How to Get an IRS Identity Protection PIN (IP PIN)

If your Social Security number has leaked, an IP PIN is one of the simplest ways to stop someone filing a fake tax return in your name.

By Siddharth ShankarUpdated October 18, 2026

Tax identity theft happens when someone files a federal tax return using your Social Security number to claim a refund. You often only find out when your own return is rejected. An Identity Protection PIN closes that door, because a return without the right PIN does not go through.

You do not need to be a victim to get one. The IRS lets anyone who can verify their identity enrol. If your SSN has been exposed in a breach, it is one of the most useful free steps you can take. See what to do if your SSN was leaked.

What an IP PIN is

According to the IRS IP PIN page, the IP PIN is a six-digit number that prevents someone else from filing a tax return using your Social Security number or ITIN. Only you and the IRS should know it. It is used to confirm your identity on both electronic and paper returns.

Who can get one

• Anyone with an SSN or ITIN who can verify their identity.
• People who are not required to file a return can still get one.
• Parents and legal guardians can request one for dependents. People under 18 cannot use the online method and must use one of the other options.

Three ways to get an IP PIN

How to use it

Enter the PIN on your federal return, such as Form 1040. It is required on any federal return you file during that calendar year, including returns for earlier years. If the PIN is missing or wrong, an e-filed return is rejected and a paper return is delayed.

A new PIN every year

An IP PIN is valid for one calendar year, and the IRS generates a new one each year. If you enrolled online, you will not get a letter. You need to sign in and look it up each year, usually between mid-January and mid-November, on the Profile tab of your online account. Confirmed identity theft victims receive a CP01A notice with their new PIN by mail.

If you lose your PIN

Sign in to your online account to view it, or follow the IRS guidance to have it reissued by mail. The IRS says not to file Form 15227 again just to get a lost PIN.

Signs of tax identity theft

• Your e-filed return is rejected because a return with your SSN was already filed.
• You get an IRS letter about a return you did not file or income from an employer you never worked for.
• You get a tax transcript or refund you did not request.

If you see any of these, follow the instructions in the IRS letter and report it. The IRS identity theft form is Form 14039. Getting an IP PIN afterwards stops the same thing happening again.

Where an IP PIN fits

An IP PIN protects your federal tax return. It does not stop someone opening a credit card or loan in your name. For that, a credit freeze is the stronger tool. Together they cover two of the most common ways a leaked SSN is misused. For the full picture, read how to prevent identity theft.