IP PIN Abroad: Stop Refund Fraud

A missing six-digit IRS IP PIN can turn a normal refund into months of identity checks, paper notices, and international phone calls. For Americans abroad, the problem is worse: mail is slower, IRS online account verification can fail from overseas, and a rejected e-file may not surface until your preparer is trying to beat a deadline.

An Identity Protection Personal Identification Number, usually called an IP PIN, is one of the few free IRS tools that can stop someone from filing a federal tax return using your SSN or ITIN. It is not a tax strategy. It is a filing lock that matters when your mailbox, tax documents, bank logins, and old US addresses are spread across countries.

This guide is for US expats, digital nomads, retirees abroad, and families with dependents who want fewer tax-season surprises. It fits naturally with the broader Expat Tax & Finance work: protect the account first, then optimize FEIE, foreign tax credits, banking, and refunds.

What Is An IRS IP PIN?

An IRS IP PIN is a six-digit number that helps the IRS verify your identity when a federal tax return is filed. The IRS says it prevents someone else from filing a return using your Social Security number or individual taxpayer identification number.

Who can get one?

As of July 2026, the IRS says anyone with an SSN or ITIN who can verify their identity can enroll in the IP PIN program, including taxpayers living abroad. Parents and legal guardians can also request an IP PIN for dependents, which matters for families claiming children on US returns.

The IRS also says the IP PIN is valid for one calendar year and a new one is generated each year. If you opt in online, you generally retrieve the new number online each calendar year instead of waiting for a mailed CP01A notice.

Why Expats Should Care More Than US Filers

Expats have more identity-friction points than a filer who lives at one US address. Old tax software accounts, previous state addresses, mail forwarding, foreign banks, shared family documents, and cross-border moves all create more places for credentials and personal information to leak.

The IP PIN does not protect every account. It will not secure your brokerage login, bank account, email, or state tax account. But it can stop the specific tax-season nightmare of a fraudulent federal return being accepted before your real return arrives.

Refund risk is the cash-flow problem

For a self-employed expat, a refund may be the result of withholding, estimated payments, foreign tax credit timing, or a prior-year correction. For a family, it may involve refundable credits. For a retiree, it may be tied to pension withholding or Social Security tax treatment. If a duplicate return or identity review delays that refund, the cash-flow hit can last longer than the original filing task.

That is why the IP PIN belongs in the same pre-filing routine as gathering foreign bank statements, checking FBAR thresholds, confirming Form 2555 or Form 1116 strategy, and reviewing estimated payments. If you are also self-employed, pair this with the recent guide on the self-employment tax trap for expat freelancers so security does not distract from the actual tax bill.

How To Get An IP PIN From Abroad

The fastest route is through an IRS online account. The IRS says taxpayers can request an IP PIN through the IP PIN section of their profile after signing in and completing identity verification.

Creating the account is the step that trips up many expats. The IRS account process uses ID.me, and the IRS says users need an email address, a password, multifactor authentication, and identity documents such as an SSN or ITIN plus a valid government-issued photo ID. The IRS account help page specifically includes support paths for people who live outside the US and have an SSN.

Route	Who it fits	Current IRS detail	Expat friction
IRS online account	Most adults who can verify identity online	Fastest route; retrieve the IP PIN annually online	Identity verification, MFA, and document matching can fail abroad
Form 15227	Eligible lower-AGI taxpayers who cannot create an online account	AGI must be below $84,000 single or $168,000 married filing jointly	Requires access to a telephone for IRS validation
Taxpayer Assistance Center	People who cannot verify online or by phone	IRS says appointments are made by calling 844-545-5640	Requires being physically in the US or near an available office
Victim-assistance process	Taxpayers who already face tax-related identity theft	Form 14039 is for victims or potential victims in specific situations	May require paper filings, notices, and longer case handling

As of July 2026, the IRS says Form 15227 is available only when adjusted gross income on the last filed return is below $84,000 for individuals or $168,000 for married filing jointly. Once the IRS verifies identity by phone, it says the IP PIN is usually mailed within four to six weeks. That mailing lag matters if your IRS address points to a slow mail forwarder or a family member in the US.

What Happens When You File With One?

If you have an IP PIN, you must use it on federal returns filed during that year. The IRS says the IP PIN is used on Forms 1040, 1040-NR, 1040-PR, 1040-SR, and 1040-SS, including prior-year and amended returns filed during the year.

Missing or wrong IP PIN

The IRS is direct about the consequence: an incorrect or missing IP PIN can reject an e-filed return or delay a paper return while the IRS verifies identity. For an expat, that may mean more time waiting for mail, more calls across time zones, and more uncertainty about refunds or balances due.

Tax professionals cannot request an IP PIN for you, but they can use the number you provide when preparing and filing the return. That means your pre-filing checklist should include "retrieve current IP PIN" before you send documents to a CPA or upload them to tax software.

The Annual Expat IP PIN Routine

The IP PIN is not a one-time password you put in a folder forever. It changes annually. The IRS says people who request an IP PIN online need to retrieve a new one each year, generally starting in mid to late January.

1. In December: Confirm your IRS online account login, MFA method, password manager entry, and recovery email before travel gets busy.
2. In January: Retrieve the new IP PIN once it is available and store it in a secure password manager note, not in plain email.
3. Before filing: Send the current-year IP PIN to your tax preparer only when the return is ready to sign and file.
4. For dependents: Confirm whether any child or dependent has an assigned IP PIN before filing a family return.
5. After filing: Keep a dated filing confirmation and a secure copy of the IP PIN used for that return year.
6. Before moving: Update your IRS address strategy, mail forwarding, and tax document delivery plan.
7. If something fails: Do not guess repeatedly; use the IRS retrieval or identity-theft process instead.

What If You Lost The IP PIN?

If you lost the number or never received a CP01A notice, the IRS says you can retrieve the current IP PIN online through your account profile. If you cannot do that, the IRS lists a reissue phone path: US callers use 800-908-4490, while international users call 267-941-1000, which is not toll free.

The IRS says that if your identity can be verified by phone, the IP PIN will be mailed within 21 days to the address on file. It also says a minor dependent IP PIN cannot be retrieved online; the IRS instructs taxpayers to call 800-908-4490 for a dependent's IP PIN.

There are timing limits. The IRS says your IP PIN cannot be reissued by mail if you opted into the online IP PIN program after 2019, or if it is after October 14 and you have not filed your current or prior-year Forms 1040 or 1040-SS. If you cannot get the IP PIN and cannot access the online account, the IRS says you may need to mail a paper return without the IP PIN and wait for identity review.

If Someone Already Filed In Your Name

If your e-file is rejected because a return was already filed under your SSN or ITIN, do not assume it is only a software typo. First check the taxpayer identification numbers on the return. If the numbers are correct and you believe someone used your identity, follow the IRS and FTC identity-theft process.

When Form 14039 matters

The IRS says Form 14039, Identity Theft Affidavit, is for victims of identity theft. IRS guidance says most taxpayers do not need to file it unless they believe tax-related identity theft happened and they have not already received certain IRS letters that explain next steps.

The FTC's IdentityTheft.gov recovery steps tell victims to report identity theft, create an FTC Identity Theft Report, place fraud alerts, review credit reports, and keep records of contacts and letters. For tax identity theft, IdentityTheft.gov points taxpayers back to IRS Form 14039 when appropriate.

• Respond to the IRS notice using the contact information on the notice.
• File Form 14039 only when the IRS or facts indicate it is appropriate.
• Continue filing your legitimate tax return, even if it must be mailed.
• Keep copies of IRS notices, FTC reports, police reports, and mailing receipts.
• Review credit reports and place fraud alerts or freezes when broader identity theft is possible.

The Cash-Flow Angle

Cashflow Abroad usually talks about earning in strong currencies, lowering fixed costs, reducing tax drag, and protecting optionality. An IP PIN sits in the downside-risk bucket. It does not make you richer directly, but it can prevent a preventable tax account problem from freezing cash at the worst time.

The bigger your tax complexity, the more useful this becomes. A retiree with pension withholding, a freelancer with estimated payments, a family claiming dependents, and an operator with foreign tax credits all have different returns, but the same weak point: if someone files first under your identity, the legitimate return can become slower and more expensive to finish.

Use the same discipline here that you use for banking and tax residency. Put the IP PIN on a calendar, protect the login, avoid email storage, and make one person responsible for retrieving it before filing season. Then continue with your normal expat tax planning, including the broader US expat banking and taxes guide and the expat tax extension calendar if timing is tight.

Data Notes / Sources Checked

Data note: IRS thresholds, phone numbers, and account rules were checked in July 2026 and can change. Verify the live IRS page before relying on a deadline or eligibility rule.

• IRS Get an Identity Protection PIN for eligibility, enrollment, annual retrieval, and filing-use rules.
• IRS Retrieve your IP PIN for lost PIN, reissue, international phone, and filing-delay guidance.
• IRS account creation help for ID.me account setup, identity documents, and overseas verification support.
• IRS Form 14039 for identity-theft affidavit use.
• IRS reporting identity theft FAQ for responding to notices and specialized assistance.
• FTC IdentityTheft.gov recovery steps for fraud alerts, reports, and recovery plans.

Conclusion

An IRS IP PIN is a small administrative task with a large protective payoff. For expats, the value is not just fraud prevention; it is avoiding a filing problem that becomes harder to solve across borders, time zones, and mail systems.

Make it part of your January routine. Retrieve the current IP PIN, store it securely, give it to your preparer only when filing, and confirm dependent PINs before submitting a family return. It is one of the few expat tax moves that is free, practical, and useful even in years when you owe nothing.