TIN Matching vs. TIN Verification
vs. TIN Validation

The Three Levels of TIN Checking: Definitions

Level 1: TIN Validation (Format Checking)

TIN validation is the most basic level. It checks whether the TIN looks correct without consulting any external database. Validation is a syntactic check, it examines the structure and format of the number itself.

A TIN validation check typically asks:

• Does the number contain exactly nine digits?
• Is the format consistent with the claimed TIN type? (EINs use XX-XXXXXXX; SSNs and ITINs use XXX-XX-XXXX)
• If it is an SSN, does it begin with a digit other than 9, and are the area/group/serial portions within valid ranges?
• If it is an ITIN, does it begin with 9 and are the middle digits in a valid ITIN range (50-65, 70-88, 90-92, 94-99)?
• Is the number a known invalid TIN (such as 000-00-0000, 111-11-1111, or 078-05-1120)?
• Does the TIN type match the entity classification on the W-9? (A corporation should provide an EIN, not an SSN)

What validation catches: obviously fake or malformed numbers, data-entry errors that result in too few or too many digits, and mismatches between TIN type and entity type.

What validation misses: everything else. A TIN can pass every validation check and still not belong to the person or entity that provided it. Validation cannot confirm that 123-45-6789 is actually assigned to "John Smith." It cannot detect expired ITINs, deceased individuals' SSNs, or EINs belonging to dissolved entities.

Think of TIN validation as spell-checking: it catches typos, but it cannot tell you if the word you typed is the word you meant.

Level 2: TIN Matching (IRS Name/TIN Comparison)

TIN matching is a specific program operated by the Internal Revenue Service under IRC Section 3406(i). Unlike validation, TIN matching consults the IRS master file to confirm that a given name and TIN combination match IRS records.

When you submit a name/TIN pair to the IRS TIN Matching program, the IRS checks:

• Is this TIN in our records?
• Does the name associated with this TIN match the name you submitted?

The IRS returns one of several result codes:

What matching catches: TINs that are not in IRS records, name/TIN pairs that do not align (e.g., the TIN belongs to a different person or entity), and TINs that were never issued.

What matching misses: TIN matching is a binary check: match or no match. It does not reveal additional information about the taxpayer. It does not confirm identity beyond the name/TIN pair. It does not check whether the individual is deceased, whether the EIN belongs to an active business, or whether the TIN holder is subject to OFAC sanctions.

TIN matching is the critical compliance step for 1099 filing. The IRS specifically provides this program so payers can verify TINs before filing, and failure to use it weakens your reasonable-cause defense if penalties are assessed.

Level 3: TIN Verification (Comprehensive Checking)

TIN verification is the broadest term. It can encompass everything from basic validation to IRS matching to additional identity-related checks. When a compliance vendor says they offer "TIN verification," they typically mean a bundle of checks that may include:

• Format validation (Level 1)
• IRS TIN Matching (Level 2)
• SSA death-record screening: Checking the Social Security Administration Death Master File to ensure the SSN does not belong to a deceased individual
• OFAC/sanctions screening: Checking the payee against the Office of Foreign Assets Control (OFAC) Specially Designated Nationals list
• Address verification: Confirming the address provided matches known records
• Entity-status checks: Confirming the business is active and in good standing
• ITIN expiration checks: Confirming the ITIN has not expired due to three years of non-use

What verification catches: everything validation and matching catch, plus additional risk factors like deceased individuals, sanctioned entities, and inactive businesses.

Trade-off: comprehensive verification costs more per lookup and may take slightly longer than a simple TIN match. However, for businesses in regulated industries (financial services, healthcare, government contracting), the additional checks may be required by policy or regulation.

Side-by-Side Comparison

The following table summarizes the key differences across all three levels:

IRS TIN Matching vs. SSA SSNVS: Two Government Programs

Adding to the terminology confusion, the federal government operates two distinct programs for verifying taxpayer numbers:

IRS TIN Matching Program

Operated by the Internal Revenue Service through IRS e-Services. Designed for payers who file information returns (1099s, W-2Gs, etc.). Checks name/TIN combinations for SSNs, EINs, and ITINs against the IRS master file. Available to authorized payers and their agents. For registration details, see our IRS TIN Matching Registration Guide.

SSA Social Security Number Verification Service (SSNVS)

Operated by the Social Security Administration. Designed for employers who need to verify SSNs for wage-reporting purposes (W-2 filing). Checks SSN/name combinations against SSA records. Available only to registered employers for W-2-related verification.

Critical distinction: If you are a business that pays contractors (and files 1099s), you need IRS TIN Matching, not SSA SSNVS. The SSA program is restricted to W-2 wage-reporting purposes. Using SSNVS to verify contractor TINs would violate the terms of service. Similarly, IRS TIN Matching is not designed for pre-employment SSN verification.

For the EIN-specific verification question (looking up a business's EIN), neither program provides a lookup by entity name. Both require you to already have the TIN and verify it against a name. This is an important distinction: TIN matching is not a search tool. It is a confirmation tool.

Analysis: When to Use Each Level of Checking

When Validation Alone Is Sufficient

Format validation by itself is rarely sufficient for compliance purposes. However, it is a valuable first pass that catches obvious errors before you spend resources on IRS matching. Use validation:

• At the point of W-9 collection, to catch obviously wrong numbers before the vendor walks away
• In your data-entry system, to prevent clearly invalid TINs from entering your vendor master file
• As a pre-filter before submitting to the IRS TIN Matching program (saves you from wasting one of your 25 interactive lookups on a malformed number)

When TIN Matching Is the Right Choice

IRS TIN Matching is the standard compliance requirement for any business that files information returns. Use TIN matching:

• Before filing 1099s, to ensure every name/TIN pair will match IRS records
• During vendor onboarding, to verify the TIN at the start of the relationship
• During annual vendor master file cleanup, to identify stale or incorrect records
• When responding to a CP2100 notice, to re-verify corrected TINs before refiling
• Any time you want to strengthen your reasonable-cause defense against penalties

For most businesses, TIN matching is the minimum necessary step and the most cost-effective way to prevent the consequences of mismatched TINs.

When Full Verification Is Warranted

Comprehensive TIN verification (matching plus additional checks) makes sense when:

• Your industry is regulated and requires enhanced due diligence (financial services, government contracting, healthcare)
• You need to screen against the Death Master File (e.g., insurance companies verifying annuitants)
• Your compliance policy requires OFAC/sanctions screening as part of vendor onboarding
• You work with foreign nationals and need to verify ITIN status, including expiration
• You want the highest level of assurance for high-dollar or high-risk vendor relationships

Step-by-Step: Building a Layered TIN Checking Process

The most effective approach combines all three levels in a structured workflow. Here is how to layer them:

1. Layer 1: Validation at data entry. When a vendor submits a W-9, your system immediately validates the TIN format. Does it have nine digits? Does the format match the entity type? Is it a known invalid number? If it fails, prompt the vendor for correction right away, no round trip to the IRS needed.
2. Layer 2: IRS Matching before first payment. After the W-9 passes format validation, submit the name/TIN pair to IRS TIN Matching (either directly or through TINCorrect). If the match fails, contact the vendor for correction before making any payments.
3. Layer 3: Enhanced verification for high-risk relationships. For vendors with large payment volumes, vendors in high-risk categories, or vendors flagged by internal risk assessments, run additional checks: Death Master File screening, OFAC/sanctions screening, and entity-status verification.
4. Layer 4: Annual re-verification. Run your entire vendor file through bulk TIN matching at least once per year, ideally in Q4 before 1099 filing season. This catches issues that arose during the year: name changes, entity restructurings, expired ITINs, and data-entry errors.

Common Misconceptions About TIN Checking

Misconception 1: "We validate our TINs, so we are compliant"

Format validation is not compliance. The IRS does not give credit for checking that a number has nine digits. The IRS TIN Matching program exists specifically for payers to verify name/TIN pairs, and the penalty framework distinguishes between filers who made reasonable efforts to verify (which includes matching) and those who did not. Validation alone does not constitute a reasonable effort.

Misconception 2: "TIN matching tells me everything I need to know about a vendor"

TIN matching confirms one thing: the name and TIN match in IRS records. It does not confirm the vendor is who they claim to be, that the business is active, that the individual is alive, or that the entity is not sanctioned. For those checks, you need the broader verification layer.

Misconception 3: "The SSA's SSNVS is the same as IRS TIN Matching"

These are separate programs run by separate agencies with separate access rules. SSNVS is for W-2 wage reporting; IRS TIN Matching is for 1099 information returns. Using the wrong program violates the terms of service and may not provide legally defensible results.

Misconception 4: "Once verified, a TIN stays good forever"

TINs can become invalid over time. ITINs expire after three years of non-use. Businesses dissolve or restructure and may need new EINs. Individuals change their names. An annual re-verification cycle through bulk TIN matching catches these changes before they cause filing problems.

Cost Implications: What Each Level Costs

For the vast majority of businesses, TIN matching (Level 2) is the sweet spot. It satisfies IRS compliance requirements, supports a strong reasonable-cause defense, and costs far less than the penalties it prevents. Validation (Level 1) should always be performed as a pre-filter, and full verification (Level 3) should be reserved for high-risk or regulated scenarios.

How TINCorrect Combines All Three Levels

TINCorrect is designed to make the right level of TIN checking easy, regardless of your volume or technical sophistication:

• Automatic format validation: Every TIN submitted to TINCorrect is format-checked before it reaches the IRS. Invalid formats are flagged immediately with a clear explanation, saving you an IRS lookup.
• IRS TIN Matching: TINCorrect submits your name/TIN pairs to the IRS TIN Matching program as an authorized agent. You get the same authoritative result without registering for e-Services.
• Plain-English results: Instead of cryptic numeric result codes, TINCorrect explains what each result means and recommends next steps.
• Flexible volume: Single lookups, bulk uploads of up to 100,000 records, or real-time verification via RESTful API.
• Audit trail: Every verification is timestamped and logged, providing the documentation you need for a reasonable-cause defense.

Compare TINCorrect to other TIN matching services on our comparison page or sign up and start verifying today.

Choosing the Right Approach for Your Business

Here is a decision framework based on your business profile:

Conclusion

The terms "TIN matching," "TIN verification," and "TIN validation" are not interchangeable. Validation checks format. Matching compares a name/TIN pair against the IRS database. Verification is a comprehensive process that can include matching, death-record screening, sanctions checks, and more.

For tax-compliance purposes, TIN matching is the minimum standard. It is what the IRS provides (and expects you to use) to prevent incorrect filings. Validation is a useful pre-filter, and comprehensive verification adds layers for high-risk or regulated scenarios. The most effective approach layers all three: validate at data entry, match before filing, and verify comprehensively for high-risk cases.

Whatever level you choose, the key is to verify before you file, not after. Catching a mismatch at the W-9 stage costs almost nothing. Catching it after the IRS sends a CP2100 notice costs $330 or more per return, plus the operational burden of B-Notices, backup withholding, and corrected filings.

TINCorrect makes it easy to implement the right level of checking for your business. Get started today.

Frequently Asked Questions

Author

Ken Ham

Founder at TINCorrect

Passionate about making tax identity verification simple so businesses can focus on what matters.