Anti-Fraud Policy & Identity Protection

Effective Date: October 15, 2026 | Applies to: All ERO Partners & Users

1Our Commitment to Fraud Prevention

TaxLogistics is committed to maintaining the integrity, security, and trustworthiness of every interaction within our platform. As a Service Bureau and software provider serving Electronic Return Originators (EROs), we recognize that our partners handle sensitive taxpayer data and IRS-regulated credentials. Protecting that ecosystem from fraud is a shared responsibility.

This policy outlines the fraud schemes that target EROs, the protections TaxLogistics has in place, and the steps you must take to safeguard your business, your EFIN, and your clients.

2Common Fraud Schemes Targeting EROs

Tax professionals are high-value targets for criminals. The following schemes are most commonly reported by EROs and IRS-authorized e-file providers:

EFIN Theft & Misuse

Criminals steal or spoof ERO Electronic Filing Identification Numbers to file fraudulent returns and intercept refunds without the ERO's knowledge.

Phishing & Spear Phishing

Targeted emails disguised as the IRS, tax software vendors, or your Service Bureau request login credentials, EFIN data, or payment information.

Refund Diversion Fraud

Fraudsters alter direct deposit information on returns — intercepting taxpayer refunds into accounts they control before the ERO or client notices.

Synthetic Identity Fraud

Fabricated or stolen identities are used to create fake tax returns. EROs unknowingly process these returns, exposing them to IRS scrutiny and liability.

Vendor Impersonation

Scammers pose as TaxLogistics, your software provider, or the IRS to collect payments, install malware, or obtain platform credentials.

Business Email Compromise

Fraudsters compromise or spoof email accounts to redirect wire transfers, ACH payments, or tax preparation fees to fraudulent accounts.

Entity Formation Identity Theft

Unauthorized use of stolen SSNs, government IDs, or business credentials to register fraudulent LLCs, open business bank accounts, or execute illegal EIN filings.

SMS & Messaging Brand Spoofing

Unauthorized third parties attempting to impersonate your business name via unverified text messaging campaigns or unauthorized TaxLogi CRM account access.

3How TaxLogistics Protects You

We have implemented multiple layers of security and fraud prevention controls across our platform and operations:

Multi-factor authentication (MFA) required for all ERO portal logins and account changes
EFIN verification and IRS e-Services cross-check during onboarding — no unverified EFINs are activated
Encrypted data transmission (TLS 1.2+) for all platform communications and document exchanges
Access controls and role-based permissions limiting who can modify banking, refund, and tax filing settings
Continuous monitoring for anomalous login activity, failed authentication attempts, and unusual filing patterns
Secure document handling — all uploaded ERO credentials, IDs, and tax documents are stored in encrypted vaults
Vendor communication policy — all legitimate TaxLogistics communications originate from @taxlogistics.org addresses only
Business Formation ID Verification: Strict multi-layer identity verification for all LLC formation applicants to validate government IDs and business documentation prior to state filing submission.
A2P 10DLC Carrier Messaging Verification: Automated monitoring and carrier-level registration through TaxLogi CRM to block unauthorized or fraudulent text messaging campaigns originating from unverified accounts.

4Red Flags: Protect Your EFIN & Practice

Do not ignore these warning signs. If you observe any of the following, stop, do not proceed, and report immediately:

Unexpected IRS notices about returns you did not file or clients you do not have
Login alerts for your TaxLogistics account from unrecognized devices or locations
Requests to update your bank account or direct deposit details via email or text
Clients reporting they already filed when you have no record of their return
Unsolicited calls or emails claiming to be from TaxLogistics, your software vendor, or the IRS requesting credentials
Unusual volume of rejected returns citing duplicate SSNs or previously filed statuses
Software or browser extensions you did not install appearing on your workstation
Requests for your EFIN from anyone other than verified IRS e-Services or TaxLogistics onboarding

5IRS & Federal Resources for EROs

If your EFIN or client data has been compromised, contact the IRS immediately and leverage these official resources:

IRS Identity Theft Central: irs.gov/identity-theft-central — report stolen taxpayer identities and access the ERO guidance hub
IRS e-Services Portal: la.www4.irs.gov/e-services — monitor your EFIN usage, check filing volume, and report discrepancies
Form 14039 (Identity Theft Affidavit): Submit on behalf of affected taxpayers to flag IRS accounts for fraud monitoring
IRS Stakeholder Liaison: Contact your assigned IRS liaison to report EFIN misuse or suspicious filing patterns
FTC Report Fraud: reportfraud.ftc.gov — report identity theft and business fraud to the Federal Trade Commission
IC3 (FBI Internet Crime Complaint Center): ic3.gov — report cybercrime, phishing, and ransomware incidents

6ERO Partner Obligations

As an ERO partner of TaxLogistics, you agree to maintain the following minimum security standards at your practice:

Maintain a Written Information Security Plan (WISP) as required by the Gramm-Leach-Bliley Act (GLBA) — IRS Publication 5293 provides a template
Train all staff annually on phishing recognition, data handling, and fraud prevention procedures
Use strong, unique passwords and enable MFA on all tax software, email, and financial accounts
Verify the identity of new clients using government-issued photo ID before preparing their returns
Never share your EFIN, login credentials, or TaxLogistics portal access with third parties
Report any suspected breach, unauthorized access, or fraud attempt to TaxLogistics within 24 hours
Keep all workstations, operating systems, and tax software updated with current security patches

7Report Fraud to TaxLogistics

If you suspect fraud, account compromise, EFIN misuse, or any unauthorized activity related to your TaxLogistics account or ERO practice, report it immediately through the channels below. Our compliance team responds to fraud reports within one business day.

Contact TaxLogistics Fraud & Security — available Monday–Friday, 8 AM–5 PM ET (Extended hours during tax season)

Security Email

[email protected]

Subject Line

FRAUD REPORT — Your Name / EFIN

Portal

taxlogistics.org/contact

TaxLogistics LLC Statesboro, GA 30458

(912) 333-3821 · [email protected] · Mon–Fri 8AM–5PM ET

Fraud Prevention & ERO Security

Protecting your EFIN and your ERO practice is at the core of everything we do at TaxLogistics. Review our Anti-Fraud Policy to learn how we shield ERO partners against identity theft, phishing schemes, and EFIN fraud, and what to do if you spot a threat.

Review Anti-Fraud Policy