Security Summit: Protect against tax identity theft with multi-factor IDs, Identity Protection PINs, IRS Online Accounts

Summary:The IRS and Security Summit partners highlight three core defenses against tax-related identity theft: multi-factor authentication (MFA), Identity Protection PINs (IP PINs), and IRS Online/Tax Pro Accounts. The update stresses that MFA is now a federal requirement under the FTC Safeguards Rule for protecting client data and encourages all taxpayers to enroll in IP PINs and set up secure IRS Online Accounts.Key takeaways:MFA is mandatory for tax professionals and strongly recommended wherever client data is accessed or stored. It blocks attacks that exploit weak or stolen passwords.IP PINs are six-digit codes that help prevent fraudulent e-filing using someone’s SSN. The program is voluntary, identity-verified, and refreshed annually.IRS Online Account helps taxpayers securely view account details and prevents creation of fraudulent accounts. Tax Pro Account lets practitioners manage authorizations and request POA/Tax Information Authorization digitally.The Security Summit (IRS, states, industry, and tax pros) continues its annual “Protect Your Clients, Protect Yourself” series and features security sessions at the Nationwide Tax Forum events in Orlando (Aug 26), Baltimore (Sept 9), and San Diego (Sept 16).Action steps:For taxpayers: Create an IRS Online Account; enroll in an IP PIN after verifying your identity; never share your IP PIN except with the IRS and a trusted preparer; beware of calls/emails/texts asking for the IP PIN (the IRS won’t ask).For tax pros: Enable MFA everywhere (tax software, cloud storage, remote access, practice management tools); evaluate MFA methods regularly; never share usernames; use Tax Pro Account to manage client authorizations; ensure firm-wide compliance with the FTC Safeguards Rule.Notable reminders:Tax pros cannot obtain IP PINs for clients—clients must get their own.MFA should be used on both local systems and any software or services that store client data.Identity theft victims will continue to receive annual IP PINs automatically.Resources to search on IRS.gov:“Get an IP PIN”“IRS Online Account”“Tax Pro Account”“Security Summit” and Nationwide Tax Forum details