Security Summit closes summer series with data security reminder for tax pros

Week 5 of “Protect Your Clients; Protect Yourself” offers tools and advice to help protect sensitive data

IR-2026-111, Sept. 16, 2026

WASHINGTON — The Internal Revenue Service and the Security Summit partners today urged tax professionals to stay vigilant against identity theft. 

The reminder concludes the fifth and final week of the “Protect Your Clients; Protect Yourself” awareness series, which provides tax professionals with resources to strengthen safeguards and protect sensitive taxpayer information. 

“Protecting taxpayer information is fundamental to maintaining confidence in our tax system,” said IRS Chief Executive Officer Frank J. Bisignano. “For more than a decade, the Security Summit has brought government, industry and the tax professional community together to strengthen that protection. As threats evolve, continued vigilance and partnership will remain essential to protecting taxpayers and the integrity of the tax system.”

The Security Summit, a public-private partnership of tax professionals, industry partners, state tax agencies, and the IRS, has worked since 2015 to protect the tax system from identity theft and fraud. 

Tax professionals remain prime targets for increasingly sophisticated identity thieves. Millions of taxpayers trust tax pros with highly sensitive information, making it important for tax professionals to stay informed, review security basics, and promptly report data theft. 

Ongoing threats

Common schemes include:

• “New client” schemes: Fraudsters pose as prospective clients and send malicious links or attachments disguised as tax documents.
• EFIN, PTIN, and CAF scams: Scammers send phishing messages seeking tax professionals’ identification numbers and documents, including Electronic Filing Identification Numbers and related documentation, Preparer Tax Identification Numbers, and Centralized Authorization File numbers.
• IRS impersonation by email, text, and phone: Scammers use email, text messages, direct messages, spoofed caller ID, and computer-generated calls to lure victims into clicking suspicious links, opening malware attachments, or sharing sensitive financial information.
• Misleading tax advice on social media: Viral “tax hacks” can push taxpayers to file returns with false information or claim credits for which they do not qualify, leading to refund delays, audits, or penalties.

Know the warning signs

Tax professionals may notice:

• Unusual computer activity, slow performance, or being locked out of systems.
• Client e-filed returns being rejected because a Social Security number was already used.
• Unexpected IRS authentication letters or e-filed acknowledgments.
• IRS notifications involving clients they do not represent or a compromised CAF number.

Clients may receive:

• Authentication letters such as 5071C, 4883C, or 5747C from the IRS even though they did not file a return.
• Notice that an IRS Online Account was created in their name without their authorization.
• Tax transcripts they did not request.
• Tax refunds even though they did not file a return.

Prevention tools

The IRS offers tools to help tax professionals protect their clients and businesses:

• Publication 5708, Creating a Written Information Security Plan for your Tax & Accounting Practice PDF: A template to help tax professionals create a written information security plan.
• Security Six: Basic protections include antivirus software, firewalls, backup software or services, encrypted drives, multifactor authentication, and virtual private networks.
• IRS Identity Protection PIN Opt-In Program: A six-digit PIN that helps protect clients from someone else filing a tax return using their SSN.

Report data theft immediately

If a breach occurs, tax professionals should:

• Report the incident to a local IRS Stakeholder Liaison so the IRS can take steps to block fraudulent returns.
• Report the breach to the appropriate state tax agency through the Federation of Tax Administrators’ Report a Data Breach webpage.
• Inform affected clients and recommend protective steps, such as obtaining an Identity Protection PIN or, when appropriate, completing Form 14039, Identity Theft Affidavit PDF.

Stay informed

• Subscribe to e-News for tax professionals and follow IRS social media.
• For detailed security guidance, review:
  • Publication 5293, Data Security Resource Guide for Tax Professionals PDF.
  • Publication 4557, Safeguarding Taxpayer Data PDF.
  • Publication 5709, How to Create a Written Information Security Plan for Data Safety PDF.

Visit Identity Theft Central and Data Theft Information for Tax Professionals for more information and tools.