Identity Theft & Tax Fraud: What to Do Immediately and How to Protect Yourself Going Forward 

computer tech sitting at desk

Identity theft and financial fraud continue to rise, affecting individuals, business owners, and nonprofit leaders alike. When personal or financial information is compromised, the situation can feel overwhelming, but taking timely action can significantly reduce long-term risk. 

Whether the incident involves stolen login credentials, fraudulent tax filings, compromised investment accounts, or unauthorized financial activity, there are practical steps you can take right away to protect your identity and limit further damage. 

Immediate Steps to Take After Identity Theft 

1. Secure your online accounts 

Start by updating passwords across all critical systems, including: 

  • Email accounts 
  • Bank and credit card portals 
  • Investment platforms 
  • Insurance portals 
  • Payroll or HR systems 
  • Social media accounts 
  • Cloud storage or file sharing platforms 

Use strong, unique passwords for each login and use a password manager to generate and manage secure passwords.  Enable multi-factor authentication (MFA) wherever available. MFA significantly reduces the likelihood of unauthorized access even if passwords are compromised. 

2. Monitor financial activity closely 

Review recent transactions across bank, credit card, and investment accounts. Look for unfamiliar charges, transfers, or login alerts. Many institutions allow you to activate fraud alerts or temporarily freeze activity while investigating suspicious activity. 

3. Consider legal remedies available in Texas 

Texas law allows victims of identity theft to obtain a court order declaring that they were the victim of identity theft. This documentation can help correct fraudulent records with lenders, creditors, or other entities where false accounts or changes may have been made. 

4. Request an IRS Identity Protection PIN (IP PIN) 

One of the most effective protections against tax-related identity theft for individuals is obtaining an Identity Protection PIN from the IRS. An IP PIN is a six-digit number required to file a federal tax return under your Social Security Number. 

Without the correct PIN, the IRS will reject electronically filed returns, preventing criminals from submitting fraudulent filings in your name. 

The PIN can be obtained by creating an individual taxpayer account through the IRS identity verification system. Each taxpayer must obtain their own PIN annually.  A new PIN is issued automatically at the beginning of each calendar year to use for filings submitted during that calendar year. 

IRS Instructions: https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin 

Tax Implications of Scam Losses 

Recent IRS guidance provides some clarification on when certain scam-related losses may qualify for tax treatment as theft losses when tied to transactions entered into for profit. Examples may include compromised investment accounts or fraudulent schemes where funds were transferred with the expectation of financial return. 

However, not all losses qualify, and eligibility depends on the nature of the transaction, supporting documentation, and facts specific to each case. 

Because these determinations can be complex, working with a qualified tax professional is important when evaluating potential reporting considerations. 

Ongoing Protection Strategies 

Identity protection is not a one-time task. Organizations and individuals alike benefit from proactive monitoring and preventative controls, including: 

  • Periodic password updates 
  • MFA implementation across financial systems 
  • Monitoring credit reports 
  • Maintaining secure document storage practices 
  • Verifying payment requests or changes in banking instructions 
  • Educating staff on phishing and impersonation attempts 
  • Implementing internal approval controls for financial transactions 

Organizations should also review cybersecurity and internal control practices regularly to ensure sensitive information is protected. 

How SST Can Help 

Our team works with clients across industries to help evaluate financial risk exposure, strengthen internal controls, and implement practical safeguards that protect sensitive information. We also assist clients in navigating reporting considerations when financial fraud or identity theft impacts tax filings or financial records. 

Acting quickly can make a meaningful difference in limiting disruption and protecting your long-term financial security. If you have concerns about identity theft, fraudulent activity, or protecting your financial information, our team is here to help you evaluate next steps and implement safeguards that support long-term security. Let’s start the conversation today.