Tax Refund Fraud
Scammers obtain personal information such as Social Security numbers (SSNs), birthdates, and other sensitive data through data breaches, phishing, or other forms of identity theft. Using the stolen information, the scammers file fraudulent tax returns with the IRS early in the tax season. They often use falsified income data and deductions to maximize the refund amount. Next, the scammer directs the refund to an account they control, often through prepaid debit cards or other untraceable financial instruments. The legitimate taxpayer may only discover the fraud when they file their tax return and learn that a return has already been filed under their SSN.
The legitimate taxpayer often discovers the fraud when filing their tax return and learning that a return has already been filed using their SSN.
Signs of Tax Refund Fraud
- Receiving an unexpected notice or letter about a tax return you did not file.
- Notice that more than one tax return was filed for you.
- Agency records of income from an employer you did not work for.
- Not receiving an expected tax refund due to a fraudulent return sent to the scammer instead.
-
The IRS or the Comptroller of Maryland will never:
- Initiate contact with taxpayers by email, text, or social media to request personal or financial information.
- Call taxpayers with threats of lawsuits or arrests.
- Call, email, or text to request taxpayers’ Identity Protection PINs.
Prevention Tips
- Be cautious with personal information, especially online. Use strong, unique passwords for financial accounts and enable two-factor authentication.
- Regularly check bank statements, credit reports, and IRS accounts for unusual activity.
- File your tax return as early as possible to reduce the window of opportunity for scammers to file a fraudulent return.
- Obtain an Identity Protection PIN (IP PIN) from the IRS. This six-digit number helps prevent someone else from filing a tax return using your SSN.
Recovering from Tax Refund Fraud
- If you suspect tax-related identity theft, immediately contact the IRS Identity Theft Protection Specialized Unit at 1-800-908-4490.
- If your e-filed return is rejected because of a duplicate filing under your Social Security number, or if the IRS instructs you to do so, complete Form 14039, Identity Theft Affidavit, https://www.irs.gov/pub/irs-pdf/f14039.pdf, and attach it to your completed paper tax return and mail it to the location indicated at https://www.irs.gov/filing/where-to-file-paper-tax-returns-with-or-without-a-payment.
- If you prefer, submit Form 14039 online at https://www.irs.gov/dmaf/form/14039 and mail your paper return separately.
- If your identity was used to steal your state tax refund, promptly contact the Maryland Taxpayer Service at 1-800-638-2937 or visit https://www.marylandtaxes.gov/tax-security/identity-protection.php. To request a copy of the return, use Form 129 at https://www.marylandtaxes.gov/forms/current_forms/129.pdf.
- Visit IdentityTheft.gov at https://www.identitytheft.gov/ for steps you should take right away to protect yourself and your financial accounts.
- Place a fraud alert on your credit reports and consider a credit freeze to prevent further misuse of your personal information. See Identity Theft for more on how to do this.
- Follow up with the IRS or Maryland Taxpayer Service to monitor the status of your tax return.
References:
- Federal Trade Commission. (n.d.). Report identity theft and get a recovery plan. Retrieved from https://www.identitytheft.gov/.
- Internal Revenue Service. (2025 January 3). Identity theft central. Retrieved from https://www.irs.gov/identity-theft-central.
- Maimon, David and Tim Forrest. (2025 April 1). How Fraudsters Use Deepfakes and Stolen Identities During Tax Season. SentiLink. Retrieved from https://resources.sentilink.com/blog/deepfake-tax-refund-fraud.
- Maryland Taxpayer Service. (2025). If You Believe You Are a Victim of Identity Theft. Retrieved from https://www.marylandtaxes.gov/tax-security/identity-protection.php.
- Office of the Comptroller of Maryland. (2024 May 16). Retrieved from https://msa.maryland.gov/msa/mdmanual/08conoff/html/03comp.html.
Related Topics
Need more help?
- If you’ve been the victim of a crime, call 911 (if in a life-threatening emergency) or 301-279-8000 (for non-emergency help).
- Get information about preventing fraud or cybercrime, call 240-773-6330.
- Use this Presentation Request Form to ask the Financial Crimes Section to speak to your group about fraud or cybercrime prevention.
- Reach the Montgomery County Office of Consumer Protection.
- Contact the Montgomery County State's Attorney's Office.
- Where else can fraud and cybercrime be reported?