An Identity Protection PIN (IP PIN) is a six-digit code that locks your tax return to you: without it, the IRS rejects any e-filed return using your SSN.
Anyone can opt in — the fastest way is the IRS Online Account, and the PIN is free. As of August 2026 it’s the single most effective way to block tax-refund identity theft.
Here’s how enrollment, annual renewal, and filing with the PIN work.
What does an IP PIN actually do?
Once you’re enrolled, every federal return filed under your SSN must include the current-year IP PIN:
- An e-filed return without the correct PIN is rejected outright — a thief with your SSN and birthday can’t file as you.
- A paper return without it faces extra identity screening and long delays.
- The PIN changes every year. Each January, a fresh one is issued for the new filing season.
It protects your dependents too — dependents with their own IP PINs get the same lock.
How do you get one?
Three routes, by speed:
- Online (immediate): sign in to your IRS Online Account, verify identity through ID.me, and use the IP PIN tool under your profile. The PIN displays on screen.
- Form 15227 (by mail/phone): if you can’t verify online and your income is under the form’s threshold (check the current figure on the form), file Form 15227; the IRS calls you to validate identity, and the PIN arrives by mail — typically for the next filing season.
- In person: book a Taxpayer Assistance Center appointment (844-545-5640) with two forms of ID. PIN arrives by mail within about three weeks.
Confirmed identity-theft victims don’t need to opt in — the IRS enrolls them automatically and mails a CP01A notice with a new PIN every year, indefinitely.
How do you use it at filing time?
- Retrieve the current year’s PIN each season — from the CP01A letter or by logging into your online account (the online tool always shows the current PIN; reissues happen there too, so a lost letter is a two-minute fix, not a crisis).
- Enter it where the software asks — typically near the signature section. Spouses each enter their own if both are enrolled.
- Give it to your preparer only with the return. The IRS never calls, emails, or texts asking for it — any such request is a scam.
Miss or mistype the PIN and the e-file bounces with a rejection code; re-file with the right PIN and it goes through.
Should you opt in?
If your SSN has ever been exposed — a data breach, a stolen wallet, a fraudulent unemployment claim filed in your name (a common companion crime) — the case is strong. The one commitment: once enrolled, you must use the PIN every year. Opt-in participants can request removal from the program via their online account, but victims enrolled by the IRS generally stay in.
The IP PIN also pairs naturally with checking your IRS transcripts if you suspect someone has already filed as you: an account transcript showing a return you didn’t file is the confirmation, and Form 14039 (Identity Theft Affidavit) is the next step.
FAQ
Is the IP PIN the same as my e-file self-select PIN?
No. The five-digit self-select PIN is just an e-signature you make up. The six-digit IP PIN is IRS-issued security.
I lost my PIN in April with the deadline looming.
Log into your online account and retrieve it instantly. No account? Create one — it’s still faster than any alternative.
Does it protect state returns?
No, federal only — though some states run their own PIN programs.
Does having one delay my refund?
No. A correctly entered IP PIN processes normally; it prevents delays by blocking fraudulent filings.