You have a letter from the IRS sitting on your desk, and it wants documents within 30 days. Your options used to be a fax machine you no longer own, a phone queue measured in hours, or certified mail and a prayer. There is now a fourth option: IRS Secure Messaging, a webmail-style channel where you and your accountant exchange messages and attachments directly with the IRS employee working your case — with every word saved as part of your official record.
This guide explains what Secure Messaging is, how you get access, when it beats mail or a phone call, how your authorized representative joins in, and exactly what to save in your tax file afterward.
What IRS Secure Messaging Actually Is
IRS Secure Messaging works like ordinary web-based email — think Gmail in a browser — except both sides are authenticated and the IRS saves every message as a digital record of your communications. You receive a notification email when a new secure message is waiting, log in, read it, and reply with attachments pertaining to your account.
Three facts surprise most owners:
- It is invitation-based. Individuals, businesses, and their authorized representatives use Secure Messaging once the IRS invites them — typically because you have an open matter such as an examination or an appeal. You cannot cold-message the agency the way you would open a support ticket.
- It is tied to a specific matter. A messaging thread belongs to your case or account issue, not to the IRS in general. Different IRS functions run their own messaging programs — the Independent Office of Appeals and the examination teams are the prominent ones — so your invitation tells you who you are actually talking to.
- The thread is the record. Because the service retains all messages, your replies, uploads, and the IRS side of the conversation become part of the case file automatically. That is a meaningful upgrade over "I told someone on the phone in March," which is worth exactly nothing six months later.
The IRS keeps widening digital correspondence because every message thread is one fewer phone call and one fewer envelope in the processing backlog.
Set Up Your Business Tax Account First
Secure Messaging invitations assume you can authenticate yourself online, and for a business that means the IRS Business Tax Account. If you have not created one, do it before you need it — verification takes time you will not have when a notice deadline is running.
Who can use it
The account launched in 2023 for sole proprietors and corporations, and the IRS expanded eligibility in April 2026 to partnerships, tax-exempt organizations, federal, state, and local governments, and tribal governments. For small businesses, that means:
- Sole proprietors with an IRS-issued EIN
- S corporations and C corporations
- Partnerships and multi-member LLCs taxed as partnerships (individual partners with an SSN or ITIN and a Schedule K-1 on file get limited access)
- Tax-exempt organizations
An LLC is not itself a federal tax classification, so your access follows your tax treatment — disregarded entity, partnership, or corporation.
What you can do inside it
For eligible users, the account now handles a long list of tasks that once required mail or a phone call:
- View balances due and payment history, including certain payments made outside the portal
- Make payments from a bank account — return balances, past-due taxes, and federal tax deposits — and schedule future payments
- View an existing installment agreement and pay toward it
- View and download a growing library of digital IRS notices, including notices about refunds, extensions, and deposit discrepancies
- Download EIN verification (Notice CP575), which banks often request and which previously meant ordering Letter 147C
- Access eligible tax transcripts and request a tax compliance check
- Submit payments connected to an accepted Offer in Compromise
- See the business name and address the IRS has on file, and manage access for designated employees
Not every notice exists digitally, so keep watching your physical mailbox. But checking the account first when a notice arrives takes minutes and answers most follow-up questions before you pick up the phone.
When Secure Messaging Beats Mail
Mail still has its place, but for an open case with an invitation in hand, messaging wins on three dimensions.
Speed. A mailed response joins a processing queue; correspondence can sit weeks before anyone opens it. A secure message lands in the assigned employee's thread immediately, with your attachments already digitized. When a notice gives you 30 days, the difference between "received instantly" and "received eventually" is real working time.
Completeness. Mail gets separated from its enclosures more often than anyone admits — the letter arrives, the twelve supporting pages do not, and you get a second notice asking for what you already sent. Attachments in a message thread cannot be physically detached from the message they belong to.
Proof. The thread itself is the proof of what you sent and when. With mail, equivalent proof requires certified mail with return receipt, carefully filed. Messaging gives every reply that evidentiary quality by default.
The tradeoff: messaging only exists where the IRS has opened it for your matter. A notice that lists only a mail-back address, with no upload link, access code, or messaging invitation, is telling you the channel — follow the notice, not your preference.
When Secure Messaging Beats a Phone Call
The phone feels faster because a human answers (eventually). For case work, it is usually the weaker channel:
- No record. Unless you take meticulous notes with the employee's name, ID number, date, and time, a phone conversation evaporates. Even good notes are your version of events; a message thread is both sides', preserved verbatim.
- No attachments. You cannot show an agent a bank statement over the phone. Complex issues — a deposit discrepancy, a substantiation package, a multi-page contract — need documents, and messaging carries them natively.
- Async beats hold music. Messaging happens on your schedule. Phone happens on the queue's schedule, and IRS phone service levels swing wildly by season.
The phone still wins for genuinely interactive problems: untangling which notice you actually owe a response to, getting a payoff figure with interest computed to a specific date, requesting currently-not-collectible status or a short-term extension, or any situation where the next question depends on the previous answer. A good rule of thumb: call to figure out what to do, then message to do it — and confirm in the thread whatever the phone call decided.
How Your Accountant or CPA Joins In
This is the part most owners get wrong. Your tax professional cannot simply log in as you, and forwarding them your login credentials violates the account terms and creates a security mess. The IRS built a separate door for representatives.
Tax Pro Account and digital authorization. Tax professionals use Tax Pro Account to initiate authorization requests. For qualifying individual-taxpayer matters, the practitioner sends a digital Power of Attorney or Tax Information Authorization request, you review and electronically sign it inside your own Online Account, and processing is effectively real time. The traditional paper route — Form 2848 (Power of Attorney) and Form 8821 (Tax Information Authorization) — still exists, and signed forms can now be uploaded online through the IRS submission portal for any tax matter or period, covering business taxpayers too.
What each form grants. A Power of Attorney authorizes the representative to act for you before the IRS — to advocate, negotiate, and receive your confidential information. A Tax Information Authorization only permits viewing and receiving your tax information, not representation. Match the form to the job: a preparer who just needs transcripts takes the lighter authorization.
In Secure Messaging specifically. Once authorized, your representative authenticates with their own identity and participates in the thread for your matter — corresponding with the IRS employee, submitting requested documentation, and receiving copies of communications. The representative's messages are preserved in the same digital record as yours, which means nothing important lives only in your CPA's email outbox.
Two practical notes. First, digital authorization requests are narrower than paper forms — limited tax matters and periods — so a complex multi-year matter may still need a Form 2848 uploaded or faxed to the Centralized Authorization File unit. Second, keep your own copy of every signed authorization with its scope and dates; authorizations for the same matters and periods revoke prior ones, and you want to know exactly who currently speaks for you.
The Document Upload Tool: For Notices That Invite a Reply
Separate from Secure Messaging, the IRS Document Upload Tool covers the common case: you received a notice asking for documents and it includes an upload link, QR code, or access code. The tool needs no login — the access code on your notice is your credential — and accepts scans or photos as JPG, PNG, or PDF files, up to 40 files at 15 MB each.
Many examination and verification notices now name the upload tool as the preferred response method, ahead of fax and mail. You get an automatic confirmation a fax cannot give you. The discipline is the same as with messaging — read the notice first, use the channel the notice offers, and keep the confirmation.
If your notice lists no upload option, do not improvise one. Respond exactly as the notice instructs. Sending documents through a channel the notice never opened is how responses get lost.
When You Still Need Mail or the Phone
Digital channels are additive, not universal. Keep the old tools sharp for these situations:
- Statutory deadlines. Anything with a Tax Court petition deadline or a fixed response date that determines your rights deserves certified mail with return receipt — the timely-mailed-is-timely-filed rule is well-tested law, while a screenshot of an upload is merely persuasive. Use both: upload for speed, certified mail for proof.
- Notices with no digital path. Some notices still list only a fax number or mailing address. That is an instruction, not an oversight.
- Appeals conferences and complex negotiations. Appeals supports Secure Messaging for document exchange, but settlement discussions still happen by phone or conference — messaging carries the exhibits, not the conversation.
- Identity verification and account lockouts. If you cannot authenticate, no digital channel works. The phone numbers and in-person Taxpayer Assistance Centers exist precisely for this.
- Hardship and urgent collection matters. Levies, liens about to file, and anything measured in days rather than weeks merit a phone call (and, if the system is failing you, the Taxpayer Advocate Service) — not an async thread nobody has triaged yet.
And one permanent warning: the IRS initiates contact by mail, not by email, text, or social media. A message claiming to be the IRS that arrives outside your authenticated account and demands payment or personal information is a scam. The notification emails for genuine secure messages tell you to log in; they never ask you to reply with sensitive data.
What to Save in Your Tax File
Digital correspondence only protects you if you keep it. The IRS keeps its copy of message threads, but your tax file is your burden of proof — the responsibility to substantiate your return is yours, and "the IRS has it" is not a filing system. For every digital interaction, save:
- The notice itself — download the digital copy from your account even if the paper original is in a drawer. Paper fades, gets misfiled, and cannot be searched.
- Your complete message threads — export or print-to-PDF each thread at close, including attachments as sent. Filenames should show the matter and date.
- Upload and payment confirmations — every Document Upload Tool confirmation, every payment receipt with confirmation number, and every scheduled-payment acknowledgement.
- Authorization paperwork — signed Powers of Attorney and Tax Information Authorizations with their scope, matters, periods, and revocation dates.
- Transcripts and compliance reports — pull account transcripts annually and after any dispute resolves; they show what the IRS believes about you, which occasionally differs from what you believe.
- A correspondence log — one page per matter: notice number and date, deadline, channel used, confirmation numbers, and the name and ID number of every IRS employee you spoke with by phone.
How long to keep all of this follows the standard retention rules: generally three years from filing or the return's due date, six years if you underreported income by more than 25 percent, seven years for bad-debt and worthless-securities claims, and at least four years for employment tax records. Property and basis records stay until three years after you report disposing of the asset. Electronic records carry the same requirements as paper — the IRS explicitly says so — which means your PDFs need backups, not just a downloads folder.
Common Mistakes to Avoid
- Going digital-only on receipt. Digital notices supplement mailed ones; until every notice type you might receive exists online, ignoring physical mail is playing audit roulette.
- Letting invitations expire. A messaging invitation or Document Upload Tool access code is tied to a deadline. Calendar the notice deadline the day it arrives, not the channel's convenience.
- Replying outside the thread. Once a matter has a message thread, keep everything about that matter in the thread. A parallel phone agreement nobody writes down is how "but they told me" disputes are born.
- Sharing logins with your preparer. Use Tax Pro Account authorization instead. Shared credentials destroy the audit trail that makes digital channels valuable — and lock you out of your own account the day the relationship ends.
- Forgetting state counterparts. Most states now run their own business tax portals and messaging systems with separate logins, separate authorizations, and separate deadlines. Federal and state threads never merge; track both.
Keep Your Tax File Audit-Ready All Year
Every channel in this guide — Secure Messaging, the Document Upload Tool, your Business Tax Account — rewards the same habit: organized records you can attach, forward, or quote on short notice. The owners who dread IRS correspondence are rarely the ones with the biggest tax bills; they are the ones whose documentation lives in shoeboxes, camera rolls, and memory. Accurate books maintained through the year turn a 30-day document request from a scramble into an afternoon's work.
Beancount.io provides plain-text accounting that gives you complete transparency and control over your financial data — no black boxes, no vendor lock-in. Your ledger lives in version-controlled text files you own outright, so pulling the exact records a notice asks for is a search query, not an excavation. Get started for free and see why developers and finance professionals are switching to plain-text accounting.
