Backup Withholding in 2026: When 24% Applies, How to Avoid It With Valid W-9s, and the CP2100 Notice Response

A marketing agency pays a freelance video editor $18,000 in 2026, collects a W-9 that reads "John Smith" but the TIN is the editor's LLC EIN, and the address is two apartments ago. In October the agency receives IRS Notice CP2100 — the TIN/name combination does not match IRS records. The agency files it in a drawer. The following March the IRS proposes backup withholding penalties, and the agency must now withhold 24% from every future payment to that editor, remit it on Form 945, and prove it chased the TIN correctly to abate the penalty. Across town, a bookkeeper who runs a one-page W-9 intake, validates the TIN before the first payment, and logs two B-notice mailings never withholds a dollar that wasn't required — and never pays a penalty.

Backup withholding under §3406 is not a penalty rate and not optional — it is the statute's way of collecting tax at source when the payee's identity is unreliable. The rate is 24% (flat, since the Tax Cuts and Jobs Act), the trigger is mostly paperwork, and the correction is procedural — which is exactly why examiners assess it so readily. This guide maps when 24% applies, how a W-9 actually prevents it, and the two-notice CP2100/B-notice sequence that decides whether the penalty is abated.

When 24% Applies — The Four Conditions​

Backup withholding applies to reportable payments (Form 1099-NEC, MISC, INT, DIV, PATR, OID, B proceeds, rents, royalties, and payment-card/settlement payments where backup withholding is triggered) when any one of these is true at the time of payment:

1. No TIN furnished (missing TIN). Payee did not give you a TIN, or gave a blank/incomplete W-9. You must withhold 24% from the payment and deposit it — there is no grace period for TIN-less payments except the narrow 60-day awaiting-TIN rule for certain interest/dividend accounts (not for contractor payments).
2. IRS notified you the TIN is incorrect (B-notice). The IRS sent you a CP2100 / CP2100A listing the payee whose name/TIN combination failed matching, and your solicitation sequence did not cure it. You must begin backup withholding within 30 business days after the CP2100 date (or the next payment after that window, whichever is earlier) and continue until the payee furnishes a validated TIN.
3. Payee failed to certify under penalty of perjury that they are not subject to backup withholding where certification is required (W-9 Part II not signed). An unsigned W-9 where certification is required is not a valid W-9.
4. IRS notified the payee (and you, via the payee's certification failure) that the payee is subject to backup withholding for notified underreporting — the CP5402 chain where the payee underreported interest/dividends and the IRS instructed backup withholding. You are notified by the payee's failure to certify or by IRS direction.

The two conditions that generate 90% of small-business exposure are #1 (missing TIN) and #2 (CP2100 incorrect TIN) — both solved by W-9 intake, not by arguing the payment was net.

What backup withholding is not:

• Not the same as the information-return penalty ($60/$130/$330/$660 per-form tiers for 2026 under inflation adjustments) — backup withholding can generate a penalty for failure to withhold, but the $660 maximum is the 1099 penalty, not the withholding rate.
• Not withholding on wages — wages use W-4/§3402 tables; backup withholding uses only the 24% flat rate.
• Not avoided by paying by ACH or Zelle — the payment method does not change reportability; a reportable payment paid electronically is still subject to backup withholding if the TIN condition is met.

How a Valid W-9 Prevents It — Intake That Holds Up​

The entire prevention regime is Form W-9 (Request for Taxpayer Identification Number and Certification). A valid W-9 must have five things before you pay:

• Legal name as shown on the tax return (for an individual, the individual's name — even where the payee uses a DBA or single-member LLC name on the invoice).
• Business name / disregarded entity where applicable — an LLC that is disregarded gives the owner's name and TIN on Line 1; the LLC name on Line 2 alone is not the TIN record the IRS matches.
• Federal tax classification checked correctly (Individual/Sole proprietor, C Corp, S Corp, Partnership, Trust/Estate, LLC with its tax classification). A payee checking "Exempt payee" must actually be exempt.
• TIN — SSN, ITIN, or EIN as appropriate, no truncation — and certification signature under penalty of perjury where required.
• Current address for B-notices and for TIN matching — a stale address does not itself trigger withholding, but it guarantees the B-notice never reaches the payee and the 15-day solicitation clock never cures.

The two intake rules that prevent CP2100​

Collect the W-9 before the first payment. The regulation's solicitation requirement is before payment — a W-9 chased after year-end is already a missing-TIN payment in the examiner's eyes, even if the TIN later proves correct.

Validate, don't just file. Three no-cost checks before you pay:

1. TIN Matching Program (IRS e-Services) — submit name/TIN combinations in bulk and get a match/no-match within hours; free for payers required to file 1099s. Not the same as validating the payee's tax correctness — only that the combination matches IRS records at that moment.
2. W-9 instruction on Line 1 — for a single-member LLC disregarded as an entity separate from its owner, Line 1 must be the owner's name and SSN/EIN for income tax, not the LLC's EIN alone — the most common W-9 error that produces a CP2100 despite a "completed" form.
3. Exempt-payee and FATCA codes only where applicable — a domestic small-business vendor is essentially never an exempt payee. Marking "exempt" incorrectly does not exempt the payee from backup withholding; it creates a different mismatch if the IRS ever tests exempt status.

Keep the signed W-9, the validation result, and the payment history in the same vendor file — the abatement package is this file, not a later affidavit.

Solicitation — The Formal Definition of "We Tried"​

Information-return regulations define solicitation with specificity that matters when the penalty is proposed:

• Initial solicitation: Request the TIN before the reportable payment — oral or written, but written W-9 with a log is the only defensible form.
• First annual solicitation: If the first solicitation fails or the payment is made without a TIN, solicit again by December 31 of that year.
• Second annual solicitation: If the TIN is still missing at year-end, solicit again by December 31 of the following year.
• A solicitation is not a text message that says "send TIN pls" — it is a dated, written request (W-9 with cover letter/email) retained with a mail/email log. Two annual solicitations where required are what establish reasonable cause for penalty abatement where the form was still incorrect.

CP2100 and the B-Notice — The 15-Day / 30-Day Clock That Decides the Penalty​

CP2100 is the IRS notice to the payer that one or more name/TIN combinations on the prior year's 1099s did not match. It is not a bill — it is the start of the backup-withholding obligation and the start of the penalty clock if you ignore it.

What you receive​

• CP2100 (more than 50 mismatches) or CP2100A (50 or fewer) in September–October following the filing year — e.g., mismatches on 2025 Forms 1099-NEC filed January 2026 generate CP2100 in Fall 2026.
• A listing of the incorrect payee records (not the correct TIN — the IRS does not disclose it) and the B-notice procedure you must follow.

What you must do — two B-notices, with withholding in between​

The sequence comes from Reg. §31.3406(d)-5 and Rev. Proc. 93-56 (updated) — follow it exactly, because penalty abatement turns on having sent the right notice within the right window.

First B-notice (within 15 business days after CP2100 date):

• Mail or deliver to the payee a First B-Notice plus a blank W-9 with a return-by date within 15 business days plus mailing time.
• The notice text must state verbatim that the IRS notified you the name/TIN is incorrect and that backup withholding will begin if a correct W-9 is not received — use the IRS-prescribed B-notice language, not a custom email.
• Do not yet withhold on the basis of the CP2100 alone where the payee is not yet in backup-withholding status — the withholding obligation attaches after the cure window fails, not on receipt of the envelope.

If the payee returns a new W-9 within the window:

• Validate the new combination via TIN Matching; if it matches, do not begin backup withholding and treat the payee as cured. Retain the new W-9 and log the date.

If the payee does not respond, or the new combination still mismatches:

• Begin backup withholding at 24% within 30 business days after the CP2100 date on any reportable payment to that payee — remit on Form 945 (Annual Return of Withheld Federal Income Tax) with federal tax deposits via EFTPS on the appropriate schedule (monthly/semiweekly), not on Form 941.
• Continue withholding until the payee furnishes a TIN that validates — a second W-9 that again fails TIN Matching does not cure.

Second B-notice (if a second CP2100 names the same payee in a subsequent year):

• The Second B-notice requires the payee to contact the IRS or SSA to validate the TIN and provide documentation (SSN card, CP575/EIN letter, Letter 147C). A second self-certified W-9 alone does not cure a second-year mismatch — the payee must bring a government-issued TIN validation.
• Do not send a First B-notice again to a payee already in second-B-notice status in that year — the procedure is First, then Second on the next CP2100 naming the same payee.

Common errors that lose abatement: sending a First B-notice by email where the regulation requires mail to last known address, using non-prescribed language, counting calendar days instead of business days, or treating TIN Matching "match" as cure for a Second B-notice where SSA/IRS validation is required.

Withholding Mechanics — 945, Deposits, and the Credit That Follows the Withholding​

Where withholding is required:

• Withhold 24% from the gross reportable payment — not the net invoice after expenses or sales tax collected. If you already paid the full $2,000 to the payee before realizing withholding was required, you are liable for the amount that should have been withheld and must remit it — you cannot recover it from the IRS, only from the payee (often impracticable).
• Deposit backup-withholding tax like any withheld federal income tax — EFTPS, with the lookback-period deposit schedule (monthly or semiweekly). Backup withholding deposits are reported on Form 945, not Form 941 — commingling 941 payroll withholding with 945 backup withholding is a classic deposit-to-wrong-return error that generates notices in both directions.
• Report total annual backup withholding on Form 945 due January 31 (February 10 with timely deposits) and furnish the payee a 1099 that shows the withholding. The payee claims the withheld amount as a credit on their return (1040/1120 withholding credit) — backup withholding does not cost the payee tax where the ultimate tax is lower; it accelerates collection.
• No state backup withholding under §3406 — states have their own withholding on reportable payments only where separately enacted. Do not add state withholding to a federal backup-withholding payment unless the state affirmatively requires it.

The Penalty Tail — What Is Assessed and How It Is Abated​

Two penalties are commonly proposed together, and they stack:

• Failure to file correct information returns — §6721: $60 / $130 / $330 per form tiers for 2026 (indexed; $660 intentional disregard) with calendar-year maximums — assessed per incorrect 1099 (the TIN mismatch makes the return incorrect). The CP2100 does not itself propose this penalty; the later Notice 972CG (Proposed Penalty) does — often 12–18 months after the CP2100.
• Failure to withhold where required — §3406: Liable for the amount that should have been withheld plus interest and potentially penalties for failure to deposit (Form 945).

Reasonable-cause abatement for the §6721 incorrect-return penalty rests on solicitation. Show:

1. The initial W-9 solicitation before payment (or where payment preceded, the two annual solicitations by 12/31 each year);
2. The First and where applicable Second B-notice mailed within 15 business days of each CP2100 with prescribed language and a retained mail log; and
3. TIN Matching validation where applicable — and for a Second B-notice payee, the IRS/SSA validation document the payee brought.

A file that has a W-9, a CP2100, a single undated email asking for a new TIN, and no mail log is routinely not abated. A file with a pre-payment W-9, dated cover letters for each solicitation, certified or first-class mail evidence, TIN Matching screenshots, and a dated withholding-start log is the textbook abatement — many examiners abate on the first response where this file is complete, without escalation to Appeals.

The Bookkeeping Connection​

Backup withholding rewards the habit that makes plain-text accounting powerful: every payee onboarding, W-9, TIN validation, reportable payment, CP2100, B-notice, and 945 deposit is a dated, payee-tagged event — not a drawer of forms someone sorts in January. When vendor W-9s with classification, TINs, TIN Matching results, annual solicitations, CP2100 dates, First/Second B-notices with mail logs and response dates, withholding start dates, and 945 deposits live in the same version-controlled ledger that holds the 1099 workpapers they support, the story from "onboarded 03-14, W-9 Line 1 SSN 412-XX-XXXX matched via TIN Matching 03-15, paid $18,000 reportable, CP2100 09-28-2026 named payee in First B-notice window, new W-9 10-08 matched — no withholding, retained" to "972CG abated on solicitation, no 24% leakage" is traceable and explainable to an examiner who will ask for the solicitation log before the argument — and to the payee who will ask why 24% was withheld.

Simplify Your Financial Management​

Twenty-four percent is the price of an unreliable TIN — the cure is a W-9 before the payment and two letters within 15 business days of the CP2100, not a negotiation after the 972CG proposes a penalty per form. Beancount.io gives you plain-text, version-controlled accounting where vendor W-9s, TIN validations, reportable payments, CP2100/B-notices, and 945 deposits stay explicitly linked — no hidden portals, no vendor lock-in, and AI-ready when you want help turning last month's vendor roster into this month's withholding decision before the remittance is due. Get started for free and make every reportable dollar one whose TIN you can prove.