IRS Identity Theft Backlog Surges to 500,000 Cases, With Refund Delays Reaching 20 Months as Staff Cuts Widen the Crisis

The National Taxpayer Advocate’s latest report paints a stark picture of the U.S. tax system’s struggle to keep pace with identity‑theft crimes. More than half a million Americans are currently waiting for the IRS to resolve their tax identity‑theft cases, and the agency’s average resolution time has crept up to roughly 20 months—a full month longer than the 19‑month average recorded in 2023. The backlog is not only growing; it is deepening as the IRS workforce shrinks dramatically, triggering cascading impacts for low‑ and middle‑income filers who rely on those refunds to cover rent, utilities, and other essential expenses.

Staffing Collapse Triggers Slower Identity‑Theft Resolutions

The timing is especially ill‑fated. The IRS entered the 2026 filing season with just 74,000 employees—a 27% cut from the 102,000 workers it had a year earlier. This reduction is directly tied to staffing cuts pushed by the Department of Government Efficiency. Identity‑theft cases are, by nature, labor‑intensive: they require manual review, verification of stolen Social Security numbers, and coordination with law‑enforcement agencies. When the workforce contracts, the automated “fast‑track” cases move through, but the individualized ones pile up.

According to Erin Collins, the National Taxpayer Advocate, the agency’s internal processes are now split into two parallel tracks. The first track handles straightforward cases that can be resolved through automated matching systems. The second track, where identity‑theft disputes land, demands “individualized assistance, manual review, or flexibility.” Those are the cases that have ballooned under the weight of fewer reviewers. The result is a feedback loop: longer processing times lead to more taxpayer frustration, which in turn increases calls to the IRS and its contracted support services, stretching staffing even thinner.

Why the Wait Is So Long — and Getting Longer

In 2023 Collins first raised the alarm on severe delays. At that point the IRS had about 484,000 unresolved identity‑theft cases, each taking an average of 19 months to close. The current figure is above 500,000, and the average time has stretched to 20 months. The growing backlog is not a sudden surge but a steady accumulation. Even as the volume of identity‑theft reports climbs— the FBI’s Internet Crime Complaint Center logged more than 1,000 complaints in 2025, up 26% from the previous year— the agency’s capacity to process them has moved in the opposite direction.

The financial stakes have risen in tandem. IRS data compiled by CBS News shows that the average refund this season is $3,462, an 11% increase over the prior year driven by new deductions under President Trump’s “One Big Beautiful Bill Act.” For lower‑income households, a delayed refund can quickly become a crisis. A LendingTree survey of more than 1,500 tax filers found that 46% of respondents are depending on their refund this year, up 36% from 2023. The money they count on is “far from an inconvenience—it can mean falling behind on rent, utilities, transportation costs, and other basic living expenses,” Collins wrote.

Understanding Tax‑Related Identity Theft

Tax‑related identity theft occurs when a criminal uses a stolen Social Security number to file a fraudulent return before the legitimate taxpayer does. The thief claims a refund—often directed to a prepaid debit card or a mailbox controlled by the fraudster—leaving the real filer to navigate a maze of audits, holds, and manual reviews. The fallout is immediate and cascading: the genuine return is flagged, the refund is withheld, and the taxpayer is thrust into an administrative process that Collins calls “frustrating, burdensome, difficult to navigate and time‑consuming.”

In 2025 the Internet Crime Complaint Center recorded more than 1,000 complaints about tax‑related identity theft, a 26% jump from the previous year. The majority of stolen refunds end up in accounts that the thieves control, making recovery difficult. For the legitimate taxpayer, the impact is not just financial—it is also psychological. The sense of violation is compounded by the slow response from the agency tasked with protecting them.

What Can Taxpayers Do to Protect Themselves?

The most effective defense, as recommended by the IRS itself, is the Identity Protection PIN (IP PIN). This six‑digit code is assigned annually to taxpayers who have been victims or who request it through IRS.gov. Any return filed using a Social Security number without the matching IP PIN is rejected automatically, essentially locking out the fraudster.

If you suspect you have already become a victim, the FBI urges you to file a report with IC3.gov as quickly as possible. The IRS will automatically enroll confirmed victims in the IP PIN program, ensuring that future filings are protected. In the interim, placing a credit freeze with the three major bureaus—TransUnion, Equifax, and Experian—can prevent new fraudulent accounts from being opened while the IRS works through your case.

Separately, taxpayers should monitor their credit reports regularly and consider signing up for IRS “identity verification” alerts, which can notify you of any suspicious activity linked to your SSN. Keeping detailed records of all communications with the IRS is also crucial; these records can be pivotal if you need to appeal a decision or seek relief.

How the IP PIN Program Works

The IP PIN program is a free, opt‑in service that assigns a unique six‑digit number each year. To enroll, individuals must either have been identified as identity‑theft victims or apply through the IRS’s Identity Protection PIN portal. Once enrolled, the PIN must be included on any tax return that uses your Social Security number. The system is designed to be frictionless for legitimate filers—once you have a valid IP PIN, the IRS processes your return through its normal workflow—while presenting an insurmountable barrier to thieves who only have your SSN.

Enrollment is available year‑round, and the PIN is generated several months before the tax filing deadline, giving taxpayers ample time to incorporate it into their returns. The program is an example of how technology can outpace crime when policy supports it, but its reach is limited by awareness and access. Many eligible individuals remain unaware of the program, and enrollment rates have lagged behind the growing threat.

The Broader Economic Ripple Effect

The identity‑theft backlog is not an isolated administrative hiccup; it reverberates through the broader economy. Delayed refunds tighten household cash flow, reducing consumer spending power at a time when other economic pressures—inflation, rising interest rates, and fluctuating markets—are already testing family budgets. A slowdown in refund‑driven spending can dampen sectors that typically see a surge in the spring, such as retail and home improvement.

Moreover, the staffing cuts that lie at the heart of the problem raise questions about the sustainability of IRS services beyond identity‑theft resolution. Taxpayer assistance, audit processing, and compliance outreach all depend on the same pool of human resources. As the agency struggles to catch up, the risk of broader systemic inefficiencies increases, potentially affecting revenue collection and public trust.

What the Future Holds

Without a significant influx of staff or a transformative automation solution, the identity‑theft backlog is likely to remain a persistent pain point for millions of Americans. The National Taxpayer Advocate’s report stops short of prescribing a single fix, but it does point to the need for a balanced approach: leveraging technology where possible while preserving the manual oversight that vulnerable cases demand. Congressional action on IRS funding, along with continued public education about tools like the IP PIN, will be critical to breaking the cycle of delay and desperation.

For now, the immediate takeaway for taxpayers is straightforward: be proactive. Enroll in the IP PIN program if you haven’t already, monitor your credit reports, and act swiftly if you suspect any misuse of your Social Security number. The longer the backlog persists, the harder it will be for the IRS to catch up, and the longer ordinary taxpayers will feel the strain of a system stretched to its limits.

Frequently Asked Questions

• What triggers the IRS to place a hold on a refund due to identity theft?
  The IRS flags a return when it detects a Social Security number already used in a prior filing. This creates an identity‑theft alert, placing the refund on hold until the legitimate taxpayer proves their identity and resolves the dispute.
• How long does a typical identity‑theft resolution take now?
  As of the latest National Taxpayer Advocate report, the average processing time is about 20 months, up from 19 months in 2023. Cases vary widely depending on complexity and staffing levels.
• What is the IP PIN and how does it protect me?
  The Identity Protection PIN (IP PIN) is a six‑digit code assigned annually to taxpayers who have been victims of identity theft or who request it. You must include this PIN on any tax return filed with your Social Security number, which effectively blocks unauthorized filers.