ITIN & CAA Compliance

Was Your ITIN Handled by a Legitimate CAA? The Rules, the Red Flags, and What's Really at Risk

If you already have an ITIN, or you're about to apply for one, you probably didn't think much about how your agent handled your passport. This article is about exactly that: what an IRS Certifying Acceptance Agent is required to do, which shortcuts genuinely break the rules, and what is at stake if yours took one. The document rules are stricter than most applicants realize, and the consequences are narrower and more specific than they look.

Quick Answer

  • A Certifying Acceptance Agent (CAA) must have your original identity documents — or certified copies from the agency that issued them — in their possession during your interview. The interview can be in person or by video.
  • The shortcut that breaks the rule is never handling an original at all. Sending your originals to the CAA and doing the interview by video is a legitimate process; uploading a phone photo and nothing else is not.
  • The most likely consequence of a badly handled application isn't revocation — it's a rejected or suspended Form W-7, a delayed return, and paying someone to do it again.
  • The IRS can revoke an ITIN it determines was obtained fraudulently. That turns on whether the ITIN should have been issued to you at all — a different question from whether your agent handled your documents properly.
U.S. tax forms, a Form W-7 ITIN application, and identity documents on a desk

What a Certifying Acceptance Agent actually does

A Certifying Acceptance Agent is a person or firm that has signed a formal agreement with the IRS to help people apply for ITINs. The role is narrow and specific: review your Form W-7, examine your identity documents, interview you, and certify to the IRS that the documents are genuine.

That certification takes a specific form: the CAA completes a Form W-7 (COA), Certificate of Accuracy, and attaches it to every W-7 they submit. In the IRS's own words, the COA verifies that they reviewed the original documentation, or certified copies from the agency that issued them. Most of what follows in this article turns on that one requirement.

Three requirements set the baseline:

  • Possession. The IRS requires that CAAs have the original identification documents, or certified copies from the issuing agency, in their possession during the interview.
  • An interview. Acceptance Agents and CAAs must conduct an interview with each ITIN applicant — primary, secondary, and dependent — to complete the application. The IRS permits video conferencing to be used for the interview.
  • A Certificate of Accuracy. A completed Form W-7 (COA) is attached to each Form W-7 the CAA submits.

IRS source: irs.gov/individuals/itin-acceptance-agent-program

The two shortcuts that break the rules

Both of these turn up in ITIN work. Neither is a gray area, and neither is about which country you're in.

1. The scanned photo — and nothing else

You send a phone photo of your passport. Nobody asks for the original. Nobody asks you to obtain a certified copy from the issuing agency. No original document is ever in anyone's hands. A Certificate of Accuracy gets signed anyway.

That last part is what makes it a problem rather than just sloppiness. The COA states that the agent reviewed original documentation or an issuing-agency certified copy. If no such document ever existed in the agent's possession, the certification isn't accurate — and certifying it is the agent's own act, not yours.

What is not the problem

You can mail your original documents to the CAA (never internationally to the IRS), have them hold the originals during a video interview, and get them back afterward. That meets the requirement. A video interview is expressly permitted, and sending originals to your agent is routine practice.

What matters is whether an original was ever verified. Doing it remotely is fine; skipping it is not.

2. The filing that was invented for you

The second shortcut sits upstream of the documents: manufacturing a U.S. tax purpose that doesn't exist. An ITIN is issued because someone needs a taxpayer ID for a federal tax reason. Where there's no such reason, an agent looking for a sale can invent one — a return that doesn't reflect real income, or dependents the filer isn't entitled to claim.

The fraud patterns that turn up in ITIN work include:

  • Forms W-7 filed for applicants who are not legally entitled to an ITIN
  • ITINs requested for dependents the primary filer is not entitled to claim
  • A stolen identity used for the application
  • A fraudulent identity document used for the application

This is the shortcut that can reach you. The document shortcut is your agent's compliance failure; a fabricated tax purpose, or an entitlement you never had, goes to whether you should have received the ITIN in the first place. That distinction shapes the next two sections.

Not sure your reason was ever valid? Eligibility is a separate topic, and we've written it up in detail — who can actually apply for an ITIN

What the IRS does about it

The Acceptance Agent program has published requirements, compliance reviews, and a termination clause. Here is what each one involves.

What's documented:

  • The IRS conducts compliance reviews of Acceptance Agents, including both physical and correspondence reviews.
  • CAAs are required to cooperate with IRS compliance checks and with requests for information from the Treasury Inspector General for Tax Administration or the Government Accountability Office. Failing to cooperate can end the agreement.
  • The IRS can terminate an agent's agreement. Generally it won't unless the agent knowingly fails to follow the procedures required by the agreement, or fails to perform a duty under it — including failing to exercise due diligence — and that failure amounts to material non-compliance. The IRS may also terminate where the agent misrepresented material information on its own application or on a TIN application, or accepted a TIN application knowing that material information on it was false.

That last point is the important one: accepting an application you know contains false material information is, by itself, grounds for termination. The agent doesn't need to be prosecuted for the agreement to end.

One requirement tightened on June 1, 2026

Since June 1, 2026, a CAA submitting Form W-7 for a client claiming Exception 1(a) Partnership must include a copy of the portion of the partnership or LLC agreement that displays the partnership's name and EIN, along with the applicant's name and signature. It is a narrow requirement, but it is already in force.

What's really at risk for you

Two things can go wrong, and they are not equally likely. Here they are, in order.

Tier 1 — the application simply fails (most common)

This is the realistic downside, and it's mundane: the Form W-7 is rejected or suspended, the ITIN doesn't issue, the return attached to it is delayed, and you pay someone to put the package together again. The IRS notice for an ITIN application rejection is the CP567.

There's a timing consequence attached. A return filed without a valid taxpayer ID can't be processed normally, so any refund or credit waits until the ID issue is sorted out. That delay, measured in months and re-filing, is usually the real cost of a bad agent.

IRS source: irs.gov: Understanding your CP567 notice

Tier 2 — revocation of an ITIN already issued

The IRS can revoke an ITIN it determines was obtained fraudulently.

That turns on the application itself: whether you were entitled to the ITIN, and whether the identity behind it was genuine.

If you're a real person who genuinely can't get an SSN, and you had a genuine U.S. federal tax purpose, the substance of your application was sound. How your agent handled your documents is a compliance problem for your agent. If you aren't sure the substance was sound, that's the part worth having reviewed.

How to tell if your application was handled properly

You don't need to be a tax professional to run this check. You only need to remember what happened.

Signs it was handled properly:

  • Your original passport — or a certified copy from the agency that issued it — was in your agent's hands during the interview, whether you sat down together in person or met by video
  • If you mailed originals (or certified copies from the issuing agency) to the agent, they were returned to you
  • You were interviewed — in person or by video. Not just emailed a form to sign
  • A Form W-7 (COA), Certificate of Accuracy, was attached to your application, and your agent could explain what it was
  • You could state the U.S. federal tax reason for your application out loud, and it was true
  • You found your agent's name on the IRS's published Acceptance Agent list

Signs worth a second look:

  • The only thing anyone ever saw was a photo or scan you uploaded
  • There was no interview at all — not in person, not by video
  • Your "tax purpose" was suggested to you, rather than being a fact about your life
  • The return filed with your W-7 included income, or dependents, you don't recognize
  • You can't find the agent on the IRS list, and they get vague when you ask
  • The only thing your agent ever saw was your passport held up to a webcam

Landing in the right-hand column isn't proof of fraud, and it isn't cause for panic. As the risk tiers above explain, the realistic exposure for most people is a failed application, not a lost ITIN. It is reason enough to have the filing looked at by someone who wasn't involved in it.

Before you vet anyone: do you need a CAA at all?

If you're physically in the United States, usually not. The IRS lets you apply for free at a Taxpayer Assistance Center: bring your Form W-7, your return if one is required, and your original documents, and the IRS authenticates most supporting documents and returns them at the end of the appointment. No mailing, no third-party fee. Only some centers offer ITIN services, so use the IRS's own list below, and call 844-545-5640 to book — it can take several weeks to get an appointment. Two caveats: the IRS can't authenticate school or medical records for dependents this way, and this route only exists if you can physically get to a center. A CAA is the answer when you're a foreign nonresident outside the U.S. and the alternative is putting your passport in the international post — the IRS's own comparison is that a CAA works in the U.S. or abroad, but fees may vary.

IRS source: irs.gov/tin/itin/how-to-apply-for-an-itin

IRS list: Taxpayer Assistance Centers with ITIN services (irs.gov)

How to vet a CAA before you hand over your passport

If you're choosing an agent now, seven questions will tell you most of what you need to know. None of them require any tax knowledge.

1. Find them on the IRS list

The IRS publishes its Acceptance Agents by country. Look up the name before you send anything. If a firm claims to be a CAA and isn't on that list, stop there — this is the one check you can do in two minutes, on the IRS's own site, without trusting anybody.

2. Ask what happens to your original document

A compliant answer describes possession: you come in person, or your originals come to the agent and go back to you. An answer where no original or issuing-agency certified copy ever reaches anyone is the shortcut described above — and "just upload a scan, that's all we need" is exactly what it sounds like.

3. Ask about the interview

In person or by video are both fine; the IRS permits video conferencing for the interview. "We don't really do interviews" is not fine. The interview is a requirement, not a formality some agents skip.

4. Ask about the Certificate of Accuracy

A real CAA knows instantly what a Form W-7 (COA) is and will confirm they attach one to every W-7 they submit. Hesitation here is disqualifying — it's the single form that defines the job.

5. Ask them what your U.S. tax purpose is

Then listen for whether they're willing to tell you that you don't have one. An agent who will talk you out of an application you don't need is worth more than one who never has. If the purpose seems to be getting invented on the call to fit you, that's the second shortcut happening in real time.

6. Ask whether you'll still have to mail your passport to the IRS

Mailing your original documents to the IRS ITIN Operation is a legitimate route the IRS publishes, and the IRS says it returns supporting documents within 60 days — if you're applying without an agent, it's a real option. So if an agent's process still ends with your passport in the international post to a U.S. government office, ask what you're paying them for. If you're overseas, avoiding that is the main reason to use a CAA.

IRS source: irs.gov/tin/itin/how-to-apply-for-an-itin

7. Ask where their numbers come from

If an agent quotes you a specific penalty or back-tax figure your last agent has supposedly exposed you to, ask which IRS authority says so. How they answer tells you most of what you need to know about them.

If you think your ITIN application was mishandled

Measured steps, in order. None of this requires assuming the worst.

  1. Don't ignore IRS notices. If something arrives — a CP567 rejection, a request for more information — silence is the worst available move. Most notices carry a response deadline, and that deadline is the thing you lose by waiting.
  2. Work out which thing happened. A rejected W-7, a request for more documentation, and a problem with the return attached to it are different problems with different fixes. The notice itself will usually tell you which one you're holding. Start there rather than with the worst-case reading.
  3. Get the filing reviewed by someone who wasn't involved. Someone independent should look at what was actually submitted under your name — the W-7, the identity documents, and any return attached to it. If a tax purpose was invented for you, this is where it shows up, and you're entitled to know what was filed on your behalf.
  4. Re-apply properly if that's what's needed. A rejected W-7 isn't a permanent bar. The fix is usually a correctly documented application, prepared by someone who will tell you honestly whether you qualify.
  5. Don't self-diagnose penalties. Neither this article nor a forum thread can tell you what your specific file looks like. Get someone to read the actual documents before you assume you're in trouble — or assume you're fine.

Three ways we can help

Pick whichever one describes you. If none of them do, you probably don't need us.

You're applying for an ITIN for the first time

If you're outside the U.S. and a CAA is the right route, run the questions above on us first — the IRS list, the interview, the Certificate of Accuracy. Then take a look at what the process involves.

Contact Us

You got a notice, or you're worried about an ITIN you already have

Reach us on whichever channel is easiest. Tell us what the notice says — or what you remember about how your application was handled — and we'll tell you what you're actually looking at.

Reach us instantly on LINE

Add Copper River Tax as a LINE friend

You're here about U.S. tax filing generally

ITINs are one piece of a bigger picture. If your question is really about returns, treaty positions, or a filing obligation you're not sure about, start here.

Contact Copper River Tax

We're not going to promise you an approval, a timeline, or that the IRS moves faster for us. Nobody can honestly promise those things, and an agent who does is telling you something useful about themselves. What we will do is tell you if you don't have a valid U.S. tax purpose — in which case there's nothing here for you to buy.

Frequently Asked Questions

My agent only ever looked at a scan of my passport. Is my ITIN going to be revoked?

Almost certainly not on that basis alone. Revocation is about whether the ITIN should have been issued to you at all — whether you were entitled to it, and whether the identity behind the application was genuine. That's a different question from whether your agent followed the document-handling rules. If you're a real person with a real U.S. tax purpose who can't get an SSN, your agent's shortcut is their compliance problem. The realistic risk to you is an application that fails, not an existing ITIN being pulled.

I mailed my original passport to the agent and did the interview over video. Was that legitimate?

That can be perfectly compliant. The rule is that the CAA has the original documents — or certified copies from the issuing agency — in their possession during the interview, and the IRS permits the interview to be conducted by video conference. Originals sent to your agent and returned to you is a normal process, and it's very different from mailing your passport internationally to the IRS. What isn't compliant is nobody ever having an original or an issuing-agency certified copy at all.

Is the IRS cracking down on Acceptance Agents right now?

We couldn't find evidence of a current enforcement wave, so we're not going to claim there is one. What is documented: the IRS conducts compliance reviews of CAAs — both physical and correspondence — CAAs must cooperate with IRS, TIGTA, and GAO requests for information, and the IRS can terminate an agent's agreement for material non-compliance or for accepting an application knowing material information on it is false. One documentation requirement also tightened on June 1, 2026 for Exception 1(a) Partnership applicants.

How do I check whether my agent is legitimate?

The IRS publishes its Acceptance Agents by country, and your agent's name should appear on the list for the country they operate in. You should be able to verify any agent this way — including us — without taking anybody's word for it. If a firm isn't on the list, that's the end of the inquiry.

My Form W-7 was rejected. What happens now?

This is the most common outcome of a badly prepared application, and it's fixable. The CP567 is the IRS's ITIN application rejection notice — read what it actually says, work out whether the problem was the identity documents, the tax purpose, or the attached return, and then re-file a properly documented package. A rejection isn't a permanent bar. The cost is usually time and re-work: while there's no valid taxpayer ID, any refund or credit on the attached return waits.

Disclaimer: The information provided in this article is for general informational purposes only and should not be considered tax, legal, or financial advice. Tax laws and regulations are subject to change, and individual circumstances may vary. Always consult a qualified tax professional for specific guidance regarding your tax situation. Copper River Tax is not responsible for any errors, omissions, or reliance on the information presented.