1. Introduction – What is Publication 5199?
IRS Publication 5199, titled “Tax Preparer Guide to Identity Theft,” serves as the official playbook from the Internal Revenue Service for handling tax-related identity theft. It is specifically designed to give professional tax preparers and taxpayers a clear roadmap when personal data is compromised. In active administrative reviews updated through June 2026 and reaffirmed during the Summer 2026 IRS Security Summit initiatives, the IRS emphasized that Publication 5199 remains a foundational resource for recognizing fraud, responding to data breaches, and protecting sensitive client accounts.
Tax-related identity theft happens when an unauthorized party uses a person’s name and Social Security Number (SSN) or an entity’s Employer Identification Number (EIN) to submit a fraudulent return and claim an undeserved refund. When this occurs, innocent taxpayers often find their legitimate returns blocked, delaying rightful refunds for months. Publication 5199 explains the exact measures tax professionals must take to resolve these issues and restore taxpayer accounts.
While the document is cataloged under number 67469V and originally issued as Revision 8-2017, the IRS continues to feature it actively across 2026 practitioner guidance alongside modern cybersecurity standards. Whether you are a seasoned preparer or an individual taxpayer seeking to understand how the IRS handles stolen credentials, Publication 5199 provides vital procedural clarity.
2. Who Should Read This Publication
The primary audience for Publication 5199 includes certified public accountants (CPAs), enrolled agents (EAs), licensed attorneys, and commercial tax preparers. Because tax professionals are on the front lines when returns are rejected by IRS electronic filing systems, they need immediate answers on how to advise affected clients.
Small business owners, payroll administrators, and bookkeepers should also read this guide. Businesses are increasingly targeted by fraudulent payroll filings and corporate identity theft, making the publication’s business-specific steps essential reading for operational staff.
Finally, everyday taxpayers and tax law students will benefit from exploring Publication 5199. It strips away complex procedural jargon, allowing everyday filers to see what happens behind the scenes when a return is flagged for suspected fraud.
3. Key Topics Covered
Publication 5199 organizes complex federal procedures into direct, actionable steps. It bridges the gap between client communications and IRS backend compliance. Key areas covered in the publication include:
- Identification of Warning Signs: Recognizing e-file rejection notices, duplicate filings, and unexpected IRS notices that point to identity fraud.
- Immediate Action Checklist: Step-by-step instructions on what forms to submit to the IRS and external regulatory agencies.
- Individual vs. Business Identity Theft: Distinct remediation protocols for individual Social Security Numbers versus business Employer Identification Numbers.
- Identity Protection PIN (IP PIN) Protocols: Guidance on how to obtain, use, and renew specialized six-digit security numbers.
- Data Security Requirements: Best practices for protecting office computer systems, client records, and transmission channels against cybercriminals.
4. Detailed Breakdown of Main Concepts
Warning Signs of Tax Identity Theft
The publication notes that taxpayers rarely discover identity theft from a phone call or letter out of nowhere. Instead, it usually surfaces when an e-filed return is rejected with code reject indicators indicating that a return with the same Social Security Number has already been processed. Another common red flag is receiving an IRS notice about wages from an unfamiliar employer or a balance due for a year the taxpayer never filed.
Paper Filing When E-File Fails
When an identity thief has beaten a taxpayer to the filing system, electronic filing for that tax year is permanently closed for that Social Security Number. Publication 5199 directs the preparer to print the client’s actual tax return and assemble it as a complete paper package. The paper return must be accompanied by the proper affidavit forms and mailed to the designated IRS processing center.
The Identity Protection PIN Program
One of the strongest tools against repeat fraud is the IRS Identity Protection Personal Identification Number (IP PIN). This six-digit code is known only to the taxpayer and the IRS, and it must be entered on Form 1040 to file electronically. Publication 5199 outlines how victims are automatically enrolled in the program once their fraud case is verified, and how uncompromised filers can voluntarily opt in for added safety.
The Federal Trade Commission (FTC) Safety Net
Publication 5199 reminds practitioners that tax identity theft is rarely an isolated incident. If a criminal has a taxpayer’s Social Security Number, other financial accounts are also at risk. The guide instructs preparers to guide victims toward creating an official Identity Theft Report with the FTC through IdentityTheft.gov and notifying major credit reporting bureaus.
5. Practical Examples or Scenarios
Scenario A: The Rejected Electronic Return
Maria visits her tax preparer in March to submit her annual Form 1040. When the preparer attempts to e-file her return, the IRS software immediately issues a rejection notice stating that Maria’s Social Security Number was already accepted on another return. Following Publication 5199, the preparer does not panic. The preparer prints Maria’s return, completes Form 14039, attaches official proof of identification, and mails the complete package to the IRS.
Scenario B: Business EIN Hijacking
A regional landscaping firm receives a CP01B notice from the IRS inquiring about several unexpected Form W-2 submissions showing wages paid to individuals they never employed. The company accountant consults Publication 5199 to find the commercial remediation path. The accountant submits Form 14039-B, marks the business identity theft boxes, and contacts local law enforcement to create a formal police report.
Scenario C: Unsolicited Account Verification Notice
David receives IRS Letter 5071C requesting that he verify his identity before his tax refund can be approved, but David has not yet submitted his taxes for the year. Using the instructions outlined in Publication 5199, David accesses the online IRS identity verification service to report that the pending return is unauthorized, halting the fraudulent refund disbursement immediately.
6. How This Publication Relates to Specific Forms
Publication 5199 works in conjunction with multiple standard IRS tax and compliance forms. The following table illustrates these key connections:
| Form Number | Official Name | How It Relates to Publication 5199 |
|---|---|---|
| Form 14039 | Identity Theft Affidavit | The primary form submitted by individual victims to officially alert the IRS and request an account investigation. |
| Form 14039-B | Business Identity Theft Affidavit | Used by corporations, partnerships, trusts, and estates when an EIN is misused for fraudulent tax filings. |
| Form 1040 / 1040-SR | U.S. Individual Income Tax Return | The standard return that must be paper-filed with the Form 14039 attached whenever an e-file reject occurs due to duplicate SSNs. |
| Form 4506-F | Request for Copy of Fraudulent Tax Return | Allows confirmed victims to request a redacted copy of the false return submitted in their name to see what data was stolen. |
| Form 2848 | Power of Attorney and Declaration of Representative | Enables a tax professional to speak directly with the IRS Identity Theft Victim Assistance (IDTVA) unit on behalf of the client. |
7. Common Misunderstandings Clarified
Misunderstanding 1: An e-file rejection always means criminal activity.
Reality: While a duplicate number reject is a serious warning, it can sometimes stem from an innocent clerical error, such as a mistyped digit on a dependent’s number or an accidental duplicate submission by a spouse. Preparers must verify the underlying facts before assuming malicious theft.
Misunderstanding 2: The IRS will call or email you to resolve identity theft.
Reality: The IRS never initiates contact through unprompted phone calls, text messages, or direct emails requesting banking credentials or Identity Protection PINs. Publication 5199 notes that legitimate IRS contact regarding identity issues arrives by official postal mail in designated numbered letters.
Misunderstanding 3: You can only get an Identity Protection PIN after you have been victimized.
Reality: Under updated federal guidelines, any taxpayer with an IRS online account can voluntarily opt into the IP PIN program as a preventative safeguard, even if they have never experienced identity fraud.
8. Why This Publication Matters for Taxpayers
Identity theft can feel overwhelming, stressful, and disorienting. When taxpayers discover that someone has used their personal credentials, they often worry about missing refund money, damaged credit, or potential IRS penalties. Publication 5199 provides peace of mind by showing that the IRS has a structured, repeatable recovery system in place.
For practitioners, following this publication is vital for avoiding professional liability. The Federal Trade Commission and IRS regulations require tax professionals to maintain active security safeguards and react promptly when breaches happen. By following the procedures laid out in Publication 5199, preparers uphold their legal obligations while protecting their clients’ financial livelihoods.
9. Frequently Asked Questions
What is the IRS Identity Theft Victim Assistance (IDTVA) unit?
The IDTVA is a specialized department within the IRS that handles cases where identity theft affects tax accounts. When a Form 14039 is submitted, an IDTVA worker investigates the conflicting filings, clears the fraudulent entry, and coordinates the processing of the authentic return.
How long does it take the IRS to resolve a tax identity theft case?
Resolving a tax identity theft case can take several months due to the detailed verification checks required. Submitting complete identification records and filing paper returns promptly ensures that cases move as quickly as possible through the backlog.
Can a taxpayer file electronically again after identity theft?
For the tax year affected by the fraudulent filing, the taxpayer must file on paper. However, for future tax years, the taxpayer can return to electronic filing once they receive their annual 6-digit Identity Protection PIN.
Does IRS Publication 5199 apply to state tax returns?
Publication 5199 focuses strictly on federal tax administration. However, it explicitly recommends notifying state revenue departments immediately, as thieves who file a fraudulent federal return frequently file a fake state return as well.
10. Conclusion
IRS Publication 5199 is an indispensable guide in the ongoing battle against tax fraud. By establishing clear responsibilities for tax practitioners and providing definitive action steps for affected clients, the guide ensures that identity theft cases are handled systematically rather than haphazardly.
Whether you are filing taxes yourself or preparing returns for hundreds of clients, familiarizing yourself with the core rules of Publication 5199 protects your data, safeguards your refund, and keeps your tax filings secure year after year.
