS.gov using your login. If a return appears that you did not file, you have caught the theft before filing your own return—a much better position.

Another sign is a 1099 form (W-2, 1099-NEC, 1099-INT, etc.) arriving for income you did not earn. This means an employer or financial institution reported income under your number. A thief may have used a fake W-2 to make their fraudulent return look legitimate.

What to do immediately if you suspect theft

Do not file your own return yet. Filing when a fraudulent return is already in the system will cause your return to be rejected, and you will have to resolve the fraud first anyway. Instead, contact the IRS directly at 1-800-829-1040 (the main tax line) and tell them you believe your number has been used fraudulently. They can place a hold on your account and flag it for investigation.

Next, file Form 14039 (Identity Theft Affidavit) with the IRS. This is the official form that tells the IRS you did not file the return they received. You can file it by mail or, in some cases, electronically through your IRS account. Include a copy of your government-issued ID and any documentation showing the fraudulent activity (rejection notices, transcripts, etc.). Mail it to the address listed on the form, which varies by region.

Also file a report with the Federal Trade Commission at IdentityTheft.gov. This creates an official record and may help if the thief's actions extend beyond taxes—credit card fraud, loan applications, etc. The FTC does not investigate individual cases, but the report is part of your paper trail.

How long it takes to recover a stolen refund

The IRS investigation of a fraudulent return typically takes 60 to 120 days from the date you file Form 14039. During this time, the IRS verifies that you did not file the return in question and that the return is indeed fraudulent. They may contact you by mail to confirm details.

Once the investigation closes, the IRS reverses the fraudulent payment (the money goes back to the thief's bank, which often triggers a separate investigation by that bank). Then the IRS processes your legitimate return and issues your refund. The total time from Form 14039 to receiving your money is usually 4 to 6 months, though it can stretch longer if complications arise.

You will receive a letter from the IRS explaining the outcome. Keep this letter. If the thief's bank does not recover the money, the IRS may pursue it through other means, but you are not responsible for the loss—the IRS absorbs it.

Protecting your Social Security number and filing early

The single most effective defense is filing your return as early as possible in the tax season. The IRS begins accepting returns in late January each year. If you file in February, a thief cannot file under your number later in the season. The first return filed wins.

Protect your Social Security number by not carrying your card, not sharing it over the phone unless you initiated the call to a known organization, and not entering it on forms unless absolutely necessary. Shred documents with your number before discarding them. Use strong, unique passwords on financial accounts and your IRS account (IRS.gov login).

Consider placing a credit freeze with the three major credit bureaus (Equifax, Experian, TransUnion). This prevents anyone from opening new accounts in your name without your permission. It does not affect your existing accounts and does not cost money. You can lift it temporarily if you need to apply for credit yourself.

Monitoring your IRS transcript year-round

Check your IRS tax transcript once or twice a year, even in months when you are not filing. Go to IRS.gov, log in, and select "Get Transcript." You can view your account transcript online immediately. This shows all returns filed under your number, all income reported to the IRS, and all payments made.

If you see a return or income you did not recognize, contact the IRS right away. Catching fraud early—before you file your own return—means you avoid rejection and can resolve it faster. The IRS can place a hold on your account to prevent processing of the fraudulent return while you provide proof.

If you have been a victim of identity theft before, consider placing an Identity Theft Alert with the credit bureaus. This is free and lasts one year. It tells creditors to verify your identity before opening new accounts, which adds a layer of protection.

What happens if the thief's bank refuses to return the money

If the IRS sends the refund to a bank account controlled by the thief, that bank may freeze the account once they learn it received fraudulent funds. The bank's fraud department investigates and typically returns the money to the IRS within 30 to 90 days. The IRS then credits your account.

If the bank cannot recover the funds—because the thief withdrew the money or closed the account—the IRS still owes you your refund. The IRS will issue it to you once the investigation closes. You are not out the money; the IRS absorbs the loss and may pursue the thief through law enforcement.

In rare cases, the IRS may delay your refund if they suspect you were complicit in the fraud (for example, if you filed a return claiming a refund, then reported it stolen, then filed another return claiming a different refund). This is why honesty and documentation matter. Keep records of all correspondence with the IRS.

Frequently Asked Questions

Can I file my tax return while the IRS investigates the fraudulent one?

No. The IRS system will reject your return because a return under your Social Security number already exists. You must wait for the investigation to close and the fraudulent return to be removed from the system before you can file. This is why contacting the IRS immediately matters—the sooner they start the investigation, the sooner you can file.

Will I still get my refund if the thief already spent the money?

Yes. The IRS owes you your refund regardless of whether the thief's bank recovers the stolen funds. Once the investigation closes and the fraudulent return is reversed, the IRS will process your legitimate return and send you the refund you are owed. The loss falls on the IRS and the bank, not on you.

Do I need to file a police report for tax refund theft?

Filing a police report is not required by the IRS, but it can help. A police report creates an official record that may assist if the thief's identity theft extends beyond taxes. File the report with your local police department or the FBI's Internet Crime Complaint Center (IC3) at ic3.gov if the theft involved online activity.

What if I discover the theft years after it happened?

You can still file Form 14039 and report it to the IRS. There is no statute of limitations on reporting identity theft. However, the longer you wait, the harder it may be to gather documentation and the more complicated the IRS investigation becomes. Report it as soon as you discover it.

Can the IRS prevent this from happening to me in the future?

The IRS cannot may provide it will not happen again, but you can reduce your risk. File early each year, monitor your transcript regularly, use a strong IRS account password, and consider a credit freeze. If you have been a victim before, the IRS may place a permanent flag on your account to require additional verification before processing returns.