What Is a TIN?
SSN vs. EIN vs. ITIN Differences Explained

What Exactly Is a Taxpayer Identification Number?

A Taxpayer Identification Number is a unique nine-digit identifier that the Internal Revenue Service (or, in the case of SSNs, the Social Security Administration) assigns to individuals and entities for federal tax purposes. Think of it as the primary key the government uses to track tax obligations and filings.

Under IRS General Instructions for Information Returns, anyone required to file an information return (Form 1099-NEC, 1099-MISC, 1099-K, W-2G, and others) must include the payee's correct TIN. The term "TIN" is the IRS's umbrella label; the specific number a given taxpayer holds depends on their classification.

Here are the five TIN types at a glance:

While all five are officially "TINs," in day-to-day business operations you will almost exclusively encounter SSNs, EINs, and ITINs. ATINs are niche (limited to pending adoptions), and PTINs appear only in the context of tax-preparation signatures. The rest of this guide focuses primarily on the three TIN types your business is most likely to handle.

Social Security Number (SSN): The Most Common TIN

The Social Security Number is the nine-digit identifier most Americans know from birth. Established in 1936 under the Social Security Act, the SSN was originally designed only to track earnings for Social Security benefits. Over the decades, however, it evolved into the de facto national identifier used for tax filings, credit applications, employment verification, and much more.

Who Receives an SSN?

• U.S. citizens (typically assigned at birth when parents apply)
• Permanent residents (green-card holders)
• Temporary residents authorized to work in the United States

The SSA issues SSNs. Most Americans receive theirs at birth via the "Enumeration at Birth" program, where hospitals forward birth-registration data to the SSA automatically. Non-citizens eligible for U.S. employment obtain an SSN by filing Form SS-5 at a local Social Security office.

SSN Format and Structure

An SSN follows the pattern XXX-XX-XXXX (three digits, two digits, four digits). Historically the first three digits (the "area number") were assigned geographically. Since 2011, the SSA switched to randomized assignment, meaning the area number no longer reveals where the card was issued.

Important format rules:

• No SSN will begin with 9 (that prefix is reserved for ITINs)
• No SSN will be 000-XX-XXXX, XXX-00-XXXX, or XXX-XX-0000
• 666-XX-XXXX is never issued
• 078-05-1120 and 219-09-9999 are permanently retired (famous publicity numbers)

When Businesses Encounter SSNs

Your business collects SSNs primarily when you engage individual contractors, sole proprietors who have not obtained an EIN, or payees for prizes, rents, royalties, and similar payments reportable on 1099 forms. The SSN appears in Box 7 of the W-9 that you request from each payee during vendor onboarding.

Because SSNs are highly sensitive personally identifiable information (PII), businesses must handle them with care: encrypt them in storage, limit access on a need-to-know basis, and redact them on any externally shared documents. The combination of compliance risk and privacy risk is why many businesses turn to automated TIN matching services that can validate the number without retaining it unnecessarily.

Employer Identification Number (EIN): The Business TIN

An Employer Identification Number is the TIN assigned to business entities. If the SSN is the Social Security card for a person, the EIN is the Social Security card for a company. Any entity that employs workers, operates as a corporation or partnership, files excise-tax returns, or withholds taxes on income paid to a non-resident alien generally must have an EIN.

Who Needs an EIN?

• Corporations (C-corp and S-corp)
• Partnerships and multi-member LLCs
• Sole proprietors who hire employees
• Trusts and estates
• Nonprofit organizations
• Government agencies
• Certain single-member LLCs (by choice, for banking or liability separation)

Even a sole proprietor who has no employees may choose to obtain an EIN simply to keep their SSN off W-9 forms, adding a layer of identity-theft protection. This is a common and perfectly legal practice.

How to Apply for an EIN

Applying for an EIN is free and straightforward:

1. Online (recommended): Visit the IRS EIN Assistant at irs.gov/businesses/small-businesses-self-employed/apply-for-an-employer-identification-number-ein-online. The tool is available Monday through Friday, 7 a.m. to 10 p.m. Eastern. You receive your EIN immediately upon completion.
2. Fax: Complete Form SS-4 and fax it to the IRS. Expect a response within four business days.
3. Mail: Mail Form SS-4 to the IRS. Processing takes four to six weeks.
4. Phone (international applicants): Call the IRS Business & Specialty Tax Line.

EIN Format and Structure

An EIN follows the pattern XX-XXXXXXX (two digits, hyphen, seven digits). The first two digits are the "prefix" historically tied to the IRS campus that issued the number, though this geographic link has weakened as the IRS centralized processing.

Key distinction: When a payee provides an EIN on their W-9, you know you are dealing with a business entity, not an individual using a personal SSN. This matters for 1099-NEC vs. 1099-MISC classification and for determining whether backup withholding applies.

EIN vs. SSN: Which Should a Sole Proprietor Use?

A sole proprietor without employees is not required to have an EIN. The IRS will accept their SSN on a W-9. However, using an EIN is generally recommended because:

• It reduces SSN exposure and identity-theft risk.
• It looks more professional to clients and payers.
• It is free and takes minutes to obtain.

For deeper analysis of when an EIN is sufficient versus when a full TIN match against the IRS is needed, see our EIN Lookup vs. TIN Matching comparison.

Individual Taxpayer Identification Number (ITIN): For Non-Citizens

An ITIN is a nine-digit number the IRS issues to individuals who are required to have a U.S. taxpayer identification number but who are not eligible for a Social Security Number. The most common recipients are non-resident aliens who earn U.S.-source income, resident aliens filing tax returns, and dependents or spouses of U.S. citizens or resident aliens.

Who Qualifies for an ITIN?

• Non-resident aliens required to file a U.S. tax return
• U.S. resident aliens filing a tax return (based on days-of-presence test) who are ineligible for an SSN
• Dependents or spouses of a U.S. citizen or resident alien
• Dependents or spouses of a non-resident alien visa holder
• Non-resident aliens claiming a tax-treaty benefit

Important: An ITIN does not authorize work in the United States and does not provide eligibility for Social Security benefits. It is purely a tax-filing and tax-reporting number.

How to Apply for an ITIN

Applicants file Form W-7 (Application for IRS Individual Taxpayer Identification Number) along with a completed federal tax return and proof of identity/foreign status. Applications can be submitted:

1. By mail to the IRS ITIN Operation in Austin, Texas
2. In person at an IRS Taxpayer Assistance Center
3. Through an IRS-authorized Certifying Acceptance Agent (CAA), who can verify documents so originals do not need to be mailed

Processing typically takes seven to eleven weeks. If applied for during peak season (January through April), it can take longer.

ITIN Format

ITINs follow the same XXX-XX-XXXX pattern as SSNs, but they always begin with the digit 9 and have a fourth and fifth digit in specific ranges (currently 50-65, 70-88, 90-92, and 94-99). This means you can often identify an ITIN by sight: if the nine-digit number starts with 9 and the middle two digits fall in those ranges, it is almost certainly an ITIN rather than an SSN.

ITINs in Business Context

If you hire a foreign national freelancer, consultant, or vendor who performs services in the U.S. but lacks an SSN, they should provide an ITIN on their W-9 (or W-8BEN, depending on their tax residency). You report payments to them on a 1099 form using that ITIN.

One common pitfall: ITINs expire if not used on a federal tax return for three consecutive years. If an ITIN holder's number has expired, the IRS may reject information returns filed with that ITIN, triggering the same penalties you would face for an incorrect or missing TIN. Verifying the TIN before filing is critical.

ATIN and PTIN: Two Specialized TIN Types

Adoption Taxpayer Identification Number (ATIN)

An ATIN is a temporary nine-digit number issued to a child in a pending domestic adoption when the adoptive parents cannot obtain an SSN for the child in time to file their tax return. The ATIN allows the parents to claim the child as a dependent and, if eligible, claim the adoption tax credit.

ATINs are applied for using Form W-7A. Once the adoption is finalized and the child receives an SSN, the ATIN is retired. Businesses almost never encounter ATINs; they are relevant only in the context of personal tax returns.

Preparer Tax Identification Number (PTIN)

Any person who prepares, or assists in preparing, federal tax returns for compensation must have a PTIN. The IRS requires the PTIN to appear on every return the preparer signs. PTINs are obtained through the IRS online PTIN system and must be renewed annually.

The PTIN format is distinctive: it starts with the letter P followed by eight digits (e.g., P12345678). Because it is used exclusively for tax-preparer identification, your business will not encounter PTINs during normal vendor or contractor payment processing.

TIN Format Comparison: How to Tell Them Apart

One of the most practical questions compliance teams face is: "I have a nine-digit number on a W-9. What type of TIN is it?" Here is how to distinguish them at a glance:

Format-level checks (also called TIN validation) are a useful first pass, but they cannot confirm that a TIN actually belongs to the name provided. For that, you need TIN matching against the IRS database.

The W-9 and TIN Relationship

Form W-9 (Request for Taxpayer Identification Number and Certification) is the standard vehicle through which a business collects a payee's TIN. When you bring on a new contractor or vendor, you ask them to complete a W-9 before making any payments. The form captures:

• Legal name (and business name, if different)
• Federal tax classification (individual, C-corp, S-corp, partnership, trust, LLC)
• Address
• TIN (SSN, EIN, or ITIN)
• Certification that the information is correct and the payee is not subject to backup withholding

A properly completed W-9 is your first line of defense. But the W-9 alone does not verify accuracy. The payee might transpose digits, provide an old or expired ITIN, or even intentionally give a wrong number. That is why W-9 collection best practices always include a follow-up TIN verification step.

For a complete workflow from W-9 collection through TIN verification and 1099 filing, see our Vendor Onboarding Checklist.

How TIN Matching Validates Your Numbers

IRS TIN Matching is a free program that allows authorized payers (or their agents) to check whether a name/TIN combination matches IRS records before filing information returns. The IRS compares the name and TIN you submit against its master database and returns a result code indicating whether it matched.

There are two ways to use the IRS program directly:

1. Interactive lookup: Enter up to 25 name/TIN pairs at a time through the IRS e-Services portal. Results are returned immediately.
2. Bulk lookup: Upload a file of up to 100,000 name/TIN pairs. Results are available within 24-48 hours.

While the IRS program is free, it comes with significant limitations: restricted hours of operation, a 25-record cap per interactive session, a 96-hour lockout if you exceed submission attempts, and a registration process that can take weeks. For a full walkthrough of these constraints, see our IRS TIN Matching Registration Guide.

Services like TINCorrect wrap the IRS TIN Matching program in a more accessible interface: 24/7 availability, no session caps, bulk processing of up to 100,000 records, and an API for automated workflows. The underlying verification is the same IRS data, but the experience is dramatically faster and simpler.

Common TIN Confusion Points (and How to Avoid Them)

After years of processing thousands of TIN verifications, we have seen the same mistakes appear over and over. Here are the most common confusion points, along with how to handle each one:

1. Sole Proprietor Provides SSN When You Expected EIN (or Vice Versa)

A sole proprietor may legitimately provide either an SSN or an EIN. If they provide an SSN, you are not wrong to accept it. However, if the W-9 says "Individual/sole proprietor or single-member LLC" and provides an EIN, the legal name must be the individual's name (not just a trade name) for TIN matching purposes. The IRS matches name against TIN, so using a DBA name with an SSN will fail.

2. ITIN Looks Like an SSN

Because ITINs follow the same XXX-XX-XXXX format, they can be mistaken for SSNs. The key difference is that ITINs always begin with 9. If your system does not flag this, you might incorrectly classify a payee as an SSN holder when they are actually an ITIN holder. This matters because ITINs expire, and expired ITINs cause match failures.

3. Legal Name vs. Business Name on W-9

The IRS matches the TIN against the legal name on file, not the "business name" or "DBA" line. If a sole proprietor's legal name is "Jane Smith" but they write "Smith Consulting" on the name line, the TIN match will fail. Always ensure the W-9 legal-name line contains the name exactly as it appears in IRS records.

4. EIN Belongs to a Dissolved or Changed Entity

When a business changes its legal structure (e.g., from sole proprietorship to LLC to corporation), it may need a new EIN. If a vendor provides the EIN from their old entity, the name/TIN match will fail. This is especially common after mergers, acquisitions, and conversions.

5. Simple Transposition Errors

The most mundane cause of TIN mismatches is a digit transposition. "123-45-6789" becomes "123-45-6798." A single swapped digit means the IRS cannot match the record. This is why verifying TINs immediately upon collection is essential, before the vendor's attention has moved on and you are stuck chasing corrections.

The Cost of Getting TINs Wrong

Filing information returns with an incorrect TIN triggers a well-documented chain of consequences:

1. IRS Penalty Notices: Under IRC Section 6721 and 6722, penalties for filing with an incorrect TIN range from $60 to $660 per return, depending on how quickly you correct the error. For the 2026 tax year, the maximum penalty per return is $660, with small businesses (gross receipts under $5 million) facing a reduced cap. See our full penalty breakdown.
2. CP2100 / CP2100A Notices: The IRS sends these notices listing all the TINs that did not match their records. You then have a limited window to solicit correct information from payees.
3. B-Notice Requirements: After receiving a CP2100, you must send a First B-Notice to each listed payee requesting a corrected W-9. If the second filing also fails, you send a Second B-Notice and the payee must verify their TIN directly with the SSA or IRS.
4. Backup Withholding: If a payee does not respond to a B-Notice, you must begin withholding 24% of all reportable payments. This creates friction with the vendor relationship and administrative complexity for your AP team. Read more in our backup withholding guide.

A company with 500 vendor relationships that experiences even a 5% TIN mismatch rate could face 25 mismatches. At the maximum penalty of $660 each, that is $16,500 in penalties alone, not counting the staff hours required to handle B-Notices, solicit corrected W-9s, and implement backup withholding. For a detailed walkthrough of the full consequences chain, see What Happens When a TIN Doesn't Match.

Step-by-Step: How to Verify a TIN Before Filing

Whether you are verifying one TIN or ten thousand, the process follows the same logical flow:

1. Collect the W-9. Request a completed, signed W-9 from every payee before making the first payment. Ensure the legal name (Line 1) and TIN are clearly legible. See our W-9 Collection Guide for best practices.
2. Format-check the TIN. Does the number have exactly nine digits? Does the format match the entity type (EIN pattern vs. SSN/ITIN pattern)? Does the W-9 checkbox align with the TIN type? This is TIN validation: a quick syntactic check that catches obvious errors.
3. Run a TIN match. Submit the name/TIN pair to the IRS TIN Matching program (either directly through e-Services or via a service like TINCorrect). The IRS returns a code indicating whether the pair matches.
4. Interpret the result. A "match" (Code 0) means the name and TIN align in IRS records. Any other code indicates a problem. See our IRS TIN Matching Result Codes guide for the full list.
5. Resolve mismatches. Contact the payee, request a corrected W-9, and re-verify. Do this promptly; the longer you wait, the harder it becomes to reach the vendor and the closer you get to filing deadlines.
6. Document everything. Maintain records of each verification attempt, the result codes, and any corrective actions. This documentation is essential if you ever need to establish reasonable cause to abate IRS penalties.

Real-World Scenarios: TINs in Action

Scenario 1: Marketing Agency Onboards a Freelance Photographer

A marketing agency hires a freelance photographer for a $5,000 project. The photographer is a sole proprietor operating under the trade name "Bright Lens Photography." On the W-9, the photographer lists "Bright Lens Photography" on Line 1 and provides her SSN.

Problem: The IRS has the SSN registered under the photographer's legal name, "Maria Chen," not "Bright Lens Photography." When the agency runs a TIN match, the result comes back as a mismatch.

Solution: The agency requests a corrected W-9 with "Maria Chen" on Line 1 and "Bright Lens Photography" on Line 2 (the business-name / DBA line). The re-verification succeeds, and the agency files the 1099-NEC with the correct name/TIN.

Scenario 2: Construction Firm Pays a Subcontractor LLC

A construction firm pays $80,000 to "River Valley Builders LLC," a single-member LLC. The W-9 provides an EIN. The TIN match confirms the EIN belongs to "River Valley Builders LLC."

Nuance: Because the LLC is a single-member LLC taxed as a disregarded entity, the IRS considers the owner (an individual) as the taxpayer. However, the IRS also accepts the LLC's own EIN if it was properly obtained. The key is consistency: the name on the W-9 must match the name on the EIN application. This scenario succeeds because the LLC obtained its own EIN and uses it consistently.

Scenario 3: Tech Company Hires an International Consultant

A U.S. tech company hires a software consultant based in Canada who performs some work while visiting the company's U.S. office. The consultant has no SSN but has obtained an ITIN. On the W-9, the consultant provides the ITIN.

Consideration: The company should verify the ITIN is still valid (not expired). They should also determine whether the consultant's work triggers U.S.-source income reporting. In this case, since work was performed in the U.S., a 1099-NEC is required, and the ITIN must match IRS records.

How TINCorrect Simplifies TIN Verification

Regardless of whether your payees provide SSNs, EINs, or ITINs, TINCorrect verifies them all against the same IRS TIN Matching database. Here is what sets TINCorrect apart:

For businesses that need to verify TINs at scale, the difference is night and day. Learn more about the best TIN matching services or sign up for TINCorrect and start verifying in minutes.

Conclusion

A Taxpayer Identification Number is far more than a bureaucratic formality. It is the linchpin that connects every payment you make to the IRS's ability to track income. Understanding the differences between SSNs, EINs, ITINs, ATINs, and PTINs is foundational knowledge for anyone involved in vendor payments, 1099 filing, or tax compliance.

The practical takeaway is straightforward: collect a properly completed W-9 from every payee, verify the name/TIN combination against IRS records using TIN matching, resolve any mismatches before filing, and document your due-diligence process. That workflow protects you from penalties, eliminates backup-withholding headaches, and keeps your vendor relationships running smoothly.

Whether you have ten vendors or ten thousand, the principle is the same. The only question is whether you want to manage the verification process manually through the IRS's limited e-Services portal or let a purpose-built tool like TINCorrect handle it for you.

Frequently Asked Questions About TINs

Author

Ken Ham

Founder at TINCorrect

Passionate about making tax identity verification simple so businesses can focus on what matters.