Collecting W-9s and Avoiding 24% Backup Withholding: A Vendor-Onboarding Playbook for 1099 Compliance

You pay a freelance designer $4,000 for a website refresh. No W-9 on file — you were in a rush and figured you'd sort the paperwork later. In February you file the 1099-NEC, use the business name from the invoice, and move on. Six months later a crisp IRS envelope arrives: CP2100. The name and Taxpayer Identification Number don't match IRS records. Now you owe B notices, possible penalties, and if you don't fix it, you must withhold 24% from every future payment to that designer. All for skipping a one-page form.

That form is Form W-9, and this playbook shows you how to collect it cleanly, avoid the 24% trap, and handle IRS notices without panic.

What Backup Withholding Actually Is — And Why It Exists​

Backup withholding is not a penalty. It's the IRS's collection backstop: when a payee's Taxpayer Identification Number is missing, incorrect, or flagged for underreporting, the payer must hold back 24% of reportable payments and send it to the IRS.

Think of it as the IRS saying: "If we can't confidently match this income to the right taxpayer, we'll collect upfront and let the payee sort out the credit on their return."

The current rate is 24% for reportable payments. For payments to non-compliant foreign financial institutions under FATCA, the rate is 30% — a different regime, but worth knowing if you wire funds internationally.

A payee who had backup withholding taken can claim it as federal withholding on their tax return for the year the income was received. Your job as payer is to withhold, deposit, and report it correctly until the underlying problem is fixed.

Which Payments Can — and Can't — Be Hit​

Not every dollar you pay is subject to backup withholding. Only payments that are reportable on Forms 1099 or W-2G are in scope.

Commonly subject to backup withholding​

• Independent contractor compensation (Form 1099-NEC, $600+ per payee per year)
• Rents, royalties, and other gains (Form 1099-MISC, $600+ for rents, $10+ for royalties)
• Interest and dividends (Forms 1099-INT / 1099-DIV)
• Attorney fees and settlement proceeds — even when paid to a corporation
• Broker and barter exchange proceeds
• Payment card and third-party network transactions (Form 1099-K)
• Gambling winnings (Form W-2G) and certain government payments
• Cash shares of fishing boat proceeds and patronage dividends paid partly in cash

Generally NOT subject​

• Real estate transactions
• Foreclosures and abandonments
• Cancelled debts
• Archer MSA distributions, long-term care and retirement distributions, ESOP distributions
• Unemployment compensation, state or local tax refunds, qualified tuition program earnings
• Fish purchased for resale

The practical filter for most small businesses: if you issue a 1099-MISC, 1099-NEC, 1099-INT, 1099-DIV, or 1099-K, assume backup withholding can apply.

The Four Triggers That Turn On the 24%​

You must start backup withholding when any one of these conditions exists:

1. The payee fails to furnish a TIN​

No W-9, no TIN. You can't file a correct 1099 without one. For nonemployee compensation and similar payments, withholding starts immediately — there is no grace period.

For interest, dividends, and certain tradable instruments, a payee who writes "Applied For" on the W-9 gets a 60-day awaiting-TIN certificate. During that window you must withhold if more than $500 is withdrawn without reserving, or you may elect to withhold after a 7-business-day grace period on withdrawals or on all payments to the account. For contractor payments, though, "Applied For" doesn't buy you time.

2. The IRS tells you the TIN is incorrect​

You filed your 1099s, the IRS ran TIN matching, and the name/TIN combo doesn't exist in its database. You'll learn via a CP2100 or CP2100A notice (more on that below). That notice obligates you to solicit a correct TIN.

3. Notified payee underreporting of interest or dividends​

The IRS notifies you that the payee underreported interest or dividend income (a "C" notice). This trigger applies only to interest and dividends, but if you're a business that pays interest — say, on a private loan — it matters.

4. The payee fails to certify they are not subject to backup withholding​

The W-9 contains four certifications signed under penalties of perjury, including that the TIN is correct and the payee is not subject to backup withholding due to prior underreporting. If they strike or omit that certification, you must withhold.

If you ignore a required withholding obligation, the liability can shift to you. The IRS can hold the payer responsible for the amount that should have been withheld.

The W-9: What You're Actually Collecting​

Form W-9 is deceptively simple, but errors cluster in the same fields every year:

• Line 1 — Name: The legal name that matches the tax return. For a disregarded LLC (single-member LLC that hasn't elected corporate status), this is the owner's name, not the LLC's trade name. The LLC's name goes on Line 2.
• Line 2 — Business name / disregarded entity name: Trade name or DBA.
• Line 3a — Federal tax classification: Individual/sole proprietor, C corp, S corp, partnership, trust/estate, LLC (with its tax classification), etc. For that single-member LLC, check the owner's classification, not "LLC" generically.
• Line 3b — Foreign partner/owner flag: Partnerships, trusts, and estates indicate whether they have foreign partners, owners, or beneficiaries.
• Line 4 — Exemptions: Exempt payee and FATCA exemption codes, if applicable. Most small vendors leave this blank.
• Part I — TIN: SSN, EIN, or ITIN, as appropriate. Don't guess — use what the payee provides and validates.
• Part II — Certification: Signature and date under penalties of perjury. An electronic signature is allowed if your system ensures the information received is the information sent, verifies identity, provides the same information as paper, can produce a hard copy on request, and captures the e-signature properly.

Foreign payees don't use W-9. Use the W-8 series instead (W-8BEN, W-8BEN-E, W-8IMY, etc.). Accepting a W-9 from a foreign person creates presumption problems.

Substitute forms are allowed if they are substantially similar and contain the four required certifications. Many accounting platforms generate their own W-9 facsimiles — just make sure those four certification statements survive verbatim.

The Vendor Onboarding Playbook: Six Steps That Prevent 90% of Problems​

Build this into your accounts-payable workflow before the first dollar moves, not in a January scramble.

Step 1: No W-9, no pay — or at least no second pay​

Make a completed W-9 a condition of vendor setup. The most reliable policy: collect the W-9 before the first reportable payment. At minimum, collect it before the second. If you pay first and chase paperwork later, you will be chasing it forever.

Add the requirement to your new-vendor email template:

"To be set up as a paid vendor, please return a completed Form W-9. We can't release payments over $600 without it on file."

Friction drops dramatically when the request arrives with the purchase order, not months later.

Step 2: Validate on receipt — 60 seconds that saves hours​

When the W-9 arrives, check:

• Is every line filled? Name, classification, TIN, signature, date?
• Does Line 1 match the name that will appear on the 1099? Watch for invoices that say "Brightline Design LLC" while Line 1 says "Alex Rivera" — that's correct for a disregarded entity, but your 1099 must follow the W-9, not the invoice letterhead.
• Is the classification plausible? A vendor who checks "C Corporation" but provides an SSN deserves a question.
• Is the signature present? An unsigned W-9 is not a W-9.

For electronic W-9s, confirm your portal meets the five IRS e-signature conditions (integrity, identity verification, equivalence to paper, hard-copy capability, electronic signature capture).

Step 3: Use IRS TIN Matching before you file​

The IRS offers e-Services TIN Matching at no cost. You can validate name/TIN combinations before filing. Participants who validate before filing generally receive fewer CP2100 notices and penalty notices, and a verified match can be relied upon as reasonable cause under Section 6724.

You don't need to validate every vendor every week, but make it routine for:

• Any vendor you will pay $600+ annually
• Any vendor whose W-9 looks altered or handwritten ambiguously
• Any vendor who previously triggered a B notice

Treat a mismatch as a follow-up task, not a filing to hope the IRS won't notice.

Step 4: Store the W-9 securely and keep it current​

A W-9 does not expire by statute, but it does become incorrect when facts change. Request a new one when:

• The vendor notifies you of a name, address, or entity-type change
• You receive a CP2100/B notice indicating the TIN is wrong
• The vendor's business structure changes (e.g., sole proprietor incorporates)
• You have no payment activity for several years and re-activate the vendor

Retain W-9s for at least four years after the last 1099 filing that relied on that form — your backup if the IRS questions whether you had reasonable cause. Store them with the same access controls as payroll records. Under Regulation section 31.3406(f)-1, TIN information obtained through matching must be kept confidential.

Step 5: Know your exempt payees — and the exceptions​

Some payees are exempt from backup withholding: tax-exempt organizations, government entities, and corporations for certain payment types. But exemptions vary by payment type. Classic trap: attorney fees and medical/health-care payments to corporations remain reportable. Don't assume "it's a corp, no 1099 needed" without checking the payment-type rules.

When in doubt, collect the W-9 anyway. An exempt corporation's W-9 costs you nothing and resolves the question.

Step 6: Automate the January crunch away​

If you touch more than a handful of contractors:

• Use accounting software that blocks payment or flags vendors missing a W-9
• Set calendar reminders: W-9 solicitation in Q3/Q4, TIN matching in November, filing in January
• Reconcile your vendor list to your general ledger before year-end, not after. Ghost vendors and duplicate names create ghost 1099s.

CP2100 and the B Notice Sequence: What to Do When the IRS Says "Wrong TIN"​

CP2100 (large filers) and CP2100A (small filers) are not bills. They are the IRS telling you: "Some of the name/TIN combinations you filed did not match our records. Fix them."

The notice includes a listing of incorrect payee records. For each, you must send a B notice to the payee.

First B notice (the "we need your correct TIN" letter)​

Timing: send within 15 business days of receiving the CP2100, or before you would otherwise be required to start backup withholding.

Contents (see Publication 1281 for the exact required language — don't paraphrase):

• Statement that the IRS notified you the TIN is incorrect
• Request for a corrected W-9
• Signature under penalties of perjury
• Warning that if the payee doesn't provide a correct TIN, you must begin backup withholding

In practice, most vendors respond quickly once they see the IRS is involved. Document the date you mailed or emailed the notice.

Second B notice (the "we need IRS validation" letter)​

If the same payee appears on a CP2100 again in the next three calendar years — same account, still mismatched — you must send a second B notice. This one is different: you instruct the payee to contact the IRS or Social Security Administration and obtain a letter (SSA 7028 for individuals, 147C for entities) validating their TIN, then provide that letter to you.

You may not accept a self-certified W-9 alone after a second B notice; you need the SSA/IRS validation.

When withholding actually starts​

• After the first B notice, if the payee doesn't provide a correct TIN within 30 business days, begin backup withholding on reportable payments.
• After the second B notice, begin withholding if the payee doesn't provide the SSA/IRS validation.

Stop withholding once the payee cures the issue (correct TIN on a new W-9, or the underlying underreporting resolved, depending on the trigger).

Publication 1586 is the IRS's playbook for missing and incorrect name/TINs, and Publication 1281 contains the verbatim B notice language and backup withholding rates. Bookmark both.

How to Actually Withhold, Deposit, and Report​

If backup withholding is required, here's the mechanics:

1. Calculate: Withhold 24% of the reportable payment. If the payment is $1,000, remit $760 to the vendor and hold $240 for the IRS.

2. Deposit: Report and deposit backup withholding on Form 945 (Annual Return of Withheld Federal Income Tax) and, for semiweekly depositors, the accompanying Form 945-A. Deposit via EFTPS on the same schedule as employment taxes — generally next-day for large amounts. Don't mingle it with Form 941 withholding.

3. Report to the payee: Show the amount withheld in the backup withholding box on the relevant information return (e.g., Box 4 on 1099-NEC or 1099-MISC, Box 4 on 1099-INT). The payee uses that figure as withholding credit on their return.

4. Maintain the trail: Keep copies of the B notices sent, the corrected W-9s (or SSA/IRS letters) received, and deposit confirmations. If the IRS assesses penalties under Sections 6721/6722, that paper trail supports a reasonable-cause defense under Section 6724.

Penalties for Getting It Wrong — And the Safe Harbors That Help​

Information-return penalties are per form, and there are two sides: failure to file a correct return with the IRS (6721) and failure to furnish a correct statement to the payee (6722). They stack.

For filings due in 2026 (2025 tax year returns filed in early 2026), the per-form penalties are:

• $60 if corrected within 30 days
• $130 if corrected after 30 days but by August 1
• $340 if corrected after August 1 or not filed
• $680 for intentional disregard (no cap)

2025's late-August tier is $330; 2024's is $310 — the numbers inch up almost every year with inflation adjustments. Small filers (average annual gross receipts ≤ $5 million) have lower aggregate caps; intentional disregard has no cap.

Three practical safe harbors:

• TIN Matching reliance: A TIN Matching validation before filing that returned a match can generally be relied upon as reasonable cause. Keep the match timestamp.

• Solicitation requirements: If you properly solicited a TIN (initial solicitation at account opening, plus annual solicitations if needed) and the payee failed to provide it, that supports reasonable cause. Document every solicitation date.

• 972CG response window: If you receive a penalty notice (972CG), respond within 45 days (60 for foreign filers) before assessment. Interest accrues monthly on unpaid penalties; a payment plan can limit further accrual.

Note the filing threshold that catches growing businesses: starting with returns due in 2024, electronic filing is required when you file 10 or more information returns in aggregate (including W-2s). That pulls many small businesses into e-file that previously mailed paper 1099s. Need more time? File Form 8809 for an extension to file; for an extension to furnish statements to recipients, fax a letter to the IRS. Need a waiver from e-file? Form 8508.

Five Mistakes That Trigger Most B Notices​

1. Paying before the W-9 arrives. The vendor cashes the check, ghosts your follow-up, and your January 1099 uses an invented name/TIN.

2. Trusting the invoice, not the W-9. The brand name on the invoice is not the tax name. The W-9 controls what goes on the 1099.

3. Misclassifying the LLC. Single-member LLC with no corporate election = disregarded entity. The 1099 name is the owner, not the LLC. Multi-member LLC taxed as partnership = partnership name and EIN.

4. Letting "Applied For" linger past 60 days. Interest/dividend payees get 60 days; contractor payees get zero. Diarize the deadline.

5. Merging duplicate vendor records without merging W-9s. Two vendor entries for the same person with different TINs guarantee a mismatch.

A Minimal W-9 Workflow You Can Implement This Week​

If you don't have a process, start here:

Day 1: Add a W-9 request to your vendor onboarding email. Attach a blank W-9 or link to your e-signature portal. State that payments over $600 require a W-9 on file.

Day 2: Audit your current vendor list. Flag any payee you paid $600+ to in the last 12 months without a W-9. Send a batch request.

Day 3: Run TIN Matching (or have your bookkeeper do it) for flagged vendors before year-end filings.

Monthly: For any new vendor, no W-9 within 15 business days of first payment = follow-up #1; within 30 business days = begin backup withholding review.

When a CP2100 arrives: Within 15 business days, send first B notices with the exact Publication 1281 language, log the mailing dates, and calendar the 30-business-day withholding start if no correction arrives.

The Bookkeeping Connection​

Vendor TINs, W-9s, and backup withholding aren't just tax chores — they are bookkeeping hygiene. Every W-9 you collect is a verified vendor record. Every TIN match is a clean 1099. Every B notice you log is evidence of reasonable cause. Clean records mean your books reconcile on the first try in January instead of the third, and your CPA isn't rebuilding your vendor file at $250 an hour.

Plain-text accounting makes that hygiene visible. When vendor records, payment history, and withholding are version-controlled, you can trace a TIN change, show when a B notice was sent, and prove solicitation attempts without digging through email threads. Auditors and CPAs love a paper trail they can git log.

Simplify Your Financial Management​

Getting W-9s and withholding right is one piece of keeping your financial records audit-ready year-round. Beancount.io gives you plain-text, version-controlled accounting that's transparent and portable — no black boxes, no vendor lock-in, and AI-ready when you want help with queries or categorization. Track every vendor payment, every withholding, and every 1099 from a ledger you actually own. Get started for free and keep your books as organized as your W-9 files.