IRS gets high marks for fraud and identity theft initiatives

A layered approach combining software, public-private partnerships and innovative pilot programs have saved billions of dollars from ending up in the hands of criminals and fraudsters, according to a new audit.

Shutterstock photo ID: photo ID: 245503636 By Mark Van Scyoc Sign outside the Internal Revenue Service building in downtown Washington, DC on December 26, 2014.
 

Current and former IRS officials sometimes grumble about the work of the Treasury Inspector General for Tax Administration, arguing that their reports and findings are overly harsh and often fail to take into account the tax agency’s historic funding and personnel limitations.

However, an audit released this week gives the agency high marks for its efforts cracking down on tax refund fraud and identity theft, utilizing a layered approach that combines new software, public-private partnerships and innovative pilot programs to save billions of dollars from ending up in the hands of criminals and fraudsters.

The topline figures over the past decade illustrate how much progress the agency has made. In 2012, TIGTA estimated the IRS lost approximately $5.2 billion, but that number has shrunk substantially over the past decade. The agency’s latest available numbers from 2019 peg losses between $90 million and $380 million, and its programs have identified 438,580 fraudulent tax returns, another 442,991 identity-theft related tax returns and prevented a collective $3.63 billion in improperly issued tax dollars. Numbers from 2018 claim a more than $6 billion in fraudulent tax returns that were identified and stopped before payments were issued.

“The actions taken on the part of the IRS have been extremely effective in addressing the identity theft epidemic and reducing its negative impact on tax administration,” auditors wrote.

In addition to the Return Review Program (RRP), a software system that scans tax returns and cross references them against more than 200 different filters designed to spot signs of fraudulent behavior or identity theft, the agency has also implemented a number of other programs since 2017 to create a layered defense against fraud. A group called the Fraud Referral and Evaluation Group conducts manual, human-based analysis for suspicious returns flagged by the RRP system. Another system, the Dependent Database, combines data from IRS, the Department of Health and Human Services, the Social Security Administration and other sources to spot identity theft.

The agency set up public private partnerships with two organizations – the Security Summit and the Identity Theft Tax Refund Fraud Information Sharing and Analysis Group (ISAC) – to share and exchange information with industry on the latest threats and best practices. Work from the 2019 Security Summit led to the development and incorporation of more than 50 data elements that can help identify or detect potential tax refund fraud.

It has also set up a dedicated resource center online, providing taxpayers with guidance on how to spot tax-related identify theft and tips on how to better protect their data from fraudsters by utilizing security software, passwords and identity protection PIN numbers developed by the agency.

Successful pilots have been expanded to further catch illegal behavior that fall through the cracks. One, the Deposit Account Verification Program, partners with industry providers to calculate a risk score for hundreds of thousands of suspicious returns that request refunds be sent via debit cards. Another, the External Leads Program, works with banks to cross reference refunds when there is a mismatch in names or other account characteristics between the return and the requested bank account.

Another program automatically locks tax accounts for individuals deceased individuals. The agency came under criticism last month for sending out stimulus checks to more than a million dead people, a problem officials attributed to not having full access to death data held by the Department of Treasury and Bureau of the Fiscal Service.

The agency is conducting several other fraud-based pilots, but the details are largely redacted from the report.

One area where the agency has fallen short is developing effective performance metrics for some of its anti-fraud efforts. The Taxpayer First Act passed in 2019 allows IRS to share fraudulent tax returns with ISAC partners, including the taxpayer’s name, IP addresses, device identification, email domain name, method of authentication, tax ID numbers and bank account and routing numbers. However, it has yet to begin such sharing for the 2019 or 2020 tax seasons, and the agency lacks meaningful metrics to measure the success of the ISAC’s work preventing fraud and identity theft.

“Currently, the only measure the IRS has relative to the ISAC is level of participation. IRS management stated that the increase in the participation results in more alerts posted, which shows the success of the ISAC,” auditors wrote. “Management also stated that participants would not continue to participate if the ISAC was not helpful to their organizations.

In a response attached to the audit, Wage and Investment Commissioner Kenneth Corbin said the agency has begun sharing potential identity theft data with ISAC partners and have set up a secure platform to do so. The agency will also roll out new ISAC Federal Tax Information Analytical Reports by 2022 that will seek to better measure the ISAC’s impact on curbing fraud.

“We recognize that those who we are combatting are sophisticated perpetrators and so we must continue to evaluate and refine our processes to identify fraudulent tax returns and protect revenue,” wrote Corbin.

X
This website uses cookies to enhance user experience and to analyze performance and traffic on our website. We also share information about your use of our site with our social media, advertising and analytics partners. Learn More / Do Not Sell My Personal Information
Accept Cookies
X
Cookie Preferences Cookie List

Do Not Sell My Personal Information

When you visit our website, we store cookies on your browser to collect information. The information collected might relate to you, your preferences or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. However, you can choose not to allow certain types of cookies, which may impact your experience of the site and the services we are able to offer. Click on the different category headings to find out more and change our default settings according to your preference. You cannot opt-out of our First Party Strictly Necessary Cookies as they are deployed in order to ensure the proper functioning of our website (such as prompting the cookie banner and remembering your settings, to log into your account, to redirect you when you log out, etc.). For more information about the First and Third Party Cookies used please follow this link.

Allow All Cookies

Manage Consent Preferences

Strictly Necessary Cookies - Always Active

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data, Targeting & Social Media Cookies

Under the California Consumer Privacy Act, you have the right to opt-out of the sale of your personal information to third parties. These cookies collect information for analytics and to personalize your experience with targeted ads. You may exercise your right to opt out of the sale of personal information by using this toggle switch. If you opt out we will not be able to offer you personalised ads and will not hand over your personal information to any third parties. Additionally, you may contact our legal department for further clarification about your rights as a California consumer by using this Exercise My Rights link

If you have enabled privacy controls on your browser (such as a plugin), we have to take that as a valid request to opt-out. Therefore we would not be able to track your activity through the web. This may affect our ability to personalize ads according to your preferences.

Targeting cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Social media cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

If you want to opt out of all of our lead reports and lists, please submit a privacy request at our Do Not Sell page.

Save Settings
Cookie Preferences Cookie List

Cookie List

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Functional Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Performance Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Social Media Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Targeting Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.