Tax-refund fraud is an industry: criminals file early, using stolen names and Social Security numbers, and collect refunds before the real taxpayers get around to filing. The IRS's Taxpayer Protection Program is the filter built against it, screening incoming returns for signals that the filer might not be who they claim. When your return trips those screens (which happens to plenty of perfectly ordinary filings), everything pauses and a 5071C goes out. The letter is mostly good news in disguise: either you verify in twenty minutes and your return resumes its journey, or you discover someone tried to impersonate you, and you've caught it at the best possible moment.
What is Letter 5071C?
Letter 5071C tells you that a federal income tax return was filed under your SSN or ITIN, and that the IRS needs you to do two things before processing continues:verify your identity, and confirm whether the return is actually yours. Until both happen, the return sits in suspense, the IRS is explicit that it won't process the return, issue refunds, or credit overpayments in the meantime.
The letter offers two channels. The primary one is online: the IRS's Identity and Tax Return Verification Service at irs.gov/verifyreturn, where you sign in (or create an account) through the IRS's identity provider and answer questions about yourself and the flagged return. The backup is the Taxpayer Protection Program phone lineprinted on the letter, used when online verification isn't possible or doesn't succeed. Note the letter's scope: that contact path handles identity verification only, not general account questions or refund status.
Why your return was flagged
- Pattern signals. The screens weigh many quiet factors, a first-time filer, a new address or bank account, a big change in refund size, filing much earlier or later than your history. None imply wrongdoing; together they can cross a threshold.
- Data mismatches.Employer information that hasn't matched yet, name changes after marriage, or transposed digits can make a genuine return look questionable to an algorithm.
- Elevated fraud environments. After large data breaches, screening tightens broadly, some 5071Cs are simply the system being cautious in a bad season.
- An actual fraudulent filing.The scenario the program exists for: someone else filed under your number, and the screens caught it. If that's your situation, the verification call is where the recovery begins.
How to read your Letter 5071C
THE TREASURY
Before starting either path, stage your materials, verification quizzes you on the details: the 5071C letter itself, the tax return for the year in question(your complete copy), a prior-year return if you have one, and thesupporting documents behind the flagged return, W-2s, 1099s, Schedule C. Fifteen minutes of gathering beats a failed session and a locked account.
Want a prep sheet before you verify?
Upload your Letter 5071C and get a free plain-English walkthrough covering which path fits your situation, what you'll be asked, and what to have open when you start.
The verification playbook, including when it fails
Online first. Type irs.gov/verifyreturninto your browser yourself, never follow a link from an email or text, no matter how official it looks. Sign in with an existing IRS online account or create one through the IRS's identity provider (ID.me), which involves photographing a government ID and matching it to a selfie or a live video call. Then answer the return-verification questions. Most people finish in one sitting.
When online fails, call.Identity-proofing tech rejects legitimate people regularly, mismatched credit records, new phone numbers, thin files, name changes. That's what the TPP phone line on your letter is for: an agent runs the verification verbally, using the same documents. Call early in the day; the queue is real.
When phone fails too, expect in-person.Some cases can't be resolved remotely, and the IRS moves them to an in-person appointment at a Taxpayer Assistance Center, the process the Letter 5747C handles from the start. Inconvenient, but definitive: a human, your photo ID, and a resolved account.
Your options
How to verify, step by step
Authenticate the letter itself
Real 5071Cs arrive by postal mail, reference a specific tax year, and direct you to irs.gov, not to odd domains or payment demands. When in doubt, navigate to irs.gov independently and search the letter number.
Stage your documents
The letter, this year's return copy, last year's return, W-2s and 1099s. If a preparer filed for you, get your copy from them before starting.
Run the online verification
Typed URL, ID.me sign-in, return questions. Set aside a quiet half hour with your phone (for the ID photos) and your paperwork.
Fall back to the TPP line if needed
Failed or locked out online? Call the letter's number, early morning, documents ready, patience packed. Note the date and agent ID when you finish.
Answer the real question honestly
"Did you file this return?" is the crux. Yes: processing resumes. No: the fraud path opens, removal of the bogus return, filing your real one, and the protections below.
Track the aftermath
Allow up to 9 weeks for the refund after successful verification; watch Where's My Refund. If you flagged fraud, consider Form 14039 as directed and request an Identity Protection PIN so this can't recur silently.
If someone filed as you: the recovery path
Telling the IRS "that return isn't mine" starts a well-worn process. The fraudulent return is pulled from your account so your real one can be filed and processed normally (expect slower handling while the accounts are untangled). Depending on your case, the IRS may direct you to file Form 14039, the Identity Theft Affidavit, the formal record that marks your account. And the single best forward defense is the Identity Protection PIN (IP PIN): a six-digit code, reissued each year, without which no e-filed return under your SSN will be accepted. Opt in through your IRS online account, and see our guide to theCP01A, the annual letter that delivers it. Beyond the IRS, the standard identity-theft hygiene applies: credit freezes with the bureaus, a report at IdentityTheft.gov, and fresh passwords on your financial accounts.
Common mistakes with a Letter 5071C
- Ignoring it because "my return was fine", the return stays frozen forever; verification is mandatory, not optional reassurance.
- Verifying through a link someone sent, the genuine process starts only from a typed irs.gov address or the letter's printed number.
- Starting without documents, failed quiz answers lock accounts and convert a 20-minute task into weeks.
- Filing a duplicate return to "fix" the freeze, a second filing creates exactly the duplicate-return condition the system treats as suspicious.
- Skipping the IP PIN after confirmed fraud, without it, next January the same criminal can try again with the same stolen data.
Letter 5071C, Frequently asked questions
What is IRS Letter 5071C?
How do I verify my identity for a 5071C?
Is Letter 5071C a scam?
What happens if I don't verify after a 5071C?
How long after verifying will I get my refund?
What if I never filed the return the 5071C mentions?
Related notices
Browse the complete directory of IRS notices orlook up any notice number.