The IRS is urging taxpayers who want an Identity Protection PIN to enroll before its online system closes for annual maintenance in mid-November. One-time enrollment ends with the current calendar year; continuous enrollment keeps you enrolled for future years.
The agency's October 22 reminder says the system generally returns in mid-January. It gives a mid-November shutdown window, without a specific start date. Enrolling now also does not make a 2026 PIN usable next year. You will need the PIN issued for the calendar year in which you submit the return.
What the PIN protects
An IP PIN is a six-digit number that helps the IRS confirm your identity and prevent someone else from filing a federal income tax return with your Social Security number or individual taxpayer identification number. You can request one proactively, including when you are not required to file a return, if you can verify your identity.
The National Taxpayer Advocate explains the consequence of an attempted fraudulent filing: even when the IRS stops it, a legitimate return filed afterward may face extra review. Resolving tax identity theft can take months and sometimes years.
An IP PIN does not guarantee a faster refund. The IRS says a return with the correct PIN still faces its usual validity checks.
Choose the enrollment that fits next year
The IRS FAQ, updated October 30, describes two choices in the Profile tab of the IRS app or Online Account:
| Choice | What happens after December 31, 2026 |
|---|---|
| Continuous enrollment | You remain enrolled for future years, with a new PIN generated annually. |
| One-time enrollment | You are automatically opted out at year-end. You must enroll again if you want protection in a later year. |
For continuing protection, continuous enrollment avoids having enrollment expire at year-end. The annual number still changes. If you submit your 2026 tax return in 2027, use your 2027 PIN. The same rule applies to an older return submitted in 2027: use the PIN for 2027, regardless of the tax year on the form.
People who opt in through the app or Online Account must retrieve their new number there each calendar year. Do not assume a paper notice will arrive. Confirmed tax identity theft victims enrolled by the IRS receive an annual CP01A notice.
Online enrollment and slower alternatives
Start through the IRS enrollment page, which links to its app and Online Account. New account users must register and verify their identity before requesting the PIN from their profile.
If you cannot establish an online account, Form 15227 is available when adjusted gross income on your last filed return was below $84,000 for an individual or $168,000 for married joint filers. You need a valid SSN or ITIN and access to a telephone. The IRS calls to verify identity, then generally mails the PIN within four to six weeks.
An appointment at a Taxpayer Assistance Center is another route, including for people ineligible for Form 15227. Bring government-issued photo identification and another identity document. After verification, delivery usually takes three weeks. Neither mailed route promises an immediate number before maintenance.
Applicants under 18 must use an alternative enrollment route. Each person's PIN is separate; there is no family PIN.
When a PIN is missing
On an electronic return, include the assigned PIN for each taxpayer, spouse or dependent who has one. A missing or incorrect number can cause rejection. For a paper return, the primary taxpayer and spouse must enter their assigned numbers; a dependent's PIN is not required. Missing required PINs can delay processing and a refund while the IRS verifies identity. The CP01A notice instructions distinguish federal IP PINs from state return PINs.
The IRS recovery page explains retrieval through the app or account and telephone reissuance. Mail reissuance is unavailable during annual maintenance and for first-time enrollees in the current calendar year. Do not submit Form 15227 to replace an existing PIN.
Keep the number secure. Share it only with a trusted preparer when ready to prepare and submit your return. The IRS says it will never request an IP PIN through a call, email, text or social media message.
