Roughly 1 in 5 identity theft victims who file federal taxes will have their return flagged by the IRS at least once in the five years following the breach, according to estimates from the Taxpayer Advocate Service. For Sheila Norwood, that statistic stopped being abstract the moment she checked the IRS Where’s My Refund tool on a Tuesday morning in February 2026 and saw four words she had come to dread: Your return is being reviewed.
I first heard Sheila’s name on a local Denver AM radio segment in early March 2026 — a call-in show focused on tax season frustrations. She spoke calmly, almost clinically, about her situation, using phrases like “verification timeline” and “prior breach documentation” that made her sound more like a tax attorney than a hotel front desk manager. After the segment ended, I reached out through the station and she agreed to speak with me the following week at a coffee shop near her apartment in the Globeville neighborhood.
When I sat down with Sheila Norwood, 45, I expected someone worn down and angry. What I found instead was a woman who had spent years developing a careful, almost methodical relationship with her own financial vulnerability — because she had no other choice.
A Breach That Kept Costing Her
The identity theft happened in October 2022, Sheila told me. A data breach at a third-party vendor connected to a credit card she had used for online textbook purchases — she was finishing a graduate degree in hospitality management at the time — exposed her Social Security number along with roughly 14,000 other customers’ data. She didn’t find out until February 2023, when she went to file her taxes and discovered someone had already filed a return in her name claiming a $4,100 refund.
“That was the worst part,” she told me, wrapping both hands around her coffee cup. “I had done everything right. I finished my degree, I was paying my loans, I was working full time. And then I find out some stranger already filed my taxes and took money that wasn’t even theirs to take.”
Sheila filed an IRS Identity Theft Affidavit — Form 14039 — in March 2023. The IRS resolved the fraudulent return that year, but the process took until August 2023, nearly six months after she first reported it. She finally received her legitimate 2022 refund of $1,640 that September, more than seven months after the original filing deadline.
The Weight Behind the Wait
What makes Sheila’s story more than a bureaucratic inconvenience is the financial pressure running underneath it. She earns approximately $38,400 a year managing the front desk at a mid-range hotel near Denver International Airport — enough to cover her own rent, utilities, and the $287 monthly payment on her graduate school loans, but not much more.
She also sends money home. Her mother and younger sister live in Albuquerque, New Mexico, and Sheila has been quietly covering her mother’s prescription costs — roughly $180 a month — since her mother lost her part-time retail job in 2024. “I don’t talk about that much,” she said, looking out the window. “It’s not a burden. It’s family. But it means there’s no cushion.”
She filed her 2025 return on January 27, 2026 — deliberately early, she explained, to give the IRS maximum time to work through any verification issues before her April bills came due. She was expecting the $2,847 refund, which reflected overwithholding from her W-2 plus a small education credit carryover. According to the IRS refund tracker, most electronically filed returns with direct deposit are processed within 21 days. Sheila’s was not.
Navigating the IRS Identity Protection PIN Program
After the 2022 fraud, the IRS issued Sheila an Identity Protection PIN — a six-digit code that verified filers must include on their return each year to confirm their identity. The IP PIN changes annually and is delivered by mail, typically in January. Sheila had used hers correctly on her 2026 filing.
Despite submitting the correct PIN, her return was still routed to manual review. As Sheila explained it, the IRS sent her a Letter 5071C in mid-February 2026 — a request to verify her identity either through the IRS’s online ID verification tool or by calling a dedicated hotline. She had been through this before. In 2024, the same letter arrived. In 2025, a slightly different version — Letter 4883C — required a phone call instead.
When She Finally Called the Taxpayer Advocate
By the time I met Sheila in early March, she had been waiting 45 days since filing and had completed the online verification process. The IRS tracker had updated briefly to show “refund approved” in late February — then reverted to “processing” two days later, a behavior she described with the flat exhaustion of someone who had stopped being surprised by it.
“I screenshot everything now,” she told me. “Because I’ve learned that the tool doesn’t always update in order. It’s not linear. You think you’re moving forward and then you’re back where you started. I’ve got a folder on my phone with every screenshot since January.”
On April 2, 2026 — 65 days after she filed — Sheila called the Taxpayer Advocate Service at 1-877-777-4778 and opened a case. The TAS intake representative told her the refund had cleared the identity verification queue but was now in a secondary review related to the Earned Income threshold on her return. The TAS estimated a deposit date of approximately April 30, 2026 — 94 days after the original filing date.
She had already covered March’s bills by borrowing $400 from a coworker — something she described as deeply uncomfortable given her instinct to keep her financial struggles private. The refund, when it eventually arrives, will go first toward repaying that loan and then toward a $612 past-due balance on her electricity account that she had been managing with minimum payments since January.
What Stays After the Money Arrives
When I asked Sheila whether she felt the system had failed her, she paused longer than I expected before answering. “Failed” wasn’t quite the word she reached for.
“I think the system wasn’t built for someone like me,” she said carefully. “It was built assuming that a delay is an inconvenience. For a lot of people, that’s true. For me, a 94-day delay is not an inconvenience — it’s a cascade. It affects my mom’s medication budget, it affects my coworker who’s now short $400, it affects my credit score because I had to let one bill go late. One return. One year. And it touches all of that.”
She is already thinking about the 2026 filing season. She plans to request an updated IP PIN in December 2026 the moment the IRS portal opens, and she has started setting aside $50 a month in a separate savings account specifically to float expenses in case the refund is delayed again. It is, she acknowledged, a small and imperfect solution to a structural problem.
There is no clean resolution here, and I want to be honest about that. As of the date of this publication, Sheila Norwood has not yet received her $2,847. The projected April 30 date from the Taxpayer Advocate may hold — or it may not. She has been through enough of these cycles to know that projected dates are not promises.
What I carried away from our conversation was not a story about the IRS getting it wrong, exactly, but about the compounding cost of financial fragility — how a crime committed against Sheila four years ago continues to extract a tax, in time and stress and borrowed money, every single February. The original thief is long gone. The paperwork remains.
Related: He Went Three Years Without Health Insurance and Thought Subsidies Were ‘Not for People Like Him’ — Until Open Enrollment Last Fall
Related: His Income Swings $26,000 a Year — How One San Antonio Foreman Got Hit With a $4,100 Tax Bill He Never Saw Coming
Leave a Reply