Yes, it is generally safe to share your EIN number, and in many situations federal law requires it. An Employer Identification Number identifies a business rather than a person, and it routinely shows up on tax forms, vendor paperwork, and public filings. The useful question is not whether to hand it over, but how to recognize a legitimate request, how to deliver the number without creating unnecessary copies, and what to do if someone misuses it.
Who Has a Legitimate Reason to Ask
Federal law requires anyone filing a tax return or related document to include an identifying number, and for most businesses that number is the EIN.1Office of the Law Revision Counsel. 26 USC 6109 – Identifying Numbers That single rule drives most of the requests you’ll see.
Banks and credit unions have to collect a taxpayer identification number from every business customer under federal Customer Identification Program rules. For U.S. entities that means the EIN, and refusing to provide it will get your account application denied.2FFIEC BSA/AML Examination Manual. Regulatory Requirements – Customer Identification Program
Clients who pay you $600 or more in a year need your EIN to file Form 1099-NEC with the IRS.3Internal Revenue Service. Instructions for Forms 1099-MISC and 1099-NEC (04/2025) They collect that number using Form W-9: they send the form, you fill in your legal name, entity type, and EIN, sign it, and return it.4Internal Revenue Service. Instructions for the Requester of Form W-9 (03/2024) – Section: Purpose Refusing carries a direct cost. The payer must withhold 24% of every payment to you and send it to the IRS as backup withholding.5Internal Revenue Service. Publication 15 (2026), (Circular E), Employers Tax Guide You’d get it back eventually as a credit, but you’re out nearly a quarter of your revenue in the meantime.
State tax agencies use your EIN as the anchor for sales tax, income tax withholding, and unemployment insurance accounts. Employees receive it on every W-2, which the IRS and Social Security Administration match against personal returns.6Internal Revenue Service. General Instructions for Forms W-2 and W-3 (2026) – Section: Taxpayer Identification Numbers All of these are ordinary, expected uses.
Where Your EIN May Already Be Public
Depending on how your business is structured, the number may already be sitting in public databases. That changes what “protecting” it actually accomplishes.
Nonprofits must make their annual Form 990 available for public inspection, and the EIN appears on that return.7Internal Revenue Service. Public Disclosure and Availability of Exempt Organization Returns and Applications – Public Disclosure Overview Donors and watchdog groups can look it up freely, which is the point of the disclosure rule.
Publicly traded companies list their EIN on the cover page of Form 10-K, filed with the SEC and searchable by anyone through EDGAR.8Securities and Exchange Commission. Form 10-K For a public company the EIN is roughly as private as the stock ticker.
Private LLCs and corporations are different. State business registries generally do not display the federal EIN. Most secretary of state offices track their own filing numbers and make entity names and registered agents searchable, but the EIN itself typically isn’t part of those records. If you’re a private company, treating the number as sensitive still makes sense; if you’re a nonprofit or public company, treat it as effectively public.
How to Send Your EIN Without Multiplying Copies
Once you’ve confirmed a request is legitimate, the delivery method matters more than most business owners realize. The number itself isn’t a secret like a Social Security Number, but careless transmission creates problems you don’t need.
- Secure portals. Many accounting firms and larger companies offer an encrypted upload link for W-9 submissions. Use it when it’s available.
- Encrypted email. If you have to email a completed W-9, send it as a password-protected PDF and share the password on a separate channel like a phone call or text. Sending the W-9 as a plain attachment is one of the most common mistakes.
- Physical mail. Certified or registered mail keeps the document off digital networks and creates a delivery receipt. Slower, but appropriate for high-value relationships.
- Phone or in person. If the other party just needs the nine digits confirmed, reading them to a known contact on a call is fine.
The goal is to limit how many unprotected copies of the completed form exist. After you send it, confirm receipt and keep a copy for your own records.
Spotting a Fake W-9 Request
The scam tactics used to steal personal information get pointed at businesses too, often dressed up as W-9 requests. A legitimate request comes from someone you’re already working with or have recently agreed to work with, through a channel you recognize, from a contact whose name you can verify.
The warning signs match what the FTC flags for phishing generally: unsolicited messages from senders you don’t know, urgent language pushing you to act fast, generic greetings like “Dear Business Owner,” and links pointing to unfamiliar websites.9Federal Trade Commission. How To Recognize and Avoid Phishing Scams
Before answering a W-9 request you didn’t expect, verify it independently. Call the company using a number from their official website, not the one in the email. If the request came with a link to an online form, ignore the link and go to the company’s portal on your own. Thirty seconds of checking can spare you months of cleanup.
Using an EIN to Keep Your SSN Off Client Files
This is the piece most sole proprietors miss. If you freelance without an EIN, you may be putting your Social Security Number on every W-9 you hand to a client. Each copy sits in another company’s filing system, and each system is a target.
Sole proprietors can apply for an EIN even with no employees. The IRS issues them free through its online application in minutes. Once you have one, you can use it in place of your SSN on Form W-9.10Internal Revenue Service. About Form W-9, Request for Taxpayer Identification Number and Certification Your personal number stays off your clients’ books.
This doesn’t erase all risk. Your SSN still appears on your personal tax return, and some financial institutions may require it separately. But it cuts down sharply on the number of private companies holding it.
What to Do if Your EIN Is Misused
An EIN doesn’t carry the same identity-theft weight as an SSN, but it isn’t risk-free. Criminals who obtain a business EIN can file fraudulent tax returns aimed at refundable business credits, open credit lines, or use the number to prop up schemes targeting individuals.11Internal Revenue Service. Tax Practitioner Guide to Business Identity Theft
The warning signs are IRS notices about returns you didn’t file, bills for business credit cards you never applied for, and unfamiliar accounts on a business credit report. If you see any of these:
- Respond to any IRS notice using the contact information printed on the notice itself.
- File IRS Form 14039-B, the Business Identity Theft Affidavit, by mail to the IRS in Ogden, Utah, by fax to 855-807-5720, or in person at a Taxpayer Assistance Center by appointment.12Internal Revenue Service. Business Identity Theft Affidavit
- File a police report with your local department.
- Place fraud alerts with Equifax, Experian, and TransUnion.
Sharing your EIN when someone with a real reason asks is normal business. The care goes into confirming the reason is real, sending the number through a channel that doesn’t leak copies, and watching for signs that something has gone wrong.