Security Summit: Identity Protection PINs are an important tool against tax-related identity theft

WASHINGTON — In the second installment in a special summer series, the Security Summit partners today reminded tax professionals and taxpayers about the IRS Identity Protection PIN Opt-In Program to help protect people against tax-related identity theft.

Identity Protection PINs, also referred to as IP PINs, serve as a critical defense against identity thieves. The IRS, state tax agencies and the nation's tax industry – working together as the Security Summit – need assistance from tax professionals to let their clients know that IP PINs are now available to anyone who can verify their identity.

“These special numbers provide an extra layer of security for taxpayers filing their tax returns,” said IRS Commissioner Danny Werfel. “The numbers protect the taxpayer’s sensitive tax return information and complicate efforts by identity thieves to file fraudulent tax returns. The IRS and the Security Summit partners urge tax professionals to encourage their clients to protect themselves through the IP PIN program.

This is the second news release in a five-part "Protect Your Clients; Protect Yourself" summer series from the Security Summit, a public-private partnership that works to protect the tax system against tax-related identity theft and fraud.

The news release series and the IRS Nationwide Tax Forums, which visit Atlanta this week, provide important information to help protect sensitive taxpayer data that tax professionals hold while also protecting their business from identity thieves. This marks the eighth year that the Security Summit partners have worked to raise awareness about these issues through the "Protect Your Clients; Protect Yourself" campaign.

More than 8 million taxpayers have taken the steps to obtain an IP PIN. To obtain an IP PIN, taxpayers can visit the Get an IP PIN, the IRS online tool.

The Electronic Tax Administration Advisory Committee, or ETAAC, last year highlighted the importance of the IP PIN to taxpayers and tax professionals.

"The IP PIN is the number one security tool currently available to taxpayers from the IRS," the independent IRS advisory group said in its annual report to Congress. "This tool is the key to making it more difficult for criminals to file false tax returns in the name of the taxpayer. In our view, the benefits of increased IP PIN use are many."

Given the strength of IP PINs, obtaining this number can be a tempting target for identity thieves. Summit partners urged taxpayers and tax professionals to be careful and protect the IP PIN from identity thieves, and noted these key tips:

• Taxpayers should share their IP PIN only with their trusted tax prep provider.

• Tax professionals should never store clients' IP PINs on computer systems. This reduces taxpayer risk if a tax pro’s system is compromised by an identity thief or cyberattack.

• The IRS will never call, email or text either taxpayers or tax professionals to request the IP PIN. This is a sign of a scam.

Tax professionals who experience a data theft can assist clients by urging them to quickly obtain an IP PIN. Even if a thief already has filed a fraudulent return, an IP PIN would still offer protections for later years and prevent taxpayers from being repeat victims of tax-related identity theft.

Here are a few other things taxpayers and tax professionals should know about the IP PIN:

• It's a six-digit number known only to the taxpayer and the IRS.

• The opt-in program is voluntary.

• The IP PIN should be entered on the electronic tax return when prompted by the software product or on a paper return next to the signature line.

• The IP PIN is valid for one calendar year; a new IP PIN is generated each year.

• Only taxpayers who can verify their identities may obtain an IP PIN.

• IP PIN users should never share their number with anyone but the IRS and their trusted tax preparation provider. The IRS will never call, email or text a request for the IP PIN.

• Tax professionals cannot obtain an IP PIN on behalf of clients. Taxpayers must obtain their own IP PIN.

To obtain an IP PIN, the best option is the Get an IP PIN, the IRS online tool. Taxpayers must validate their identities through ID.me to access the tool and their IP PIN. Before attempting this thorough process, see How to Register for Certain Online Self-Help Tools.

If taxpayers are unable to validate their identity online and if their income is below $73,000 for individuals or below $146,000 for married couples, they may file Form 15227, Application for an Identity Protection Personal Identification Number. The IRS will call the telephone number provided on Form 15227 to validate their identity. Once verified, the taxpayer will receive an IP PIN via U.S. Postal Service within four to six weeks.

Taxpayers who cannot validate their identities online or on the phone with an IRS employee after submitting a Form 15227, or who are ineligible to file a Form 15227, may call the IRS to make an appointment at a Taxpayer Assistance Center. They’ll need to bring one picture identification document and another identification document to prove their identity. Once verified, the taxpayer will receive an IP PIN via U.S. Postal Service within three weeks.

The IP PIN process for confirmed victims of identity theft remains unchanged. These victims will automatically receive an IP PIN each year.

Additional resourcesTax professionals also can get help with security recommendations by reviewing the recently revised IRS Publication 4557, Safeguarding Taxpayer Data, and Small Business Information Security: The Fundamentals, by the National Institute of Standards and Technology.

The IRS’ Identity Theft Central pages for tax pros, individuals and businesses have important details as well.

Publication 5293, Data Security Resource Guide for Tax Professionals, provides a compilation of data theft information available on IRS.gov. Also, tax professionals should stay connected to the IRS through subscriptions to e-News for Tax Professionals and its social media sites. For more information, go to IRS.gov.