Keep the tax case on its official route
Common warning signs
Signals can include an unexpected filing rejection, unfamiliar return or account change, refund message, employer you do not recognize or tax notice for income you did not receive.
Secure the surrounding accounts
Protect the email, tax-preparation, payroll and bank accounts used for tax activity. Review recovery methods and unknown sessions before uploading more documents.
Keep tax and general identity recovery connected
A fraudulent filing may indicate wider misuse of identity data. Follow the appropriate national identity-theft guidance as well as the tax authority's procedure.
Avoid recovery scams
Tax agencies publish how they contact people. Urgent threats, gift-card or crypto payment demands, and requests to install remote-control software are strong scam signals.
Keep the tax response inside the official process
Tax procedures vary by country, but the route should begin with an independently verified authority account or notice.
Verify
Reach the tax authority through its official website and confirm the notice, filing rejection or account change.
Preserve
Keep the reference, filing date and instructions without sending tax identifiers to an unverified contact.
Follow through
Use the authority's identity process and connect wider account or credit misuse to a separate recovery record.
Keep the tax case inside the authority's verified route
Tax notices, rejected filings and account changes can require different forms or verification. Begin with the official authority account or contact details found independently.
- Trigger
- Record whether the warning is a filing rejection, unknown return, refund change, account notice or employer-income issue. Preserve the complete notice and envelope without publishing the reference or taxpayer number.
- Authority check
- Reach the tax authority through its official website and confirm what the notice means, which process applies and how documents must be sent. Do not call a number supplied by an unexpected text or email.
- Case record
- Track forms submitted, identity verification, filing status, authority references and expected follow-up. Keep copies of exactly what was sent and when it was accepted.
- Wider misuse
- Check whether the event connects to unfamiliar employment, benefits, credit or financial accounts. Handle those through their own official correction routes instead of assuming the tax case fixes every record.
Tax procedures differ by country and can change. The linked official sources and the authority's current instructions control over any general sequence on this page.
Verify the warning through the tax authority
- Do not use contact details supplied by an unexpected caller or text.
- Save the notice, reference, filing date and what the official account shows.
- Use the tax authority's identity-theft process and record every submission.
Record the tax-identity warning
- Preserve the notice or filing rejection and its reference without publishing tax identifiers.
- Note the tax authority's official verification route and every form or affidavit submitted.
- Record filing, account-security and credit-file actions separately so each can be followed up.
Questions before trusting the warning
Should I file a second return immediately?
Follow the tax authority's instructions. Duplicate or improvised filings can complicate the record.
Is a tax notice proof that all my accounts are compromised?
No, but it justifies checking the accounts and identity information connected to the event.
Follow the signal if it points elsewhere
If new-credit misuse is also possible, review credit freezes and fraud alerts separately from the tax case.
Keep notices, filings and calls in a dated fraud timeline without mixing observed facts and assumptions.
Processes, rights and deadlines depend on your location, provider and policy. Use the relevant official service for your jurisdiction.