IRS notice, decoded
5071C: Identity Verification Letter (Online or Phone)
What it is
A checkpoint, not an accusation. The IRS received a tax return with your name and SSN but something about it triggered identity-theft screening, so the IRS is holding the return until you confirm whether you really filed it. Refunds wait until verification completes.
Why you got it
Sent when the IRS's identity-theft filters flag a return as potentially filed by someone other than the taxpayer.
The deadline structure
The letter asks you to verify promptly (it states the timeframe). Your return — and any refund — does not process until you verify. After you verify, the IRS says it can take up to 9 weeks to finish processing the return and release any refund (it suggests waiting 2–3 weeks before checking your refund status). If you did NOT file the return in question, the same verification process is how you report that.
Follow the instructions and timeframe printed on YOUR letter — official IRS guidance does not set a universal 30-day 5071C deadline, so do not assume one. Online verification is part of the IRS 'Identity and Tax Return Verification Service' (the CP5071 series) and requires signing in to (or creating) a verified IRS online account; a phone option is available where online verification isn't completed.
How to respond
- Online at the IRS Identity and Tax Return Verification Service — use ONLY the irs.gov address printed on the letter, typed directly into your browser; you sign in to (or create) a verified IRS online account to complete it
- By phone at the toll-free number printed on the letter
- Have ready: the letter itself, the tax return in question (if you filed one), a prior-year return, and supporting documents (W-2s, 1099s)
What ignoring it leads to
If you filed the return, it simply never processes — no refund, and eventually correspondence about the unprocessed return. If you didn't file it, an identity thief's return sits in limbo attached to your SSN and the underlying theft goes unaddressed.
First: make sure this letter is really from the IRS
- The IRS initiates contact by U.S. mail — it does not call, text, or email you first about identity verification
- The IRS will NEVER ask for payment by gift card, wire transfer, cryptocurrency, or payment app — anyone who does is a scammer, full stop
- Real verification happens only at web addresses ending in irs.gov — type the address from the letter yourself; never click a link from an email or text claiming to be the IRS
- The IRS will not threaten arrest, deportation, or license revocation over the phone
- To check a letter's legitimacy independently, call the IRS at 800-829-1040 (the main line, not a number from any email or text) or look the letter up at irs.gov
Mistakes people make with a 5071C
- Googling 'IRS identity verification' and landing on a look-alike site — type the irs.gov address from the letter directly
- Ignoring it because 'I filed my return, this must be spam' — if it's genuine, your refund is frozen until you verify
Official sources
Our summary paraphrases these sources. Last verified: AI-RESEARCH 2026-06-27 (Codex/gpt-5.5 live irs.gov) + cross-ref 2026-07-02 (2nd frontier model, IRM 25.25.6 / 25.23.2) — corrected typicalDays 30→null; human re-verify before launch. Your printed notice always controls.
NoticeKey is not affiliated with, or endorsed by, the IRS or any state tax agency.
Holding a 5071C right now?
Paste it in and get your specific deadlines, amounts, and options — free, read once, never stored.
Decode my 5071C — free