What is Tax Identity Theft?

Tax identity theft is when criminals file returns or claim credits using someone else’s personal data – often en masse, early in the season. Victims discover the crime only after a rejected e‑file or unexpected “refunds” land in mule accounts. Cleanup is arduous, bureaucratic, emotionally taxing.

Attack surfaces: breached SSNs, phishing of employers or payroll providers, disreputable “prep” services, and mail interception. Rings reuse devices across a large number of “filers,” shuffle addresses and route refunds to new instruments or crypto off‑ramps.

Mitigation for platforms: tie accounts to device graphs, throttle first‑time refund disbursements, and trigger identity verification on profile changes near filing or when refunds are routed to new instruments. Watch for velocity anomalies by employer, EIN, or preparer fingerprint. Coordinate controls and escalations with a risk‑based AML compliance framework so filings and law‑enforcement requests don’t back up.

Thieves don’t jog. Neither should your controls.