IRS CP01A Notice: What It Is and What to Do With It
The CP01A letter holds your Identity Protection PIN. Keep it safe and use it every filing season.
By Siddharth ShankarUpdated October 22, 2026A CP01A is an IRS notice that tells you about the Identity Protection PIN (IP PIN) the IRS sent you. It contains a unique six-digit IP PIN. The IRS sends a new CP01A with a new IP PIN each December or January by postal mail. Enter the IP PIN for every taxpayer who received one, including dependents, on your federal return, electronic or paper. Do not reveal it to anyone except your tax preparer, and store the notice securely. The IP PIN applies to federal returns only.
Your email is the key to most of your accounts. Has it already leaked?
Free · About 30 seconds · No sign-up · Email not stored
If a letter arrives from the IRS with the code CP01A on it, it is not a bill or a warning. It is the yearly delivery of your Identity Protection PIN.
What a CP01A is
The IRS describes the CP01A notice as the letter that tells you about the Identity Protection Personal Identification Number, or IP PIN, that it sent you. It contains a unique six-digit IP PIN and instructions for using it.
When it arrives
The IRS says it sends a CP01A with a new IP PIN each December or January by postal mail. A new IP PIN comes with each notice, so use the number on the newest one.
How to use the IP PIN
- Electronic returns. Enter the IP PIN for every taxpayer who received one, including dependents. If both spouses received one, both must enter theirs along with their Social Security numbers.
- Paper returns. Enter the first taxpayer’s IP PIN in the Identity Protection PIN box beside “Your signature and occupation”, and the second taxpayer’s beside “Spouse’s signature and occupation”.
Quick check before you read on: is your email in a known data breach? Free, about 30 seconds.
Free · About 30 seconds · No sign-up · Email not stored
Protect the notice
The IRS says: “Do not reveal your IP PIN to anyone other than your tax preparer.” Store the notice securely with your tax records. Anyone who has your PIN and your details could try to file a return in your name.
The IP PIN applies only to federal returns. State-issued PINs are separate.
If you did not receive one
The IRS page says that if you did not receive a letter or notice, use its “Let us help you” option. It does not set out other steps in that article, so follow the IRS pages for current instructions rather than guessing.
If a PIN notice arrives and you did not expect it
Do not ignore a tax letter, and do not call numbers printed in unexpected emails or texts. Contact the IRS through the official website or the number on its official pages. If you think someone has used your identity to file a return, see IRS Form 14039.
Why the IP PIN exists
The IP PIN is an extra check on your federal return, meant to stop someone filing in your name even if they know your Social Security number. That is why a leaked number is less dangerous for people who have one. See what to do if your Social Security number was leaked.
Getting an IP PIN
If you do not have an IP PIN, read how to get one.
Sources
- IRS: Understanding your CP01A notice (what it is, six-digit PIN, annual delivery, how to enter it, protecting it)
Frequently asked questions
What is an IRS CP01A notice?
A letter that tells you about the IP PIN the IRS sent you. It contains a unique six-digit IP PIN.
When do I get a CP01A?
The IRS says it sends a new one each December or January by postal mail.
Where do I enter the IP PIN?
On your federal return, electronic or paper, for every taxpayer who received one, including dependents.
Who can I share the PIN with?
The IRS says do not reveal it to anyone other than your tax preparer.
Does the IP PIN cover state returns?
No. The IRS says it applies to federal returns only.
See if your email has already leaked
- Checks your email against known data breaches
- Shows which sites leaked it, when, and what leaked
- We do not store the email you check
Compare data removal services
See which services work in your country, what they cost, and the free do-it-yourself route.
Compare removal services →Prefer a one-time report first? Scan My Shadow, our sister service, $9.99.