Paying a vendor seems simple. But without vendor TIN verification, a single payment can trigger an IRS penalty, require mandatory backup withholding, or violate U.S. sanctions law. The question most businesses get wrong isn’t whether to verify—it’s how often.
Why Vendor Verification Is Critical for Compliance
Vendor compliance failures fall into three categories: incorrect tax identity, payments to deceased individuals, and transactions with sanctioned parties.
When a vendor’s name and TIN don’t match IRS records, the IRS issues a CP2100 notice. The payer must send a B Notice within 15 business days and begin mandatory backup withholding at 24% if the vendor doesn’t respond within 30 days. For tax year 2025 returns, penalties range from $60 to $310 per form—with no annual cap for intentional disregard.
OFAC violations carry civil penalties exceeding $330,000 per incident. Payments to deceased individuals raise IRS audit flags and fraud exposure.
What Is IRS TIN Matching and Why It Matters
IRS TIN matching confirms that a vendor’s name and Taxpayer Identification Number (SSN or EIN) match IRS records before an information return is filed. It’s available for free through the IRS e-Services platform for payers filing Forms 1099-MISC, NEC, INT, DIV, and others.
Two options are available: Interactive TIN Matching (up to 25 records, real-time) and Bulk TIN Matching (up to 100,000 records). Payers who validate before filing receive fewer CP2100 notices and penalties, per the IRS General Instructions for Certain Information Returns (2025).
| Trigger | Recommended Action |
| New vendor onboarding | Verify before first payment |
| Annual pre-filing review (fall) | Bulk TIN match entire vendor database |
| Vendor name or structure change | Re-verify immediately |
| CP2100 / CP2100A notice received | Verify affected records; send B Notice within 15 business days |
| W-9 submitted or updated | Validate TIN/name upon receipt |
How the Death Master File (DMF) Helps Prevent Fraud
The Death Master File (DMF) is maintained by the Social Security Administration (SSA) and contains records of deceased individuals who had Social Security numbers. The public version holds over 88 million records; the Limited Access DMF (LADMF) includes over 100 million.
The SSA adds 8,000–13,000 new records weekly. A vendor who passed a DMF check six months ago may now appear in the file—making periodic re-screening essential for any business paying contractors or sole proprietors via SSN.
TINCheck’s DMF verification process runs alongside IRS TIN matching and OFAC screening in a single submission, so there’s no separate step required.
Why OFAC Screening Should Be Ongoing
The Office of Foreign Assets Control updates its Specially Designated Nationals (SDN) List continuously and without a fixed schedule. A vendor who was clear at onboarding may have been designated since.
OFAC’s own guidance states that all U.S. persons must comply with sanctions in real time. Screening only at initial engagement creates exposure—a risk that applies equally to vendor relationships across all industries.
TINCheck screens against the OFAC SDN List, non-SDN consolidated sanctions lists, and approximately 30 additional government databases with every check.
| Trigger | Recommended Action |
| New vendor onboarding | Screen before first transaction |
| OFAC list update | Re-screen affected or at-risk categories |
| Contract renewal or amendment | Re-screen all parties |
| High-risk or international vendors | Screen at each significant transaction |
Recommended Frequency for Vendor Compliance Checks
| Verification Type | At Onboarding | Ongoing / Triggered By |
| IRS TIN Matching | Yes | Annually (pre-filing); triggered by W-9 updates, CP2100 notices, name changes |
| Death Master File (DMF) | Yes | Quarterly for high-risk vendors; triggered by weekly DMF updates |
| OFAC / SDN Screening | Yes | Ongoing; triggered by list updates, contract renewals, transaction milestones |
Checking once is never enough. A small business with 20 stable vendors can run annual bulk checks. A payments platform or enterprise managing international suppliers needs continuous vendor compliance monitoring across all three databases.
Automating Vendor Verification Processes
Manual vendor TIN verification breaks down at scale: W-9s go unchecked, OFAC screenings get skipped, and DMF lookups are inconsistent. Automation fixes this.
TINCheck by Sovos offers three ways to incorporate continuous TIN validation into your workflows:
- Real-time verification — instant results for individual records across IRS, DMF, and OFAC
- Bulk Checks — upload vendor databases for pre-filing cleanup or periodic re-screening
- API integration — connect via SOAP or REST API to automate checks at the point of onboarding in your ERP, CRM, or accounts payable system
Every check generates a documented audit trail—critical for demonstrating good-faith compliance to the IRS or OFAC. Vendor compliance monitoring becomes a background process, not a last-minute fire drill.
Frequently Asked Questions
What is vendor TIN verification?
It is the process of confirming that a vendor’s name and TIN (SSN or EIN) match IRS records before issuing 1099-reportable payments. It prevents B Notices, backup withholding, and information return penalties.
How often should businesses run IRS TIN matching?
At minimum: at onboarding and once per year before filing season. High-volume businesses with frequent vendor changes should consider real-time or quarterly matching. The IRS offers free interactive (25 records) and bulk (100,000 records) TIN matching through e-Services.
What is the Death Master File used for?
DMF checks verify hat an SSN is not associated with a deceased individual. With 8,000–13,000 new records added weekly, onboarding-only checks are insufficient for ongoing vendor identity verification.
How often should OFAC screening be performed?
Onboarding and continuously thereafter, since the SDN List updates without a fixed schedule. Businesses in financial services, payments, or having international vendors should automate OFAC screening rather than relying on periodic manual reviews.
Can vendor verification be automated?
Yes. TINCheck automates IRS TIN matching, DMF screening, and OFAC/SDN checks via real-time TIN matching, with API integration available to streamline your onboarding workflow.
Get access to simple verification against the IRS Name/TIN Database & 20+ Global Watchlists with TINCheck. Get started today.