IRS Online Account and IP PIN: A Compliance Checklist Against Tax Identity Theft

Author: Gloria Liu, CPA ｜ YCL Tax, Accounting & Advisory

Bottom line in one breath

An IRS Identity Protection PIN (IP PIN) is a six-digit code known only to you and the IRS. If someone tries to e-file using your SSN or ITIN without that code, the return is generally rejected. Anyone with an SSN or ITIN who can verify identity may opt in for free—you do not have to wait until you are a victim. The fastest path is an IRS Online Account; each year, starting about mid-January, retrieve the new PIN before you or your CPA e-file.

Background

The IRS and the Taxpayer Advocate Service keep warning that tax-related identity theft remains common: thieves file first for a fraudulent refund, and legitimate taxpayers discover the problem when their e-file rejects or a surprise notice arrives. Beyond balances, payments, and notices, Online Account is the primary place to enroll in and view an IP PIN. Confirmed victims are placed in the program and receive Notice CP01A by mail; voluntary online enrollees usually must log in each year—paper notices are not the default.

Old vs. new

1. Protection model: Reactive (Form 14039 and long verification) vs proactive IP PIN gating of e-file.

2. Enrollment channels: Online Account (fastest) / Form 15227 (if last-filed AGI is under about $84,000 single or $168,000 MFJ and you cannot create an online account) / Taxpayer Assistance Center appointment.

3. Validity: One calendar year; a new PIN is issued each year. Use the current-year PIN for any federal individual return filed during that year (including prior-year and amended returns).

4. Forms: Primarily Forms 1040, 1040-NR, 1040-PR, 1040-SR, and 1040-SS. Missing or wrong PINs cause e-file rejects or paper delays.

5. Minors: Taxpayers under 18 generally must use alternative enrollment (待核 household facts); parents/guardians may request PINs for dependents.

6. Tax pros: Cannot request an IP PIN for a client; they only enter the number you provide at filing time.

7. Scams: The IRS will never ask for your IP PIN by phone, email, or text.

Self-check: does this affect you?

1. You or a family member had an e-file reject saying a return was already filed with your SSN.

2. You want a preventive lock before the 2027 filing season.

3. You have dependents whose SSNs could be used to claim credits fraudulently.

4. You split time between Cary/RTP and Shanghai and need remote PIN retrieval.

5. Online ID proofing failed and you need Form 15227 or a TAC visit.

Simplified example (illustration only)

Mr. Zhao in Cary has never been a victim but wants a preventive PIN:

1. Sep–Dec: Completes Online Account identity proofing (documents / credit-related checks as required).

2. Enrolls: Opts into IP PIN under Profile; stores the code in a password manager—not a group chat.

3. After mid-January 2027: Logs in for the new six digits, sends them securely to YCL or enters them in software, then deletes casual chat copies.

4. If e-file rejects for PIN: Checks for last year’s digits or a dependent/spouse PIN on the wrong line before retransmitting—do not brute-force wrong numbers.

Action timeline

1. Now: Register or sign in to IRS Online Account; confirm the IP PIN profile section is reachable.

2. After enrollment: Decide whether spouses and eligible dependents should enroll too.

3. Each mid-January through filing: Retrieve the new PIN; put it on the same checklist as W-2s and 1099s.

4. If online proofing fails: Evaluate Form 15227 income limits or book a TAC appointment; allow weeks for mail delivery.

5. Always: Never give the PIN to unsolicited callers or links; use irs.gov entry points only.

What YCL can do

1. Add “current-year IP PIN” to your filing document checklist to reduce e-file rejects.

2. Explain common PIN-related reject codes at a compliance level.

3. Coordinate multiple PINs (taxpayer, spouse, dependents) on the return.

4. Help organize identity-theft correspondence with the IRS (no outcome guarantees).

5. Cary (RTP) + Shanghai with CPA Chenchen Liu and Gloria—compliance planning and Free Consultation.

FAQ

Q: I have never been a victim—should I still get an IP PIN?

A: You may opt in voluntarily. The IRS allows non-victims to enroll as prevention. The main “cost” is remembering a new six-digit code each year.

Q: What if I forget the PIN?

A: Online enrollees retrieve it from Online Account during the viewing window. Do not file Form 15227 merely because you forgot a PIN. Follow IRS guidance for lost or never-received mailed PINs.

Q: Is it safe to give my PIN to my CPA?

A: Share it through a secure channel when the return is ready to sign and transmit, and avoid leaving it in long-lived unencrypted email. The IRS will not call you asking for the PIN.

Book a consult

YCL Tax, Accounting & Advisory

Web: yclcpa.com ｜ Email: info@yclcpa.com

Phone: 919-802-8376 / 980-202-0666 ｜ WeChat: YCLUSA

U.S. office: 1140 Kildaire Farm Rd. STE 208, Cary, NC 27511

Shanghai office: 2-516, Zhongye Xiangteng Plaza, Lane 31, Jiatong Road, Shanghai

Disclaimer

This article is general tax information only and is not tax, legal, or investment advice for any person or business. Application depends on your facts and the latest IRS, FinCEN, and NCDOR guidance. Items marked 待核 require verification before filing. Consult a licensed professional for advice specific to you.