Every tax season, someone tries to file a return in another person’s name and collect the refund before the real taxpayer ever gets to the mailbox. The Internal Revenue Service’s core defense against that is a free, six-digit Identity Protection PIN that only the taxpayer and the agency are supposed to know. In early September, the IRS and its Security Summit partners restated a rule that doubles as a warning: a tax professional cannot obtain that PIN on a client’s behalf, no matter how the offer is worded. For a household trying to judge whether a preparer, a caller or an email is legitimate, that single rule is one of the clearest tests available.
The Rule Behind the Headline: No Preparer Can Obtain a Client’s IP PIN
The statement comes from the fourth installment of the IRS’s “Protect Your Clients; Protect Yourself” summer series, released Sept. 4, 2026, as IR-2026-106. The release is direct on the point: tax professionals cannot obtain an IP PIN on behalf of clients, and taxpayers must obtain their own. IRS Chief Executive Officer Frank J. Bisignano framed IP PINs and multifactor authentication together as layers meant to protect data held by practitioners, taxpayers and IRS systems alike.
That rule is not a technicality. It means the program was built so that a preparer, a “tax relief” firm, a caller claiming to represent the IRS, or anyone else offering to retrieve, renew or “look up” someone else’s IP PIN is describing something the Security Summit release says the system does not permit. The offer itself is the tell, independent of anything else the caller says or how official it sounds. A household hearing that pitch is not looking at a shortcut a busy preparer happened to find; it is looking at a claim the IRS’s own program design makes impossible to fulfill honestly.
Free retirement updates: Enrollment and claim windows come and go, and missing one can cost you real money. The free Retirement Shield newsletter keeps you ahead of the deadlines that matter. Sign up free.
How a Six-Digit Number Blocks a Fraudulent Return
An IP PIN works because the IRS checks it before accepting an electronically filed return under that Social Security number. Without the correct current-year PIN attached, a return claiming a refund under someone else’s identity is rejected at filing, which is the exact point where identity thieves have historically succeeded: getting a fraudulent return processed and a refund issued before the real taxpayer files their own. The PIN does not change what a refund is worth or remove the ordinary work of filing; it closes the specific door identity thieves depend on being left open.
The IRS notes that confirmed victims of tax-related identity theft are automatically issued a new IP PIN every following year, without having to reapply. Everyone else has to choose to opt in, which is why the program only protects the households that actually go get a number rather than waiting for one to be assigned.
The Only Legitimate Way To Get One: Directly Through IRS.gov
Taxpayers who want an IP PIN request it themselves through the IRS’s Get an IP PIN tool, which requires verifying identity before the number is issued. The same identity-verification standard sits behind an IRS Online Account, which the agency is separately encouraging taxpayers to set up because an account that was never created is itself a target: fraudsters have registered accounts in real taxpayers’ names to intercept notices and payment records before the actual account holder ever logs in.
Once a taxpayer has an IP PIN, the release says, it should never be shared with anyone except the IRS and the trusted preparer actually filing that year’s return, and the IRS will never call, email or text to ask for it. A request for the number by phone or email is, on its own, disqualifying.
Why the Protection Resets Every Year
An IP PIN is valid for one calendar year, and a new one is generated annually, so a number that worked on last year’s return will not work on this year’s. That annual reset is deliberate: it limits how long a stolen PIN would remain useful even in the rare case one was ever compromised, and it means a legitimate preparer working on a current return is relying on a number the taxpayer retrieved for that specific year, not one carried over, stockpiled or handed off in advance.
The Verification Tools Real Preparers Lean On Instead
The release points preparers toward their own identity tools rather than a client’s PIN. A Tax Pro Account lets a preparer submit power-of-attorney and tax-information-authorization requests and manage active client authorizations electronically, which is how a legitimate firm proves it is authorized to work on a return without asking a client to hand over a personal identity number. Preparer firms are separately required, under the Federal Trade Commission’s Safeguards Rule, to use multifactor authentication to protect client data on the systems they control, unless a qualified individual at the firm has approved an equally secure alternative in writing. That requirement applies to every preparer firm regardless of size, which means a one-person storefront operation is held to the same access-control standard as a national chain, even though neither one is permitted to hold or retrieve a client’s IP PIN.
The IRS says tax-professional security remains a focus of the 2026 IRS Nationwide Tax Forum, whose final stop of the year runs Sept. 15-17 in San Diego, part of a Security Summit partnership between the IRS, state tax agencies and the tax industry that has run since 2015.
The Programs Behind The Fixed Income
This story is about spotting a fraudulent tax preparer, not about which benefits an older household already qualifies for. Those are separate questions, and the second one is easy to leave unanswered because most of these programs are opt-in: nobody at a state or federal agency signs a household up automatically.
The Benefits Checklist walks through SSI after 65, unclaimed property and Extra Help for prescriptions, each with its 2026 income limits and a 50-state phone directory to call for details.
See how SSI after 65, unclaimed property and Extra Help for prescriptions work in The Benefits Checklist.
This article was produced with AI assistance and reviewed by a human editor. Figures are linked to their primary sources; where a claim could not be verified from the public record, we say so.
