April 10, 2020

The U.S. federal government is now in the process of sending Economic Impact Payments by direct deposit to millions of Americans. Most who are eligible for payments can expect to have funds direct-deposited into the same bank accounts listed on previous years’ tax filings sometime next week. Today, the Internal Revenue Service (IRS) stood up a site to collect bank account information from the many Americans who don’t usually file a tax return. The question is, will those non-filers have a chance to claim their payments before fraudsters do?

The IRS says the Economic Impact Payment will be $1,200 for individual or head of household filers, and $2,400 for married filing jointly if they are not a dependent of another taxpayer and have a work eligible Social Security number with adjusted gross income up to:

  • $75,000 for individuals
  • $112,500 for head of household filers and
  • $150,000 for married couples filing joint returns

Taxpayers with higher incomes will receive more modest payments (reduced by $5 for each $100 above the $75,000/$112,500/$150,000 thresholds). Most people who who filed a tax return in 2018 and/or 2019 and provided their bank account information for a debit or credit should soon see an Economic Impact Payment direct-deposited into their bank accounts. Likewise, people drawing Social Security payments from the government will receive stimulus payments the same way.

But there are millions of U.S. residents — including low-income workers and certain veterans and individuals with disabilities — who aren’t required to file a tax return but who are still eligible to receive at least a $1,200 stimulus payment. And earlier today, the IRS unveiled a Web site where it is asking those non-filers to provide their bank account information for direct deposits.

However, the possibility that fraudsters may intercept payments to these individuals seems very real, given the relatively lax identification requirements of this non-filer portal and the high incidence of tax refund fraud in years past. Each year, scam artists file phony tax refund requests on millions of Americans, regardless of whether or not the impersonated taxpayer is actually due a refund. In most cases, the victim only finds out when he or she goes to file their taxes and has the return rejected because it has already been filed by scammers.

In this case, fraudsters would simply need to identify the personal information for a pool of Americans who don’t normally file tax returns, which may well include a large number of people who are disabled, poor or simply do not have easy access to a computer or the Internet. Armed with this information, the scammers need only provide the target’s name, address, date of birth and Social Security number, and then supply their own bank account information to claim at least $1,200 in electronic payments.

Page 1 of 2 in the IRS stimulus payment application page for non-filers.

Unfortunately, SSN and DOB data is not secret, nor is it hard to come by. As noted in countless stories here, there are multiple shops in the cybercrime underground that sell SSN and DOB data on tens of millions of Americans for a few dollars per record.

A review of the Web site set up to accept bank account information for the stimulus payments reveals few other mandatory identity checks to complete the filing process. It appears that all applicants need to provide a mobile phone number and verify they can receive text messages at that number, but beyond that the rest of the identity checks seem to be optional.

For example, Step 2 in the application process requests a number of data points under the “personal verification” heading,” and for verification purposes demands either the amount of the applicant’s Adjusted Gross Income (AGI) or last year’s “self-selected signature PIN.” The instructions say if you do not have or do not remember your PIN, skip this step and follow the instructions in step A above.

More importantly, it appears one doesn’t really need to supply one’s AGI in 2018. “If you didn’t file a return last year, enter 0,” the site explains.

Step 2 in the application for non-filers.

In the “electronic signature,” section at the end of the filing, applicants are asked to provide a cell phone number, to choose a PIN, and provide their date of birth. To check the filer’s identity, the site asks for a state-issued driver’s license ID number, and the ID’s issuance and expiration dates. However, the instructions say “if you don’t have a driver’s license or state issued ID, you can leave the following fields blank.

Alas, much may depend on how good the IRS is at spotting phony applications, and whether the IRS has access to and bothers to check state driver’s license records. But given the enormous pressure the agency is under to disburse these payments as rapidly as possible, it seems likely that at least some Americans will get scammed out of their stimulus payments.

The site built to collect payment data from non-filers is a slight variation on the “Free File Fillable Forms” product, which is a free tax filing service maintained by Intuit — a private company that also processes a huge percentage of tax returns each year through its paid TurboTax platform. According to a recent report from the Treasury Inspector General for Tax Administration, more than 14 million Americans paid for tax preparation services in 2019 when they could have filed them for free using the free-file site.

In any case, perhaps Intuit can help the IRS identify fraudulent applications sent through the non-filers site (such as by flagging users who attempt to file multiple applications from the same Internet address, browser or computer).

There is another potential fraud storm brewing with these stimulus payments. An app is set to be released sometime next week called “Get My Payment,” which is designed to be a tool for people who filed tax returns in 2018 and 2019 but who need to update their bank account information, or for those who did not provide direct deposit information in previous years’ returns.

It’s yet not clear how that app will handle verifying the identity of applicants, but KrebsOnSecurity will be taking a look at the Get My Payment app when it launches later this month (the IRS says it should be available in “mid-April”).


304 thoughts on “New IRS Site Could Make it Easy for Thieves to Intercept Some Stimulus Payments

  1. Jack

    I’m on SSI for 20 years and a non-filer (for 20 years). I have direct deposit to my bank for my SSI payments. I have never received an IP code from the IRS. I’ve tried using the simple online tool from Turbo Tax and also with FreeFileFillableForms. I filled out and submitted the simple online form (leaving the IP code blank). Then several hours later I get an email that says the IRS rejected my information because I disn’t enter my IP code. I then tried to register on the IRS web site to get an IP code – and it won’t let me register. Only goes back 7 years. (Says my information doesn’t match what they have on file). I then tried to call the IRS call center – and they have a recorded message that the call center is closed because of coronavirus.

    1. Taylor

      SSI will automatically get it you dont have to file it will go in the cars your benefits are on

      1. Lasharonda

        I checked status for my stimulus payment but so sad irs deposited my money into some one else’s account although they already have my correct information…. I have 3 children and I need help I don’t know what to do… how do I contact them online and what do I look under to let them know of this mistake?

        1. Ryan

          Yeah me too – I filed in January and had my refund deposited directly into my account. Checked today and the payment was routed to someone else’s account…. No recourse I can find anywhere either….

          1. mary

            Same thing is happening to me! I cannot figure out how to get into contact with IRS!!!

          2. Tamara

            Did you file your taxes with a tax group? Because sometimes if you did they take out what you owe and then deposit it to your account. So if you did use a tax group check with them because that’s what happened to me my tax guys bank he used has mine.

          3. Tamara

            Did you have fees taken out and then they deposit it into your account? If so then whatever bank your tax person used would have it it happened to me I’m like how come it’s in another account. I called the bank my tax guy uses and they are sending my check in the mail .

        2. Saad

          I feel your pain %100 I’m currently going thru the same situation! I’m looking for information but it’s hard to contact anyone, due to the epic pandemic! I’m really confused because my direct deposit information on file ,has been the same for 5 yrs….When I receive more information,I’ll post here again

        3. JB

          Same thing happened to me. Leave it to the government to screw up the simplest thing.

        4. Warren C Meyer

          I have the same problem as does my daughter. My account number hasn’t changed in decades but the portal shows a different account number. Of course there’s no way to correct or contact them. I’m not desperate for the money right now but I don’t want someone else getting my check. Hope someone posts an answer to this soon. Good luck to you.

        5. Merci Tumusifu

          This happened to me too . I don’t know what to do. I really need help.

      2. Tom'eka Brady

        When do you think it will come, and does that apply to the people who are the payee, my daughter gets SSI she is only 15. And how much would the payment be anyway
        ..

    2. Larinda

      Mine was rejected also. I tried to call and got a busy signal. Is there a real number to call. I need that pin

  2. Marlene

    I messed up a few time and left it open then was almost done and it said I had something wrong in my information then I kept trying to see what was wrong but everything was correct then was going to get back on and try to finish and I couldn’t log in then said I was locked out so now they have my information and I am screwed and get nothing I assume and someone else will get whatever is mine so I won’t get it I never said anything this is the first time going on any website

  3. Destiny

    The tax return information you entered does not match our records? I already recieved my tax refund both of them. I dont understand how my information is wrong!

    1. Shannon Cole

      Mine says the same thing. Dont know what to do.

    2. Janell

      I am having the exact same issue. I know my information for both years is correct, but it says it is not.

      1. Nicole

        I have the same issue and I am afraid of putting my information there

    3. Nick

      I am having the exact same issue. And it locked me out of the system for 24 hours due to too many attempts. I’m really confused as I know my info is correct according to my 2018 tax return. Did you file a 2019 return yet?

  4. Jane Brantley

    My brother does not have a computer as well as a lot of other senior citizens and low income families. How do they go about getting their stimulus checks.

  5. Renee

    I entered my information on the get payment tool and it says my information doesn’t match any of their records. What do I do now? I just want to update my direct deposit information

    1. Joe

      I had the same issue today – entered it straight off my 2019 tax return and it says it doesn’t match records. Tried putting in SSN both with and without dashes – no difference. After third try kicked me off and said try again in 24 hours. Any way to report this problem to IRS? It appears widespread based on blogs.

  6. Chris

    Tried the “Get my payment” tool at IRS.gov today. Had 2019 return in hand. Tried to enter the information directly from my return three times. Three times it was rejected by the IRS. They say I’ve tried too many times and I’m locked out until tomorrow. IRS – you are the one with the problem when I am entering the information as submitted (and accepted by you) word for word, letter by letter, number by number, and your dumb app can’t recognize it!

  7. Lasharonda

    I checked to get my status portal this morning only to find out that IRS deposited my stimulus money into someone else’s account, I’m confused because they already have my information to the correct account I am very sad I am very hurt because I can’t contact them I don’t know what to do I need help I have three children…Can someone direct me on who to contact please? I tried going to IRS.gov but I don’t know where to file my complaint

  8. Jamie

    I am having the same issue. Went to track my payment and was told records do not match what is on file. Did I do something wrong? Am I going to receive my stimulus?

  9. Dani

    This being locked out after saying info was entered to many times or incorrect is happening to too many people. My husband’s is saying the same. We file separately. He entered the info from his tax return. No way to check or call to see what is wrong. What the heck is going on??

  10. Knox

    I bet you $100 that these corporations don’t have a bit of a problem getting their money from the IRS but they going to put the little man through hell what a shame and what a sham

  11. Erin McCarthy

    ECONOMIC IMPACT PAYMENT
    ON THE ELECTRONIC SIGNATURE PORTION QUESTION C:
    IT SAY- current year pin – both primary and spouse (if filing jointly) will need to enter a unique 5 – digit (numbers only) personal identification number (PIN) This number cannot be 0 0 0 0 0 or 1 2 3 4 5.
    My question is , if I do not have a pin do I create my own 5 digit pin?

  12. Kevina Adams

    IRS Get My Payment site says it can’t verify my eligibility at this time.

    I’m on Social Security Disability, I don’t file taxes and from what I’ve read, it’s not required. I also have direct deposit and get a SA 1099 form every year.

    I don’t know what the problem is.

    1. Lisa

      If you are on Social Security you do not need to file.

      1. Sophia

        What about people on SSI do they need to file.

        1. Lady Sassy

          Honestly depends if you have children under the age of 17 yes otherwise you won’t get the $500 benefit for a child otherwise know it’s supposed to be done automatically but they also say if you go on the website and add your information even if you don’t have dependent children it allegedly goes faster personally this hasn’t been my experience but this is the information that the IRS has presented

  13. Nicole

    I went on the IRS website this morning to check my status and I like many others had to enter my information off of my tax return no I was able however she got through unlike a lot of people what I can tell you is to be sure to look on your tax return for the adjusted again look for the adjusted gross income that is not the entire income that you made for the year it is the amount under that my adjusted was about 3 grand less my total income and was not an exact dollar amount you had to round it also you have to be sure to enter the refund amount that you would enter on the where’s my refund app so that is the amount before any fees come out of it you put your social security number and with no dashes but your birthday does have to have the forward/ 2 digit month 2 digit day four digit year and your address it’s just the number and Street and has to be spelled exact

  14. Kim Goodwin

    I owed taxes last year. Gave IRS my bank acct info and they debited my account. Do I need to give IRS any further info in order to get direct deposit stimulus check?

  15. Michelle

    Tried checking status of stimulus under mine and my husbands (file jointly) entered in the correct information and it says doesnt match records. Absolutely ridiculous.

  16. jay

    do married filling jointly couples need to do one each or just one person doing the “get my payment” is good?

  17. Tom'eka Brady

    My daughter gets ssi. But I tried to do the non filers thing but it keeps rejected. I dont work so the agi I put 0 but still keeps getting rejected

  18. Crystal

    Went on irs get my payment
    And it said can’t verify eligibility at this time

  19. Nas

    I checked the stimulus status and the money was deposited into someone else’s account. Why are there so many of us with this issue? This is crazy. I used my account to file for taxes so they have it on file. This is just my luck. Honestly I just want to cry.

    1. ken lyons

      if it was deposited to another account that was not yours. copy the info and do a google search for the bank and contact them

      1. Blah

        Ok, but they don’t give you bank info. Only last 4 of account. So, that’s not really possible

    2. Jonaki Mehta

      Hi Nas,

      I am so sorry to hear about the issue you are having. I am a producer at NPR and we are working on a story that has to do with victims of stimulus fraud.We’d like to get the word out about this problem. Is there any chance you’d be willing to hop on the phone with me briefly tomorrow to talk about your experience? You can reach me at jmehta@npr.org. Thanks and my best wishes.

      Jonaki

  20. Dee

    So I filed with a company here local on NC- woke up to see that check was deposited into their account but contacted them and they said their bank(Metabank) rejected the checks(odd bc they didn’t reject the refund checks and take their fees out) but now we have no options I guess?

  21. Ed

    I am literally about to lose my mind did everything that the IRS said to do I’m pretty sure they knew where all of these technical geniuses that if people were going to put their information on this site that it was easy for people to steal the information now we’re all people that desperately need this money me personally I don’t want to revert backwards and go back to the streets to make what I need to make to feed my family but it looks like that’s what I’m going to have to do because same problem I’m having like anybody else I know my social I know my street date of birth and zip code but it’s telling me that it’s not it with nobody to get in contact with nobody to air a grievance with so I guess we’re just all holding are bleeps in our hand this is sickening I’m literally disgusted I don’t even know the next move I’m a 42 year old 6 foot 3 200 lb man and honestly I’m ready to cry God help us all

    1. Daniel

      Man I feel you I just pulled myself out of being homeless. I got and lost a job all in two weeks. And this was my saving grace. I’m about to cry to man. I almost had my life back I almost had my kids in a stable place. Where the hell do we go to fix it. And who got my God dn money?????

  22. Rebecca Presseisen

    They messed up my check. I should have received 2200 since I claimed my 2 children and my ex claimed 1. I only received 1200. I am a single mom and hope they resolve this. Frustrated they screwed it up.

  23. Daniel

    Used the online tracker and saw an account number I’ve never had what was the point of providing the damn info? I filed in 2018 but needed to update my account. I did everything they asked and provided the new account number. Now I’m looking at a damn deposit that was supposed to be here today but not in my account. I’m almost out of food and I was counting on this

  24. GARY

    Tried IRS’ Get My Payment tool today, but had problems. I filed my 2019 taxes using TurboTax and received message that my return was accepted by IRS. Since I did not have any refund due and there was no payment due to IRS, my bank deposit information was no included. When I tried to submit the completed Get My Payment form it would not let me submit it becuase I did not checlk the boxes asking if I received a Refund or Made a Payement and it would not allow me to submit the form. I don’t think I should check either box if I did not receive a refund and was not required to make a payment. Not sure what to do.

  25. ReadandShare

    IRS bureaucrats likely cobbled the webpages together fast and furious, with admins breathing down their necks – ultimately under intense pressure from the White House.

    As for actual checks, prolly the only QA was someone making sure Donald Trump’s name was spelled correctly.

  26. Brittany

    Didnt receive my payment went into another account. Direct deposit been the same for years. Smh.

  27. Alicia C

    I checked and My payment got deposited into another account. I see it’s happened to others so hopefully it gets fixed

  28. Matthew

    I am so pissed. I did everything right. Then the website hid the button to proceed. It shows up for like one second then goes off screen. Zooming in doesn’t work. Turning the phone sideways doesn’t work. What a circus.

    1. Amanda

      I had the same problem at first. In order to see the submit button yoga e to go to your phone’s browser settings and switch to desktop mode. I know this reply is way late but I thought it would help.

  29. Lady Sassy

    I’m having my own issues with this I’ve been receiving SSI for 26 years I have a dependent child unfortunately IRS can’t verify my information so it looks like I won’t be getting a payment even after going through the whole process of the non tax filer form quite the pain in the butt

Comments are closed.