What This Notice Means
A CP18A tells you your personal information may have been compromised. It lays out steps to protect your identity, answers common questions, and gives you contact information and resources.
You don't have to reply to this notice. You should take the protective steps.
What to Do
Get an Identity Protection PIN (IP PIN). An IP PIN is a number you use on your future tax returns. The letter tells you to get one in one of three ways: the online Get an IP PIN tool, a paper application, or in-person identity verification. Your spouse and dependents can get one too if they pass the identity proofing process.
Place a fraud alert on your credit file. Contact one of the three credit reporting agencies: Equifax, Experian, or TransUnion. You only need to contact one. That agency notifies the other two.
Check on your children. If the IRS told you it lost or disclosed your minor child's personal information, contact one of the credit reporting agencies to see whether a credit file exists for your child, or whether your child's identity has been misused.
If You Have Questions
Call the number on your notice to speak with an IRS representative about it.
Using a Representative
Your power of attorney can contact the IRS about this data loss, theft, or disclosure. There's a catch. On Form 2848, line 3, the Description of Matter must say "IRS breach," "IRS data loss," or "IRS information loss." If it doesn't, the IRS can't discuss this matter with your representative.
If Someone Uses Your Information
Watch for signs of tax-related identity theft, such as a return filed in your name that you didn't file. Form 14039, Identity Theft Affidavit, is the form used to report it to the IRS. Publication 5027, Identity Theft Information for Taxpayers, and the Federal Trade Commission's identity theft resources explain more.
Keep this notice with your important papers. You may need it later.
If your information was compromised and an identity theft problem is now affecting your taxes, call us at (813) 229-7100.