August 12, 2025 — IRS Security Summit Update

Protect Against Tax Identity Theft with Multi-Factor Authentication, IRS IP PINs, and Online Accounts.

Tax-related identity theft continues to be one of the biggest threats facing taxpayers and professionals. As part of the IRS Security Summit’s 2025 campaign, the IRS is highlighting three critical tools to keep sensitive information safe: multi-factor authentication (MFA), Identity Protection PINs (IP PINs), and IRS Online Accounts.

Whether you’re a tax professional or an individual filer, understanding and using these safeguards can help you avoid scams, phishing attacks, and fraudulent returns.

Why Multi-Factor Authentication (MFA) Matters

Multi-factor authentication adds an essential layer of protection beyond just a username and password.

  • Required by law: All tax professionals must use MFA under the Federal Trade Commission (FTC) Safeguards Rule.

  • How it works: MFA uses at least two identity factors — something you know (password), something you have (a security token or code sent to your phone), or something you are (biometrics).

  • What it protects against: MFA helps stop cyberattacks such as phishing, social engineering, and password theft.

  • Best practices for tax pros:

    • Enable MFA for all software, online portals, and cloud storage.

    • Regularly update MFA methods to match current standards.

    • Offer clients different authentication options when possible.

    • Never share login credentials.

Bottom line: If you handle taxpayer information, MFA is not optional. It’s a legal requirement that protects your clients and your business.

Identity Protection PIN (IP PIN): An Extra Lock on Your Tax Return

The IRS Identity Protection PIN is a six-digit number that only the IRS and the taxpayer know. It prevents criminals from filing fraudulent returns using your Social Security number.

Key facts about the IP PIN program:

  • Voluntary but strongly recommended for all taxpayers.

  • Changes annually — a new PIN is issued every year.

  • Only the taxpayer can apply — tax professionals cannot request one on behalf of clients.

  • How to apply: Visit the IRS Get an IP PIN page and verify your identity.

  • Automatic for identity theft victims: Those already confirmed as victims will continue receiving their IP PIN each year.

Tip: Never share your IP PIN with anyone except the IRS or your trusted tax preparer. The IRS will never call, text, or email requesting it.

IRS Online Account & Tax Pro Account

The IRS offers secure online portals for both taxpayers and professionals.

  • IRS Online Account (for taxpayers):

    • Access your tax records and balance securely.

    • Stop fraudsters from creating a false account in your name.

    • Easily share records with your tax professional.

  • Tax Pro Account (for professionals):

    • Manage client authorizations securely.

    • Submit authorization requests directly to a client’s IRS Online Account.

    • Request Power of Attorney or Tax Information Authorization forms digitally.

These accounts streamline access while reducing the risk of identity theft.

Stay Connected: IRS Security Summit & Tax Forums

The Security Summit, a partnership between the IRS, tax professionals, state tax agencies, and industry leaders, has worked since 2015 to fight identity theft.

This year, the IRS is hosting Nationwide Tax Forums in several U.S. cities, offering three days of continuing education with a heavy focus on security practices. Upcoming dates include:

  • Orlando — August 26

  • Baltimore — September 9

  • San Diego — September 16

Seats are limited, and registration deadlines are approaching quickly.

Key Takeaways for Tax Professionals and Taxpayers

  • Use multi-factor authentication on all devices and tax software.

  • Apply for an IRS Identity Protection PIN for stronger defense against tax fraud.

  • Create and maintain your IRS Online Account or Tax Pro Account for secure access.

  • Stay informed with IRS e-News updates and social media channels.

Final Word

Tax-related identity theft is constantly evolving, but so are the tools to prevent it. By combining MFA, IP PINs, and IRS Online Accounts, you can dramatically reduce your risk and protect your most sensitive information.

For more details, visit the official IRS pages.