Tax filing security is about making sure the return that reaches the tax authority is yours, sent safely, with your refund going to your own account. Each filing season, criminals try to file fraudulent returns with stolen identities, trick taxpayers into revealing details, or redirect refunds before the rightful owner notices.
Many of these schemes succeed because the victim only learns about them after filing, when a return is rejected or a confusing letter arrives. Understanding how the attacks work, and putting a few safeguards in place before you file, makes you a far harder target and shortens recovery if something still goes wrong.
Why Tax Season Attracts Fraudsters
Tax season concentrates money, documents and deadlines into a few months. Refunds represent real payments flowing to millions of bank accounts, and criminals look for weak points along that path.
Taxpayers are also busy and sometimes anxious about deadlines or letters from tax authorities. Scammers exploit that pressure with urgent messages about refunds, audits or penalties. A taxpayer in a hurry is more likely to click a link or return a call without checking.
Documents add to the risk. Wage statements, investment forms and identification arrive by mail and email at predictable times, and many people store them carelessly. A thief who obtains one form can learn a name, identifier, employer and income figure, which are the ingredients of a fraudulent return.
How Tax-Related Identity Theft Works
Tax-related identity theft occurs when someone uses your Social Security number, or another taxpayer identifier, to file a return and claim a refund. The fraudster usually files early, before the legitimate taxpayer, inventing income and withholding figures designed to produce a refund.
When you later file your genuine return electronically, it may be rejected because a return using your identifier has already been accepted. That rejection is often the first sign of the problem. In other cases, you receive a notice about income from an employer you never worked for.
Thieves obtain identifiers through data breaches, phishing, stolen mail and compromised preparer systems. A related scheme uses a stolen identity to claim a dependent who is not theirs. Because the tax authority must sort out which return is genuine, recovery can take time, which is why prevention is so valuable.
Protecting Your Online Tax Account
Many tax authorities offer online accounts where you can view transcripts, payments and notices. In the US, the IRS provides an individual online account that requires identity verification during setup.
Creating your own account can be a defensive step, because it lets you see activity tied to your identifier and makes it harder for someone else to register in your name. Use only the tax authority’s official website, reached by typing the address rather than following an emailed link.
Protect the account with a unique, long password and the strongest multifactor authentication option available. Multifactor authentication, or MFA, requires a second proof of identity beyond the password. Prefer an authenticator app over text messages where offered, since SMS codes can be intercepted through SIM-swap fraud. Check the account a few times each year for unexpected entries.
Identity Protection PINs and Similar Safeguards
In the US, the IRS offers an Identity Protection PIN, a six-digit number known only to you and the IRS that must accompany your federal return. An electronic return filed with your Social Security number but without the correct PIN is rejected, and a paper return may be held for extra verification.
The program has expanded over time, and eligibility rules are published on the IRS website. Taxpayers obtain the PIN through their online account or other official processes, and a new PIN is typically issued each year. Spouses and dependents may each need their own.
Treat the PIN like a password. Give it only to the preparer or software you use to file, never to callers or email senders. Other countries use different safeguards, such as verified digital identities or filing codes. Check your tax authority’s guidance to see which protections exist where you live and how to enroll.
Recognizing Tax Impersonation Scams
Impersonators pretend to be tax officials, preparers or software providers to steal money or information. They change tactics often, so recognizing the patterns matters more than memorizing specific scripts.
Threatening Phone Calls
Callers may claim you owe back taxes and threaten arrest, deportation or license suspension unless you pay immediately. They often demand gift cards, wire transfers, payment apps or cryptocurrency.
In the US, the IRS states that it does not demand immediate payment through such methods or threaten to have you arrested. Hang up and contact the tax authority using the phone number listed on its official website if you are unsure whether you owe anything.
Emails, Texts and Social Media Messages
Phishing messages promise refunds, warn of account problems or ask you to “verify” information through a link. They often use official logos and convincing addresses.
The IRS generally does not initiate contact by email, text or social media to request personal or financial information. Do not click links or open attachments. Report the message following the instructions on your tax authority’s website, then delete it.
Fake Letters and Notices
Some scams arrive by postal mail and imitate official notices with fake phone numbers or payment addresses. Compare any letter with examples or notice numbers published on the authority’s website, and call only the number listed there to confirm whether a notice is genuine.
Genuine notices usually reference a specific tax year and notice number, and they explain official ways to respond or appeal. Keep the letter even if it turns out to be fake, since it may help investigators.
Gathering Tax Documents Securely
Securing your documents before you file reduces the chance of someone else using them first. Most of the information needed for a fraudulent return can be found in the forms that arrive each winter.
Plan how documents will reach you and where they will be kept. Wherever possible, choose electronic delivery through secure portals with strong logins, and retrieve paper mail promptly instead of leaving it in an unattended mailbox.
- Collect mail daily during tax season or use a locked mailbox.
- Download forms from official portals rather than email attachments.
- Keep all tax documents in one locked or encrypted location.
- Shred drafts and duplicate copies you no longer need.
- Avoid storing forms on shared or work devices.
These steps take little time and close several easy paths to your identifiers. They also make filing faster because everything is in one place when you need it.
Filing Early Through a Secure Channel
Filing early, once you have all your documents, shortens the window in which a criminal could file first using your identifier. Filing before your documents are complete, however, can create errors and amended returns, so balance speed with accuracy.
Electronic filing through reputable software or a qualified preparer is generally faster and provides confirmation that the return was accepted. Keep that acceptance confirmation with your records. If you file on paper, use a trackable mailing method so you have proof of submission.
File only from a secure connection and device. Avoid public Wi-Fi networks, which may be monitored by others, unless you use a trusted VPN, which encrypts traffic between your device and the VPN provider. Keep your computer and phone updated, use security software where appropriate, and never file from a public or shared computer.
Working Safely With a Paid Preparer
A paid preparer handles your entire return, so choosing one carefully is a security decision as much as a financial one. In the US, paid preparers must have a Preparer Tax Identification Number, and the IRS publishes guidance on selecting a preparer.
Ask how the preparer collects and stores client documents. A secure client portal is preferable to email. Be wary of anyone who bases fees on the size of your refund, refuses to sign the return as preparer, or asks you to sign a blank return.
- Confirm the preparer’s credentials through the tax authority’s resources.
- Ask how documents are transmitted, stored and disposed of.
- Review the completed return before signing it.
- Ensure the refund goes to your own bank account.
After filing, request a copy of the return for your records. If a preparer later reports a data breach, follow the steps they and the tax authority recommend, and consider adding identity protections immediately.
Protecting Your Refund and Payments
Direct deposit to a bank account in your own name is usually the safest way to receive a refund. Double-check routing and account numbers before filing, because errors can send money to the wrong place and be difficult to reverse.
Be cautious of anyone offering to receive your refund on your behalf, or suggesting the refund be deposited to their account and passed along to you. Legitimate preparers do not need control of your refund, and this arrangement is a common feature of refund fraud.
When paying taxes, use official payment channels listed on the tax authority’s website. Fraudsters set up fake payment sites and phone lines that look official. Keep confirmation numbers for every payment, and review your bank statements afterward to ensure the correct amount was withdrawn by the expected recipient.
Payroll Form Phishing at Small Businesses
Small businesses face a specific threat: criminals impersonate an executive and email payroll or HR staff asking for copies of all employees’ wage forms. Those forms contain names, addresses, identifiers and income, enough to file many fraudulent returns at once.
This tactic is a form of business email compromise, meaning a scam in which attackers impersonate a trusted person through email to request sensitive data or payments. The message usually appears urgent and may come from a spoofed or compromised account.
Set a policy that wage forms and identifiers are never sent by email in response to a request, regardless of who asks. Verify unusual requests by phone using a known number. Train staff to recognize the pattern, and report any incident to the tax authority promptly, since early notice can help protect affected employees.
Warning Signs That Someone Filed in Your Name
Spotting fraud early limits the damage. Many signs appear through official channels you already use, so knowing what to watch for turns routine mail and account checks into an early warning system.
An electronic return rejected because a return with your identifier was already filed is the clearest signal. Others include a notice asking you to verify your identity for a return you did not file, a transcript showing income from an unknown employer, or a refund you did not request.
You may also receive a notice about a tax account you never opened, or learn that a dependent you claim has been claimed elsewhere without your knowledge. Read every notice carefully, and confirm its authenticity through the tax authority’s official contact details before acting on it.
Responding Fast If Your Tax Identity Is Misused
If you suspect tax-related identity theft, act promptly and follow official guidance. In the US, respond to any IRS notice as instructed and, if directed, submit an identity theft affidavit through the process the IRS describes.
The FTC’s IdentityTheft.gov site creates a personalized recovery plan and can help you report the incident to the IRS. Consider placing free credit freezes with the nationwide bureaus, and review your credit reports for other misuse, since stolen identifiers are often used in several ways.
Keep a log of every call, letter and submission, with dates and reference numbers. Continue to file your own return as required, even if paper filing becomes necessary. Recovery can take months, so ask whether you qualify for an Identity Protection PIN for future years, and consult a qualified tax professional if your situation becomes complex.