Securely Sending a W-9 Form: Best Practices

Quick answer

• Understand the W-9’s purpose: it collects your Taxpayer Identification Number (TIN) for tax reporting.
• Only provide your W-9 when legally required by a payer.
• Never send a W-9 via unsecured email or public Wi-Fi.
• Use secure, encrypted methods for transmission.
• Keep a copy for your records.
• Verify the recipient’s legitimacy before sending.

Who this is for

• Freelancers and independent contractors receiving payments from businesses.
• Individuals who have earned income outside of traditional employment.
• Anyone asked by a client or payer to complete IRS Form W-9.

What to check first (before you act)

Your reason for needing to send a W-9

Before you fill out a W-9, confirm that the request is legitimate. Businesses and other payers are required to request a W-9 from individuals or entities they pay for services or other income. This form allows them to report payments made to you to the IRS. If you are unsure about the legitimacy of the request, contact the payer directly using contact information you’ve independently verified, not information provided in the request itself.

The payer’s legitimacy

Ensure you are sending your W-9 to a genuine business or organization. Scammers may try to trick you into sending sensitive information. Look for official company websites, check their business registration if possible, and be wary of unsolicited requests.

Your Taxpayer Identification Number (TIN)

Your TIN is typically your Social Security Number (SSN) for individuals, or an Employer Identification Number (EIN) for businesses. Make sure you have the correct TIN readily available. Forgetting or miswriting your TIN can lead to delays or issues with tax reporting.

Step-by-step: how to securely send a W-9

1. Confirm the Request is Legitimate

What to do: Verify the identity of the entity requesting your W-9. If the request came via email, look up the company’s official phone number on their website and call them to confirm.
What “good” looks like: You have spoken to a verified representative of the company and they have confirmed their need for your W-9.
Common mistake: Accepting an email request at face value without verifying the sender’s identity. This can lead to identity theft.

2. Gather Necessary Information

What to do: Have your Social Security Number (SSN) or Employer Identification Number (EIN) ready. You’ll also need your legal name, business name (if applicable), and mailing address.
What “good” looks like: All required fields on the W-9 form can be accurately filled out without delay.
Common mistake: Starting the process without knowing your correct TIN. This can lead to errors on the form.

3. Download the Official W-9 Form

What to do: Download the most current version of Form W-9, “Request for Taxpayer Identification Number and Certification,” directly from the IRS website.
What “good” looks like: You have a PDF of the official W-9 form from IRS.gov.
Common mistake: Using an outdated version of the form or a form from an unofficial source, which may not be accepted by the IRS or the payer.

4. Fill Out the W-9 Accurately

What to do: Complete all required fields on the form carefully. Ensure your name and TIN match exactly what the IRS has on file. Sign and date the form.
What “good” looks like: The form is complete, accurate, and free of typos. Your TIN and name are precise.
Common mistake: Incorrectly entering your name or TIN. This can cause issues for the payer when reporting payments to the IRS.

5. Choose a Secure Transmission Method

What to do: Select a method that encrypts your data in transit. Options include secure file-sharing portals, encrypted email services, or faxing.
What “good” looks like: You are using a method where your sensitive information is protected from unauthorized access.
Common mistake: Sending your W-9 via standard, unencrypted email. This is highly insecure and exposes your SSN or EIN to potential interception.

6. Transmit the Form

What to do: Send the completed and signed W-9 form using your chosen secure method.
What “good” looks like: You have confirmation that the form was successfully sent and received by the intended party.
Common mistake: Not confirming delivery. The form might have been sent but never arrived, leading to payment delays.

7. Save a Copy for Your Records

What to do: Make a digital or physical copy of the W-9 form you sent. Store it securely.
What “good” looks like: You have a readily accessible copy of your W-9 for your own tax purposes or in case of future inquiries.
Common mistake: Not keeping a record. This makes it difficult to reference your information later or to prove you submitted the form.

8. Monitor for Issues

What to do: Be aware of any follow-up requests from the payer. If you receive a notice from the IRS about missing TIN information, address it promptly.
What “good” looks like: You are proactively addressing any potential tax reporting discrepancies.
Common mistake: Ignoring follow-up communications, which can lead to penalties or delayed payments.

Common mistakes (and what happens if you ignore them)

Mistake	What it causes	Fix
Sending via unsecured email	Exposure of your SSN/EIN to hackers, leading to identity theft and financial fraud.	Use encrypted email services or secure file-sharing portals. Never send sensitive documents over public Wi-Fi.
Not verifying the requester’s legitimacy	Sending your W-9 to a scammer, resulting in identity theft and financial loss.	Always verify the payer’s identity independently before sending any personal information.
Using an outdated W-9 form	The payer may reject the form, causing delays in payment and requiring you to resubmit.	Always download the latest version directly from the IRS website (IRS.gov).
Incorrectly filling out personal details	Mismatched name/TIN can lead to IRS notices (like a CP2100 notice) and penalties for the payer, and payment delays for you.	Double-check all entries against your official identification documents. Ensure your name and TIN are an exact match with IRS records.
Not signing and dating the form	The form is invalid and will be rejected by the payer, leading to payment delays.	Make sure to sign and date the W-9 before submitting it.
Failing to keep a copy	Difficulty in referencing your information for future tax filings or resolving discrepancies.	Scan and save a digital copy, or make a physical photocopy, and store it securely in your records.
Sending before confirming payment terms	You might send sensitive information before agreeing on the scope of work or payment, potentially leading to disputes.	Ensure all contractual agreements are finalized before providing your W-9.
Providing W-9 to unauthorized individuals	Risk of your sensitive tax information being misused or stolen.	Only provide your W-9 to the legitimate business or individual who is paying you and has a valid reason to request it.
Not understanding backup withholding	If you don’t provide a correct TIN, the payer may be required to withhold a portion of your payments for taxes.	Ensure your TIN is accurate and that you are not subject to backup withholding. Consult the W-9 instructions or a tax professional if unsure.
Transmitting over public Wi-Fi	Data can be intercepted by malicious actors on the same network, compromising your sensitive information.	Always use a secure, private network or your cellular data when transmitting sensitive documents like a W-9.

Decision rules (simple if/then)

• If you receive a request for a W-9 via an unsolicited email, then verify the sender’s identity through a separate, independently found contact method because unsolicited requests can be a sign of phishing or fraud.
• If you are unsure about the legitimacy of the requester, then do not send your W-9 until you have independently confirmed their identity and need because sending sensitive information to the wrong party can lead to identity theft.
• If you are asked to fill out a W-9 by a client or payer, then download the form directly from IRS.gov to ensure you have the most current and official version because using outdated forms can lead to rejection and delays.
• If your name or Taxpayer Identification Number (TIN) has changed, then update the information on the W-9 accordingly before submitting it because inaccuracies can cause tax reporting issues for both you and the payer.
• If you are filling out the W-9 for yourself as an individual, then use your Social Security Number (SSN) as your TIN unless you have an EIN and are operating as a business, because the IRS requires specific TINs for reporting.
• If you are transmitting your W-9, then use a secure, encrypted method like a secure file-sharing portal or encrypted email because standard email is not secure and can expose your sensitive information.
• If you are sending your W-9 over the internet, then ensure you are on a secure, private network (not public Wi-Fi) because public networks are vulnerable to interception.
• If you receive a notice from the IRS about your TIN not matching their records, then review your submitted W-9 and contact the payer and the IRS to rectify the situation promptly because delays can lead to penalties.
• If you are unsure about any part of the W-9 form or the requirements, then consult the official IRS W-9 instructions or a tax professional because accurate completion is crucial for tax compliance.
• If the payer requests a W-9 for a reason that seems unusual or unrelated to income earned, then question the request and seek clarification because legitimate payers have specific tax reporting needs for requesting this form.
• If you are a sole proprietor and have an EIN, then you can choose to use your EIN on the W-9 instead of your SSN for business transactions, because an EIN can help separate business and personal finances.
• If you have multiple sources of income requiring a W-9, then keep a separate, secure copy of each W-9 you submit for your own records and tax preparation purposes because organized records simplify tax filing.

FAQ

What is a W-9 form used for?

A W-9 form is used by individuals and entities to provide their correct Taxpayer Identification Number (TIN) to a person or entity that is making payments to them. This information is used for tax reporting purposes by the payer.

When should I fill out a W-9 form?

You should fill out a W-9 form when a payer requests it. This typically happens when you are an independent contractor, freelancer, or receiving certain types of income other than wages from an employer.

Is it safe to email my W-9?

No, it is generally not safe to send your W-9 form via standard, unencrypted email. Your Social Security Number or Employer Identification Number is highly sensitive information and can be intercepted if sent through insecure channels.

What is a TIN?

A TIN is your Taxpayer Identification Number. For individuals, this is usually your Social Security Number (SSN). For businesses, it is typically an Employer Identification Number (EIN).

What are the risks of not sending a W-9 when requested?

If you don’t provide a W-9 when requested, the payer may be required by the IRS to withhold a portion of your payments for taxes (backup withholding). This can also lead to delays in receiving your full payment.

How can I verify the legitimacy of someone asking for my W-9?

Always verify the requester’s identity independently. If the request comes via email, look up the company’s official phone number on their website and call them directly to confirm the request. Do not use contact information provided in the unsolicited request.

What should I do if I make a mistake on my W-9?

If you realize you made a mistake after submitting the W-9, you may need to fill out and submit a new, corrected W-9 form to the payer. Contact the payer to understand their process for handling corrections.

Can I use my EIN instead of my SSN on a W-9?

If you are operating as a business and have obtained an Employer Identification Number (EIN) from the IRS, you can generally use your EIN on the W-9 instead of your SSN. This is often recommended for business transactions to separate personal and business finances.

What happens if the IRS sends me a notice about my TIN?

If you receive a notice from the IRS regarding your TIN, it likely means there’s a mismatch between the information you provided and the IRS’s records. You should contact the payer who requested the W-9 and the IRS to resolve the discrepancy.

What this page does NOT cover (and where to go next)

• Specific tax implications for different types of income. Consult a tax professional for personalized advice.
• Detailed instructions on filling out every field of the W-9 for complex business structures. Refer to the official IRS W-9 instructions.
• How to obtain an Employer Identification Number (EIN). Visit the IRS website for guidance.
• International tax reporting requirements for non-US persons. Consult a tax advisor specializing in international tax law.
• Strategies for disputing incorrect tax notices from the IRS. Seek professional tax resolution services.
• Legal advice regarding contracts with payers. Consult an attorney.