Skip to main content
Department of Taxation and Finance

Protect your clients' and customers' information from data security breaches

Tax professionals and business owners are a frequent target of scammers and identity thieves who want to steal clients’ and customers’ information to file fraudulent returns and steal refunds. If you believe your data has been compromised, notify us immediately.

Report breach

Additionally, review our tips and best practices to help protect your clients’ and customers’ data—and your business.

Follow best practices

Protect your computer. When accessing your financial accounts online, look for https (with an s after the http) in the website address to verify that it’s a secure address.

Use secure wireless networks. Always encrypt your wireless network with a strong password. Never access your personal accounts on a public Wi-Fi network.

Create your online accounts using Secure Access to help prevent account takeovers. Learn how to register for Secure Access.

Use strong passwords. Use long phrases, or a combination of uppercase and lowercase letters, as well as numbers and symbols when creating a new password. Don’t use your name, birthdate, or common words. Use a different password for each of your accounts.

Use multifactor authentication. A secure system should use multiple levels of authentication. Typical methods of authentication are passwords with a unique code delivered to your mobile phone that allows you to log into an account.

Review online account activity regularly. This can help you quickly detect any abnormalities.

Check daily e-file acknowledgements. If there are more acknowledgements than returns you filed, dig deeper.

Track weekly Electronic Filing Identification Number (EFIN) usage. The IRS posts the number of returns filed with your EFIN weekly.

  1. Log in to your IRS e-Services account.
  2. Access your EFIN application and select EFIN Status.
  3. If your return totals exceed your number of returns filed, contact the IRS e-help Desk.
  4. Update your EFIN application with all phone, address, or personnel changes.

Track weekly Preparer Tax Identification Number (PTIN) usage. If you are an attorney, CPA, enrolled agent, or Annual Filing Season Program participant and file 50 or more returns, you can check your PTIN account for a weekly report.

  1. Log in to your PTIN account.
  2. Select View Returns Filed Per PTIN.
  3. Complete federal Form 14157 to report excessive use or misuse of your PTIN.

Keep your authorizations up to date. If you have a Centralized Authorization File (CAF) Number, remove authorizations for taxpayers who are no longer your clients. For more information, see IRS Publication 947.

Never share sensitive data over email. Most email services use some form of encryption. However, you’re still trusting a third party with your sensitive data. Encrypted file-sharing systems create secure connections directly between your computer and the server used to store the files.

Report a possible breach

You can contact us:

  • by phone: 518-485-6549
  • by fax (preferred): 518-435-2990 (ATTN: IDENTITY VERIFICATION UNIT)
  • by mail:

    IDENTITY VERIFICATION UNIT
    PO BOX 4128
    BINGHAMTON NY  13902-4128

    If you are not using U.S. Mail, see Publication 55, Designated Private Delivery Services.

Learn more

Updated: