Drake Software blog for tax pros, covering tax, IRS news, and more

IRS Tightens e-Services Security

IRS Tightens e-Services Security

The Internal Revenue Service has turned up security another notch on its suite of e-Services tools. The new process validates the user’s identity through a two-step process, making fraudulent logons much harder to complete.

The upgrade in security took place December 10.

If an e-Services user hasn’t already created a Secure Access account through Get Transcript Online, the IP PIN tool, View Balance, or by exception processing in recent days will have to go through this new, more rigorous process to validate his or her identity. This includes all TIN Matching users and those who received Letter 5903 last December and authenticated their identity by telephone.

A news release outlining the e-Services changeover is not optional for online users—or the IRS itself.

“The IRS has been planning this move for more than a year and must make this change to meet federal information system standards. Additionally, cybercriminals increasingly are targeting tax professionals to steal e-Services usernames and passwords, putting taxpayer data at risk,” the news release states.

In the recent past, the IRS authenticated each e-Services user individually. Those registering for e-Services access were asked for their name, address, Social Security number, date of birth, adjusted gross income and filing status. Unfortunately, that limited amount of data is no longer enough to meet federal information system standards. Users will continue to be authenticated as individuals.

Here’s how Secure Access helps to do that:

  • It strengthens the initial identity proofing process to make sure the person registering is who they say they are.
  • It also strengthens security through a two-factor authentication process for returning users that helps prevent account takeover by cybercriminals. Two-factor authentication means you must have your credentials (username and password) plus a security code sent to your mobile phone or generated by your IRS2Go app each time you log in.

Once users have successfully authenticated their identity and established a Secure Access account for e-Services, no further action is required. It should be noted, however, that the Secure Access procedure will not allow users to script the login process.

To learn more about the Secure Access process, alternatives to online processing and how to use the IRS2Go app, check out “Important Update about Your e-Services Account,” at www.irs.gov/eservices.

Bob Williams

Forget genes; I’ve got words in my DNA. Communication has been part of who I am nearly all my life. From a long career in radio news to another one in newspapers – and a University of Georgia journalism degree sandwiched between the two – language has been my life. I’ve also been fortunate to have learned the tax business from the ground up here at Drake, starting with 1040.com online forms some years ago before moving on to work on the Web. In all things tax-ish, we aim to give you tools you can use.

comments powered by Disqus