It is tax season, which means it is also “Tax Scam Season.” While we all know to avoid phishing emails claiming to be the IRS (pro tip: the IRS never emails you), there is a more sophisticated threat: Stolen Identity Refund Fraud.

This occurs when an attacker uses your Social Security Number (SSN)—likely stolen in a previous breach like Equifax or 23andMe—to file a fake tax return in your name. Their goal is to claim a massive refund and have it diverted to their bank account before you even wake up to file your real taxes.

The IRS has a “Silver Bullet” for this, but most people don’t use it. It is called the IP PIN (Identity Protection PIN).

What is it?

An IP PIN is a 6-digit code known only to you and the IRS. It changes every year.

Once you opt-in to this program, the IRS will not accept any electronic tax return filed with your SSN unless it includes this specific 6-digit code.

This means that even if a hacker has your Name, Address, Date of Birth, and Social Security Number, they are powerless. Without the PIN, their fraudulent return gets rejected instantly.

How to Get It (Takes 15 Minutes)

1. Go to the Source: Visit the official IRS.gov “Get An IP PIN” page.
2. Verify Your Identity: You will need to sign in or create an account with ID.me (the IRS’s identity provider). You may need to upload a photo of your driver’s license and do a video selfie scan.
3. Get Your Code: Once verified, the site will display your 6-digit IP PIN.
4. Use It: When you file your taxes (using TurboTax, H&R Block, or a CPA), look for the field asking for your “Identity Protection PIN” and enter it there.

Critical Note: Do not lose this number. You cannot file your taxes without it once you opt-in.

Final Thoughts

This is the cheapest, most effective insurance policy for your financial identity. Do this before you file, not after.

---

Discussion

• Have you or a family member ever been a victim of tax refund fraud?
• Do you use a separate, dedicated computer for financial transactions, or do you file taxes on the same machine you use for social media?

Sources

• IRS.gov: Get An Identity Protection PIN (IP PIN)
• KrebsOnSecurity: Why You Need an IP PIN