- Tax professionals face frequent phishing emails disguised as new-client or document requests that may contain malicious links or attachments.
- Key protections include strong passwords with multifactor authentication, updated security software, regular review of a Written Information Security Plan and prompt reporting of suspicious activity.
- The IRS Tax Pro Account enables secure management of client authorizations, viewing of active powers of attorney and electronic requests for new authorizations.
Heightened Risks for Tax Professionals
Tax professionals and their businesses are frequent targets for cybercriminals seeking access to sensitive taxpayer information. The Internal Revenue Service issued reminders on October 20, 2026, as part of Tax Professional Awareness Week, to reinforce basic protective steps.
Common threats include emails that appear to come from potential new clients or request documents but actually deliver malware through links or attachments. Business owners operating as tax preparers should treat any unexpected request for sensitive data with caution, especially if it involves urgent demands, unfamiliar sender addresses or links that do not clearly originate from IRS.gov.
The IRS advises against clicking on unexpected links or opening unexpected attachments, as these actions can compromise both personal and client data.
Core Security Practices to Review Now
Tax pros are encouraged to regularly evaluate their security measures to reduce the risk of identity theft and data breaches. Recommended steps include using strong passwords combined with multifactor authentication, keeping all security software and operating systems current, and remaining alert to phishing attempts.
Maintaining and periodically updating a Written Information Security Plan is also highlighted as an essential practice. These measures help protect the confidential information that tax professionals routinely handle.
Republic Tax Relief notes that business owners with separate IRS or state tax debt issues unrelated to this security guidance may still have questions about resolution options; the firm offers a free, no-obligation initial consultation to discuss suitability, scope, fees and availability of private tax-resolution help communicating with the IRS.
Tools for Managing Authorizations and Client Data
The IRS Tax Pro Account provides a secure online portal for tax professionals to handle client-related tasks. Users who link their Centralized Authorization File number can view active powers of attorney and tax information authorizations, withdraw authorizations that are no longer needed, and request new authorizations electronically for eligible individual taxpayers.
The tool also allows tax professionals to access client tax information within the scope of existing authorizations and to manage business-level CAF access by designating which employees may act under the firm's credentials. Preparing these accounts and authorizations in advance can streamline interactions with the IRS during the upcoming filing season.
The IRS further recommends that tax pros ensure their own account information is up to date, review all client authorizations and encourage individual clients to establish an IRS Individual Online Account or use the IRS mobile app.
Reporting Suspicious Activity
The IRS urges immediate reporting of suspected tax fraud, scams, identity theft, data breaches or other tax-related misconduct. Reports can be submitted online at IRS.gov/SubmitATip, which helps authorities respond quickly and protect other taxpayers.
These reminders remain relevant year-round, consistent with prior Security Summit guidance and other IRS resources on tax-pro security tools.
Announcement covered: Oct 20, 2026.
General information only, not individual tax, legal, or financial advice. Rules, deadlines, and eligibility depend on your circumstances. Check current official guidance or consult a qualified professional.
Request a correction →
