The IRS has urged taxpayers and tax professionals to adopt stronger security measures against tax-related identity theft, highlighting multifactor authentication, Identity Protection PINs, and secure IRS online accounts as key safeguards.
The US Internal Revenue Service (IRS) has issued a release on 4 September 2026 urging tax professionals and taxpayers to strengthen safeguards against tax-related identity theft.
The release clarified that tax professionals and taxpayers should strengthen defences against tax-related identity theft, according to joint guidance from the Internal Revenue Service and the Security Summit. The advisory marks the fourth segment of the “Protect Your Clients; Protect Yourself” summer series.
Multifactor authentication requirements and benefits
The Federal Trade Commission’s Safeguards Rule mandates that tax preparation firms employ multifactor authentication (MFA) to control access to customer information, unless a Qualified Individual documents in writing an equivalent secure alternative. MFA operates by requiring at least two independent verification factors to confirm a user’s identity, such as a password, a device-based security code, or biometric data.
The approach defends against phishing, social engineering, and technology attacks that capitalise on weak or compromised passwords. Tax professionals should activate MFA across tax software, cloud storage, email, and other systems housing client data. The requirement applies regardless of firm size.
Identity Protection PINs as a fraud barrier
An IRS Identity Protection PIN (IP PIN) is a six-digit number—known solely to the taxpayer and the IRS—designed to verify taxpayer identity during federal return filing. The PIN remains valid for one calendar year and renews annually. Confirmed victims of tax-related identity theft automatically receive a new IP PIN each year.
Taxpayers must obtain their own IP PIN directly through IRS.gov; tax professionals cannot request one on a client’s behalf. The IRS will not initiate contact via phone, email, or text to request an IP PIN.
Creating secure IRS accounts
The IRS encourages taxpayers to establish an IRS Online Account to review tax information securely and block unauthorised account creation. Tax professionals can use the Tax Pro Account feature to submit power of attorney requests, manage tax information authorisations, and access eligible client data. This prevents fraudsters from establishing accounts under taxpayer or practitioner names.
IRS Chief Executive Officer Frank J. Bisignano stated that these tools work together to add layers of security protecting sensitive data across practitioner offices, taxpayer records, and IRS systems.
