US EIN/TIN+SSN Validator
Validate US EIN, SSN and ITIN format & IRS prefix rules, mask SSNs and detect duplicate tax IDs.
Validate US EIN, SSN and ITIN format & IRS prefix rules, mask SSNs and detect duplicate tax IDs.
Key Features
EIN Prefix Validation
The validate_ein() engine checks that an Employer Identification Number has exactly nine digits and that its two-digit campus prefix (01-06, 10-16, 20-27, 30-39, 40-48, 50-59, 60-68, 71-77, 80-88, 90-95, 98-99) is part of the IRS-published valid-prefix set. Historically unassigned prefixes (00, 07-09, 17-19, 28, 29, 49, 69, 70, 78, 79, 89, 96, 97) and an all-zero serial body (NN-0000000) are flagged as invalid before the number ever reaches a filing. Every accepted EIN is re-rendered in the canonical NN-NNNNNNN format.
SSN Format Rules
validate_ssn() checks the area (first 3 digits), group (next 2) and serial (last 4) segments per SSA/IRS Pub 1346: area cannot be 000, 666 or fall in the 900-999 ITIN-reserved range, group cannot be 00 and serial cannot be 0000. A short list of publicly voided promotional numbers (the Woolworth wallet-card SSN 078051120, a 1962 advertisement number and a Lifelock CEO number) is rejected by default via reject_promotional. Valid values are re-rendered as AAA-GG-SSSS by format_ssn().
ITIN Group Range Checks
validate_itin() confirms that an Individual Taxpayer Identification Number starts with the digit 9, that its 4th-5th "group" digits fall inside one of the IRS ranges 50-65, 70-88, 90-92 or 94-99, and that the trailing 4-digit serial is not 0000. This keeps ITINs used for non-employee tax filings cleanly separated from the SSN and EIN number spaces.
Automatic Type Detection
detect_type() picks the most likely family for a bare 9-digit number: a leading 9 is treated as ITIN space, a valid EIN campus prefix that fails SSN structural checks is treated as EIN, and a value that passes SSN rules but not the EIN prefix list is treated as SSN. When a number is structurally valid as both, the more privacy-sensitive SSN interpretation is used. The Contact form, the audit log and the standalone wizard's "Auto-detect" option all rely on this same heuristic.
Privacy-Safe Masking
mask_ssn() and mask_ein() keep only the last four digits visible, rendering SSNs/ITINs as XXX-XX-1234 and EINs as XX-XXX6789. The computed us_tax_id_display field on the contact form applies this masking automatically whenever the "Mask SSN/ITIN in UI" setting is enabled (on by default), and the audit log always stores the masked form only — the raw digits are never persisted in tax.id.validation.log.
Duplicate Tax ID Guard
A stored, indexed us_tax_id_normalized field holds the digits-only form of every contact's Tax ID. The _check_us_tax_id_unique constraint searches across all vendors and customers for another partner sharing the same normalized number and blocks the save with the masked value and the conflicting contact's name. Duplicate enforcement is a company-wide toggle ("Enforce Unique Tax IDs" in Settings, backed by the us_tax_id.enforce_duplicate parameter) for organizations that need to allow shared IDs.
Standalone Validator Wizard
The tax.id.validator.wizard (menu Tax ID Validator — Validate Tax ID) lets any user paste an arbitrary value with or without dashes, either force a specific EIN/SSN/ITIN check or leave it on Auto-detect, and instantly see the detected type, valid/invalid flag, formatted value, masked value and the exact reason. A Clear button resets the form for the next check, and every run is recorded in the audit log with source "Validator Wizard".
Validation Audit Log
Every check — whether triggered by saving a contact, clicking "Validate Now" or running the wizard — is written to tax.id.validation.log with the masked value, detected type, valid/invalid result, human-readable reason, related contact, source (Contact Save / Validator Wizard / Manual API), validating user and timestamp. The Validation Log list view offers Valid/Invalid and EIN/SSN/ITIN filters plus group-by-type and group-by-user for compliance review.
Screenshots
Why Choose This Module
Bad taxpayer IDs are the #1 cause of 1099 e-file rejects. This module validates EIN, SSN and ITIN identifiers against real IRS structural and prefix rules before they ever reach a filing.
Specifications
- Compatible: Odoo 18.0 / 19.0
- License: OPL-1
- Languages: English
- Author: Pokutsoft
- Dependencies: base, contacts
- Support: support@pokutsoft.com
Update date: 2026-07-05