IRS TIN matching is the process of verifying that a taxpayer identification number and name combination matches IRS records before filing information returns like 1099s. OFAC screening checks individuals and entities against the U.S. Treasury’s Office of Foreign Assets Control sanctions lists to ensure you are not doing business with sanctioned parties.
Together, these two verification steps form the foundation of tax compliance and anti-money laundering due diligence for any U.S. organization that pays vendors, contractors, or other third parties.
Despite serving different regulatory purposes – TIN matching prevents IRS penalties while OFAC screening prevents sanctions violations – these checks are increasingly combined into a single workflow. The IRS issued over $4.4 billion in proposed penalties for information return errors in fiscal year 2023, and OFAC penalties can reach millions of dollars per violation under the International Emergency Economic Powers Act.
For businesses that file 1099s and must comply with sanctions regulations, running both checks simultaneously saves time and reduces the risk of costly gaps in compliance.
This guide explains how each process works, who needs them, what the free and paid options look like, and how modern verification platforms combine IRS TIN matching and OFAC screening into a single check.
What Is IRS TIN Matching?
IRS TIN matching is a verification service that compares a taxpayer identification number (SSN, EIN, or ITIN) and the associated name against the IRS database to confirm they match. The primary purpose is to ensure that the information on 1099 forms and other information returns is accurate before filing, which helps avoid B-notices and penalties under IRC Sections 6721 and 6722.
When a TIN and name do not match IRS records – for example, because a vendor changed their legal name, provided a typo, or gave you an incorrect TIN – the IRS flags the discrepancy and issues a B-notice requiring you to solicit a corrected TIN. Failing to respond to B-notices or filing returns with known incorrect TINs can result in penalties of $310 per return (2024 rates), with no maximum cap for intentional disregard.
The Free IRS TIN Matching Program
The IRS offers a free TIN matching service through its e-Services portal, available to authorized payers and their agents. Full details are available on the IRS TIN matching program page. The program provides two options:
- Interactive matching: Enter up to 25 TIN/name combinations per session through the web interface. Results are returned immediately, indicating whether each combination matches IRS records.
- Bulk matching: Upload a file containing up to 100,000 TIN/name combinations. Results are returned within 24 hours (not in real time). The bulk option requires pre-registration through IRS e-Services.
The free program has several limitations. Interactive checks are capped at 25 per session, making it impractical for organizations with large vendor lists. Bulk results are not instant – you submit the file and wait for overnight processing. And the service only checks against IRS records. It does not screen for OFAC sanctions, verify against the Death Master File, or check any other government databases.
When Free TIN Matching Is Not Enough
For organizations that file more than a few dozen 1099s annually, the free IRS program’s limitations become a bottleneck. Common pain points include the 25-check session cap slowing down vendor onboarding, overnight bulk processing delaying year-end filing prep, no API access for automated workflows, and no integration with accounting software or ERP systems. These gaps are what drive organizations toward paid TIN matching services that offer real-time verification, higher volume limits, and API integration.
What Is OFAC Screening?
OFAC screening is the process of checking individuals, businesses, and other entities against sanctions lists maintained by the U.S. Treasury Department’s Office of Foreign Assets Control. These lists identify foreign nationals, organizations, and governments that are subject to U.S. economic sanctions. U.S. persons – including businesses – are generally prohibited from engaging in transactions with sanctioned parties.
The primary OFAC sanctions lists include:
- Specially Designated Nationals (SDN) list: Individuals and entities owned or controlled by, or acting on behalf of, sanctioned countries and groups. The OFAC SDN list is searchable at OFAC’s sanctions search tool. The SDN list contains over 12,000 entries as of 2024.
- Consolidated sanctions list: A combined list that merges multiple OFAC programs into a single searchable database, including sectoral sanctions, foreign sanctions evaders, and non-SDN designations.
- Sectoral sanctions identifications (SSI) list: Targets specific sectors of designated countries’ economies, such as Russian energy and financial sectors.
OFAC compliance is not optional. Violations can result in civil penalties of up to $356,579 per violation (2024 adjusted amount) under the International Emergency Economic Powers Act, and criminal penalties can reach $1 million and 20 years imprisonment for willful violations. Unlike IRS TIN matching, which is recommended but not legally required for all filers, OFAC screening is mandatory for all U.S. persons and businesses engaging in transactions that fall within OFAC’s jurisdiction.
Who Needs OFAC Screening?
While all U.S. businesses are technically subject to OFAC regulations, certain industries face heightened scrutiny and more explicit screening requirements:
- Financial institutions: Banks, credit unions, money services businesses, and payment processors must screen transactions and customer relationships against OFAC lists as part of their BSA/AML compliance programs
- Insurance companies: Must screen policyholders, claimants, and beneficiaries against sanctions lists
- Government contractors: Required to verify that subcontractors and vendors are not on debarment or sanctions lists
- Import/export businesses: Must screen all parties involved in international trade transactions
- Real estate companies: Subject to geographic targeting orders in certain markets
- Any organization making cross-border payments: Wire transfers and international remittances require OFAC screening
Why Combine IRS TIN Matching and OFAC Screening?
Historically, TIN matching and OFAC screening have been treated as separate compliance activities handled by different teams using different tools. Tax departments run TIN verifications before 1099 filing season. Compliance departments run OFAC checks during customer onboarding or transaction processing. But this separation creates inefficiencies and gaps.
Consider a typical vendor onboarding workflow. The accounts payable team collects a W-9 form, extracts the TIN and legal name, and runs a TIN match against IRS records. Separately, the compliance team (if one exists) may or may not run an OFAC check on the same entity. In many organizations – especially small and mid-market businesses – the OFAC check simply does not happen because it requires a separate tool, a separate process, and separate expertise.
Combining both checks into a single verification eliminates this gap. When a TIN match and OFAC screen run simultaneously, every vendor and payee is automatically checked against both IRS records and sanctions lists at the point of onboarding. This approach offers several advantages:
- Reduced compliance risk: No vendor falls through the cracks because TIN matching and sanctions screening happen in a single step rather than two separate workflows
- Time savings: One check, one result, one review process – instead of coordinating between tax and compliance teams
- Cost efficiency: A single platform subscription replaces multiple point solutions for TIN verification and sanctions screening
- Audit trail consolidation: One verification record per entity covers both tax and sanctions compliance, simplifying record keeping for audits
- Real-time coverage: Automated API-based checks can run both verifications at the point of transaction, not just during annual filing prep
How Combined Verification Platforms Work
Modern TIN verification platforms have evolved beyond simple IRS database lookups. The most comprehensive services now bundle TIN matching with OFAC screening and additional watchlist checks into a single API call or web check. Here is what a typical combined verification workflow looks like.
Step 1: Input the TIN and Name
You enter the taxpayer identification number (SSN or EIN) and the associated legal name into the platform – either through a web interface, a bulk file upload, or an API call from your existing compliance software or accounts payable system.
Step 2: Simultaneous Multi-Database Check
The platform runs the TIN and name against multiple databases simultaneously. A comprehensive verification includes:
- IRS TIN/Name database (the core TIN match)
- EIN Name Lookup (verifies business entity names)
- SSA Death Master File (flags deceased individuals)
- OFAC SDN list and consolidated sanctions
- USPS address validation (real-time checks only)
- Global watchlists – EU sanctions, Interpol, FBI wanted lists, UN consolidated list, politically exposed persons (PEP) databases, and more
Step 3: Results and Action
Results are returned in seconds for real-time checks (or within 48 hours for bulk file processing). Each database check returns a separate pass or fail, allowing you to see exactly which verification flagged an issue. A TIN might pass IRS matching but flag on the OFAC SDN list, or vice versa. Your compliance team then follows internal procedures based on the specific flags raised.
Free vs Paid TIN Matching and OFAC Screening Tools
Organizations evaluating their options have a range of tools available, from free government services to enterprise-grade platforms. Here is how the landscape breaks down.
| Tool | TIN matching | OFAC screening | Speed | Cost | API |
|---|---|---|---|---|---|
| IRS e-Services | Yes (25/session) | No | Real-time (interactive) / Overnight (bulk) | Free | No |
| OFAC SDN search | No | SDN only | Real-time | Free | No |
| Combined platforms | Yes | Yes (30+ lists) | Real-time + bulk | From $19.95/mo | Yes (REST/SOAP) |
| Full tax suites | Varies | Varies | Varies | Custom pricing | Yes |
The free IRS TIN matching program is adequate for organizations with low volume and no OFAC requirements. OFAC’s own SDN search tool on the Treasury website is free but limited to the SDN list only – it does not cover consolidated sanctions, sectoral sanctions, or international watchlists. For organizations that need both checks, the free tools require two separate processes with no integration between them.
Paid platforms like TINCheck by Sovos address this by bundling IRS TIN matching, OFAC screening, and additional watchlist checks into a single service with plans starting at $19.95 per month. These platforms typically offer web interfaces for individual lookups, bulk file processing for large datasets, and APIs for embedding verification into existing workflows.
Broader tax software platforms like Avalara and Sovos may include some level of TIN verification as part of their larger compliance suites, though the depth of sanctions screening varies.
Best Practices for TIN Matching and OFAC Compliance
Whether you use free tools or a paid platform, these practices help ensure your verification workflow is effective and audit-ready.
Verify at the Point of Onboarding
Run TIN matching and OFAC screening when you first collect vendor or customer information – not just before filing season. Catching mismatches and sanctions flags during onboarding prevents downstream issues and gives you time to resolve problems before they affect your tax filings or trigger regulatory violations.
Automate Where Volume Justifies It
Organizations processing more than 100 verifications per month should consider API-based automation. Manual web checks are error-prone at scale, and the time spent on individual lookups adds up quickly. Integrating verification into your accounting automation workflow ensures every vendor is checked without relying on manual processes.
Run Periodic Re-Screening
OFAC sanctions lists are updated frequently – sometimes multiple times per week. A vendor that was clean at onboarding may appear on a sanctions list six months later. Best practice is to re-screen your entire vendor database at least quarterly, and to subscribe to OFAC list update notifications to catch high-priority additions between scheduled screenings.
Maintain Audit-Ready Records
Document every verification you run – the date, the TIN checked, the databases screened, and the result. These records demonstrate due diligence in the event of an IRS audit or OFAC enforcement action. Most paid verification platforms generate audit logs automatically, but if you use free tools, you will need to maintain these records manually.
Understand the Penalty Math
IRS penalties for incorrect TINs on information returns range from $60 to $310 per return depending on how quickly the error is corrected (2024 rates), with no maximum cap for intentional disregard. OFAC civil penalties can reach $356,579 per violation. A single compliance tool subscription – even at the higher price tiers – is a fraction of the cost of one penalty assessment. Frame verification costs as insurance, not overhead.
How to Choose a TIN Matching and OFAC Screening Solution
The right solution depends on your organization’s size, industry, verification volume, and existing compliance infrastructure. Here is a framework for evaluating options.
- Volume: How many verifications do you need per month? Under 25, the free IRS tool may suffice for TIN matching (though you will still need a separate OFAC solution). Over 25, a paid platform with real-time API access is more practical.
- Scope: Do you need IRS-only TIN matching, or do you also need OFAC screening and global watchlist checks? Organizations in regulated industries almost always need the broader scope.
- Integration: Does the solution offer an API that integrates with your existing CRM, ERP, or AP platform? Manual web checks do not scale.
- Bulk processing: Do you need to verify large datasets before filing season? Not all platforms offer bulk matching, and those that do may charge separately for it.
- Pricing transparency: Can you see costs before talking to sales? Self-service pricing models reduce procurement friction, especially for small and mid-market organizations.
- Audit trail: Does the platform generate verification records you can reference during IRS or regulatory audits?
For organizations evaluating payment and vendor management platforms that include verification features, tools like Tipalti and Stripe offer varying levels of TIN matching within their broader AP and payment workflows. For standalone verification with the deepest sanctions screening coverage, dedicated platforms that combine IRS matching with 30+ global watchlists provide the most comprehensive single-check solution.
Frequently Asked Questions
The IRS does not legally require payers to verify TINs through its TIN matching program before filing information returns. However, participating in TIN matching is considered a reasonable cause defense against penalties under IRC Sections 6721 and 6722. If you file a 1099 with an incorrect TIN and can demonstrate that you attempted to verify it through IRS TIN matching before filing, the IRS may waive the penalty. This makes TIN matching a de facto best practice even though it is not technically mandatory.
Technically, yes. OFAC regulations apply to all U.S. persons, which includes individuals, businesses, and their foreign branches. Any transaction with a sanctioned party is prohibited regardless of the industry you operate in. However, enforcement focus and screening expectations are highest in financial services, insurance, import/export, and government contracting. Small businesses with purely domestic operations and no exposure to international parties face lower practical risk but are not exempt from the regulations.
At minimum, screen all new vendors, customers, and counterparties at the point of onboarding. For ongoing relationships, re-screen at least quarterly. OFAC updates its sanctions lists frequently – sometimes multiple times per week – so organizations in high-risk industries (financial services, government contracting) should consider monthly re-screening or subscribing to real-time list update notifications.
No. The free IRS TIN matching program only verifies TIN/name combinations against IRS records. It does not screen against OFAC sanctions lists, the Death Master File, or any other government databases. For OFAC screening, you can use the free SDN search on the Treasury Department’s website, but it only covers the SDN list – not consolidated sanctions, sectoral sanctions, or international watchlists. A combined verification platform is needed to run both checks simultaneously.
A B-notice is an IRS notification sent to a payer when the TIN on a filed information return does not match IRS records. Upon receiving a B-notice, you must solicit a corrected TIN from the payee within a specified timeframe, and may be required to begin backup withholding at 24% if the issue is not resolved. TIN matching before filing catches these mismatches in advance, allowing you to correct the information before the return is submitted and the B-notice is generated.
Penalties under IRC Section 6721 for filing information returns with incorrect TINs range from $60 per return (if corrected within 30 days) to $310 per return (if not corrected by August 1). For intentional disregard, the penalty is $630 per return with no maximum cap. These are 2024 rates and adjust annually for inflation. For an organization filing 1,000 returns with even a 5% error rate, potential penalties could reach $15,500 or more.
A comprehensive combined platform should check against, at minimum: the IRS TIN/Name database, EIN Name Lookup, the SSA Death Master File, OFAC SDN and consolidated sanctions lists, and USPS address validation. More thorough platforms extend coverage to include EU sanctions, Interpol wanted lists, FBI wanted lists, UN consolidated sanctions, PEP databases, denied persons lists, entity lists, and foreign terrorist organization lists. The broadest platforms screen against 30 or more databases in a single verification.
Bulk TIN matching allows you to upload a file containing hundreds or thousands of TIN/name combinations for batch processing. The free IRS program accepts files of up to 100,000 records with overnight turnaround. Paid platforms typically accept CSV or text files and return results within 48 hours, screening against both IRS records and sanctions databases. Bulk matching is most commonly used before 1099 filing season to clean vendor databases and identify mismatches in advance.
