Are EIN Numbers Public? Where Yours Shows Up in 2026

A private company's EIN is not published by the IRS, and no federal directory lists it.

It is not secret either: the law silences the IRS, not the number.

The short answer

Three things to hold on to:

• The IRS will not tell a stranger your EIN.
• Other rules can force the number into public view.
• Dozens of people legitimately hold it anyway.

What the law actually protects

The rule is section 6103 of the Internal Revenue Code, which makes "returns and return information" confidential. That information includes a taxpayer's identity, defined as:

• the name on the return
• the mailing address
• the taxpayer identifying number

So an EIN held in IRS files is covered, and a federal employee who wilfully discloses it commits a felony under section 7213:

• a fine of up to $5,000
• up to 5 years in prison
• or both

Now the limit. Section 6103 binds federal officers, state officials and certain contractors who received the data from the IRS. It does not bind your customer, your payroll provider or a data broker.

Inside IRS files

Confidential by law.

• Binds federal officers and employees
• Binds state officials and contractors who received the data from the IRS
• Wilful disclosure is a felony: up to $5,000, up to 5 years, or both

Everywhere else

No legal confidentiality.

• Employees, on Form W-2
• Contractors, on Form 1099
• Customers, on Form W-9
• Your bank, your payroll provider, a data broker

That is why no federal EIN lookup exists, and why the number still circulates.

The protection follows the holder, not the number. The IRS must stay silent. Everyone else who lawfully holds your EIN is free to use it.

That is why there is no federal lookup. If your question is the reverse, how to check that a supplier's EIN matches its name, that is a separate process.

Where an EIN is published by law

Four federal channels put an EIN in front of anyone. Each has a trigger.

The channel most founders miss is Form 5500.

• A private company that sponsors a retirement or health plan files it.
• The Department of Labor posts those filings "for general public access" on its website.
• The sponsor's EIN is a required field.

No stock listing is needed: a small private company with a 401(k) plan can have a public EIN.

How someone else's filing can publish your EIN

Your company can be private and still appear in a public return, because another filer listed it. Two schedules of Form 990 ask a tax-exempt organization for other entities' EINs:

• Schedule R lists related organizations, including those taxed as a corporation or a partnership, with "name, address, and EIN".
• Schedule I lists organizations that received grants of more than $5,000, with an EIN column.

Both schedules travel with the return, which is open to inspection. In practice, this reaches:

1. a for-profit subsidiary of a foundation or a university
2. a joint venture with a non-profit partner
3. a company that received a grant from a charity

Where your EIN travels without being published

These documents are not public records. They are how the number leaves your control.

The "No" rows are a regulation, not a habit. Treasury rules allow a truncated number, written XX-XXX1234, but a person "may not truncate its own taxpayer identifying number" on a statement furnished to someone else. The regulation gives two examples:

• an employer's EIN on a Form W-2
• your own number on a Form W-9

So every employee and every reported contractor holds your full EIN, permanently.

Where it is not public, despite what you read

Several sources are often cited as public EIN records. They are not.

• The IRS itself. No name search, no reverse search, no list of private EINs.
• SAM.gov. Federal contractors register a taxpayer number, but the government classifies it as sensitive data. The public record shows the Unique Entity ID instead.
• Delaware's entity search. It shows the state file number, which is a different identifier.
• State formation documents. A Delaware Certificate of Formation must state the name and the registered agent. The EIN is not required.

State annual reports are the grey area.

• Some states ask for the federal number and publish the filing. Florida's public search displays it.
• Others never ask.
• The only reliable check is the form itself, before you file it.

A foreign-owned Delaware or Wyoming LLC: where the EIN appears

This is the case almost no guide covers, and it is the most favourable one. Take a single-member LLC owned by a founder abroad, with no US staff and no benefit plan.

Three points specific to foreign owners:

1. Delaware LLCs file no annual report. They pay a flat annual tax, so no yearly state filing carries the number. Delaware corporations do file one, so check that form.
2. Fewer W-9s. The W-9 instructions say that when a disregarded entity has a foreign owner, the owner completes a Form W-8 instead.
3. The ownership register is gone. FinCEN's final rule of August 11, 2026 exempts US companies from beneficial ownership reporting.

One caveat cuts the other way. The Form SS-4 notice says the IRS may share the application with other countries under a tax treaty, so confidential from the public does not mean invisible to your home tax authority.

• Plan the structure with that in mind.
• It is part of forming a Delaware company from abroad.

What someone can do with your EIN

An EIN is an identifier, not a password, and on its own it should not open an account or move money. The risk is combination: an EIN next to a legal name and an address is enough to attempt:

• a false wage statement in your company's name
• a tax return filed under your number
• a credit application posing as your business
• a change of address on your IRS record

The best public measure is old but official. A Treasury Inspector General audit of tax year 2011 found:

Those are 2011 numbers, published in 2013. IRS filters have changed since, so read them as scale, not as a current count.

How to limit the exposure

You cannot make an EIN secret, but you can shrink the surface. The IRS gives one instruction specific to EINs: keep the number safe and keep the application current.

1. Report changes within 60 days. A new responsible party or address goes on Form 8822-B.
2. Never list a nominee. The IRS warns that this could disclose your information to an unauthorized person.
3. Answer IRS letters at once. Letters 6042C and 5263C mean a return in your name is being checked.

Then the habits that cost nothing:

• Keep the EIN off your website, pitch decks and email signatures.
• Leave it off invoices unless the customer's process requires it.
• Send W-9s through a portal, not as an open email attachment.
• Store the IRS assignment letter like a bank document.
• Ask why, when a stranger requests the number.

If your EIN has been misused

The IRS lists five warning signs of business identity theft.

• An e-filed return is rejected because one already exists under your EIN.
• An extension request is rejected for the same reason.
• You receive a transcript or notice that matches nothing you filed.
• You receive Letter 6042C or Letter 5263C.
• Routine IRS mail stops, because the address on file was changed.

The response is Form 14039-B, the Business Identity Theft Affidavit.

Do it in this order:

1. Compare the notice with your own filings first.
2. Ask your accountant and payroll provider whether they filed it.
3. File Form 14039-B once a legitimate cause is ruled out.
4. Tell your bank and any lender named in the notice.

The summary

Published by law

• SEC registrants: cover of Form 10-K
• Tax-exempt organizations: Form 990
• Benefit plan sponsors: Form 5500
• Bankruptcy debtors: Official Form 201

Shared, not published

• Every employee, on Form W-2
• Every reported contractor, on Form 1099
• Every customer who asks, on Form W-9
• Banks, lenders and payment processors

Not public, despite what you read

• The IRS itself: no directory, no name search
• SAM.gov, which shows the Unique Entity ID
• Delaware's entity search, which shows the file number
• A Delaware Certificate of Formation, which carries no EIN