Intuit Adds New Security Features to ProSeries, Lacerte and Intuit Tax Online to Fight Tax Fraud

“With these new security enhancements in place, our professional tax customers can be confident they are providing their clients industry leading standards of protection,” said David Williams, chief tax officer at Intuit. “Our tax professionals rely on us to deliver technology and resources necessary to help them further protect their information and the information of their valued clients.”

Intuit Security Enhancements

For tax year 2015, Intuit has implemented the following security enhancements for its professional tax products, Intuit Tax Online, ProSeries and Lacerte, to further strengthen customer identity authentication and notification:

• Multi-factor authentication: New for tax year 2015, Intuit has implemented multi-factor authentication in its professional tax products to help authenticate user identities and help tax professionals securely sign into their account. When tax professionals access their account for the first time or from a new device, they will automatically be sent a unique, six-digit code to their pre-designated, trusted device to be used in combination with their password to access their account.  
• E-file Identification Number Requirements: Intuit requires that all Electronic Return Originators (EROs) possess IRS-issued E-File Identification Numbers (EFIN) before e-filing.  New tax professional customers must have IRS documentation of EFIN registration on file before they can e-file through Intuit’s professional tax products. In addition, Intuit will proactively notify tax preparers who use the company’s professional tax software when it appears that their EFIN may have been compromised so they can reinstate their EFIN with the IRS.

Tips to Help Tax Professionals Fight Fraud

As tax professionals head into the tax season, Intuit offers the following tips to help further protect themselves, their clients and their office:

• Shred financial records: Shred all documents that include sensitive client information before throwing it away.  
• Restrict access to client files and computers:  All computers with sensitive client records should be protected with a strong password. Create a combination of upper and lower case letters, numbers and symbols. Don’t use passwords that are generic and easy to guess, like your firm name, the word “password” or a numeric sequence. Paper files should be kept locked and access restricted.
• Beware of phishing scams: Criminals use fraudulent emails and create fake Web sites, to lure unsuspecting users into revealing private account information, like your EFIN. Be suspicious of unsolicited emails that ask for confidential or sensitive information and include a link to a Web site. Mouse over the link, look at the site’s address and make certain that it appears legitimate before clicking.  Intuit posts notices for phishing emails on the Intuit Online Security Center: https://security.intuit.com
• Install or update anti-virus software on computers: Use the latest version of your Web browser. Install security patches and software updates as soon as they are available. 
• Educate clients: Help educate clients about what they can do to protect themselves online, including protecting their computer and mobile device, creating strong passwords and being aware of phishing scams.