CP5071 IRS letter: What it is and how to respond in 2026
If you received a CP5071 IRS letter, the IRS is asking you to confirm your identity before it will finish processing your federal tax return. This is not a penalty notice, an audit, or a sign that you did something wrong.
The IRS flags returns through its Taxpayer Protection Program when something about the filing looks unusual – a new address, income reported from a foreign country, or a pattern that resembles identity theft.
For US expats, these flags are triggered more often than for domestic filers, and the verification process itself is harder to complete from overseas.
This guide covers every step: what the notice means, how to verify your identity online or by phone, what to do if you live abroad, and how to prevent future notices.
What is a CP5071 notice from the IRS?
A CP5071 notice is a letter the IRS sends when it needs to verify your identity before processing a federal income tax return filed under your Social Security number or ITIN.
The notice is part of the IRS Taxpayer Protection Program, which screens returns for signs of potential identity theft.
When the system flags a return, processing stops until the taxpayer confirms they actually filed it.
The CP5071 is not an audit notice and does not mean the IRS suspects you of fraud. It means the return matched patterns the IRS associates with fraudulent filings – and the agency wants to confirm a real person is behind it before releasing any refund.
You will need the control number printed on your notice to complete verification, so keep the letter in a safe place.
CP5071 vs. 5071C: Key differences explained
The IRS issues several identity verification letter types, and the one you receive determines how you can respond. Three notices make up the CP5071 series:
- CP5071 – One variant of the identity verification notice. Follow the specific instructions on your notice: if it includes the irs.gov/verifyreturn web address, you can verify online. If it directs you to call, phone verification is available at the number printed on your letter.
- 5071C – A widely used variant of the identity verification notice. It gives you two options: verify online at irs.gov/verifyreturn or verify by phone. The online option is generally faster.
- CP5071F – The third variant in the CP5071 series. Follow the specific instructions printed on your letter; the IRS directs all CP5071 series recipients to the same irs.gov/verifyreturn portal if online verification is offered, and to the phone number on the notice otherwise.
Expats with a foreign address may instead receive Letter 5447C, a separate notice outside the CP5071 series. It offers verification options including online at irs.gov/verifyreturn, by phone, and by mail – follow the instructions on your specific letter.
A 5071C letter is the version most taxpayers receive during the 2026 filing season. All variants serve the same purpose – confirming that the person who filed the return is the person named on it.
Why did you receive a CP5071 notice?
The IRS uses automated filters to screen every federal return for signs of identity theft before processing it. A return gets flagged when something about the filing looks different from what the IRS expects based on prior-year data.
Common triggers include:
- Filing from a new address, especially a foreign one
- Claiming income types you did not report in prior years
- A significant change in refund amount compared to previous filings
- First-time filing after several years of non-filing
- A CP5071 duplicate return – someone else already filed using your SSN or ITIN
The system is designed to catch fraudulent returns before refunds go out. But the same filters that catch identity thieves also flag legitimate returns that simply look different – which is why expats receive these notices at a higher rate than domestic filers.
Why expats and Americans living abroad are more likely to receive CP5071
US citizens and green card holders living overseas trip nearly every filter the Taxpayer Protection Program uses.
A foreign mailing address alone is enough to flag a return.
Add foreign-source income, the Foreign Earned Income Exclusion on Form 2555, FBAR or FATCA reporting, and a filing address that changes as you move between countries – and the odds of receiving a CP5071 as an expat rise substantially.
Expats who re-enter the filing system after years of non-filing through the Streamlined Foreign Offshore Procedures are especially likely to be flagged.
Submitting three years of delinquent returns at once looks, to the IRS algorithm, very similar to a batch of fraudulent filings.
The notice itself is not a penalty. But responding from abroad introduces real complications – limited access to the online verification portal, time zone mismatches with IRS phone lines, and slow international mail delivery.
How to respond to a CP5071 notice: Step-by-step
The deadline for responding is printed on your specific notice – follow that date. Do not wait: the sooner you verify, the sooner your return resumes processing, and any refund remains on hold until verification is complete. International taxpayers should account for mail delivery time when assessing how much time they have.
Here is what to do when your CP5071 letter arrives, and you need to know what to do:
- Read the notice carefully. Identify which variant you received – CP5071, 5071C, CP5071F, or 5447C. The variant determines your verification options.
- Gather your documents. You will need the notice itself, the tax return for the year listed on it, a prior-year return if available, and supporting documents such as W-2s, 1099s, or foreign income records.
- Verify online if your notice offers that option. Go to irs.gov/verifyreturn, sign in to or create an IRS.gov account, and follow the prompts. You will need the control number printed on your notice.
- Verify by phone if online is not available or not working. Call the Taxpayer Protection Program number printed on your notice. The general TPP number is 800-830-5084. International callers can reach the IRS at 267-941-1000.
- Confirm whether you filed the return. If you did, the IRS will continue processing after successful verification. If you did not, tell the IRS – this starts the identity theft resolution process.
The CP5071 response deadline matters. Missing the deadline does not trigger a penalty, but it keeps your return on hold, and the IRS may send an additional notice.
Documents you need to verify your identity for CP5071
The IRS asks you to confirm details only the real filer would know. Have these CP5071 documents ready before you start the verification process – whether online or by phone:
- Your CP5071 series notice with the control number printed on it
- The federal tax return you filed for the year listed on the notice – Form 1040, 1040-NR, or 1040-SR
- A prior-year federal return, if you have one
- W-2s, 1099s, Schedules C or F, or other income documents for the year in question
- A government-issued photo ID
If you filed using Form 2555 or claimed the Foreign Tax Credit on Form 1116, have those forms accessible as well.
The verification process may ask about specific line items from your return.
CP5071 online verification via ID.me: what to expect
If your notice is a 5071C or directs you to irs.gov/verifyreturn, you can complete CP5071 online verification without calling the IRS.
The online process works through your IRS.gov account, which uses ID.me for identity authentication.
Here is what to expect during CP5071 ID.me verification:
- Go to irs.gov/verifyreturn and sign in. If you do not have an IRS.gov account, you will create one through ID.me.
- ID.me will ask you to upload a photo of a government-issued ID – a passport, driver’s license, or state ID card.
- You will take a selfie so ID.me can match your face to the ID photo.
- If the automated match fails, ID.me offers a live video chat with a verification agent as an alternative.
- Once your identity is confirmed, the IRS system will prompt you to answer questions about the tax return listed on your notice.
- After successful verification, the IRS resumes processing your return. Check your refund status after 2 to 3 weeks.
How to respond to CP5071 if you live outside the United States
Expats face specific obstacles that domestic taxpayers do not. Here is how to handle the verification process when you are a CP5071 living abroad.
- Online verification is the fastest option and works from any country. Use irs.gov/verifyreturn with a valid US passport for ID.me authentication.
- Phone verification is available if your notice lists the Taxpayer Protection Program number. The domestic TPP line is 800-830-5084, open Monday through Friday, 7:00 AM to 7:00 PM local time – but 800 numbers generally cannot be reached from outside the US. The CP5071 international phone number for callers outside the US is 267-941-1000, open Monday through Friday, 6:00 AM to 11:00 PM Eastern Time. Expect long hold times during filing season.
- Mail verification applies if you received Letter 5447C, which is issued to taxpayers with foreign addresses, though this letter also offers online and phone verification. Follow the instructions on the letter and allow extra time for international mail delivery if you choose that option.
The CP5071 phone number on your notice may differ from the general TPP line – always use the number printed on your specific letter first.
If you cannot complete verification by phone or online, call 267-941-1000 (the IRS international line, open Monday through Friday, 6:00 AM to 11:00 PM Eastern Time) and ask how to proceed given your location.
If you received Letter 5447C rather than a CP5071 series notice, your letter includes online, phone, and mail verification options – use whichever the letter directs you to, or whichever is fastest if you have a choice.
What if you did NOT file the return listed on the CP5071?
If you did not file the return referenced in your notice, someone may have used your Social Security number or ITIN to file a fraudulent return.
This is a CP5071 identity theft situation, and you should act immediately:
- Complete the verification process using the instructions on your notice. During verification – online or by phone – indicate that you did not file the return. The IRS will flag it as potentially fraudulent.
- If the IRS instructs you to file Form 14039, Identity Theft Affidavit, do so, but do not file it simply because you received a CP5071 notice or cannot complete verification online. The IRS explicitly says not to file Form 14039 for CP5071 recipients unless they specifically direct you to. If you cannot complete online verification, call the Taxpayer Protection Program at 800-830-5084 (or 267-941-1000 from outside the US) or schedule an in-person appointment at a Taxpayer Assistance Center. You do not need to file Form 14039 if you successfully verify through irs.gov/verifyreturn; the IRS handles the fraud flag during that process.
- File your own legitimate return by paper if you have not already filed for that tax year. The IRS cannot e-file a return under an SSN that already has a filing on record.
A CP5071 fraudulent return filed in your name does not mean you owe taxes on income you did not earn. The IRS will investigate and remove the fraudulent return once identity theft is confirmed.
How long does CP5071 verification take, and will it delay your refund?
Once you successfully verify your identity, the IRS typically takes up to 9 weeks to finish processing your return.
The CP5071 processing time depends on the method you used to verify:
- Online verification: The IRS receives confirmation immediately. Check your refund status on irs.gov/refunds after 2 to 3 weeks. Full processing takes up to 9 weeks.
- Phone verification: Similar timeline – up to 9 weeks after the call.
- Mail verification: Add several weeks for the IRS to receive and process your documents.
Yes, a CP5071 notice causes a CP5071 refund delay. Your return sits in a hold status until verification is complete. The IRS does not process the return, issue a refund, or apply credits until your identity is confirmed.
If your refund has been delayed beyond 9 weeks after verification and you have received no further communication, contact the IRS at 800-829-1040 or 267-941-1000 for international callers.
What happens if you ignore a CP5071 notice?
The IRS will not process your return or issue a refund until you verify your identity. There is no CP5071 penalty for not responding in the traditional sense – the IRS will not assess a fine for ignoring the notice.
But the consequences are real:
- Your return stays frozen indefinitely
- Any refund owed to you remains on hold
- The IRS may send an additional notice
- The IRS does not treat an unverified return as unfiled – the return was received when you filed it, so failure-to-file penalties do not apply. What does apply: your return will remain unprocessed, and your refund will stay frozen for as long as you do not respond.
Ignoring the notice does not make it go away. If you believe the notice is not legitimate, verify its authenticity first – then respond.
Is the CP5071 letter a scam? How to tell if your notice is legitimate
Scam letters impersonating IRS notices are common, so the concern is valid. Here is how to tell whether your CP5071 scam letter suspicion is warranted or the notice is real.
A legitimate CP5071 IRS letter will:
- Arrive by US mail, not by email, text, or social media
- Reference a specific tax year and include the control number printed on your notice
- May include a QR code, as the IRS has added QR codes to some identity verification notices, including this notice, but always verify the destination URL starts with irs.gov before scanning
- Direct you to irs.gov/verifyreturn or a specific IRS phone number – never to a third-party website
- Never ask for credit card numbers, bank account information, or prepaid debit card codes
- Never threaten immediate arrest or deportation
If you are unsure, you can verify whether the IRS actually sent you a notice by calling 800-829-1040 or checking your IRS online account at irs.gov.
Do not click links or call phone numbers in a letter you suspect is fake. Go directly to irs.gov and navigate from there.
CP5071 and the IRS Taxpayer Protection Program
The Taxpayer Protection Program is the IRS division responsible for screening returns for identity theft before they are processed.
When the TPP flags a return, it generates an IRS notice CP5071 – or one of the letter variants in the CP5071 series – and holds the return until the filer verifies their identity.
In 2024, the IRS suspended processing of over 1.9 million tax returns pending identity verification.
IRS CP5071 verification through the TPP works in one direction only. You prove your identity to the IRS – the IRS does not call you first. Any unsolicited call claiming to be from the TPP and asking for personal information is a scam.
The TPP phone line – 800-830-5084 – is only for taxpayers who received a CP5071 series notice and need to verify. It is not a general IRS helpline, and agents on this line cannot provide refund status updates or answer other tax questions.
How to get an IRS IP PIN to prevent future CP5071 notices
An Identity Protection PIN is a six-digit number the IRS assigns to you annually. When you file your return with your IP PIN, the IRS knows the return came from you – which significantly reduces the chance of being flagged for CP5071 identity verification again.
Anyone with an SSN or ITIN can enroll. Parents and legal guardians can also request an IP PIN for dependents.
Three ways to get an IP PIN:
- Online – The fastest method. Sign in to your IRS.gov account and request an IP PIN through the Get an IP PIN tool. The PIN is available immediately.
- Form 15227 – Available if your adjusted gross income on your last filed return is below $84,000 (individual) or $168,000 (married filing jointly), you have access to a telephone, and you cannot complete the online enrollment through your IRS.gov account. The IRS calls the phone number you provide on the form to verify your identity, then mails the IP PIN within 4 to 6 weeks. For expats who cannot complete ID.me verification online, this is a practical alternative.
- In person – Schedule an appointment at a Taxpayer Assistance Center. Bring a government-issued photo ID and one additional piece of identification. The IP PIN arrives by mail within 3 weeks.
The IP PIN is valid for one calendar year and changes annually. An incorrect or missing IP PIN will result in e-file rejection or a paper return delay.
If you lose your IP PIN, retrieve it through your IRS online account or request a replacement.
CP5071 verification failed: What to do next
If your online or phone CP5071 verification failed, it does not mean the IRS thinks you are committing fraud. It usually means the system could not match the information you provided with IRS records.
Common reasons verification fails:
- Answers to identity questions did not match IRS records – this can happen if you recently moved, changed your name, or have a thin credit history
- ID.me could not match your selfie to your government ID photo
- A technical error during the online process
If online verification fails, try these alternatives:
- Call the TPP number on your notice – 800-830-5084 for domestic callers, 267-941-1000 for international callers.
- Schedule a CP5071 appointment at a Taxpayer Assistance Center if you are in the US. Bring your notice, a government-issued photo ID, and a copy of the return in question.
- If you cannot reach the TPP line after multiple attempts, contact the Taxpayer Advocate Service at 877-777-4778 – hardship caused by a prolonged identity verification hold qualifies for TAS assistance.
If all methods fail and your return has been held for an extended period, contact the Taxpayer Advocate Service for assistance.
When to contact a Taxpayer Advocate for CP5071 issues
The Taxpayer Advocate Service is an independent office within the IRS that helps taxpayers resolve problems they cannot fix through normal channels.
Consider contacting TAS for your CP5071 tax advocate case if:
- You verified your identity, but your return has been held for more than 9 weeks with no update
- You cannot reach the TPP phone line after repeated attempts
- Your refund delay is causing financial hardship – inability to pay rent, medical bills, or other necessities
- The IRS lost your verification and is asking you to repeat the process
- You are abroad with no practical way to complete in-person verification
The TAS toll-free number is 1-877-777-4778. You can also request help by filing Form 911 by email at TAS.Form.911.Request.for.Assistance@irs.gov or by fax at 855-828-2723.
TAS cannot speed up routine processing, but it can intervene when the standard process has broken down or is causing genuine hardship.
CP5071 and FATCA: Why foreign account reporting increases your risk
Filing FATCA-related forms – particularly Form 8938, Statement of Specified Foreign Financial Assets – adds complexity to your return that the IRS screening algorithms flag at a higher rate.
Expats often first learn about FATCA when their foreign bank sends a FATCA letter requesting their US tax identification number.
FATCA reporting adds a layer of complexity that’s less common on domestic-only returns, which is one reason these filings draw more scrutiny from IRS screening filters.
Expats who file an FBAR to report foreign bank accounts on FinCEN Form 114, claim treaty benefits, or file with a foreign address alongside FATCA disclosures present a combination of factors that significantly raise the odds of a second look from the TPP.
Green card holders with undeclared foreign assets face even higher scrutiny, since their filing patterns often include the same FATCA triggers plus gaps in prior-year reporting.
This does not mean your FATCA reporting triggered a problem. It means the IRS is being cautious – and you need to verify so processing can continue.
How CP5071 interacts with Streamlined Filing Procedures for expats
If you are catching up on unfiled returns through the IRS Streamlined Foreign Offshore Procedures, expect a CP5071 notice on at least one of the returns you submit.
Streamlined filers submit three years of delinquent federal returns and six years of FBARs at once.
From the TPP’s perspective, three returns arriving simultaneously under the same SSN – often with foreign income and foreign account disclosures on every one – looks like a textbook identity theft pattern.
The CP5071 notice does not mean the IRS is rejecting your Streamlined submission. It means the system flagged the batch for verification, which is routine for this type of filing.
Respond to the notice through the standard verification process. Once your identity is confirmed, all returns in the Streamlined batch should resume processing.
If only one return in the batch triggered a CP5071 and the others are processing normally, verify for the flagged year – the IRS does not require separate verification for each return.
Pro tips to avoid receiving a CP5071 notice in the future
You cannot entirely prevent the IRS from flagging your return, but these steps reduce the likelihood:
- Get an IP PIN. This is the single most effective way to prevent identity-related holds. Enroll at irs.gov and retrieve a new PIN each January.
- File electronically and early. E-filed returns processed before the filing season peak are less likely to trigger processing delays. Filing early also means a fraudulent return cannot beat yours to the IRS.
- Use a consistent filing address. If you change countries frequently, consider using a US-based mailing address for your tax filings – a trusted family member’s address or a registered agent. Frequent address changes are a top flag.
- File every year. Gaps in filing history are one of the strongest triggers for a CP5071 hold. Even if you owe nothing, filing a return when living abroad keeps your record active and consistent.
- Keep prior-year returns accessible. The verification process may ask about details from previous filings. Store digital copies in a secure location you can access from anywhere.
Frequently asked questions
Yes. ID.me is required only for the online verification at irs.gov/verifyreturn. You can also verify by calling the Taxpayer Protection Program number on your notice – 800-830-5084, or 267-941-1000 from outside the US. Letter 5447C recipients can also verify online at irs.gov/verifyreturn or by phone, in addition to mail.
No. The CP5071 is an identity verification request, not a bill. It does not change your tax liability. Once you verify, the IRS processes your return as originally filed – including any refund you are owed.
It depends on the method. Online verification must be completed by you personally – no authorized representative can log in on your behalf. Phone verification is different: a CPA or enrolled agent with a completed Form 2848, Power of Attorney and Declaration of Representative, on file with the IRS can call the TPP hotline on your behalf. The IRS encourages you to be available during the call to assist with identity questions, but the call does not have to be yours. For expats who struggle to reach IRS phone lines from abroad, this makes professional representation through Form 2848 a practical option worth discussing with your tax advisor.
The IRS may take up to 9 weeks to process your return after identity verification. If 9 weeks have passed with no refund and no further IRS communication, call 800-829-1040 if you are in the US, or 267-941-1000 if you are calling from outside the US.
Many expats are owed a refund and do not realize it – especially those who had US taxes withheld or qualify for refundable credits while living abroad.
Not necessarily. If you enroll in the IP PIN program and file consistently, the likelihood drops. But the IRS can flag any return in any year if its screening algorithms detect an anomaly. There is no way to permanently opt out of the Taxpayer Protection Program.
No. A CP2100 notice relates to backup withholding errors and is sent to payers, not individual taxpayers. A CP5071 is an identity verification request. The two are unrelated – respond to each separately based on its own instructions.
No. The CP5071 only holds your return for identity verification. It does not change the substance of your filing.
Once verified, the IRS processes your return with all exclusions, credits, and deductions as claimed – including the FEIE and the FTC.
Check your IRS online account for notices. International mail delivery is unreliable, and the notice may not have reached you. You can also call 267-941-1000 to ask if a CP5071 was issued for your SSN. If it was, complete verification by phone during that same call.
Related articles
Explanation of how US tax refunds work for Americans living abroad
Read more
Received a FATCA letter from your foreign bank? Learn what it means, which forms may apply, how it differs from FBAR/Form 8938, and what to do next.
Read more
SFOP (IRS streamlined foreign offshore procedures) for expats: who qualifies, what to file (3 returns + 6 FBARs), penalties waived, timeline, and common mistakes.
Read more
