Tax Pros: Protect Client Data and Review Your Authorizations
IRS Tax Tip 2026-75 reminds tax pros how to spot suspicious requests, strengthen security, and manage client authorizations in Tax Pro Account.
- Published
- 3 min read
- IRS source: Security reminders and tools for tax pros
On October 20, 2026, the IRS issued Tax Tip 2026-75 during Tax Professional Awareness Week. The reminder is simple: tax professionals are a common target for criminals because they hold sensitive taxpayer information. The tip covers four areas: suspicious requests, security practices, reporting, and client authorizations. Here is what to take from it.
Watch for suspicious requests
The IRS says it is common for tax pros to receive "new client" or "document request" emails that carry malicious links or attachments. Their goal is to steal client data or get into your systems. Before you share any sensitive information or reply to an email, check for warning signs such as:
- Unexpected requests for sensitive information
- Sender addresses that are mismatched or unfamiliar
- Urgent payment demands
- Links that do not clearly lead to IRS.gov
The IRS advises users not to click unexpected links or open unexpected attachments. The same caution applies to businesses and individuals, not only to tax pros.
Tighten your security practices
The IRS encourages tax pros to review their security practices often. The measures it lists are:
- Using strong passwords and multifactor authentication
- Keeping security software and systems updated
- Watching for phishing emails and suspicious requests for client information
- Reviewing and updating your Written Information Security Plan
If your firm does not have a current Written Information Security Plan, this is a good time to look at it. The IRS also pointed to Tax Tip 2026-49, which explains why these plans are essential for tax pros.
Report suspicious activity
The IRS asks taxpayers, tax professionals, and the public to report suspected tax fraud, scams, identity theft, data breaches, or other tax-related wrongdoing at IRS.gov/submitatip. The IRS says quick reporting helps protect taxpayers and stops abusive activity sooner.
Review authorizations in Tax Pro Account
Tax Pro Account is a secure IRS tool for managing client authorizations, accessing tax information, and handling certain business with the IRS. After you link your Centralized Authorization File (CAF) number, you can:
- View active powers of attorney and tax information authorizations
- Withdraw authorizations you no longer need
- Request new authorizations electronically for eligible individual taxpayers
- Access tax information and act for your client within the scope of their authorizations
Tax professional businesses can also manage business CAF access. This includes choosing which employees are authorized to act under the business CAF. If your office has staff changes, this is a useful place to check.
Get ready for filing season
The IRS recommends that tax pros make sure their account information is current and review their client authorizations now. The IRS also encourages you to suggest that clients use an IRS Individual Online Account or the IRS app. Doing these steps before the busy season can make it easier to protect taxpayer information and work with the IRS.
What to tell your clients
Clients may not know how criminals use fake emails and document requests. You can tell them to be careful with unexpected requests for personal information and to avoid clicking unexpected links or opening unexpected attachments. You can also mention the IRS Individual Online Account and the IRS app, which the IRS encourages clients to use.
Related IRS Tax Tips: 2026-72 (Security Summit summer series information, relevant year round), 2026-50 (Tax Pro Account), and 2026-49 (Written Information Security Plans).
Informational only, based on the IRS source linked above; not tax or legal advice for a specific situation.