Main Street Practitioner Blog

 View Only

Important Update about IRS e-Services Accounts & Login Procedure

By John Ams posted 09-22-2016 03:05 PM

  

Update: To address questions received after W&I Commissioner Debra Hollands’s presentation at the NPL Practitioner meeting last week, the IRS has added a PDF document – Answers to Follow-Up Questions – to Important Update about Your e-Services Account.

One of the highest priorities at the IRS is to protect taxpayer and tax preparer data as well as its systems. Starting in October, the IRS will strengthen the protection for e-services. As part of that effort, all users must re-register and validate their identities, most using the Secure Access authentication process. Learn more about this new process at Important Update for Your e-Services Account.

What is planned?
In late October – target date October 24 – the IRS will strengthen the protections for e-services accounts by requiring a stronger identity verification process for existing and new e-services users. Existing e-services users will be required to re-register and verify their identities, most through the new Secure Access platform. You must revalidate your identity to maintain access to e-services products.

Who is affected?
Anyone who currently has an e-services account is affected. This includes individuals who are registered as:  Electronic Return Originators, Transmitters, Large Business Taxpayers with e-file mandates, Software Developers, ACA insurance provider fee/Branded prescription drug filers, ACA Information Return Transmitter/Issuer, Reporting agents, Not for Profit (VITA/TCE/LITC) users, States that use Transcript Delivery Service, and IVES Participants. E-services account holders who only use TIN Matching will also need to validate their identity. However, because there is no exchange of sensitive data, these users will have a more streamlined process.   

Important Note: After you successfully register and each time you return to e-services, you will be required to enter your credentials (username and password) AND a security code that will be sent as a text to your mobile phone. This is a two-factor authentication protection. Currently, as you know, the IRS often warn e-services users of phishing emails from criminals seeking to steal your username and password. With two-factor authentication, your credentials alone are not enough to enter the system.

As mentioned above, the key component of the change is the move to the two-step Secure Access identity verification process.  Users must validate their identities through this process before they can access their accounts.  The verification process will involve questions related to financial records such as the name of the entity from which you lease your car, or the bank that holds your home mortgage.  In addition, the IRS will send an account activation code to a mobile phone or, at your request, by mail

What do I have to do?
When you return to your e-services account on or after October 24, you will be directed to update your account information. You will be directed through the Secure Access process, which includes identity proofing, financial verification and mobile phone verification. Secure Access is a two-factor authentication process which means all returning users, once they have successfully registered, must provide their credentials (username and password) AND the security code sent to their mobile phone via text. To learn more about the required steps, review Secure Access: How to Register for Certain Online Self-Help Tools.

What is the IRS doing to help?
We are aware of the importance of the e-services tools to its users. Starting October 24, the IRS will temporarily add additional assistors to the e-Help Desk to provide assistance as needed. The assistors may be able to validate an existing user's identity over the phone. If the assistor can complete this process, they will generate an activation code and send it by mail. Once you receive the activation code by mail which will take five to 10 calendar days, you will be able to complete the registration process. The IRS also will be working with partner groups to assist with this process.

How does this change better protect my account?
After you successfully register and each time you return to e-services, you will be required to enter your credentials (username and password) AND a security code that will be sent as a text to your mobile phone. This is a two-factor authentication protection. Currently, as you know, we often warn e-services users of phishing emails from criminals seeking to steal your username and password. With two-factor authentication, your credentials alone are not enough to enter the system.

What if I already have a Get Transcript account?
If you successfully registered for Get Transcript Online after June 2016, you already have passed the Secure Access process. Your validated identity information automatically will migrate to your e-services account. On October 24, all you must do is change your password. You also should be aware that your e-services username will, by default, become your username for your personal accounts, such as Get Transcript Online.  You can register through Get Transcript Online now but if you cannot complete the process, we will be able to assist you via the e-services Help Desk starting October 24.

The IRS has provided the following information to help ease the transition to the Secure Access system:
Here's what new users need to get started:

  • A readily available email address;
  • Your Social Security number;
  • Your filing status and address from your last-filed tax return;
  • Your personal account number from a: 
    • credit card, or
    • home mortgage loan, or
    • home equity (second mortgage) loan, or
    • home equity line of credit (HELOC), or
    • car loan
      (The IRS does not retain this data)
  • A readily available mobile phone. Only U.S-based mobile phones may be used. Your name must be associated with the mobile phone account. Landlines, Skype, Google Voice or similar virtual phones as well as phones associated with pay-as-you-go plans cannot be used;
  • If you have a "credit freeze" on your credit records through Equifax, it must be temporarily lifted before you can successfully complete this process.

Because this process involves verification using financial records, there may be a "soft inquiry" placed on your credit report. This notice does not affect your credit score. The IRS does not retain your financial account information.

Note: If you have a pay-as-you-go mobile phone or a business/family plan mobile phone not associated with your name, you may request that we mail an activation code to the address we have on file for you. You still must have a text-enabled, U.S.-based phone to receive a security code text that completes the validation process and allows returning users to access their accounts.

First-time users of any Secure Access-supported tool must:

  • Submit name and email address to receive a confirmation code;
  • Enter the emailed confirmation code;
  • Provide SSN, date of birth, filing status and address on the last filed tax return;
  • Provide some financial account information for verification such as the last eight digits of their credit card number or car loan number or home mortgage account number or home equity (second mortgage) loan number;
  • Enter a mobile phone number to receive a six-digit activation code via text message OR request an activation code by mail (see below);
  • Enter the activation code sent to mobile phone;
  • Create username and password, create a site phrase and select a site image.

First-time users who opt for an Activation Code by Mail must:

  • Select Activation Code by Mail when prompted;
  • Create username and password, create a site phrase and select a site image;
  • Allow 5 to 10 days for mail delivery of the activation code;
  • Return to the self-help tool and enter your username and password;
  • Enter the activation code at the prompt;
  • Enter number for any type of text-enabled phone at the prompt; this may include a pay-as-you-go mobile phone or a business/family plan mobile phone not associated with your name
  • Check phone for a security code text;
  • Enter the security code text at the prompt to complete the Secure Access validation process.

Returning users with existing credentials but new to Secure Access must:

  • Log in with an existing username and password;
  • Submit financial account information for verification, for example, the last eight digits of a credit card number or car loan number or home mortgage account number or home equity (second mortgage) loan account number;
  • Submit a mobile phone number to receive an activation code via text OR request an activation code by mail (see above);
  • Enter the activation code.

Returning users who previously completed the Secure Access process must:

  • Log in with an existing username and password;
  • Receive a security code text via mobile phone provided during account set up;
  • Enter the security code into secure access.
0 comments
1138 views

Permalink