Quick Review: The IRS stopped $624 million in possible improper refund payments during the 2025 filing season. Millions of returns were flagged for review, but only a fraction were confirmed as identity theft. A delayed refund may require taxpayer action, even when the IRS does not send additional reminders.
A New Channel for Evaluating Tax Identity Protection
A refund delay can be difficult to interpret. It may result from a routine processing issue, an error on a return, or an IRS identity-theft filter that requires verification. For taxpayers who depend on their refund for household expenses, uncertainty can quickly become a financial burden.
A recent Taxpayer Advocate Service (TAS) review provides important context. During the 2025 filing season, the IRS stopped $624 million in possible improper refund payments, compared with $1.4 billion during the prior filing season. The IRS also selected approximately 2.3 million returns through identity-theft filters, a decline of about 32 percent, and confirmed approximately 68,000 identity theft cases.
The figures show that IRS fraud detection remains active. They also show why taxpayers should not assume that a missing refund will resolve automatically.
The Problem: A Refund Can Be Held Without a Clear Explanation
The IRS uses automated identity-theft filters to identify returns that may have been filed by someone using another person’s Social Security number. These filters can review information such as income records, filing history, addresses, and other return characteristics.
When a return is selected, the IRS may hold the refund while it determines whether the legitimate taxpayer filed the return. This process is intended to prevent refund theft, but legitimate taxpayers can also be caught in the review process.
A taxpayer may discover a problem when:
- Where’s My Refund? stops showing normal processing information.
- The expected refund does not arrive within the usual timeframe.
- The taxpayer receives an IRS identity verification notice.
- The IRS account shows an unresolved issue or request for action.
- A return is rejected because another return may already have been filed using the taxpayer’s information.
A false positive is a legitimate transaction incorrectly identified as suspicious. The TAS data indicates that most returns selected by identity-theft filters were not ultimately confirmed as identity theft. That distinction matters because a flagged return does not automatically mean that a taxpayer has been victimized.
The Evidence: What the $624 Million Figure Shows
The $624 million figure represents possible improper refund payments that the IRS stopped during the 2025 filing season. It should not be interpreted as the total amount of confirmed tax fraud.
The accompanying figures provide additional perspective:
- Approximately 2.3 million returns were selected by identity-theft filters.
- The number of selected returns declined by approximately 32 percent from the previous filing season.
- Approximately 68,000 cases were confirmed as identity theft.
- The IRS stopped $624 million in possible improper refund payments, compared with $1.4 billion in the prior year.
The decline could have several explanations. IRS filters may have become more precise, fraud attempts may have changed, or the filters may have identified fewer suspicious returns for other operational reasons. The number alone does not prove that tax identity theft has become less threatening for every taxpayer.
Similarly, the lower amount of stopped payments does not mean that all taxpayers face less risk. It reflects the amount identified and stopped by the IRS systems during a particular filing season. Fraud that is not detected, fraud that occurs outside the measured period, and account misuse that does not immediately involve a refund may not appear in that figure.
The Consequences: A Delayed Refund May Require Action
The TAS has highlighted an important communication problem: after the IRS sends its initial notification, it generally does not continue reaching out to affected taxpayers.
That means a taxpayer may receive one letter and then wait without additional reminders. If the taxpayer overlooks the notice, loses it, or does not understand the required steps, the refund may remain on hold.
The TAS specifically advises taxpayers who are expecting a refund but have not received it to contact the IRS and determine whether the refund is being held for possible identity verification.
A delayed refund does not necessarily mean the taxpayer made a mistake. It also does not necessarily confirm identity theft. However, waiting passively can make the situation harder to resolve.
Taxpayers should review:
- Their IRS notices. Look for instructions related to identity verification or a potentially fraudulent return.
- Their IRS Online Account. Review available notices, tax records, and account activity.
- Where’s My Refund? Use the IRS refund-tracking tool to check the return’s status.
- Their filing records. Confirm that the return was filed accurately and that reported income matches employer and payer documents.
- Their correspondence history. Keep copies of letters, forms, confirmation numbers, and notes from IRS calls.
If the IRS requests identity verification, the taxpayer should follow the instructions in the notice. The letter may direct the taxpayer to verify online, by telephone, or in person. The taxpayer should use only contact information and web addresses provided through official IRS channels.
Prevention: How Taxpayers Can Respond Earlier
Taxpayers cannot control how the IRS filters returns, but they can improve their ability to identify and respond to suspicious activity.
Protect the tax filing process
An Identity Protection PIN, or IP PIN, is a six-digit number that helps prevent someone else from filing a federal tax return using the taxpayer’s Social Security number or Individual Taxpayer Identification Number. Eligible taxpayers can request an IP PIN through their IRS Online Account.
Additional steps include:
- File tax returns as soon as the required income documents are available.
- Use a secure email account and unique passwords for tax and financial services.
- Enable multifactor authentication where it is available.
- Avoid sending Social Security numbers through unencrypted email or text messages.
- Confirm that tax preparers use secure systems and protect client information.
- Review W-2 and 1099 information for unauthorized income reporting.
- Keep IRS letters and filing records in a secure location.
- Report suspected identity theft through the IRS Identity Theft Central resources.
Monitor for signs of IRS account misuse
A taxpayer should pay attention to unexpected activity, including:
- A notice for a return the taxpayer did not file.
- An unfamiliar employer or income document.
- A change of address that the taxpayer did not request.
- A refund status that changes unexpectedly.
- A rejected electronic return because another return was already submitted.
- IRS account activity that does not match the taxpayer’s actions.
These signs do not establish that identity theft occurred, but they justify prompt investigation.
How Tax Guardian Fits Into the Process
Tax Guardian addresses a separate visibility problem. Traditional identity protection services often focus on credit reports, while tax-related identity theft may first appear in IRS records.
Tax Guardian continuously monitors IRS account activity for suspicious signals, provides alerts through text or email when covered activity is detected, and offers recovery support through eligible protection plans. Depending on the plan, monitoring may include suspicious return activity, stolen refund indicators, and W-2 or 1099 income mismatches.
Tax Guardian does not prevent tax identity theft. It also does not replace the IRS, an authorized tax professional, or legal advice. Its role is to help taxpayers identify potentially suspicious IRS activity sooner, understand what may require attention, and access support when a covered issue arises.
Taxpayers can review the Tax Guardian tax identity protection service and learn more through the company’s tax and IRS resources.
What to Do If the Refund Has Not Arrived
A taxpayer who is expecting a refund and has not received it should take a structured approach:
- Check Where’s My Refund? through IRS.gov.
- Review the taxpayer’s IRS Online Account for notices or account changes.
- Search for an IRS letter requesting identity verification.
- Contact the IRS if the refund remains unexplained or appears to be held.
- Follow every verification instruction provided by the IRS.
- Keep records of contacts, submitted documents, and confirmation numbers.
- Contact the Taxpayer Advocate Service if the taxpayer cannot resolve the problem through normal IRS channels or is experiencing significant hardship.
The Taxpayer Advocate Service is an independent organization within the IRS that helps taxpayers resolve certain IRS problems. Its refund assistance page provides additional guidance.
Frequently Asked Questions
Does the $624 million figure mean the IRS stopped $624 million in confirmed fraud?
No. The figure refers to possible improper refund payments stopped by IRS systems. Some payments may have involved attempted fraud, while other returns may have belonged to legitimate taxpayers whose refunds were held for review.
Does a flagged return mean that someone stole my identity?
No. A flagged return means that the IRS identified characteristics requiring additional review. The TAS figures show that only a fraction of returns selected by identity-theft filters were ultimately confirmed as identity theft.
What should a taxpayer do if an expected refund has not arrived?
The taxpayer should check the IRS refund tracker and Online Account, review IRS mail, and contact the IRS to determine whether the refund is being held for possible identity verification. The TAS advises taxpayers not to assume that the IRS will continue sending reminders after its initial notification.
Can Tax Guardian stop someone from filing a fraudulent tax return?
No. Tax Guardian does not prevent tax identity theft. It monitors IRS account activity for suspicious signals, sends alerts for covered activity, and provides plan-dependent recovery support to help taxpayers respond more quickly.
Turning Refund Uncertainty Into an Action Plan
The IRS’s $624 million result demonstrates that fraud screening can stop substantial amounts of potentially improper payments. It does not demonstrate that every fraudulent filing is detected, and it does not eliminate the possibility that a legitimate taxpayer’s refund will be delayed.
The most practical response is awareness followed by action. Taxpayers should monitor their IRS records, respond promptly to verification notices, and contact the IRS when an expected refund does not arrive. IRS-focused monitoring can provide an additional way to identify suspicious activity and streamline the path toward appropriate assistance.
Authoritative source: Taxpayer Advocate Service, Review of the 2025 Filing Season. Additional guidance is available through IRS Identity Theft Central.
This article is provided for general educational and informational purposes only. It is not tax, legal, financial, or identity-restoration advice and does not create a professional relationship. Tax situations vary. Readers should consult the IRS, a qualified tax professional, or an attorney regarding their individual circumstances. Product features, coverage, eligibility, pricing, and terms may change and are governed by the applicable Tax Guardian agreement.
© 2026 Tax Guardian. All rights reserved.
