Report: IRS must improve verification techniques to prevent ID theft

The Internal Revenue Service must do more to protect the identity of taxpayers calling its toll-free assistance lines, a recent report concluded.

Callers to the IRS assistance line might overhear the personal information of other taxpayers as employees authenticate their identity. Also, the IRS does not always properly verify the taxpayer’s identity before discussing confidential tax account information, according to the Treasury Inspector General for Tax Administration in a March 31 report.
 
The information sought from callers includes name, address, Social Security Number, birth date, and place of birth. That information is considered to be Personally Identifiable Information, or PII. The report stated that taxpayers who call the toll-free lines are at risk of having their PII disclosed inadvertently as auditors listening to taped calls could hear part of assistors’ conversations with other callers. The report noted that identity theft has been the No. 1 consumer complaint with the Federal Trade Commission for the past nine years.
 
Of 180 calls tested, assistors increased the risk of unauthorized disclosures for 29 calls. Examples included not asking callers all five required questions, or not ending the call when the caller continued to incorrectly answer screening questions, the report stated.
 
Also, during 48 of the 180 calls, auditors were able to overhear assistors’ conversations with other callers. The report said that the employees failed to put callers on hold when they were looking up account information.
 
“For 26 calls (14 percent of all calls tested), assistors repeated the Social Security Number back to the caller on the telephone. This puts the IRS at risk of disclosing Personally Identifiable Information,” the report stated.
 
"As the telephone continues to be one of the primary tools taxpayers use to communicate with the IRS, taxpayers need to be assured that the IRS is taking every precaution to protect their personal information from inadvertent disclosure," wrote J. Russell George, the Treasury Inspector General for Tax Administration. Millions call the IRS every year at its toll-free number, (800) 829-1040.
 
Gautham Nagesh, a technology blogger for The Hill, wrote that the report is a “sobering reminder” that the most significant cyber security breaches occur after a failure to implement established security policies.
 
“While it's certainly encouraging to see the wave of proposed legislation and rules aimed at securing the nation's networks, none of those rules will have any chance to succeed without first educating workers about, and raising awareness of, the threat to the public's privacy. Once again, the human element is always the last and most important link in any secure network,” Nagesh wrote.
 
George recommended requiring IRS employees to ask additional questions to “potential-risk callers,” train them on controlling their calls, and using technology to lower the number of times taxpayers must answer the same verification questions. The IRS agreed with some, but not all, of the recommendations.
 
The report stated, “The IRS did not agree with our recommendation to revise guidelines to require assistors to ask two additional high-risk probes when callers incorrectly answer the address or date of birth probes. The IRS considers existing guidelines sufficient and revising the guidelines is unnecessary.”
 
 
Related articles:

You may like these other stories...

Legislation coming out of Washington just might reduce homeowners' burden for disaster insurance. It's a topic very much on everyone's minds since the mudslide in Oso, Washington. The loss of human life was...
Divorce is hard, and the IRS isn't going to make it any easier. The IRS generally says "no" to tax deductions that might ease the pain of divorce. In certain circumstances, however, you might be able to salvage...
IRS chief: New rule on the way for tax-exempt groupsIRS Commissioner John Koskinen told the USA Today on Monday that the agency will likely rewrite a proposed rule regulating the political activities of nonprofit groups to...

Upcoming CPE Webinars

Apr 22
Is everyone at your organization meeting your client service expectations? Let client service expert, Kristen Rampe, CPA help you establish a reputation of top-tier service in every facet of your firm during this one hour webinar.
Apr 24
In this session Excel expert David Ringstrom, CPA introduces you to a powerful but underutilized macro feature in Excel.
Apr 25
This material focuses on the principles of accounting for non-profit organizations' revenues. It will include discussions of revenue recognition for cash and non-cash contributions as well as other revenues commonly received by non-profit organizations.
Apr 30
During the second session of a four-part series on Individual Leadership, the focus will be on time management- a critical success factor for effective leadership. Each person has 24 hours of time to spend each day; the key is making wise investments and knowing what investments yield the greatest return.