EIN Privacy Concerns — Preventing Misuse and Identity Theft
1. EINs Can Be Misused Like SSNs
An Employer Identification Number (EIN) is essentially a business’s tax ID, similar to how a Social Security Number (SSN) identifies an individual.
-
If someone gets unauthorized access to your EIN, they could:
-
Open fraudulent business accounts.
-
File fake tax returns or claim refunds.
-
Obtain credit or loans in your company’s name.
-
Tip: Treat your EIN with the same level of care as your personal SSN.
2. EINs Are Public on Some Filings
-
Certain business documents are public records, such as:
-
IRS Form 990 (for nonprofits).
-
State business registrations or annual reports.
-
Some court filings or government contracts.
-
-
These may include your EIN, making it accessible to anyone searching public databases.
Tip:
-
Limit EIN disclosure to required official filings only.
-
Don’t display it on public websites or unencrypted documents.
3. Sharing EINs with Vendors and Contractors
-
EINs are often requested by clients, vendors, or payment processors for tax reporting (e.g., Form 1099).
-
Sharing your EIN unnecessarily increases exposure risk.
Tip:
-
Share your EIN only with verified and trusted parties.
-
Use encrypted email or secure file portals when sending W-9 forms.
-
Verify the recipient’s legitimacy before sharing any tax information.
4. EIN Theft and Fraudulent Business Creation
-
Criminals can use stolen EINs to create fake businesses or file fraudulent tax returns.
-
This can lead to:
-
IRS investigations into your business.
-
Delays in refunds or legitimate filings.
-
Damage to business credit and reputation.
-
Tip:
-
Regularly monitor your IRS account transcript and business credit reports (Dun & Bradstreet, Experian Business).
-
Report suspicious activity immediately to the IRS Business & Specialty Tax Line (1-800-829-4933).
5. Protecting EIN Data Internally
-
Within organizations, poor data management can lead to internal leaks.
-
Employees may unintentionally share EINs in unsecured systems.
Tip:
-
Restrict EIN access to finance, HR, and tax personnel only.
-
Store EIN documents in password-protected or encrypted systems.
-
Train employees on business identity theft risks.
6. What to Do If Your EIN Is Stolen
If you suspect your EIN has been used fraudulently:
-
Contact the IRS Business Identity Theft Hotline: 1-800-908-4490.
-
File Form 14039-B (Business Identity Theft Affidavit).
-
Notify your bank, creditors, and any credit bureaus.
-
Update all passwords and access controls on your business accounts.
7. Preventive Best Practices
-
Use a business mailing address instead of a home address on public records.
-
Obtain an EIN verification letter (Form 147C) only when needed — store it securely.
-
Consider identity theft protection services for businesses, especially if you handle sensitive data.
-
Always verify IRS communications — the IRS never contacts by email or text for EIN matters.