IRS Streamlined Filing Experts: The IP PIN Problem Abroad

An IRS Identity Protection PIN is a six-digit code that must appear on every federal return you file in a calendar year, including prior-year returns. For a US taxpayer catching up from the UK, it is the single most common silent obstruction: the online retrieval route is built for US residents, and a streamlined package filed without the PIN sits in manual validation.

At Jungle Tax we handle a steady flow of London-based clients who begin a catch-up believing the hard part is the substantive tax — the unreported ISA, the UK pension, the foreign trust interest — and discover instead that the IRS will not accept their identity. As IRS Streamlined Filing Experts, we treat the Identity Protection PIN as a workstream in its own right, opened on day one of an engagement rather than discovered in week ten. This guide sets out exactly how an overseas filer acquires an IP PIN, why the standard retrieval routes fail from a UK address, what actually happens to a Streamlined Foreign Offshore package filed without one, and the alternative routes that remain open.

What the Identity Protection PIN is, and why it collides with a catch-up

The IP PIN is an anti-fraud control. It is a six-digit number the IRS issues to a specific taxpayer identification number, and it must be entered in the signature area of Form 1040 for the return to be treated as authenticated. The IRS is explicit that the number is not merely for the current tax year: per its published guidance, you must use the IP PIN to confirm your identity on your current tax return and any prior year returns filed during the calendar year.

Read that sentence again with a catch-up in mind. A Streamlined Foreign Offshore submission consists of three years of delinquent or amended Forms 1040, plus Form 14653, filed together in one package. If the IRS issued you an IP PIN for the calendar year in which you post that package, all three of those returns require it — not just the most recent one. A control designed to protect a single annual filing is applied across a stack of historic returns that the taxpayer is filing precisely because they were previously invisible to the system.

A second design assumption compounds the problem. A new IP PIN is generated each year and is valid for that calendar year only. Taxpayers who were enrolled following IRS-confirmed identity theft receive the new number each January in a mailed CP01A notice. Taxpayers who opted in voluntarily are expected to retrieve the number themselves online each calendar year. Both mechanisms — postal delivery of a US notice, and an online account gated by US-centric identity proofing — degrade badly across the Atlantic.

How does a UK-based taxpayer end up with an IP PIN they never asked for?

Most clients who hit this wall do not remember requesting anything. There are four realistic paths.

1. The IRS assigned one after confirmed identity theft

If a fraudulent return was filed using your Social Security number — extremely common among long-term non-filers, because a dormant SSN with no recent return on file is an attractive target — the IRS resolves the case and enrols you in the IP PIN programme. You are then issued a CP01A notice annually. If the IRS holds a stale US address for you, that notice has been going to a property you sold years ago. You have an active IP PIN and no knowledge of it.

2. You opted in voluntarily and forgot

Voluntary enrolment is open to anyone with an SSN or ITIN who can verify their identity. Many taxpayers opted in during a year when they were still US-resident, or in response to a data-breach notification from a US employer, bank or brokerage, and have not thought about it since. Enrolment does not lapse through inactivity.

3. A US preparer or family member enrolled you

We see this most often with accidental Americans and with spouses on jointly filed returns, where one party managed the US filings. Each taxpayer who has an IP PIN must enter their own; a joint return with a UK-resident spouse who was quietly enrolled will fail on that spouse's number even if the primary filer's details are perfect.

4. A dependent was enrolled

Parents and legal guardians can request an IP PIN for a dependent. On an e-filed return, dependent IP PINs are entered on Form 1040 and, where relevant, on Form 2441 and Schedule EIC. On a paper return, dependent PINs are not entered. That asymmetry catches families who paper-file a streamlined package and then e-file the following year.

Why does the online IP PIN route so often fail from the UK?

The IRS's own preferred route is the fastest one: retrieve or obtain the number through your IRS individual online account. That account is protected by third-party identity proofing through ID.me, and this is where a UK-resident filer meets a series of assumptions that do not hold.

• Document matching built for US credentials. Verifying from outside the United States with an SSN generally requires either two primary documents (for example a passport or a government-issued photo ID) or one primary plus a secondary document such as a utility bill, bank statement, pay stub or W-2. A UK driving licence and a council tax bill are not always accepted in the combinations the automated flow expects, and originals — not scans or photographs of scans — are required for the document review.
• The self-service path is frequently unavailable. For non-US addresses, verification typically routes to a live video call with an agent rather than completing through automated selfie matching. That is a queue, not an instant result, and it is scheduled in US business hours.
• Multi-factor authentication friction. An international mobile number can be used for MFA, but delivery is unreliable and errors are common; the practical workaround is a non-phone MFA method, which many users never discover before abandoning the attempt.
• The credit-file assumption. Legacy identity proofing leaned on knowledge-based questions drawn from US credit and financial records. A taxpayer who left the US a decade ago has a thin or frozen US credit file and no open US financial account, and simply cannot answer. This is the origin of the persistent belief that you "need a US bank account" to get an IP PIN. It is not a stated rule — but it describes the practical failure mode accurately.

The point for a wealthy client is not that the process is impossible. It is that it is a multi-week, appointment-driven administrative project running in a foreign time zone, and it should be started before the substantive return preparation, not after.

The Form 15227 trap

Form 15227, Application for an Identity Protection Personal Identification Number, is routinely presented online as the answer for expatriates who cannot verify digitally. Read against the current revision of the form, it is a poor fit for most of our client base, and for a different reason than people expect.

The form states four criteria the applicant must meet: you do not already have an IP PIN assigned to you; you have an SSN or ITIN; your adjusted gross income on your last filed return is below $84,000 for individuals or $168,000 for married filing jointly; and you have access to a telephone. Three of those four defeat a typical high-net-worth streamlined filer.

• The AGI ceiling. A founder, executive or investor with UK employment income, carried interest, or a portfolio generating dividends will be over the threshold on any recently filed return. The form is a low-income accessibility channel, not a general alternative.
• "You don't have an IP PIN assigned to you." Form 15227 is an application, not a retrieval mechanism. If the IRS has already assigned you a PIN — the exact situation of the taxpayer whose CP01A notices are going to an old US address — the form is the wrong instrument entirely. The form itself directs anyone who has lost an IP PIN or not received one to the retrieval route instead.
• The telephone criterion is a callback, not a helpline. The IRS contacts the applicant to validate identity before issuing the PIN, and the form asks for a number where the applicant can be reached Monday to Friday, 7 a.m. to 7 p.m. local time, with the form's own framing referencing US time zones. The address block is structured as City, State and ZIP code. Nothing on the form's face says a foreign address is disqualifying, but the instrument is plainly designed around a US-resident applicant taking a US call.

Where a non-filer has no recently filed return at all — common in a streamlined case — the AGI criterion is ambiguous on its own terms, and we do not advise clients to rely on the form as their primary route.

Which routes actually work from abroad?

Ranked by how reliably they resolve for a UK-resident client, these are the routes worth pursuing.

1. The IRS individual online account. Still the fastest when it works, because the number is visible immediately in the account profile. Budget for the document-upload and video-call sequence described above, and start it early.
2. The IRS international telephone line. Overseas callers use +1-267-941-1000, Monday to Friday, 6 a.m. to 11 p.m. Eastern time — a line that is not toll free and is not the domestic identity-theft number. If identity is verified with a phone assistor, the IP PIN is mailed. Note the consequence: it is mailed, to the address the IRS holds. Correcting a stale address of record therefore has to happen first, not later.
3. CP01A reissue — with real limits. The IRS will not reissue the notice by mail in several situations that map almost exactly onto our clients: where enrolment was after 2019, where there is no valid address on file, or where the taxpayer has not filed in three years. A long-term non-filer catching up is, by definition, in that last category. There is also an annual system maintenance window from roughly November to mid-January during which reissue is unavailable.
4. Taxpayer Assistance Center appointment. In-person authentication requires one federal or state issued photo ID plus a second form of identification. Practical only when a client already has US travel scheduled — but for clients who fly to New York or California anyway, folding a TAC appointment into an existing trip is often the cleanest resolution we arrange.
5. Form 15227. Reserve for taxpayers who genuinely satisfy all four criteria, including the AGI ceiling, and who can reliably take a US-hours callback.

What happens if the streamlined package is filed without the IP PIN?

This is the question clients actually want answered, and the honest answer is more nuanced than the internet suggests, because it turns on a cross-border quirk in how streamlined submissions are filed.

Streamlined Foreign Offshore returns must be submitted in paper form — electronic submissions are not accepted — with "Streamlined Foreign Offshore" written in red at the top of each return and on Form 14653, and mailed to the dedicated unit in Austin, Texas. The FBARs for the six-year period go separately through the FinCEN BSA E-Filing System.

That paper requirement changes the consequence materially. The IRS's stated position is that an incorrect or missing IP PIN will result in the rejection of an e-filed return or a delay of a paper return. Guidance for taxpayers who cannot obtain the number is that a paper return may be mailed without the IP PIN, and the IRS will review the return to confirm the taxpayer filed it — with the caveat that this may delay any refund. So:

• A streamlined package posted without the IP PIN is not automatically rejected. It goes into manual identity validation.
• Manual validation is not a penalty event. It does not, of itself, invalidate the Form 14653 non-willfulness certification or forfeit streamlined treatment.
• It does create correspondence — and correspondence with a UK address, on a package already under human review, is the last thing a client wants when the file also contains six years of FBARs and a PFIC-heavy investment history.
• The genuine rejection risk arrives the following year. Once the catch-up is done and the client returns to ordinary e-filing, an omitted or wrong IP PIN produces a hard e-file rejection. Clients who "got away with it" on paper are frequently the ones whose first normal-year return bounces.

We do not consider deliberately filing without the PIN to be a strategy. We consider it a fallback, used when the alternative is missing a deadline or leaving a client exposed for another year, and always documented in the engagement file.

US and UK identity gateways compared

The IP PIN problem is not uniquely American. Anyone running a genuine dual catch-up — delinquent US returns alongside a UK Self Assessment position — will meet a mirror-image obstruction on the HMRC side. The comparison is instructive because the failure modes are opposite.

Feature	US / IRS	UK / HMRC
Identity credential	Six-digit Identity Protection PIN tied to the SSN or ITIN	Government Gateway user ID, or GOV.UK One Login, tied to the UTR
Renewal cycle	New number generated every calendar year	Credentials persist; no annual reissue
Primary delivery method	Online account, or CP01A notice by post	Online account, with activation codes by post
Overseas weak point	Identity proofing and postal delivery assume a US address and US documents	Verification historically leans on UK passport, UK credit footprint and UK address history
Effect on filing if unavailable	Paper return delayed in manual validation; e-filed return rejected	Non-resident pages (SA109) cannot be filed through HMRC's own online service; commercial software or an agent is required
Workaround for the truly locked out	Paper file without the PIN; IRS confirms filing manually	Paper Self Assessment return, or filing through an authorised agent
Who bears the delay	The taxpayer — refunds and credits held	The taxpayer — late filing penalties accrue regardless of access problems

The asymmetry matters. HMRC will penalise a late Self Assessment return whether or not you could log in; the IRS will not reject a paper streamlined package solely for a missing IP PIN. That difference should drive sequencing. Where access problems exist on both sides, resolve the UK gateway first because the clock there is punitive, and manage the US side through paper while the IP PIN is retrieved. Our UK tax services and US tax services teams run these two tracks in parallel for exactly this reason.

How should a catch-up be sequenced around the IP PIN calendar?

Because the number changes every January, the calendar boundary is a genuine trap for a multi-month engagement.

Open the identity workstream on day one

Before any return preparation begins, we establish three things: whether an IP PIN is already assigned to the taxpayer and to any spouse or dependent on the return; what address of record the IRS holds; and whether the online account can be verified. Discovering an assigned IP PIN in November, when the reissue channel is entering its maintenance window, is an avoidable and expensive failure.

Fix the address of record before requesting anything by post

Every postal route — CP01A reissue, telephone verification, Form 15227 — delivers to the address the IRS holds, not the address on the return you are about to file. If that address is a former US residence, correct it first or the PIN will be posted to a stranger.

Watch the December–January boundary

A PIN retrieved in December is valid for that calendar year only. If the package is posted in January, the prior year's number is wrong and the current year's may not yet be retrievable. Either post before year end with the number in hand, or plan to retrieve afresh in the new year and post after.

Carry the number across the whole package

Enter the IP PIN in the signature area of each Form 1040 in the streamlined stack, for every taxpayer on the return who has one. A joint return needs both numbers. This is the most frequent preparation error we correct on files inherited from generalist preparers.

Common mistakes we see on inherited files

• Entering the IP PIN on the most recent year only, on the assumption that historic years use historic numbers. All returns filed during the calendar year use that year's number.
• Confusing the IP PIN with the five-digit self-select e-file PIN or with the prior-year AGI used for e-file authentication. They are different controls with different failure modes.
• Submitting Form 15227 when a PIN is already assigned, which does not produce a number and consumes weeks.
• Assuming a UK address disqualifies the taxpayer from the programme. It does not; verification is harder, not unavailable.
• Attempting to opt out. Opting out is available to taxpayers who enrolled voluntarily and have not experienced tax-related identity theft — not to those the IRS enrolled after a confirmed identity theft case.
• Leaving the spouse's or dependent's IP PIN off a joint or family return.
• Treating the FBAR filings as affected. They are not — the six years of FBARs go through the FinCEN e-filing system on a separate credential entirely.

Where this sits in a wider cross-border compliance picture

The IP PIN is an administrative obstruction, not a tax exposure. But it consumes the calendar time that a streamlined case needs for the parts that genuinely carry risk: characterising a UK pension correctly, reconstructing an ISA's PFIC position, testing the 330-day non-residency requirement, and drafting a Form 14653 narrative that is candid and defensible. For clients with trusts, closely held companies or significant offshore holdings, that substantive work is where the value sits — and it is why our private client work and our US-UK accountancy team front-load the identity issue deliberately.

Authoritative primary sources are worth reading directly rather than through secondary summaries. The IRS pages on obtaining an Identity Protection PIN and retrieving a lost IP PIN set out the routes and their limits; the IRS guidance for US taxpayers residing outside the United States sets out the Streamlined Foreign Offshore requirements including the paper-filing rule; and HMRC's page on signing in to HMRC online services covers the UK-side credential position. Further reading across our library is collected in our cross-border guides.

Speak to us before the identity problem becomes a deadline problem

If you have discovered an IP PIN you did not know you had, received a CP01A notice at an address you no longer own, or been locked out of an IRS online account from a UK address, the sequence matters more than the paperwork. Resolve identity first, then file — and file the whole package correctly the first time. To discuss a confidential, no-obligation assessment of your position, contact our cross-border team. We will tell you plainly what your catch-up requires, what the identity workstream will take, and what it will cost, before you commit to anything.