Tax Identity Theft After Death: Form 14039 and Recovery

Tax-related identity theft after a death can surface as a duplicate-return rejection, an unfamiliar IRS notice, a refund the family did not request, or income attributed to the deceased person. None of those signs alone proves what happened, but each requires a controlled response tied to the correct taxpayer and tax year.

The immediate goals are to preserve the real return’s filing position, notify the IRS through the correct channel once, establish the filer’s authority, and protect other accounts without spreading sensitive information. Repeated affidavits and repeated original returns can slow the case.

Confirm the indicator before labeling it fraud

Save the complete e-file rejection, including the reject code, submission identification, timestamp, taxpayer names, and masked identification numbers. First rule out transcription errors, an incorrect name-control, a return the decedent or another authorized preparer already submitted, or a dependent who filed separately.

Treat these as additional warning signs:

• an IRS identity-verification letter for a return the family does not recognize;
• a balance, refund offset, collection notice, transcript, or employer name tied to an unfiled year;
• notice that a tax-software account was created or accessed without authority;
• an unexpected refund or employer identification number;
• conflicting information from two preparers.

Do not ask the suspected filer to “fix” the account or send a copy of the questioned return. Preserve the evidence and use verified IRS channels.

Identify the taxpayer, return, and authorized filer

Separate the deceased person’s pre-death individual returns, final Form 1040, any joint return with the surviving spouse, and the estate’s Form 1041. An SSN problem on the final return is not the same as business or estate EIN misuse.

Record who is submitting the report: surviving spouse, court-appointed or certified personal representative, or another person acting when no representative has been appointed. Do not assume that access to the decedent’s documents establishes IRS authority.

The 2026 Form 14039 has specific representative categories and attachments. A surviving spouse reporting for a deceased taxpayer does not attach a death certificate to that form. A court-appointed representative attaches the court certificate. When no court-appointed representative exists, the form instructs the filer to attach a death certificate or qualifying government notification and identify the relationship to the decedent.

Follow an IRS verification letter before filing an affidavit

When the IRS identifies a suspicious return, it may send a letter directing the recipient to its Identity and Tax Return Verification Service or another verification route. Follow the letter’s exact instructions using a verified IRS webpage or phone number.

The current IRS identity-theft guide says most people do not need Form 14039 and specifically warns against filing it when the person already used, or was told to use, the identity-and-return verification service. A notice can carry its own response path.

If the letter cannot be authenticated, search its number on IRS.gov and call an independently verified IRS number. Never send identity documents to an address, fax, or upload page obtained only from an unverified message.

Use Form 14039 only for a supported situation

Form 14039 is the Identity Theft Affidavit for individual tax accounts. The current form supports reporting on behalf of another living or deceased person and asks how the tax account was affected, which years are involved, when the issue was discovered, and who is signing.

Use the form when the IRS instructs you, when the applicable IRS identity-theft guidance calls for it, or when a duplicate fraudulent filing prevents the genuine return from being e-filed. Do not use it merely because personal information was exposed but no tax-account issue is identified without checking the current IRS decision guide.

Submit one affidavit for the incident through one method: online, fax, mail, or attached to the paper return as instructed. Form 14039 repeatedly warns not to send duplicates. Keep the signed form, attachments, transmission proof, and exact narrative.

Preserve the genuine return after an e-file rejection

A duplicate-return rejection does not eliminate the obligation or right to file the genuine return. Correct any ordinary data-entry error first. If the reject indicates that the decedent’s SSN was already used and cannot be corrected electronically, prepare a signed paper return.

Current IRS e-file guidance says a paper return following a rejected electronic submission is considered timely when postmarked by the later of the return due date, including extensions, or ten calendar days after the IRS rejection notice. It also calls for the rejection notification, a brief corrective-action history, an explanation if filed after the ordinary due date, and a red “Rejected Electronic Return” notation with the rejection date.

Confirm the current instructions for the filing year and mail to the normal return-filing address. When Form 14039 applies because the SSN was misused, its instructions say to attach the affidavit to the back of the paper return. Do not send the original tax return to the standalone Form 14039 address or fax.

Complete the affidavit as an evidentiary record

Use the deceased person’s last known address, last return filed, affected tax years, and a short fact-based chronology. Distinguish what is confirmed from what is suspected. For example: “The authorized preparer transmitted the 2025 final joint return on April 2, 2026; the IRS rejected it as a duplicate using the decedent’s SSN; no authorized person filed an earlier return.”

List the notice or letter number when responding to IRS correspondence. Attach only clear copies required by the representative category and filing method. The form’s online option does not accept attachments, so choose mail or fax when the required evidence cannot be provided another way.

The affidavit is signed under penalty of perjury. Do not guess the affected year, claimant status, or whether a fraudulent refund was issued. Use “unknown” where the form permits it and explain what evidence is pending.

Respond once, then control every later contact

Create a case log with the e-file rejection, notice numbers, affidavit submission, paper-return mailing, tracking, IRS calls, document requests, and status checks. Save the exact package in immutable form.

The IRS says its Identity Theft Victim Assistance unit researches affected years, removes fraudulent returns from the account, processes the legitimate return, releases any valid refund, and places an identity-theft indicator. Processing times can be lengthy and change; use the current IRS processing-status page rather than an old estimate.

Do not send another Form 14039 simply because the case is slow. The IRS warns that duplicate affidavits and unnecessary status contacts can add delay. Respond promptly when the assigned unit requests information and reference the existing case.

Protect the refund and payment record

Reconcile IRS account transcripts, withholding, estimated payments, extension payments, and any credit elect by year. Identity theft can leave legitimate payments on an account while blocking the return that claims them.

If a balance notice appears because a payment or credit was not applied during the identity-theft case, call the verified number on the notice and supply payment proof. Do not pay a fraudulent assessment merely to stop correspondence without determining how payment would affect the case.

Any valid refund still requires the correct deceased-taxpayer authority package. Coordinate Form 14039 with Form 1310 or court-certificate requirements rather than assuming the identity-theft affidavit authorizes payment.

Secure the wider identity without over-sharing

Tax identity theft may be part of broader misuse. Inventory the decedent’s mail, email, tax-software accounts, bank and investment accounts, credit files, business records, and government benefits. Change credentials on accounts the survivor lawfully controls, enable multifactor authentication, and revoke unknown sessions.

Use IdentityTheft.gov to create a recovery plan for non-tax misuse and follow each bureau or creditor’s deceased-consumer procedure. A survivor’s fraud alert or credit freeze protects the survivor’s own file; action on the decedent’s file requires the bureau’s death-notification and authority documents.

Send only redacted copies through verified secure channels. Maintain a disclosure log showing which organization received the death certificate, court certificate, identification, tax return, or Social Security number.

Address state and business accounts separately

Notify the state tax agency if the affected taxpayer had a state filing obligation. A federal Form 14039 does not correct a state return, stop a state refund, or establish authority with the state.

If an estate, trust, business, or exempt-organization EIN is misused, the IRS directs those entities to Form 14039-B rather than the individual affidavit. Keep the business incident separate from the deceased person’s SSN case, even if the same event exposed both identifiers.

Escalate when delay creates hardship or rights risk

If the case produces economic harm, a prolonged unresolved refund, repeated collection activity, or an approaching procedural deadline, assess Taxpayer Advocate Service criteria. TAS involvement does not replace a timely paper return, notice response, appeal, or Tax Court petition.

Provide a concise chronology, proof of the legitimate filing, Form 14039 submission, current notices, financial harm, and the exact relief requested. Continue to answer every verified IRS notice by its own deadline while the identity-theft unit works.

Deceased-taxpayer identity-theft checklist

1. Preserve and verify the e-file rejection or IRS notice.
2. Rule out name, SSN, preparer, dependent, and duplicate-authorized-filing errors.
3. Separate the decedent, survivor, joint return, estate, and business accounts.
4. Establish whether the signer is a spouse, appointed representative, or other claimant.
5. Follow an IRS identity-verification letter before submitting another form.
6. File one Form 14039 only when the current guidance supports it.
7. Preserve the genuine return’s deadline after an e-file rejection.
8. Attach the affidavit and authority evidence through the instructed route.
9. Reconcile payments, refund authority, state returns, and wider identity risks.
10. Maintain one case log and escalate hardship without duplicating submissions.

For a notice-led case, see Responding to an IRS Notice After a Death: Deadlines, Authority, and Evidence.

This article provides general U.S. federal tax and identity-recovery education, not individualized tax, legal, cybersecurity, or credit advice. Forms, attachments, filing deadlines, authority, and recovery steps change and depend on the notice and tax year. Use current IRS instructions and have a qualified tax professional or tax controversy lawyer review the response.