IRS Forms

Form 4506-F – Request a Masked Copy of a Fraudulent 1040

Practitioner guide to Form 4506-F for 2025 requests: who qualifies, what to include, where to mail or fax, redaction rules, and submission timelines.

20 min read Updated Jun 14, 2026
Editorial Standards
How we research, review, and update this guide

Every Accountably guide is researched against primary IRS sources, reviewed by a U.S. CPA, and refreshed as guidance evolves. Read our Editorial Guidelines to see how we source, fact-check, and update our content.

Tell us who you are – we will jump to what matters most:

A client's e-filed 1040 gets rejected because someone already filed using their SSN, and the only way to see what the imposter claimed is Form 4506-F. It returns a masked transcript of the fraudulent 1040-series return filed under the victim's name and SSN, enough to confirm fabricated dependents, unfamiliar bank details, and the rest of the damage so the real return and the identity theft affidavit can be cleaned up.

Eligibility is narrow: the victim, a parent or legal guardian of a minor, or an authorized representative, with Line 5 limited to four checkbox categories. You provide your exact name, full SSN or ITIN, an address that matches IRS records, the specific years, and a wet signature. The request covers the current tax year plus the previous six. Submit one way only, by mail to Fresno, by fax to 855-807-5720, or by private delivery to the Fresno street address. Processing targets run about 120 days, but the IRS has publicly cited recent averages closer to 582 days, so set expectations early.

Key Takeaways

  • Form 4506-F is for identity theft victims to request a masked copy of a fraudulent Form 1040 series return, not business returns or dependent-only listings.
  • Eligible requesters include you as the victim, a parent or legal guardian for a minor, or an authorized representative with proper authority – Line 5 limits this to four checkbox categories (Self, Parent or guardian of a minor, Form 2848 representative, or guardian/executor named on court documents), so siblings, adult children, friends, and unrelated agents cannot file on the victim’s behalf without one of those credentials.
  • You must provide your exact name, full SSN or ITIN, a mailing address that matches IRS records, the specific tax year or years, and a wet signature.
  • Submit by mail to Fresno, by fax at 855‑807‑5720, or by Private Delivery Service to the Fresno street address, choose only one method.
  • Expect heavy redactions. Processing targets are about 120 days, however the IRS has publicly stated recent averages around 582 days because of backlog. Plan accordingly.

What Is Form 4506-F

Form 4506-F is the IRS process for identity theft victims to obtain a masked copy of a fraudulent Form 1040, 1040‑SR, 1040‑NR, or 1040‑NR‑EZ that was filed and accepted using their name and SSN or ITIN. The IRS provides a redacted transcript or copy that confirms key details while protecting information that could further expose you or other people on the return.

You can only receive a copy if your name and SSN/ITIN appear as the primary or secondary taxpayer on the fraudulent return. If you were listed only as a dependent, the IRS cannot disclose that return to you.

The request covers the current tax year and up to six prior years. Everything about the request must match IRS records, especially your name, SSN or ITIN, and address. If your address changed, update it first with Form 8822 so the address on your request matches the IRS master file.

Who Can Request a Masked Copy

  • You, the victim whose SSN or ITIN appears as the primary or secondary taxpayer on the fraudulent filing.
  • A parent or legal guardian of a minor victim.
  • An authorized representative with proof of authority, for example, Form 2848, Form 8821, a court order, or a valid CAF number on file that covers the requested tax years.

Important eligibility boundaries

  • Requests for individuals listed only as dependents are not allowed under federal privacy rules.
  • Requests apply to individual returns only, not business returns. The IRS cautions that only redacted copies of returns that were actually accepted and posted can be disclosed.

What You Must Include

Every successful Form 4506-F request contains these items:

  • Your full legal name and the full SSN or ITIN that appeared on the fraudulent return.
  • Your mailing address that matches the IRS address of record.
  • The tax year or years you want, limited to the current year plus up to six prior years.
  • Your original wet signature and date. The IRS will not accept electronic signatures for this form.
  • If you are a third party, proof of authority or your CAF number that already covers the requested years.

Tip, if your address changed, file Form 8822 first, then submit Form 4506-F once the IRS shows the new address on file. This prevents a mismatch that could cause your request to be returned.

Step 1, Confirm Eligibility And Years

Before you fill anything out, confirm that the return you are seeking was an individual 1040-series return and that it was filed and accepted by the IRS. Requests are limited to the current year and six prior tax years. If the fraudulent return never posted, the IRS does not provide a copy.

Why the IRS sends a masked copy

The IRS will send a copy with strict redactions, for example, truncated names, partial address, and only the last four digits of any SSN, ITIN, or account number. This lets you validate what happened without exposing additional sensitive data.

How To Fill Form 4506-F Correctly

Use clear, legible printing. Make sure every field matches IRS records.

Name and SSN or ITIN

Enter your legal name exactly as it appeared on the fraudulent filing. Provide the complete SSN or ITIN that was used on that return so the IRS can find the record. Small discrepancies, for example, a missing middle initial, can slow things down.

Address, Tax Years, Signature

  • Write the mailing address that the IRS currently has on file for you. If it has changed, submit Form 8822 first.
  • List each eligible tax year you want, for example, 2025, 2024, 2023, up to six prior years.
  • Sign and date by hand. If a representative signs, include the authorization documents or the CAF number that already covers those years.
Item Requirement Why it matters
Mailing address Must match IRS address of record Prevents returns and rework
Tax years Current year plus up to six prior Requests outside this window are rejected
Signature Original wet signature only E-signatures are not accepted
Third-party authority Form 2848, Form 8821, court order, or CAF on file Proves you are allowed to receive the copy

How To Submit, Mail, Fax, Or Private Delivery

You must choose one method. Do not mail and fax the same request.

Submit by Mail

Mail your signed Form 4506-F to: Department of the Treasury, Internal Revenue Service, Fresno, CA 93725. This is the IRS address of record for identity theft victim fraudulent return requests as of December 30, 2025.

Include any required proof of authority if you are not the victim, and make sure the address on the form matches the IRS master file. Keep a copy of everything for your records.

Submit by Fax

If you prefer fax, send Form 4506-F to 855‑807‑5720. Add a cover page marked Confidential with your contact details and state “Form 4506-F” in the subject line. Verify you signed and dated the form and listed the exact year or years you need.

Using a Private Delivery Service

If you use a private carrier, ship to: Internal Revenue Service, 3211 S Northpointe Drive, Fresno, CA 93725, and write “Identity Theft, Request for Fraudulent Return” on the label (FedEx, UPS, and DHL cannot deliver to the USPS Fresno address listed above, so this street address is required for any PDS shipment). Private delivery only changes the carrier, not the contents the IRS requires.

Quick Comparison, Submission Methods

Method Where to send Pros Watch outs
Mail IRS, Fresno, CA 93725 Original document, easy recordkeeping Slower transit in peak season
Fax 855‑807‑5720 Fast transmission, clear time stamp Ensure pages are legible, signed, complete
Private Delivery Service 3211 S Northpointe Dr, Fresno, CA 93725 Reliable tracking, faster than regular mail Still must include wet signature and exact address match

Only send your request once. Duplicates can cause delays or confusion, especially if different addresses or years appear on each copy.

What The IRS Sends Back

Expect a masked transcript or copy of the fraudulent return that hides sensitive items while leaving enough detail for you to confirm what happened. Examples include truncated names, partial address, and only the last four digits of any SSN, ITIN, or bank account. Signatures are obscured.

Practical uses for the masked copy

  • Share with your bank or card issuer to support fraud claims.
  • Compare reported income or withholdings to spot secondary identity theft.
  • Document the incident for law enforcement and your employer’s HR or payroll team.

Timelines, Limits, And What To Expect

The IRS says identity theft cases are generally resolved in about 120 days, however the agency’s published guidance also explains that, due to large backlogs, the average has been around 582 days. Plan your next steps with that reality in mind, and gather your supporting documents now so you can respond quickly to any IRS letter.

If your case passes the 120‑day mark without movement, keep your documentation organized, respond to IRS letters by the stated due date, and consider contacting the Taxpayer Advocate Service if you meet hardship criteria.

Eligibility window

  • Requests cover the current year plus six prior years only (a seven-year window specific to Form 4506-F – do not confuse it with the standard three- or six-year statute of limitations on return assessments).
  • The return must be an individual 1040‑series return and must have been accepted by the IRS.

Redaction Rules, What Will Be Masked

When the IRS sends your copy, it will mask or truncate items to protect everyone involved.

  • Names are truncated, for example, only the first four letters of first and last names may appear.
  • Addresses show only initial characters.
  • SSNs, ITINs, and EINs show only the last four digits.
  • Signatures, IP addresses, software IDs, and most contact details are removed.
  • Bank and routing numbers are truncated, usually last four digits only.

This level of redaction is normal, and it is often enough to determine the filing method, refund route, and whether your information appeared elsewhere on the return.

Common Mistakes That Trigger Rejections

Form 4506-F looks deceptively simple, yet most rejections we see come back to the same small handful of process slips. Per the Form 4506-F instructions, the IRS does not pend incomplete requests; it returns them, which restarts your timeline from zero.

1. Treating Line 1 as the requestor's SSN. Line 1 captures the SSN that appeared on the fraudulent return, not the requestor's SSN when the requestor is a different person. The separate identifier belongs on Line 6, per the Form 4506-F instructions, and mixing the two is one of the most common reasons a package gets returned. Fix: Build a two-column intake worksheet. Column A is the fraudulent-return identity (Lines 1 through 4), Column B is the requestor (Lines 5 and 6). Transcribe straight from the worksheet onto the form.
2. Sending the form by both mail and fax to "speed it up." Submitting Form 4506-F by mail AND fax opens duplicate cases at the Fresno service center, which slows processing rather than accelerating it. The instructions are explicit: pick one channel only. Fix: Log the chosen channel in the case file (USPS receipt OR fax confirmation), then resist the urge to follow up with a second copy by another method. If you must escalate, route through the IRS Identity Theft assistance line instead.
3. Using the USPS Fresno address on a FedEx, UPS, or DHL package. Private Delivery Service carriers cannot deliver to the IRS's USPS-only address. The PDS ship-to is 3211 S Northpointe Dr, Fresno CA 93725, and the package must be labeled "Identity Theft - Request for Fraudulent Return." Use the wrong address and the carrier returns the package to sender. Fix: Pre-print two envelope templates in your intake kit, one USPS and one PDS, with the channel-specific address on each. The runner grabs the right one once the submission method is decided.
4. Skipping Form 8822 when the client moved. If the address on Lines 3 and 3a differs from the last-return address on Line 4 and the IRS records have not been updated, the IRS may send the masked transcript to the prior address. Filing Form 8822 first is the only clean way around that, per the Form 4506-F instructions. Fix: Run an address-of-record check the day the client engages. If the IRS shows the old address, queue Form 8822 immediately, wait for systems to reflect the change, then send Form 4506-F.
5. Listing a CAF number without year-specific authority on file. Line 6a accepts a representative's CAF number, but the IRS will only honor it if a Form 2848 or 8821 authorization for that specific tax year is already on file. A CAF number alone is not sufficient. Fix: Before listing the CAF, confirm year-by-year authorization on the CAF system. If coverage is missing for any requested year, attach a fresh Form 2848 or Form 8821 with the package.

Step‑By‑Step Submission Walkthrough

  • Confirm you qualify to receive a copy, that is, your name and SSN or ITIN were used as primary or secondary taxpayer on an accepted 1040‑series return.
  • If your address changed, file Form 8822, then wait for IRS systems to reflect the change.
  • Complete Form 4506‑F with your name, SSN or ITIN, address, tax years, and a clear handwritten signature.
  • If you are a parent, guardian, or authorized rep, attach authority documents or list your CAF number that already covers the years.
  • Submit by mail to Fresno, by fax to 855‑807‑5720, or by Private Delivery Service to Northpointe Drive in Fresno, choose one method. Keep your proof of submission.
  • Track your mail or fax confirmation, then watch for an acknowledgement or the masked copy. Expect timelines that may range from 120 days to longer, based on current IRS backlogs.

Save everything in a single folder, your mailed copy, fax confirmation, carrier tracking, notices received, and any call notes with dates and names. This record is gold if you need to escalate or respond to new letters.

Printable Prep List For Form 4506‑F

Step What to collect Notes
Identity Full legal name, full SSN or ITIN Must match the fraudulent return SSN or ITIN
Address IRS address of record File Form 8822 first if needed
Years Current year plus up to six prior List each year, for example, 2025, 2024, 2023
Signature Original wet signature No electronic signatures
Authority Form 2848, Form 8821, court order, or CAF on file Required for reps, parents, or guardians
Submission Mail to Fresno, fax to 855‑807‑5720, or PDS to Northpointe Drive Choose one method only
Proof Mail receipt, fax confirmation, or tracking Keep in your case file

Addresses and the fax number in this guide are current as of December 30, 2025, and are taken from the IRS’s official instructions page for fraudulent return copies. Always verify before sending.

Closing Thoughts

If you take one step today, make it this, confirm the address on file, list the exact years, and send a clean, signed Form 4506‑F using one method with proof of submission. That simple discipline speeds up everything that follows and gives you the best chance of a faster resolution. If you lead an accounting firm, bake that discipline into your workflow so your team can protect clients while staying focused on higher‑value work.

Reusable Checklists

The lists below mirror the SOPs our team uses when an identity theft 1040 case walks in. Paste them straight into your firm's case-management template; each item becomes a clickable checkbox with localStorage persistence.

Pre-4506-F intake packet

  • Confirm the victim's name and SSN or ITIN appeared as primary or secondary on the fraudulent return, not dependent-only.
  • List every tax year impacted, capped at the current year plus the previous six.
  • Pull the IRS address of record and compare it against the client's current mailing address.
  • If the address has changed, queue Form 8822 before Form 4506-F goes out.
  • Identify the Line 5 requestor relationship: Self, Parent or guardian of a minor, Form 2848 representative, or court-appointed guardian or executor.
  • For representative cases, confirm Form 2848, Form 8821, or court-order documentation is signed and ready to attach.
  • Collect the requestor's daytime telephone number for Step 4.

Form 4506-F line-by-line completion check

  • Line 1: SSN as it appeared on the fraudulent return (not the requestor's SSN).
  • Line 2: Name as it appeared on the fraudulent return (may differ from the victim's current legal name).
  • Lines 3 and 3a: Current mailing address; P.O. Boxes go on Line 3.
  • Line 4: Prior return address; leave blank if it matches Lines 3 and 3a.
  • Line 5: Exactly one relationship box checked.
  • Line 6: Requestor SSN or TIN only when the requestor differs from the taxpayer in Step 1.
  • Line 6a: CAF number only if year-specific authorization is already on file.
  • Line 7: Every requested tax year listed separately.
  • Wet signature and date present; no electronic signatures accepted.

Submission and follow-up

  • Choose ONE channel: USPS, fax to 855-807-5720, or Private Delivery Service.
  • USPS mail goes to Department of the Treasury, IRS, Fresno CA 93725.
  • PDS goes to IRS, 3211 S Northpointe Dr, Fresno CA 93725, with the package labeled "Identity Theft - Request for Fraudulent Return."
  • Fax cover sheet marked "Confidential."
  • Keep proof of submission: USPS tracking, fax confirmation, or carrier receipt.
  • Note timing expectations in the case file (IRS targets 120 days, but backlog often stretches this further).
  • If the request is returned as incomplete, treat it as a restart, not a pend, and rebuild the package from this checklist.

Keep 4506-F Season From Stalling

Identity theft 1040 cases tend to cluster: late January when e-filed returns get rejected, and again in April when paper filers open a CP05 or 4883C letter. Every Form 4506-F request adds 30 to 60 minutes of intake, document collection, and address-of-record verification per client, and the cases stretch across the calendar because the IRS's stated 120-day target rarely holds during peak season. Per the Form 4506-F instructions, missing one detail sends the case back to zero rather than into a pending queue.

The fix is process, not heroics. Where firms lose hours is not in writing the form itself, it is in catching the small eligibility and address checks before the package leaves the office.

  • Standardize a single 4506-F intake worksheet that captures Lines 1 through 7 in the order the form asks for them, plus the Line 5 relationship box and any authority documents required.
  • Run an address-of-record check the same day the client engages, so Form 8822 can be queued in parallel rather than after Form 4506-F is rejected.
  • Decide the submission channel upfront (USPS, fax, or PDS), pre-stage envelopes and cover sheets for each, and never split a single case across two channels.
  • Keep a 4506-F case log with submission date, channel, proof of submission, and a 120-day follow-up trigger so cases do not go dark.
  • For representative cases, verify CAF coverage for the exact requested year before listing it on Line 6a, otherwise attach a fresh Form 2848 or Form 8821.

This is the level of process discipline most firms cannot staff for during peak. Accountably's U.S.-led offshore tax delivery picks up the 4506-F intake, address verification, and submission tracking so senior preparers stay focused on the active 1040 review queue.

FAQs

What is Form 4506‑F used for?

It is used by identity theft victims to request a masked copy of a fraudulent Form 1040‑series return that was filed and accepted using their SSN or ITIN. The IRS limits disclosure to the primary or secondary taxpayer on the return, not dependents.

How long does it take to get results?

The IRS aims to resolve identity theft cases in about 120 days, however they have publicly stated recent averages around 582 days because of backlog. Expect delays and keep your records handy.

Does Form 4506‑F cover business returns?

No. It applies to individual 1040‑series returns only. If you suspect business identity theft, the process is different, and the IRS will not release a fraudulent business return copy to an individual victim.

Can I submit by both mail and fax to be safe?

No. Choose one method. Duplicates can slow processing or cause confusion.

How many years can I request?

The current year and up to six prior years. List each year specifically on your request.

What kind of redactions will I see?

Expect truncated names and addresses, only the last four digits for SSNs, ITINs, EINs, and bank accounts, and signatures will be obscured.

Every Form Represents Work Your Team Has to Deliver

Accountably embeds trained offshore teams into your workflow – so more returns get handled without more burnout.

30-Day Guarantee 70+ Clients Served SOC 2 Aligned