IRS Urges IP PINs and Multifactor Authentication to Block Tax Identity Theft

Full analysis

The IRS and its Security Summit partners are urging taxpayers and tax preparers to use three specific tools to prevent tax-related identity theft: multifactor authentication (MFA, which requires a second verification step beyond a password — such as a code sent to your phone), Identity Protection PINs (IP PINs), and secure IRS online accounts. An IP PIN is a six-digit number known only to you and the IRS; when you file, the IRS uses it to confirm your return is really yours, blocking fraudsters from filing in your name. It must be renewed each year and can be obtained at IRS.gov — your tax preparer cannot get one for you.

The IRS stresses that it will never call, email, or text to ask for your IP PIN — any such contact is a scam. Taxpayers are also encouraged to create an IRS Online Account, which prevents identity thieves from opening an account in your name and lets you monitor your tax records. Under Federal Trade Commission rules, tax preparation firms of any size are already required to use MFA to protect client data.