Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Yes. If your Social Security number (SSN) or Individual Taxpayer Identification Number (ITIN) was exposed, you can proactively request an IRS Identity Protection PIN (IP PIN) even when no tax-fraud return has been filed. You must verify your identity, and the IRS Online Account is the fastest enrollment route.

If online verification does not work, the IRS provides Form 15227 and, when necessary, an in-person Taxpayer Assistance Center appointment. The PIN helps stop another person from filing a federal income-tax return with your SSN or ITIN, but it does not repair other kinds of identity theft.

What an IP PIN does after an SSN exposure

An IRS Identity Protection PIN is a six-digit number that confirms you are the taxpayer filing a federal return. A person who tries to file a return electronically using your SSN or ITIN generally needs the current IP PIN as well. The IRS offers voluntary enrollment, so a confirmed fraudulent return is not required before you join the program. Anyone with a valid SSN or ITIN who can pass the IRS identity-verification process may request one. See the IRS instructions at Get an identity protection PIN.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The protection is limited to federal tax filing. An IP PIN does not freeze your SSN, monitor credit, prevent employment or benefits fraud, secure bank accounts, or resolve a theft that has already occurred. Those situations require separate reports and recovery steps.

Think of enrollment as a forward-looking control. Once the IRS assigns the PIN, it becomes part of the authentication information required on covered returns filed during that calendar year. It does not prove that every prior return was legitimate, investigate a data breach, or remove your SSN from records held by an employer, lender, state agency, or website.

Who can request one?

Exposure alone is enough reason to consider voluntary enrollment. You do not have to wait for a rejected return, an IRS identity-theft notice, or evidence that someone submitted a return in your name. The basic conditions are a valid SSN or ITIN and successful identity verification through one of the IRS routes. A taxpayer who already experienced tax-related identity theft can also request an IP PIN, but must separately follow the IRS recovery instructions for that incident.

An IP PIN is different from an IRS account password, an electronic filing PIN used in older systems, a state tax PIN, or a credit freeze. Those credentials and protections should not be substituted for the six-digit number the IRS assigns.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Choose the enrollment route that fits you

The IRS describes three routes. Start with an IRS Online Account whenever possible; the alternatives are intended for people who cannot complete online identity proofing or who do not qualify for the form process.

Route Eligibility and requirements Speed and access burden
IRS Online Account Valid SSN or ITIN and successful online identity verification. Fastest route; you retrieve the PIN online rather than waiting for mail.
Form 15227 Valid SSN or ITIN, telephone access, and adjusted gross income (AGI) below the IRS limits for your filing status. After the IRS verifies you by telephone, the PIN generally arrives by U.S. mail in four to six weeks.
Taxpayer Assistance Center For applicants who cannot verify online or through Form 15227, or who are not eligible for Form 15227. An appointment is required. Slower and requires travel plus identity documents.

These route descriptions and timing are from the IRS’s current guidance and its IP PIN frequently asked questions. The practical tradeoff is straightforward: online enrollment requires the most successful digital identity proofing but is normally immediate; Form 15227 shifts the proofing to a telephone call and postal delivery; an appointment adds scheduling and document requirements but is available when the other methods fail.

Prepare before you apply

  • Have your SSN or ITIN available and use the legal name and identifying information associated with your tax records.
  • For the online route, be ready to complete the IRS’s identity-proofing process and access the email, phone, or other verification methods requested during account setup.
  • If you may use Form 15227, locate your most recently filed federal return so you can determine whether your AGI is within the current limit for your filing status.
  • If you may need an in-person appointment, plan to bring one government-issued photo ID and one additional identity document. A dependent’s application has additional documentation requirements, so check the IRS instructions before the appointment.
  • Use a private device and connection when creating or accessing your IRS Online Account. Do not ask an untrusted person to receive or store your PIN.

Do not pay a third party merely to submit a request. The IRS enrollment routes themselves are the relevant process, and an unsolicited service cannot bypass identity verification. A tax professional can help with a return later, but should not need your account password or permanent access to your email.

Option 1: Get the PIN through an IRS Online Account

The IRS calls the online account the fastest way to join the IP PIN program. It avoids the Form 15227 mail wait and lets online enrollees retrieve each new calendar year’s number themselves.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Open the IRS page Get an identity protection PIN and follow the link to sign in to an existing IRS Online Account or create one.
  2. Complete the IRS identity-verification steps. The IRS must be able to establish that the account belongs to you before it will display the enrollment controls.
  3. After signing in, open your account’s Profile and select the IP PIN section.
  4. Choose the option to enroll in the IP PIN program and follow the on-screen confirmation steps.
  5. Record the six-digit number in a secure password manager or another private location. Give it to a tax preparer only when that preparer is ready to prepare and file your return.

If the verification service will not accept your information, do not create repeated accounts or send your PIN to anyone offering to “fix” the problem. Use the Form 15227 eligibility check or request an appointment, as described below.

After enrollment, confirm that you can sign in again before tax season. The number may be displayed only after the account’s identity checks are complete. Save the official IRS account address in your browser rather than following a link in an unexpected email or text.

Option 2: Use Form 15227 when online verification fails

Check the current AGI limits first

The IRS currently says that a person whose AGI on the last filed return was below $84,000 for an individual or $168,000 for married filing jointly may submit Form 15227 online, provided the person has a valid SSN or ITIN and telephone access. These are IRS process thresholds, not a measure of identity-theft risk, and they can change; check the current IRS page before submitting.

The limits concern AGI on the last return you filed, not the amount of the SSN exposure or the value of a suspected loss. If your filing status is not individual or married filing jointly, or your AGI is at or above the applicable amount, do not assume the form is available; use the appointment route if the IRS says you are ineligible.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Submit the form and complete the telephone verification

  1. Use the IRS instructions for Form 15227 and submit the form through the method the IRS currently provides online.
  2. Keep the telephone number you provide available. The IRS will call to verify your identity, so answer the call and be prepared to supply information from your tax records.
  3. After successful verification, wait for the IRS to mail the IP PIN. The IRS says delivery usually takes four to six weeks after verification by telephone.
  4. When the letter arrives, store the six-digit PIN securely and use it for federal returns filed during that calendar year.

Form 15227 is an alternative for people who cannot complete online enrollment; it is not a faster substitute for an account. If your AGI is at or above the stated limit, you lack telephone access, or the IRS cannot complete the verification, request a Taxpayer Assistance Center appointment instead.

Use the exact mailing address and contact details on the current IRS instructions. If the letter does not arrive after the stated four-to-six-week period, consult the official IP PIN help information; do not submit the number to a caller who claims to be checking delivery.

Option 3: Request a Taxpayer Assistance Center appointment

The IRS says an in-person appointment is available when online identity verification and Form 15227 do not work, or when you are not eligible to use Form 15227. Contact the IRS using the appointment instructions on its IP PIN enrollment page; do not walk into a center without confirming that an appointment is required.

Bring:

  • One government-issued photo identification document.
  • One additional identity document.
  • Any other records the IRS appointment confirmation requests.

Applications for dependents require additional documents. The exact documents can vary with the applicant’s circumstances, so follow the IRS appointment instructions rather than assuming an adult applicant’s document list applies to a child. Check that names and identifying details on the documents match your tax records, and arrive with the appointment confirmation and any requested forms.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use the IP PIN correctly when filing a return

  1. Retrieve the current year’s number from your IRS Online Account if you enrolled online. The IRS does not mail online enrollees a CP01A notice with the annual PIN.
  2. Enter the six-digit PIN when your tax software prompts for the IRS Identity Protection PIN, or provide it to a trusted paid preparer when the return is ready to file.
  3. For a paper return, follow the applicable Form 1040 instructions for placing the IP PIN on the return.
  4. Review the digits before submitting. A missing or incorrect PIN can cause an electronically filed return to be rejected or a paper return to be delayed while the IRS verifies it.

Which filings use it?

The IRS says an assigned IP PIN must be used on applicable federal returns filed during that calendar year, including a prior-year return filed in that year. The program covers specified federal tax forms; it is not a PIN for a state tax return and is not used on a federal extension form. If your software asks about a state PIN or an extension, do not substitute the IRS IP PIN.

For a joint return, follow the software or Form 1040 instructions for entering each taxpayer’s assigned information. Ask the preparer to confirm that the current-year number, rather than a saved number from a prior return, was entered. Keep a copy of the filed return and any rejection message so you can correct the same issue without guessing.

Understand the annual renewal cycle

An IP PIN is valid for one calendar year. The IRS replaces it with a new number each year, so the digits you used last year should not be reused automatically. Online enrollees must sign in to their IRS Online Account to retrieve the new number for each year. Plan to obtain the current number before authorizing an e-filed return, especially when filing early in the year.

If you received a PIN through the mail after Form 15227 or an in-person process, follow the IRS notice or letter for that year’s number and retain it securely. Never assume that a previous year’s number remains valid. A return filed in a particular calendar year uses the PIN assigned for that year even when the return reports income from an earlier tax year.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If your SSN was already misused

An IP PIN is preventive; it does not replace an identity-theft report. If someone used your SSN or ITIN, follow the IRS recovery guidance in If you were scammed and report the theft through IdentityTheft.gov as directed there. You may also need to notify your state tax agency.

A fraudulent federal return was filed

If you learn that a federal return was filed with your information, follow the instructions in the IRS notice or the incident-specific IRS guidance. Form 14039, Identity Theft Affidavit, may apply in relevant cases. Do not assume that enrolling in an IP PIN by itself closes the existing fraud case; the IRS must process the report and any requested documentation.

Keep copies of notices, filed affidavits, identity documents, and delivery confirmations. Respond by the deadline printed on an IRS notice and use only the contact method shown there or on IRS.gov. A new IP PIN can help with later returns, but it does not automatically amend, erase, or refund a return that an impostor already filed.

You received a CP01E notice

A CP01E notice can contain case-specific instructions about suspected identity theft. Read the notice carefully and use the contact method and response deadline printed on it. The IRS explains this notice at Understanding your CP01E notice.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Keep the PIN secret and recognize scams

Treat the IP PIN like a tax credential. Keep it out of email, text messages, social-media posts, shared notes, and photographs that other people can access. Give it only to a trusted tax preparer when that person is preparing your return.

The IRS warning is explicit: “The IRS will never ask for your IP PIN.” An unsolicited caller, email, or text requesting the number is a scam signal. Do not disclose the PIN, click links in the message, or call a number supplied by the sender. Use the official IRS contact and reporting instructions instead. The Taxpayer Advocate Service repeats this warning in its 2026 guidance: Get an IP PIN to protect yourself from tax-related identity theft – Updates for 2026.

The IRS does not need your PIN to tell you that a return was received or to request ordinary correspondence. If you are unsure whether a message is genuine, sign in directly at IRS.gov or use the phone number printed on an IRS notice. Never allow a caller to rush you into reading the six digits aloud.

Troubleshoot the route that failed

Problem What to do next
Online identity verification will not complete Check whether you meet the current Form 15227 requirements. If you do, use that route; otherwise request a Taxpayer Assistance Center appointment.
Your AGI is not below the Form 15227 limit Form 15227 is not available under the current guidance. Request an in-person appointment instead.
You cannot receive or answer the verification call Because telephone access is required for Form 15227, use the appointment route.
You are waiting for a mailed PIN Allow the IRS’s stated four-to-six-week period after telephone verification. If the period has passed, use the official IRS IP PIN help instructions rather than applying through an unsolicited third party.
Your e-filed return is rejected for an IP PIN issue Check that you entered the current calendar year’s six digits exactly. Correct the return and retransmit it through your software or preparer.
A paper return is delayed Verify that the applicable Form 1040 instructions were followed and respond to any IRS correspondence requesting identity verification.
You lost or cannot find the number Online enrollees should sign in to their IRS Online Account to retrieve the current PIN. For a mailed PIN or other situation, use the IRS lost-PIN instructions and do not request a replacement from an unsolicited contact.
A preparer asks for your account password Provide the IP PIN only when needed for the return. Do not share your IRS Online Account credentials; choose a different preparer if one insists.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

A practical decision path

  1. Start online: If you have an SSN or ITIN and can pass IRS identity verification, enroll through the IRS Online Account.
  2. Check Form 15227: If online verification fails, compare your last-filed AGI with the current $84,000 individual or $168,000 married-filing-jointly limit and confirm that you have telephone access.
  3. Use an appointment: If you miss the AGI requirement, lack telephone access, or cannot complete either verification method, request a Taxpayer Assistance Center appointment and bring the required documents.
  4. Use the number only for federal filing: Retrieve the current year’s PIN, enter it accurately on applicable federal returns, and keep it private.
  5. Report actual misuse separately: If a fraudulent return or other identity theft has already happened, follow the IRS incident instructions and any notice-specific requirements in addition to enrolling.

Key points to remember

  • Exposure of an SSN or ITIN alone does not disqualify you from voluntary IP PIN enrollment.
  • The IRS Online Account is the fastest enrollment method; Form 15227 and an in-person appointment are alternatives.
  • Form 15227 currently uses AGI limits of $84,000 for an individual and $168,000 for married filing jointly, plus telephone access, with delivery generally taking four to six weeks after verification.
  • The six-digit PIN changes every calendar year and must be entered accurately on applicable federal returns, including prior-year returns filed during that year.
  • An IP PIN helps protect federal tax filing, but it is not a universal SSN lock and does not replace reporting identity theft.
  • The IRS will never ask for your IP PIN; unsolicited requests for it should be treated as scams.

Frequently Asked Questions

Can I get an IP PIN just because my SSN was exposed?

Yes. The IRS allows voluntary enrollment for a person with a valid SSN or ITIN who can verify their identity. You do not need proof that a fraudulent return has already been filed.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What is the fastest way to enroll?

Use an IRS Online Account. After identity verification, open Profile, select the IP PIN section, and enroll. Online enrollees retrieve each year’s new PIN there.

What if I cannot pass online identity verification?

If your last-filed AGI is below $84,000 for an individual or $168,000 for married filing jointly and you have telephone access, check Form 15227. Otherwise request a Taxpayer Assistance Center appointment.

How long does Form 15227 take?

The IRS says the PIN generally arrives by U.S. mail four to six weeks after it verifies your identity by telephone.

Does the PIN work for state taxes or an extension?

No. It is for applicable federal returns. Do not enter it as a state PIN or on a federal extension form.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How often does the IP PIN change?

It is valid for one calendar year and is replaced annually. Retrieve the current number before filing, even if you remember last year’s digits.

What if someone already filed a return using my SSN?

Enroll for future protection, but also follow the IRS identity-theft instructions, any notice instructions, and IdentityTheft.gov guidance. Form 14039 may apply in relevant cases.

Will the IRS call or email asking for my PIN?

No. The IRS says it will never ask for your IP PIN. Treat unsolicited requests by phone, email, or text as scams.

The Bottom Line

An exposed SSN or ITIN is enough to consider voluntary IRS IP PIN enrollment. Start with the IRS Online Account; use Form 15227 if you meet the current AGI and telephone requirements, or request a Taxpayer Assistance Center appointment when those routes fail. Retrieve a new six-digit PIN every calendar year, use it accurately on applicable federal returns, keep it private, and report any actual identity theft separately.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.