The Internal Revenue Service caught nearly three times as many fraudulent tax returns filed under stolen identities this filing season as it did the year before, according to a government watchdog’s audit released in June. The agency confirmed about 19,000 returns as identity theft and kept $138.5 million in refunds from reaching thieves, as of the end of February 2026. For a household that counts on its spring refund to cover a car repair, a utility bill, or back-to-school costs, the number is a reminder of how much fraud the tax system is absorbing on the way to paying out a legitimate return.
Inside the Filters That Flag a Stolen Social Security Number on a Return
Every filing season, the IRS runs incoming tax returns through a set of automated filters built to catch the fingerprints of identity theft: mismatched income and withholding claims, unusual filing history, a filer’s age, and even prisoner status, since stolen prisoner Social Security numbers are a known fraud pattern. For the 2026 filing season the agency used 294 of these filters, almost identical to the 295 it ran in 2025. A return that trips one of them does not get rejected outright — it gets held.
Once a return is flagged, the IRS pauses processing until the person behind the Social Security number on it proves they are who they say they are, usually through the agency’s Individual Online Account or a dedicated toll-free verification line. The Treasury Inspector General for Tax Administration’s report on the 2026 filing season lays out exactly how that screening produced this year’s numbers, and it is worth reading the full breakdown of what got caught and what didn’t.
Free retirement updates: A quiet rule change can shrink your Social Security or Medicare check, and no one warns you. The free Retirement Shield newsletter catches these early and tells you what to do. Get it free.
The Fraud Numbers Nearly Tripled From a Year Earlier
The scale of the jump is the headline finding inside the audit. In the 2025 filing season, the IRS’s filters flagged 678,000 returns worth $5.5 billion and ultimately confirmed 6,000 of them as identity theft, protecting $53.9 million. A year later, in the 2026 filing season, the filters flagged 1.3 million returns worth $9.9 billion, and the agency confirmed roughly 19,000 as identity theft, protecting $138.5 million. Taxpayer Services management told auditors the increase reflects identity-theft selection returning to a normal level after running lower than usual in 2025, not a sudden change in how thieves operate.
That same audit found the IRS’s broader fraud-detection programs — which cover more than just identity theft, including simple fabricated-income schemes — stopped $613.1 million in fraudulent refunds tied to 32,515 returns as of late February, down from $908.3 million and 57,022 returns identified over the same stretch in 2025. Auditors attributed part of that drop to a procedural change: the IRS is now holding suspect returns longer during verification so it can weigh more information before deciding how to treat them, which shows up as fewer confirmed cases earlier in the season.
What a Legitimate Filer Can Expect If Their Return Gets Held
A household whose real return gets caught by one of these filters is not automatically a fraud victim — it usually means the IRS wants to confirm the return is genuinely theirs before it releases a refund. The IRS says a taxpayer in that position typically receives one of several letters, such as Letter 5071C or Letter 4883C, each pointing to either an online identity-verification tool or a toll-free number. If the return checks out, processing continues; if the taxpayer says they never filed it, the IRS removes the fraudulent return from their account.
Resolution timelines vary sharply depending on the path. The IRS’s own published guidance on identity-theft victim assistance says a confirmed case handled through its Identity Theft Victim Assistance unit is generally supposed to close within about 120 days, but the agency’s current guidance also acknowledges its average has been running closer to 580 days because of a case backlog that built up in recent years. That gap matters to a household budgeting around a specific refund date, since a return pulled for identity verification can sit for months rather than weeks.
The IP PIN: A Free Six-Digit Number That Blocks Copycat Filers
The same audit tracked a second, more preventive tool: the Identity Protection PIN, a six-digit code the IRS issues so a return can’t be accepted under a given Social Security number without it. The agency issued 6.6 million IP PINs for the 2026 filing season, up from 6.3 million a year earlier, split between taxpayers who requested one voluntarily and those the IRS enrolled automatically after a prior identity-theft case.
Anyone with a Social Security number or an Individual Taxpayer Identification Number who can verify their identity is eligible to request an IP PIN, whether or not they’ve ever been a fraud victim, according to the IRS. The fastest way is through an Individual Online Account; taxpayers who can’t verify online and have adjusted gross income under set thresholds can apply by mail instead, and everyone else can request one in person at a Taxpayer Assistance Center. A new PIN is issued every year, and the IRS warns it will never call, text, or email to ask for one — any such request should be reported through the agency’s identity theft central hub, not answered.
A Prisoner-Return Program the Audit Says Is Working Better
Buried further in the same report is a smaller but sharper data point: fraud tied to prisoner Social Security numbers. The IRS compiles a Prisoner File from federal and state corrections data to flag returns filed using an incarcerated person’s identity. In 2025, the agency detected 14,625 such returns but stopped only five of them, protecting a mere $43,200. In 2026, detections fell slightly to 12,619, but the agency actually stopped 2,263 of them, protecting $7.5 million — a jump auditors linked to new refundable-credit rules under the One Big Beautiful Bill Act that gave the IRS more reason to scrutinize those filings before paying out. The Treasury Inspector General for Tax Administration says it plans to publish a final assessment of the full 2026 filing season later this year, once more of the season’s amended returns and identity-theft cases have worked their way through the pipeline.
Inside the kit
A notice decoder, the refund-trace steps for Form 3911, a refund status tracker spreadsheet and the 3-year refund deadline.
The IRS Refund Recovery Kit includes a 13-page kit, a notice decoder and the refund-trace steps (Form 3911).
Open The IRS Refund Recovery Kit.
This article was produced with AI assistance and reviewed by a human editor. Figures are linked to their primary sources; where a claim could not be verified from the public record, we say so.
