Protect your clients, customers and employees from data security breaches
Tax professionals, business owners and employers are frequent targets of scammers and identity thieves who want to steal information to file fraudulent returns and steal refunds. If you believe your data has been compromised, notify us immediately.
Additionally, review our tips and best practices to help protect your clients’ and customers’ data—and your business.
Follow best practices
Protect your computer. When accessing your financial accounts online, look for https (with an s after the http) in the website address to verify it’s a secure address.
Use secure wireless networks. Always encrypt your wireless network with a strong password. Never access your personal accounts on a public Wi-Fi network.
Review emails carefully. Cybercriminals may pose as company executives to email payroll and HR professionals to request lists of employees and their personal information. These emails may appear legitimate because they contain, for example, the name of the company’s actual chief executive officer. To learn how to recognize a fraudulent email, see Report a tax scam: Phishing scams.
Create your online accounts using Secure Access to help prevent account takeovers. Learn how to register for Secure Access.
Use strong passwords. When creating a new password use long phrases or a combination of uppercase and lowercase letters, numbers and symbols. Don’t use your name, birthdate, or common words. Use a different password for each of your accounts.
Use multifactor authentication. A secure system should use multiple levels of authentication. Typical methods of authentication for logging in to an account include entering a password, then entering a unique code delivered to your mobile phone.
Review online account activity regularly. This can help you quickly detect any abnormalities.
Check daily e-file acknowledgements. If there are more acknowledgements than returns you filed, dig deeper.
Track weekly Electronic Filing Identification Number (EFIN) usage. The IRS posts the number of returns filed with your EFIN weekly.
- Log in to your IRS e-Services account.
- Access your EFIN application and select EFIN Status.
- If your return totals exceed your number of returns filed, contact the IRS e-help Desk.
- Update your EFIN application with all phone, address, or personnel changes.
Track weekly Preparer Tax Identification Number (PTIN) usage. If you are an attorney, CPA, enrolled agent, or Annual Filing Season Program participant and file 50 or more returns, you can check your PTIN account for a weekly report.
- Log in to your PTIN account.
- Select View Returns Filed Per PTIN.
- Complete federal Form 14157 to report excessive use or misuse of your PTIN.
Keep your authorizations up to date. If you have a Centralized Authorization File (CAF) Number, remove authorizations for taxpayers who are no longer your clients. For more information, see IRS Publication 947.
Never share sensitive data over email. Most email services use some form of encryption. However, you’re still trusting a third party with your sensitive data. Encrypted file-sharing systems create secure connections directly between your computer and the server used to store the files.
Report a possible breach
You can contact us:
- by phone: 518-485-6549
- by fax (preferred): 518-435-2990 (ATTN: IDENTITY VERIFICATION UNIT)
- by mail:
IDENTITY VERIFICATION UNIT
PO BOX 4128
BINGHAMTON NY 13902-4128
If you are not using U.S. Mail, see Publication 55, Designated Private Delivery Services.