Protect Your Clients, Protect Your Practice: 5 Security Reminders for Tax Pros
Tax professionals handle some of their clients’ most sensitive information—from Social Security numbers and income documents to banking and identity information. That makes tax practices an attractive target for cybercriminals.
As tax professionals begin preparing for another filing season, the IRS and its Security Summit partners are reminding the tax community that protecting taxpayer data needs to remain a year-round priority.
On September 16, 2026, the IRS concluded its annual “Protect Your Clients; Protect Yourself” summer series with a renewed call for tax professionals to stay vigilant against identity theft and data theft.
Why Tax Professionals Need to Stay Alert
Cybercriminals may target tax professionals because gaining access to a tax office can potentially expose information belonging to numerous taxpayers at once.
The IRS notes that the Security Summit—a partnership involving the IRS, state tax agencies, the tax industry and tax professionals—has worked since 2015 to combat tax-related identity theft and fraud. As threats continue to evolve, the agency says continued vigilance remains essential.
For tax professionals, that means cybersecurity shouldn't be something you think about only during filing season. It should be part of the way your practice operates throughout the year.
1. Use Multifactor Authentication
Passwords alone aren't always enough.
The IRS and Security Summit recommend multifactor authentication (MFA) as an additional layer of protection for accounts containing sensitive information. MFA requires another method of verification in addition to a password, making it more difficult for an unauthorized person to access an account even if a password has been compromised.
The IRS also notes that the Federal Trade Commission's Safeguards Rule generally requires tax preparation firms to use MFA to protect access to customer information unless an approved equivalent control is used.
2. Have a Written Information Security Plan
A Written Information Security Plan, commonly called a WISP, shouldn't be overlooked.
In August, the IRS and Security Summit specifically reminded tax professionals of their responsibility to protect client data with a Written Information Security Plan.
A WISP helps a tax practice identify potential risks, establish safeguards for sensitive information and create procedures for responding if a security incident occurs.
This is also a good time for tax offices to review an existing plan rather than simply assuming last year's procedures are still sufficient.
3. Help Clients Understand Identity Protection PINs
Another tool tax professionals can discuss with clients is the IRS Identity Protection PIN (IP PIN).
An IP PIN is a six-digit number known only to the taxpayer and the IRS that helps verify a taxpayer's identity when a federal return is filed. A new IP PIN is generated each calendar year.
Tax professionals cannot obtain an IP PIN on a client's behalf, so clients who want one must obtain it themselves. The IRS also warns taxpayers to share their IP PIN only with the IRS and their trusted tax preparation provider.
4. Watch for Phishing and Suspicious Communications
Tax professionals should also be cautious about unexpected emails, links, attachments and requests for sensitive information.
A successful phishing attack can potentially give a criminal access to credentials, taxpayer information or other sensitive systems. That's why security awareness among everyone in a tax office matters—not just the owner or IT provider.
Before the filing-season rush begins, consider reviewing basic security procedures with your entire team.
5. Make Security Part of Your Preseason Checklist
There are plenty of things to do before tax season—update software, complete training, organize workflows and communicate with clients.
Cybersecurity deserves a spot on that list, too.
Before filing season, tax practices can review:
Multifactor authentication and account security
Employee access to sensitive information
Password practices
Written security and incident-response procedures
Secure methods for exchanging client documents
Staff training on phishing and other common scams
A little preparation now can help strengthen your defenses when your office becomes much busier.
Start Preparing Now
At MyTAXPrepOffice, we believe tax professionals should have technology that helps them work efficiently while keeping their practices organized and prepared for the demands of tax season.
As you get ready for another filing season, take time to review your security procedures, educate your staff and make protecting client information part of your everyday workflow.
A smarter tax season starts with preparation—and that includes protecting the clients who trust you.
Disclaimer: This article is for informational and educational purposes only and does not constitute legal tax advice. Advanced Tax Solutions is not liable or responsible for any damages resulting from or related to your use of this information. It is your responsibility to refer to official IRS documentation for information regarding any tax laws or tax information shown here.
