The Internal Revenue Service Commissioner’s testimony before Congress on April 10, 2008 prompted Accounts Management (AM) to take a proactive position in combatting identity theft. A toll-free number for identity theft victims was created (800-908-4490). A caller residing outside the U.S. would call the International telephone number (267-941-1000). The procedures were created to assist taxpayers that are victims of tax-related identity theft and provide general guidance for non-tax related identity theft.

Refer to IRM 1.1.13.7, Customer Account Services (CAS), for information.

The Taxpayer Bill of Rights (TBOR), lists rights that already existed in the tax code, putting them in simple language and grouping them into 10 fundamental rights. Employees are responsible for being familiar with and acting in accord with taxpayer rights. See IRC 7803(a)(3), Execution of Duties in Accord with Taxpayer Rights. For additional information about the TBOR, see http://www.irs.gov/taxpayer-bill-of-rights.

Policy Statement 10-1, Assisting Taxpayers who Report they are Victims of Identity Theft. See IRM 1.2.1.17.1, P–10–1 (formerly P-25-1).

All taxpayers desire and expect courteous service. Taxpayers who experience identity theft are already victims, either emotionally or financially. All employees need to be aware of that impact and handle the contact with an additional level of sensitivity and understanding and be empathic when dealing with identity theft victims.

See IRM 21.1.1, Accounts Management and Compliance Services Overview. and additional information is found in IRM 1.1.13.7.3, Accounts Management (AM) and,

See IRM 21.1.1.1.3, Roles and Responsibilities, for Accounts Management, Compliance Services and Field Assistance employees.

Refer to the table below for a list of acronyms used throughout this IRM.

Various resources must be referred to and used as it relates to IDT Toll-free. Resources specific to IDT Toll-free are:

Complete all initial research to rule out normal account issues and determine if the potential for ID theft exists.

In many instances, a third party requested an EIN on the taxpayer’s behalf for a legitimate business purpose. When the caller indicates no knowledge of the EIN or business account, expand the normal probe questions to include:

Based on the taxpayer answers to the questions in (2) above, follow the table below.

A tax-related identity theft case controlled on IDRS can be identified by control categories, IDT(x), IDS(x) (the "x" represents an IDT/S 1, 3, 6, 8, or 9), or IDI(x) (the “x” represents an IDI 1,3, 4, 5, 6, 7, 8 or 9). A telephone CSR must not adjust or take any account actions on these open identity theft accounts except when the account meets Taxpayer Protection Program (TPP) criteria. Refer to IRM 25.25.6.6, Non Taxpayer Protection Program (TPP) Telephone Assistors Response to Taxpayers.

Accounts Management Customer Service Representatives are required to use the IAT Disclosure tool to perform required and additional taxpayer authentication when the IRM requires it. See Exhibit 21.2.2-2, Accounts Management Mandated IAT Tools. Additional authentication must be completed when the IAT Disclosure tool alerts the users to account conditions when identity theft is suspected, a factor, or documented. This includes accounts involving multiple entities, mixed periods, an MFT 32 account, or cases involving IDT related transactions, open identity theft controls, etc.
A list of identity theft action codes can be found in IRM 25.23.2, Identity Protection and Victim Assistance - General Case Processing. Refer to IRM 21.1.3.2.3, Required Taxpayer Authentication, and IRM 10.10.3.3.7, Identity Proofing for Additional Taxpayer Authentication, for high-risk authentication procedures. If IAT Disclosure tool is not available or an employee has a problem with the IAT Tool Manager, the case should be processed through IDRS following established procedures. See IRM 21.2.2.4.4.14 (2), Integrated Automation Technologies, for additional information.

If the identity theft case is closed or resolved, you may provide account information to the TIN owner after authenticating them. You may provide the TIN owner with the information from their account only. Fraudulent information may be combined with the TIN owner's information, such as IRP data, account transcripts, etc. Do not provide information from the fraudulent return. If the taxpayer is asking for their own transcript information, see IRM 21.2.3.5.8, Transcripts and Identity Theft. Also refer to IRM 21.2.3.5.8.4.3, Wage and Income Transcript Identity Theft and IRM 25.23.2.10, Get Transcript Breach. You can usually identify the following transaction(s) on Integrated Data Retrieval System (IDRS) via cc ENMOD and/or cc IMFOLE, if the case is resolved.

For a closed identity theft case, if the SSN owner did not receive their refund, received an incorrect refund amount, or received an incorrect balance due notice because the case is worked incorrectly, (for example, an employee failed to input the TC 971 AC 850 causing a direct deposit into the bad taxpayer's account), treat the case as priority work and take the following actions:

On open identity theft cases, do not give out specific account information on the common TIN (when staffing the toll-free lines) unless the caller passes additional/high-risk authentication. For additional information, see IRM 21.1.3.2.4, Additional Taxpayer Authentication. If the caller passes the additional taxpayer authentication, you can provide general information on status updates and information from CII case notes entered on "AMS". Provide a reasonable time frame necessary to complete the processing of the case, general information from the case may be necessary. Fraudulent information may be combined with the TIN owner's information, such as IRP data, account transcripts, etc. Do not provide information during the call from the fraudulent return when there is an open identity theft case. You must document AMS with any information provided to the taxpayer during the call.

For calls related to a balance due issue on an open IDTVA control, if the taxpayer states they are receiving a balance due notice because their credit elect from the prior year wasn't applied. Input a TC 470 CC 94 on the module with the balance due to prevent notices and the notice progression to collections. For any other balance due issue on an open IDTVA control, input a TC 470 AC 90 on accounts to prevent balance due notices from generating and preventing offsets into the module.

If the taxpayer is calling for the status of their transcript request, Form 4506, Request for Copy of Tax Return, or Form 4506-F, Identity Theft Request for Copy of Fraudulent Tax Return, and received the Form 14611, RAIVS/IVES IPSU, from the RAVIS unit, refer to IRM 25.23.12.4.5, Identity Theft - Transcript Request.

If the taxpayer is calling only to check on the status of their refund and no additional information is provided, then provide an update on the status of the case including a reminder of the identity theft time frames. In an attempt to minimize frustration a statement like this one could be provided:
"Identity theft is a challenging and ever-changing issue and the IRS is committed to working with victims like you to resolve tax-related identity theft cases. The IRS takes identity theft seriously and is committed to resolving identity theft cases as quickly as possible and are taking steps to reduce this timeframe. You will receive notification once your case has been resolved."

Advise that most cases are resolved in 120 days or less but due to extenuating circumstances caused by the pandemic our identity theft inventories have increased dramatically. On average it is taking us 640 days to resolve identity theft cases. Explain that identity theft cases are worked in the order they are received. If the taxpayer has further questions on the timeframe, advise the taxpayer to visit the IRS.gov web address and type "Status of Functions" in the search bar and select "IRS operations: status of mission-critical functions" from the results to check the current operational status.

If you are unable to assist the taxpayer by responding to their questions and concerns as it relates to the open IDTVA case, use the IDTVA Employee Lookup tool to find the controlling IDTVA employee’s contact information. Provide the taxpayer with the IDTVA toll-free number (855-343-0057) or IDTVA International telephone number (267-941-1000), IDTVA’s employee’s name, six-digit extension and Tour of Duty (TOD), and availability based on the taxpayer’s time zone.
Advise the taxpayer of the following:

After you have provided the information above to the taxpayer on their open or closed case, including sending a secure email or referral, you must update AMS to document the call and the information the taxpayer provides:

If a taxpayer calls and indicates they have not received a call back within five business-days, please see IRM 25.23.12.4.2 Open Identity Theft Victim Assistance (IDTVA) Controls – Call Back not Received by Taxpayer.

If a taxpayer calls and indicates they have not received a call back within five business-days:

If you are unable to assist the taxpayer, advise the taxpayer that you will follow-up to have their call returned within two business-days.

Use the IDTVA Employee Lookup tool to find the controlling IDTVA employee's contact information. Issue a secure email to the employee and their manager, with a copy (CC) to the assigned P&A analyst. Advise them the call must be returned no later than the next business-day.

Refer to IRM 21.5.6, Freeze Codes, for guidance specific to freeze codes.

For most calls, refer to the subsections under IRM 21.4, Refund Inquiries. However, if research of the taxpayer’s account shows a systemic true duplicate condition along with an indication of an external data breach (TC 976, TC 971 AC 142, TC 971 AC 123 PREPARER CONTACT and/or a TC 971 AC 125), see IRM 25.23.12.4.4.1, Identity Theft Cases from External Data Breaches for guidance on how to complete a Form e-4442.

If the taxpayer’s call is regarding their Economic Impact Payment (EIP), research the account to confirm the issuance of an EIP. See IRM 21.6.3.4.2.13.2, Economic Impact Payments – Refund Inquiries.

Refer to IRM 21.2.3.5.8, Transcripts and Identity Theft, for guidance specific to requests involving the taxpayer’s file return(s) and accounts with identity theft. Refer to IRM 25.23.12.5, Responses to Requests for copies of Fraudulent Return(s) for Identity Theft Victims when the taxpayer requests a copy of the fraudulent tax return. Refer to the table below when the taxpayer is calling for the status of their request for a copy of a tax return.

Refer to IRM 21.5.5, Unpostables, for guidance specific to unpostable transactions.

For calls related to a balance due issue on a closed identity theft issue see IRM 5.19.21.2.1, Identity Theft Claim.

For calls related to a balance due issue on an open IDTVA control, see IRM 25.23.12.4.1, Telephone Inquiries Regarding Identity Theft Victim Assistance (IDTVA) Tax-Related Cases, paragraphs (5), (6), (7), (8), (9), (10), and (11).

Refer to IRM 10.5.4.4.7.1, Handling Inquiries About IM Data Breach Notification Letters, for guidance specific to request involving Letter 4281C. Questions regarding the content of IRM 10.5.4, Incident Management Program, should be directed to that IRM owner.

Effective October 1, 2022 the Identity Theft Assistance Request (ITAR) inventory program is obsolete. AM IDTVA will no longer be accepting ITAR e4442s. See IRM 21.3.5.4.1, When to Prepare a Referral, to determine if an e4442 is required based on a specific topic.

The Coronavirus Aid, Relief, and Economic Security Act (CARES Act) was signed into law on March 27, 2020. IRC 6428 provides eligible individuals with a recovery rebate credit (RRC) for tax year 2020 that taxpayers may receive as an advance payment. Advance payments of the RRC are referred to as an Economic Impact Payments (EIPs). EIP 1 was required to be paid on or before December 31, 2020. An eligible individual who did not receive EIP 1 before that date would need to claim the amount to which they are entitled as an RRC on their tax year 2020 return.

A second Economic Impact Payment was included in the Consolidated Appropriations Act, 2021 that was signed into law on December 27, 2020. This increased the Recovery Rebate Credit for the tax year 2020 that taxpayers may receive also as an advance payment. EIP 2 was required to be paid on or before January 15, 2021. An eligible individual who did not receive EIP 2 before that date would need to claim the amount to which they are entitled as an RRC on their tax year 2020 return.

The American Rescue Plan Act of 2021 was signed into law on March 11, 2021. It provides eligible individuals with a recovery rebate credit for tax year 2021 that taxpayers may receive as an advance payment Economic Impact Payment. EIP 3 was required to be paid on or before December 31, 2021. An eligible individual who did not receive EIP 3 before that date would need to claim the amount to which they are entitled as an RRC on their tax year 2021 return.

Individuals may call the IRS to report their TIN has been misused to obtain the Economic Impact Payments. All toll-free employees receiving calls should continue to follow basic required authentication procedures using the IAT Disclosure tool to assist callers and prevent unauthorized disclosure of taxpayer information whenever it is necessary to access a taxpayer’s account. When the IAT Disclosure tool alerts the users to account conditions where identity theft is a factor/suspected, documented, or the account involves multiple entities, mixed periods, cases involving open IDT related transactions, MFT 32 accounts, open identity theft controls, etc., additional authentication must be completed before disclosing information. See IRM 21.1.3.2.4, Additional Taxpayer Authentication, for high-risk authentication procedures.

Guidance should be provided to these individuals identifying themselves or their dependent as a potential victim of tax-related identity theft. This guidance will assist the taxpayer in protecting their identity. Refer to IRM 25.23.12.2(5), Identity Theft Telephone General Guidance.

If the taxpayer’s call is regarding any or all of their Economic Impact Payments (EIP) and they are claiming to be a victim of identity theft, research to determine if a return is on file and the EIPs were issued. If your research determines EIPs were issued and the taxpayer is claiming the return on file was a fraudulent return and they did not receive their EIPs, advise the taxpayer they should submit a claim using Form 14039, Identity Theft Affidavit, when they allege they are victims of tax-related identity theft. See IRM 25.23.2.3, Identity Theft Claims - General Guidelines.
If the account research determines no EIPs were issued due to ineligibility, explain to the taxpayer how EIPs are determined. Example: Reason Code (RC) 201 No payment due to the taxpayer being claimed on another return. See IRM 25.23.4.20.1, Economic Impact Payment (EIP) - Account Research. If the taxpayer insist, after the explanation, that a fraud was committed using their personally identifiable information without their authority; refer to IRM 25.23.12.2 (5), Identity Theft Telephone General Guidance. Provide guidance to the taxpayer including actions to take to protect their identity.

If your research confirms the taxpayer’s Economic Impact Payment (EIP) was issued to the taxpayer’s bank account or mailed to the taxpayer’s address of record as a paper check and the taxpayer did not receive it, follow procedures in IRM 21.4.2.4, Refund Trace Actions, to locate and trace a lost, stolen, or misplaced payment. If you identify a TC 971 AC 199 with a miscellaneous field "BFS DEBIT" dated May 22, 2020, "BFS DEBIT II" dated January 6, 2021, or BFS DEBIT 2021A dated March 26, 2021 on the entity module, this indicates a Pre-paid debit card(s) was issued for the refund(s). The EIP card is sponsored by the Bureau of Fiscal Service (BFS), managed by Money Network Financial, LLC, and issued by Treasury’s financial agent, Metabank. Do not initiate a refund trace on debit card. If the credit has not been returned to the account (TC 841 or TC 740), advise the taxpayer to contact Metabank at 800-240-8100 (select language, then option 2 for main menu, then enter the last six digits of the Social Security number of the person who is listed first on the tax return, or at eipcard.com. For more information see IRM 21.6.3.4.2.13.2, Economic Impact Payments – Refund Inquiries and follow any procedures that may apply. For all other refund inquiries such as returned refunds, family disputes, or erroneous refund, etc., see the appropriate section of IRM 21.4, Refund Inquiries.

Research to determine if the taxpayer’s account has a TC 971 AC 199 miscellaneous field that shows a bank account number followed by the letters “EF” on the taxpayer’s entity and the taxpayer claims that they did not file a current year return, use any IRS.GOV applications to enter their information, or provide the federal government with any direct deposit information to receive benefits. If a TC 971 AC 199 miscellaneous field that shows a bank account number followed by the letters “EF” and the taxpayer claims they never provided any information using the IRS.gov applications or received EIP payments, advise the taxpayer to submit an identity theft claim using Form 14039, Identity Theft Affidavit. Then refer to IRM 21.6.3.4.2.13.2, Economic Impact Payments – Refund Inquiries and follow any procedures that may apply.

The IRS offers a few options for taxpayers or authorized person to apply and obtain an IP PIN. Participating in the IP PIN Program is voluntary for individuals who are not victims of tax-related identity theft. All individuals with an SSN or an ITIN are eligible to opt into the IP PIN program. The fastest way for an individual to enroll in the IP PIN Program is by opting in using the Individual Online Account at www.irs.gov/your-account. Individuals who do not already have an account must register by verifying their identity. Once enrolled, they can immediately view their IP PIN on the Profile page of their account. See IRM 25.23.2.9.1, Participating in the IP PIN Program.

When a taxpayer calls to inquire about the IP PIN paper application process, employees will:

When an individual calls and indicates they have applied for an IP PIN using Form 15227 and they are requesting a status update, employees will:

If you are unable to assist the taxpayer, use the IDTVA Employee Lookup tool to find the controlling IDTVA employee’s contact information. Verify with the taxpayer they have the correct name and extension for the controlling IDTVA employee. Recommend they try calling the number again. Issue a secure email to the employee and their manager including a copy (cc) to the assigned P&A Analyst. In the email, advise the employee that a return call to the requestor (applicant) must be returned no later than the next business day.

Advise the requestor you have sent a follow-up email to the assigned employee to have their call returned within two (2) business days.

If the identity theft case is closed, you may provide updated information related to their application for an IP PIN to the TIN owner or authorized representative (e.g., Form 8812 Tax Information Authorization or Form 2848 Power of Attorney and Declaration of Representative) utilizing normal procedures.

Document call and all actions taken on individuals account on AMS or CII case notes. Case actions on CII systemically post a note to AMS. See IRM 25.23.2.3.4, Required Case and History Notes.

Individuals may call the IRS to request an appointment in an effort to obtain an IP PIN. Complete research must be completed on the TIN provided to determine if the taxpayer is already enrolled in the IP PIN program, if there is an open IDT control or other issues that prevents the individual from receiving one. If there is an open control advise the individual, they must wait until the IDT case is resolved as an IP PIN may be assigned.

For individuals requesting an IP PIN, ask if they attempted to use any of the alternative options available to obtain an IP PIN.

Advise the individual what forms of identification and/or documentation are required when applying for an IP PIN in person at the TAC:

Document call and all actions taken on individuals account on AMS or CII case notes. Case actions on CII systemically post a note to AMS. See IRM 25.23.2.3.4, Required Case and History Notes.

The Internal Revenue Service (IRS) works with ID.me, a credential service provider, to provide authentication and identity verification for taxpayers and tax professionals accessing IRS applications including Online Account, Get Transcript Online, Online Payment Agreement, Tax Pro Account, e-Services, Submit Forms 2848 and 8821 Online, and Get an Identity Protection PIN (IP PIN). Users prove their identity by uploading government documents, taking a video selfie, and filling out personal information. These identity verification services are crucial for the IRS to ensure millions of taxpayers and tax professionals can securely access IRS online services.

IRS employees cannot assist taxpayers in creating an ID.me account. Do not refer taxpayers to the Electronic Products & Services Support (EPSS) help desk for assistance with creating an ID.me account.

Taxpayers having trouble accessing or creating an account for an IRS online service can visit How to Register for Certain Online Self-Help Tools or should be directed to the IRS ID.me Help Center website by visiting https://help.id.me

Follow the chart below when a taxpayer reports an ID.me account was created fraudulently, or their account was compromised.

Refer to ID.me Help pages for a visual tutorial on creating a new ID.me account. If the link does not work, you may access the tutorial in SERP Job Aids under Direct File.