If your W-2 has been stolen, move on three fronts at once: get a replacement copy so you can still file, alert the IRS and FTC so a thief can’t file a return in your name, and lock down your credit before the Social Security number on that form is used to open new accounts. Knowing what to do if your W-2 is stolen comes down to sequencing those steps quickly, because the biggest single risk is tax-related identity theft — someone using your wage data and SSN to claim your refund before you file.
Get a Replacement W-2
Call your employer’s payroll or HR office first. Employers must furnish W-2s by January 31, and the company already has the data on file, so a reissue usually takes a few business days by secure email or mail.
If your employer won’t cooperate or has gone out of business, contact the IRS at 800-829-1040 after the end of February. Have ready:
- Your name, address, phone number, and Social Security or ITIN
- The dates you worked for the employer during the tax year
- The employer’s name, address, and phone number
The IRS will contact the employer on your behalf and send you Form 4852, a substitute you can use if the W-2 still doesn’t arrive in time to file.1Internal Revenue Service. If You Don’t Get a W-2 or Your W-2 Is Wrong
Pull Your Wage Data From the IRS Directly
Employers submit W-2 copies to the government, so the IRS already has your figures. Request a Wage and Income Transcript to see the exact wages and withholding your employer reported. The data generally becomes available in the first week of February.2Internal Revenue Service. Transcript Types for Individuals and Ways to Order Them
The fastest route is your online IRS account, where you can view, print, or download the transcript immediately. If you can’t get in online, call the automated transcript line at 800-908-9946 for a mailed copy, which arrives in five to ten calendar days.3Internal Revenue Service. Get Your Tax Records and Transcripts Transcript figures are far more reliable than estimating from pay stubs.
Report the Identity Theft
The stolen form gives someone enough to file a fraudulent return under your Social Security number. File Form 14039 (Identity Theft Affidavit) with the IRS to flag your account. You can submit it online or send the paper version by mail or fax.4Internal Revenue Service. When to File an Identity Theft Affidavit File only if you believe you are actually a victim — for instance, your e-filed return was rejected because someone already filed using your SSN, or the IRS sent you a notice about a return you didn’t file.
Once the IRS confirms you’re a victim, it places a protective marker on your account and enrolls you in the Identity Protection PIN program. From then on, you get a new six-digit IP PIN each year that must appear on your return; without it, no one can file under your SSN.5Internal Revenue Service. IRS Identity Theft Victim Assistance: How It Works The PIN regenerates annually, so you don’t need to keep last year’s.6Internal Revenue Service. Frequently Asked Questions About the Identity Protection Personal Identification Number (IP PIN)
At the same time, go to IdentityTheft.gov, the FTC’s recovery portal. It asks questions about what happened and produces a personalized recovery plan plus an FTC Identity Theft Report.7Federal Trade Commission. IdentityTheft.gov That report is what you’ll show creditors and financial institutions when you dispute fraudulent accounts or transactions. Filing a police report on top of the FTC report creates a more complete Identity Theft Report, which carries stronger legal weight with creditors.
Lock Down Your Credit
A W-2 carries enough personal information to open credit accounts in your name. Two tools block that, and both are free under federal law: fraud alerts and credit freezes.
A fraud alert tells lenders to verify your identity before approving new credit. You only have to contact one of the three major bureaus — Equifax, Experian, or TransUnion — and that bureau must notify the other two. An initial alert lasts one year and is renewable. With an FTC Identity Theft Report or a police report, you can place an extended alert that lasts seven years.8Federal Trade Commission. Credit Freezes and Fraud Alerts
A credit freeze is stronger. It blocks access to your credit report entirely until you lift it, which stops most new-account approvals cold. You can temporarily thaw it when you actually need credit. Unlike a fraud alert, a freeze has to be placed at each bureau separately.8Federal Trade Commission. Credit Freezes and Fraud Alerts If you’re not applying for credit soon, a freeze is the best protection.
Check Your Social Security Earnings Record
Someone using your SSN to work will cause fraudulent wages to post to your earnings record, which can affect your future benefits. The Social Security Administration recommends reviewing the earnings on your Social Security Statement and reporting anything that doesn’t match your actual work history.9Social Security Administration. What Should I Do if I Think Someone Is Using My Social Security Number Log in at ssa.gov to see your record.
File On Time Even Without the W-2
If the deadline is closing in and you still don’t have your W-2 or a transcript, file using Form 4852 as a substitute. The form lets you report income and withholding from the best information you have.10Internal Revenue Service. About Form 4852, Substitute for Form W-2, Wage and Tax Statement In order of reliability, your sources are:
- A Wage and Income Transcript, which shows the exact figures your employer reported
- Your final year-end pay stub, which usually shows year-to-date gross wages, federal income tax withheld, and Social Security and Medicare contributions
- Bank deposit records, useful for reconstructing net pay if pay stubs aren’t available
Accuracy matters. The IRS will compare your figures to what the employer reported, and significant gaps can trigger follow-up. A return filed with Form 4852 cannot be e-filed. Print and mail the complete return — Form 1040 with Form 4852 attached to the back — to the IRS processing center for your state.11Internal Revenue Service. Form 4852 Substitute for Form W-2, Wage and Tax Statement Paper returns typically take six to eight weeks to process, so any refund will be slower than an e-file.12Internal Revenue Service. Refunds – How Long Should They Take Sign and date both forms, keep copies, and use tracked mail.
Ask for an Extension If You Need It
You can get an automatic six-month extension by filing Form 4868 or using IRS Free File at irs.gov, which pushes the filing deadline to October 15 without a late-filing penalty.13Internal Revenue Service. IRS: Need More Time to File, Request an Extension The extension gives you more time to file, not more time to pay. If you owe, estimate the amount from your last pay stub, bank records, or a prior return, and pay by April 15 to avoid interest and late-payment penalties. If identity theft caused the delay, you may qualify for penalty relief under the IRS’s reasonable cause provisions.14Internal Revenue Service. Penalty Relief
Amend Later If the Real W-2 Shows Different Numbers
When the actual W-2 arrives, compare it to what you filed. If the figures don’t match, file Form 1040-X to correct them. Attach a copy of the W-2 to the front of the 1040-X and note in Part II that you received the official W-2 and it differs from your Form 4852 estimates.15Internal Revenue Service. Instructions for Form 1040-X If you overpaid, the amendment gets you the additional refund; if you underpaid, filing quickly limits the interest that accrues.16Internal Revenue Service. File an Amended Return
Notify Your State Tax Agency
Federal reporting doesn’t protect your state account. Most states have their own identity theft reporting process, usually a state-level affidavit similar to Form 14039. Check your state revenue department’s website for the specific form. A thief who filed a fraudulent federal return can also file a fraudulent state one, which will cause your legitimate state return to be rejected — you’ll want the state fraud report already on file when that happens. File the state notification around the same time you send Form 14039 to the IRS.