Received an IRS letter asking you to verify your identity? Don’t panic — it's a common security measure that protects millions of taxpayers from fraud and identity theft each year. While getting any letter from the IRS can feel stressful, it’s easy to verify your identity once you understand the process. In this guide, we walk you through why the IRS asks for verification, how to complete it safely online or by phone, and how to spot scammers pretending to be the IRS.

Irma Šlekytė
January 9, 2026
The IRS may need to verify your identity for one primary reason — to protect you from tax identity theft and fraud. Criminals often steal Social Security numbers (SSNs) to file fake tax returns and claim the refunds. Identity verification with the IRS helps to protect you against these schemes.
Several specific situations trigger this identity verification process:
The IRS also uses automated fraud detection systems that scan for suspicious patterns. Sometimes it randomly selects returns for additional review and may initiate verification requests.
Getting an identity verification letter doesn’t mean you did something wrong. It’s a standard security measure that happens to millions of taxpayers. But you need to respond quickly — the IRS won’t process your return or send your refund until you do.
Ignore the letter and things get worse. The IRS may treat your return as fraud and archive it. You could lose your refund entirely due to statute of limitations. Worst case? If someone did steal your identity to file a fake return, not responding leaves you wide open to more fraud.
The IRS contacts you through three official channels when it needs you to verify your identity. The first and most common way is a letter via U.S. mail. The IRS also provides online verification methods and a phone call option, but only after you receive that initial letter. The IRS never starts the verification process with an email, text, or phone call.
Important: The IRS always sends a physical letter first when it needs you to verify your identity. If someone contacts you by email, text, or unsolicited phone call claiming to be the IRS asking for verification, it’s a scam.
The IRS sends different verification letters, but they all address the same concern — someone filed a tax return using your SSN, and the IRS needs to confirm whether you filed it or if you’re a victim of identity theft.
Letter 5071C is the most common one. The IRS sends it when it suspects potential identity theft during processing your return. You can then verify your identity online through the IRS Identity Verification Service or by phone calling the number in your letter. If you didn’t file a return, this letter means someone likely stole your identity. If you did file, you need to verify so the IRS can process your refund.
Letter 4883C only gives you a phone verification option. No online option here. Call the toll-free number in your letter to verify your identity and tell the IRS whether you filed the return or not. This letter also indicates potential identity theft, so take it seriously.
Letter 5447C works like 5071C, but it’s sent to international taxpayers. You get both online and phone verification options. The IRS needs you to verify your identity and confirm whether you filed the return or if someone else did so pretending to be you.
Letter 5747C requires an in-person appointment at an IRS Taxpayer Assistance Center. The IRS only sends this letter when it needs the highest level of identity verification. Bring valid government-issued photo ID and other documents listed in your letter to the appointment.
Follow your letter’s specific instructions immediately. Don’t ignore these letters even if deadlines have passed — respond as soon as possible. The IRS pauses processing your return until you verify, and delays can stretch your case resolution to 18-24 months.
Real IRS letters have specific features that are difficult for scammers to replicate. Look for the official IRS logo and letterhead at the top. Every genuine letter has a notice number (CP) or letter number (LTR) in the top or bottom right corner. The dates will be recent and properly formatted, and you won’t see spelling or grammar mistakes.
Got a letter that looks suspicious? Call the IRS directly at 1-800-829-1040 to verify it’s real. Don’t call any number listed in a questionable letter.
Yes, phone verification is completely legitimate — but only when your official IRS letter tells you to call. The letter will include a specific phone number for verification purposes only.
Before you call, gather these documents:
The phone system uses automated questions that only you should know the answers to. These questions confirm your identity before connecting you with an IRS employee who can process your verification.
Never respond to unsolicited calls claiming to be the IRS. Real IRS agents don’t call you out of the blue asking for identity verification. They send letters first.
It’s fastest to verify your identity online or via a phone call, but in specific cases the IRS may require you to pay it an in-person visit for verification purposes. Your IRS letter tells you which options to use.
Online verification is your quickest option if your letter allows it. You’ll need to create an ID.me account and verify your identity first, then use that account to access IRS services and complete the verification process.
ID.me is a digital identity wallet that lets you securely prove who you are online. The IRS requires you to use ID.me to access its online services.
To verify your identity with the IRS (using ID.me), you’ll need:
You can choose between two ID.me verification options. The self-service process lets you upload your ID photo and take a selfie yourself — this usually takes 5-10 minutes. If self-service doesn’t work, you can verify through a live video call with an ID.me agent.
Once ID.me verifies your identity, you can use that same account to sign into IRS online services and complete your tax return verification.
Phone verification works when your letter includes a specific phone number to call. Only use the number printed in your IRS letter — never call random numbers you find online.
If the letter looks suspicious, call the official IRS number 1-800-829-1040 to confirm its legitimacy.
Before calling the number provided in your letter, gather these documents:
The phone system will ask automated identity questions before connecting you to an IRS employee. This process can take longer than online verification due to call volume.
If the IRS employee can’t verify your identity over the phone, they may ask you to schedule an in-person appointment at your local IRS office.
In-person verification happens only when the IRS sends you Letter 5747C or when other verification methods fail. You must make an appointment at a Taxpayer Assistance Center — walk-ins aren’t allowed.
Bring your valid federal or state government-issued picture ID (a driver’s license, state ID, or passport) and at least one of the following forms of identification:
It can take several weeks to schedule an appointment, so call as soon as you receive your letter. The IRS employee will review your documents and verify your identity on the spot.
Once you verify your identity, the IRS will continue to process your return. Check your refund status in 2-3 weeks using the “Where’s My Refund” tool on IRS.gov.
The IRS may contact you again if it finds other issues during processing — like math errors or missing forms — which can cause additional delays. Don’t panic — simply respond to any new letters promptly.
Consider getting an Identity Protection PIN (IP PIN) after verification. This six-digit number helps prevent future identity theft because it’s required on all your tax returns. You can request an IRS IP PIN online through your IRS account once you’ve verified your identity. The IRS will mail your first IP PIN to you within 4-6 weeks in a Notice CP01A. But IP PINs expire annually, so you’ll need to retrieve a new PIN online each January.
The IRS officially says it takes up to 9 weeks to process your return after identity verification. It doesn’t mean that you’ll have to wait the whole 9 weeks — you might get your refund in a few days or weeks, provided there are no issues with your tax return form(s).
However, a couple of factors can affect your post-verification timeline:
Check your refund status 2-3 weeks after verification using the “Where’s My Refund” tool. If 9 weeks pass without updates, call the IRS using the number on your verification letter.
Remember — this 9-week timeline only starts after you successfully verify your identity. Every day you delay responding adds to your total wait time.
Don’t worry if identity verification fails and try an alternative verification method — phone verification, ID.me’s verification, or in-person verification:
Gather these documents before trying any method:
Most importantly — don’t ignore the letter because processing stops until you verify your identity. And remember that the IRS doesn’t initiate verification requests by email or phone, so be careful if you receive a suspicious phone call claiming to be from the IRS.
The IRS typically contacts you first by mail through the U.S. Postal Service. It never starts identity verification through email, text, or phone calls.
If you received a suspicious letter or call, verify it by searching the notices and letters section on the official IRS website or calling the service directly at 1-800-829-1040.
Important: Always contact the IRS using official phone numbers on its website.
While some signs of scam IRS letters are easy to overlook, others just scream “fraud.” The most easily recognizable red flags in letter include:
If you received an email claiming to be from the IRS, look for the following red flags:
Do you see a QR code in a letter or email claiming to be from the IRS? Don’t scan it immediately. Scammers create fake QR codes that lead to phishing websites designed to steal your information. Always contact the IRS directly first to verify where that code actually takes you.
The IRS never initiates identity verification by phone, so any call pressuring you to verify your identity is a scam.
But you may get a call from someone claiming to be working for the IRS and asking you for something other than identity verification. A call like that may also be a scam, so look for these warning signs:
Remember, legitimate IRS employees only call in specific situations. And if they visit you in person, they always provide proper identification. Even then, in-person visits are rare and usually preceded by a written notice.
What to do: If someone calls claiming to be the IRS about identity verification, hang up and call the IRS directly at the official number on its website to verify whether it actually needs to contact you.
Preventing identity theft takes much less effort than dealing with the aftermath. Essentially, you need to create multiple barriers between criminals and your personal information.
Taking these steps now can save you from months of paperwork and stress later. But if the worst does happen and someone takes advantage of your personal information, having identity theft recovery services can help cover the costs and guide you through the complex identity restoration process.
Focusing on identity theft prevention, Irma breaks down the latest online threats and how to stay ahead of them. She wants to help readers stay informed and shares practical solutions to protect themselves.
Popular articles
The credit scores provided are based on the VantageScore 3.0® credit score by TransUnion® model. Lenders use a variety of credit scores and may utilize a different scoring model from VantageScore 3.0® credit score to assess your creditworthiness.
You have numerous rights under the FCRA, including the right to dispute inaccurate information in your credit report(s). Consumer reporting agencies are required to investigate and respond to your dispute but are not obligated to change or remove accurate information that is reported in compliance with applicable law. While this plan can provide you assistance in filing a dispute, the FCRA allows you to file a dispute for free with a consumer reporting agency without the assistance of a third party.
No single product can fully prevent identity theft or monitor every single transaction.
Some features may require authentication and a valid Social Security Number to activate. To access credit reports, scores, and/or credit monitoring services (“Credit Monitoring Services”), you must successfully pass your identity authentication with TransUnion®, and your VantageScore 3.0® credit score file must contain sufficient credit history information. If either of these requirements is not met, you will not be able to access our Credit Monitoring Services. It may take a few days for credit monitoring to start after a successful enrollment.
NordProtect's dark web monitoring service scans various sources where users' compromised personal information is suspected of being published or leaked, with new sources added frequently. Service logos displayed in dark web monitoring alerts are provided by Logo.dev and represent services where users have accounts. These logos are included in alerts to help users quickly identify which service may have experienced a data breach affecting their personal information.
However, there is no guarantee that NordProtect will locate and monitor every possible site or directory where consumers' compromised personal information is leaked or published. Accordingly, we may not be able to notify you of all your personal information that may have been compromised.
Identity and cyber protection benefits are available to customers residing in the U.S., including U.S. territories and the District of Columbia, with the exception of residents of New York and Washington. Benefits under the Master Policy are issued and covered by HSB Specialty Insurance Company. You can find further details and exclusions in the summary of benefits.
Our identity theft restoration service is part of a comprehensive identity theft recovery package that offers a reimbursement of up to $1 million for identity recovery expenses. To access the support of an identity restoration case manager, you must file a claim with HSB, which NordProtect has partnered with to provide the coverage. HSB is a global specialty insurance company and one of the largest cyber insurance writers in the U.S.
©2025 NordProtect. All rights reserved