An EIN You Did Not Request: Check Who Applied
An unexpected EIN can have a legitimate explanation. Check who requested it before following the identity-theft process.

Receiving an employer identification number that you do not remember requesting is a reason to investigate, but it is not automatic proof of identity theft. The IRS tells recipients to first check whether someone requested the EIN on their behalf for a legitimate purpose. That first question can keep a small-business owner from treating an ordinary administrative handoff as a confirmed fraud case.
For an owner-operator, the task is different from applying for a new number or comparing the price of an application service. You already have an unexpected communication to reconcile with the business’s records. Start with who was authorized to act and what they actually submitted. Do not publish the identifier, upload the whole letter to social media or ask an unverified intermediary to investigate it.
Check the people who could have applied
The IRS lists several possible legitimate sources of an application: a spouse or other relative, an accountant, a business partner or associate, a community organization, or a bank or trust executor. The point is not that every one of those people necessarily had permission in your case. It is that the recipient should establish what happened before concluding that no legitimate request exists.
Ask a precise question of the appropriate person: did you submit an EIN application for this entity, and do you have the confirmation? Contact an accountant or partner through a channel you already know. A vague answer that “the paperwork was handled” is less useful than a record identifying the entity and the completed request. Keep the discussion limited to the people who need the information.
Match the purpose and the entity
The IRS gives legitimate-purpose examples that extend beyond starting a trucking company. They include creating a partnership or company, handling a community association’s returns, paying for household services, or establishing a trust through a bank or executor. A recipient with several personal and business responsibilities should not assume every government letter belongs to the carrier merely because it arrived at the same address.
Compare the notice with the existing records for the relevant entity. This article does not determine whether a particular organization should have obtained an EIN or whether a change in ownership requires another one. Those questions belong to the applicable IRS instructions and qualified advice. The narrower task here is to identify whether the unexpected number connects to a legitimate application someone made on your behalf.
Keep uncertainty visible while you check
A simple internal worksheet can list the date the communication arrived, the named entity, the person contacted and whether supporting confirmation was found. These are suggested filing fields, not an IRS form. Store the sensitive details securely; a general task list can track “verification pending” without displaying the full number. Give one person responsibility for updating the result.
Imagine a hypothetical business whose owner receives the letter while a partner is arranging a new entity with an accountant. The owner first checks with them and compares the records. If a legitimate application is confirmed, the office can file the documentation appropriately. If the answer remains unclear, it remains unclear: neither silence from the accountant nor a familiar-looking letter establishes the final explanation.
If no legitimate reason is found
The IRS provides a separate reporting path when a legitimate cause has been ruled out. Its guidance identifies Form 14039-B, Business Identity Theft Affidavit. The page describes online submission through an existing or newly created ID.me account and alternatives for people unable to submit online. Use the current official page to choose the route and obtain the applicable instructions.
The mailing or fax instructions depend in part on whether the person received a letter about the fraudulent EIN. That is why a copied address from an old article or a social-media reply is a poor substitute for reading the present IRS instructions and the relevant letter. This guide does not submit a report, determine your eligibility for a particular remedy or promise a response time.
What to preserve for the next step
Retain the communication, the results of your checks and any legitimate application confirmation located. If you use a professional adviser, explain what has been verified and what remains uncertain. Do not solve an unexpected-number problem by reflexively applying for another EIN. Determine the appropriate official process first rather than creating another administrative action whose purpose is not clear.
- Identify the entity named in the communication.
- Ask known, relevant contacts whether they requested the EIN legitimately.
- Compare their answer with supporting records.
- Keep identifiers out of public messages and ordinary shared task lists.
- If a legitimate cause is ruled out, follow the IRS business identity-theft instructions.
This is general educational information, not a determination about an individual taxpayer. The preventive habit is to reconcile unexpected correspondence with authorized actions and use the official reporting route when the facts support it. For more business administration coverage for small fleets, visit Truck Savers News.
Illustrative blank envelopes: Martin Vorel / Libreshot, public domain dedication; unmodified. Not an IRS letter. Photo / Foto · License / Licencia.