https://www.accountingtoday.co...&bt_ts=1643022091604

The Internal Revenue Service has implemented a new verification process for taxpayers who want to access their online tax accounts and self-help tools that includes taking a selfie and submitting a photo of their driver’s license or passport to a third-party service, ID.me.

The IRS announced the new authentication procedure last November after a series of high-profile data breaches in recent years on some of its online tools like Get Transcript (see story). The new procedures are garnering fresh attention this week after a report on the cybersecurity blog Krebs on Security and as more of the IRS rolls out the new authentication process across more of its online apps as the start of tax season approaches next Monday.

The IRS is emphasizing that selfies won’t be needed to file and pay taxes online, only for accessing its online accounts and self-help tools.

“There have been some wildly inaccurate statements regarding the use of selfies relating to paying and filing taxes,” said a statement forwarded by IRS spokesperson Bruce Friedland. “The IRS emphasizes taxpayers can pay or file their taxes without submitting a selfie or other information to a third-party identity verification company. Tax payments can be made from a bank account, by credit card or by other means without the use of facial recognition technology or registering for an account. To help protect the security of taxpayers, the IRS uses an identity verification process for accessing IRS’ self-help tools such as checking your account online and getting a transcript online.”

Other apps that will require the beefed-up authentication include the Child Tax Credit Update Portal, Get an Identity Protection PIN (IP PIN) and Online Payment Agreement. The IRS said in November it has also integrated this new account-creation process into some applications used by tax professionals, including those used to request powers of attorney or tax information authorizations online using Tax Pro Account or to submit Forms 2848 and 8821 online.

The new procedures come after the IRS has been hit by cyberattacks in recent years. In 2015, the IRS needed to remove its Get Transcript app in the middle of tax season after finding that identity thieves had used it to get access to the transcripts of hundreds of tax returns. It relaunched the app in 2016 with improved authentication procedures (see story). Similar problems were found with the IP PIN app and others where the IRS needed to improve authentication (see story).

ID.me has grown into a default identity verification system for other federal government programs and in 27 states after being in business for only 12 years, according to CBS News. The tech site Gizmodo reported that the service requires users to share not only a selfie and government verification document like a driver’s license or passport, but also their Social Security number and allow access to their biometric data like voiceprints and their credit profile.

They’ll get a picture of my scrotum. How’s that?

So they want me to give my biometrics, SSN, and IDs to a third party and trust them/IRS? Seems like a grand idea!

quote:

Originally posted by Anush:
https://www.accountingtoday.co...&bt_ts=1643022091604

The IRS is emphasizing that selfies won’t be needed to file and pay taxes online, only for accessing its online accounts and self-help tools.

There will be pushback.

The final solution is to revoke the income tax completely. We didnt have it before 1917 and even then the working man didn't pay it. It can be done. We just need to stop accepting all the rationalization and excuses to document and control our income by our public servants who manipulate the system to gather more power over us.

We need to stop believing it's for our own good. The government was initially meant to stop evil. Does it still do that job?

What could possibly go wrong??

In related news, Logitech, the leader in personal computer peripherals, has announced a USB "personal emissions enforcement container under platform (PEECUP)" that provides rapid analysis of individual bodily fluids to validate users. Shipping 3Q 2022. Pre-order yours now!

quote:

Originally posted by Anush:

The Internal Revenue Service has implemented a new verification process for taxpayers who want to access their online tax accounts and self-help tools that includes taking a selfie and submitting a photo of their driver’s license or passport to a third-party service, ID.me.

The Office of Personnel Management lost all of my clearance applications, including digital fingerprints and digital pictures of me to PRC hackers.

The IRS and ID.me can both go fuck each other.

 
My understanding (from Krebs on Security) is that almost all govt. agencies are moving to id.me, as well as other organizations.
 
I signed up for IRS and SS, and it was pretty painless. Upload front and back of your DL (other documents acceptable, like PP or PP card), and let them scan your face while in your browser. There are several choices for 2FA.
 
Since registering, I've accessed both agencies using id.me, and the only thing needed is 2FA, no face scan after the initial setup. According to Krebs, later this year that's the only way you'll be able to access IRS.
 
Prior to doing the initial setup, it's a good idea to give your browser access to your camera (security settings). That saves time during the process.

“There have been some wildly inaccurate statements regarding"...
This statement alone should give anyone pause...Every time a .gov related entity utters this phrase, we find out that they were doing and/or intending to do EXACTLY what they're denying, and this should be NO exception!

"Other apps that will require the beefed-up authentication include the Child Tax Credit Update Portal, Get an Identity Protection PIN (IP PIN)"...
These are practically compulsory at this point. I had NO choice when the .gov started depositing money in my bank account this year for the 'Child Tax Credit'...First I was notified, and then it was happening.

"ID.me has grown into a default identity verification system for other federal government programs and in 27 states after being in business for only 12 years, according to CBS News. The tech site Gizmodo reported that the service requires users to share not only a selfie and government verification document like a driver’s license or passport, but also their Social Security number and allow access to their biometric data like voiceprints and their credit profile."
What could possibly go wrong?


'No face scan after initial setup'...
Really, then why do they need it in the first place? It sure would be an easy way for the .gov to populate Facial Recognition databases.

Those that give up their Liberty in exchange for Security, deserve neither...

quote:

Originally posted by ZSMICHAEL:
What could possibly go wrong??

Oh Look, It's Lois Lerner, AKA Toby Miles when using e-mail. Pushes her agenda while using the IRS records. Oh joy.

quote:

I had NO choice when the .gov started depositing money in my bank account this year for the 'Child Tax Credit'...First I was notified, and then it was happening.

You were notified?

One day I had a deposit in my account that I wasn't expecting. I have never provided the IRS with my bank account information, short of sending them checks for payments.

quote:

Originally posted by erj_pilot:
They’ll get a picture of my scrotum. How’s that?

They're unique, like fingerprints and retinal patterns???

Well, I'll be a monkey's uncle, I didn't know.

Sounds to me like they're sourcing the data to drive their universal face recognition system.

How long until your DNA is required for everyone?

It is much like the hazzard of Amazon and other tech companies knowing everything you do.
NOW it is just to help you and some marketing $$ advantage to you.
SOON it will be to control your viewing ... oh WAIT ... that is now happening with YouTube, Twatter, FB and .... coming to an online experience for you.
[tinfoil hat] OFF [/tinfoil hat]

quote:

Originally posted by erj_pilot:
They’ll get a picture of my scrotum. How’s that?

Not that it's a bad idea...
What would keeps me up at night would be thinking about what some pencil-necked dork at the IRS would be doing to themself with a picture of my jiggly glad bag.

I'll send a picture of a donkey's balls.

I've already used ID.me for my Apple veteran's discount and VA accounts.

For the IRS login they require not just "a selfie," but a live selfie ID.me takes in real time.

ID.me texts you a link to the mobile phone number you have on-file with them. That link takes you to an ID.me web app that then takes a fresh selfie with flashing colors that cause minute reactions on your face and in your eyes.

I had a helluva time with that until I realized that, when they said I needed to increase the phone's screen brightness, they meant, literally, the phone's screen brightness. At my default brightness levels I guess their flashing lights weren't having the desired effect. To get it to succeed I had to turn it up all the way.

Once they acquire a satisfactory live selfie they compare it to a facial image they have on-file. I'm assuming they have access to drivers license (and perhaps passport, CPL/CCW, etc.?) photos.

Anyway: I got 'er done.

I understand the reluctance on some of y'all's parts to do these on-line things, but the danger, if you do not, is somebody else may do it on your behalf. While the IRS-required process at ID.me should make that exceedingly difficult--if not nigh impossible, others are not so difficult. E.g.: USPS' Informed Delivery. There have been cases of bad actors registering USPS Informed Delivery accounts on behalf of others and re-directing snail mail and packages.

So I create on-line accounts for pretty much any- and everything, whether I plan to actively use them or not.

I am a little concerned with the growing use of ID.me, however. Like Apple's Wallet and Apple Pay: I can see the security benefit, but I can also see the terrible danger of that one resource getting compromised. I sure hope they're on top of their game and never become complacent is all I can say.

I think it's time for the IRS to die. Hopefully, it takes a few days and is extremely painful.

I was enrolled in ID.me some years back when the Federal job application website was hacked. From time to time, I get a message from them that I have a notification and I need to sign in. Invariably, its to tell me a sex offender has moved into my neighborhood.
So I got that going for me!

Won't work for me--my computer does not have a camera or microphone. And I don't plan to install any.

flashguy

Will ID.me be used for voter identification?