What Is EIN Verification?
EIN verification confirms that a nine-digit Employer Identification Number has been issued by the IRS, is associated with the business name and structure provided, and has not been revoked or associated with known fraudulent activity. EIN verification is specific to US entities
The verification process typically checks the EIN against IRS records and cross-references it with state business registry data. More rigorous workflows also validate the EIN against publicly available filings, such as 990 forms for nonprofits or SEC filings for public companies, to confirm operational consistency.
An EIN verification letter, formally known as the IRS CP 575 notice or CP 147c letter, is the authoritative document issued to businesses upon EIN assignment.
Why Businesses Need EIN Verification
EIN verification is required wherever a regulated institution is onboarding a business customer. Banks, payment processors, and B2B fintech platforms must verify business identity as part of their customer due diligence obligations under the Bank Secrecy Act and FinCEN’s Customer Due Diligence Rule.
Beyond regulatory compliance, EIN verification protects institutions from several fraud vectors:
- Shell company fraud – Fraudsters use fabricated or stolen EINs to create fictitious business identities and open accounts for money laundering or credit abuse.
- Business identity theft – A legitimate company’s EIN may be used by a different entity to impersonate it during onboarding.
- Operational risk – Errors in EIN data, transposed digits, outdated company names, can create reconciliation issues in downstream financial processing.
How EIN Numbers Are Verified
- IRS TIN Matching – The IRS offers a TIN Matching program that allows authorized payers who file 1099 forms to confirm EIN-name combinations against IRS records; notably, this specific program is not available for general KYB onboarding by other regulated institutions.
- EIN verification letter review – Businesses provide their CP 575 letter as documentary evidence of EIN assignment. Verification platforms can authenticate these documents using optical character recognition and document fraud detection.
- Third-party business verification services – Specialized providers query multiple business registry and IRS data sources in real time, returning structured match results alongside confidence scores.
- State business registry cross-reference – The EIN is checked against state secretary of state filings to confirm registration status and registered agent details.
EIN Verification in KYB Processes
KYB (Know Your Business) processes require institutions to verify the identity, ownership, and operational status of corporate customers. EIN verification is one of several checks within a complete KYB workflow, alongside UBO (ultimate beneficial owner) identification, business registry verification, and sanctions screening against the entity and its principals.
EIN verification is particularly important in the context of beneficial ownership verification, where establishing the legal existence of the entity is a prerequisite for tracing ownership through to natural persons. Without a confirmed EIN, beneficial ownership records cannot be reliably anchored to a real legal entity.
Common Issues in EIN Verification
Name Mismatches
The business name on record with the IRS may differ from the trading name used during onboarding. Doing-business-as (DBA) registrations and recent name changes frequently create mismatches that require manual resolution.
EIN Reuse for Restructured Entities
When businesses merge, are acquired, or restructure, EIN assignment can vary. A legacy EIN may be associated with a predecessor entity rather than the current operating structure, creating verification ambiguity.
Limited IRS API Access
Direct IRS database access for real-time EIN verification is restricted. Most institutions rely on third-party verification services that aggregate IRS and registry data, introducing dependency on third-party data freshness and accuracy.
Cross-Jurisdictional Gaps
EIN verification only applies to US-registered entities. For international business customers, equivalent verification relies on VAT numbers, company registration numbers, or national tax identifiers, each with different verification infrastructure.
Related Terms
FAQ
How do businesses verify EINs across different jurisdictions?
EIN verification is specific to US entities. For businesses registered outside the US, institutions must use equivalent identifiers, VAT registration numbers in the EU, Companies House numbers in the UK, or national tax registration numbers in other markets. Multi-jurisdiction KYB platforms maintain integrations with relevant registries for each market, routing verification to the appropriate data source based on the entity's country of registration.
What role does EIN verification play in preventing shell companies?
EIN verification confirms that a business identity is registered with federal authorities, which is a necessary but not sufficient control for shell company detection. When combined with UBO verification, beneficial ownership registry checks, and sanctions screening against the entity's principals, EIN verification forms part of a layered control set that makes it significantly harder to establish and operate shell entities for financial crime purposes.
Can EIN verification be automated during onboarding?
Yes. API-based EIN verification services can be integrated into onboarding platforms to run EIN checks automatically at the point of business identity submission. These integrations return structured match results in seconds, allowing onboarding workflows to proceed without manual verification for clean matches, while routing exceptions to human review queues.
What are the limitations of EIN verification systems?
EIN verification systems are constrained by the accuracy and freshness of underlying data sources. IRS records may not immediately reflect recent business name changes or restructurings. State registry data can lag behind actual business status. Additionally, EIN verification confirms a business's registered identity, not its actual operational legitimacy, which requires broader KYB due diligence to assess.