1099 Vendor Onboarding Checklist: W-9, TIN Matching, Classification and Payment Controls

Every January, AP teams discover that reportable vendors have missing W-9s, incorrect taxpayer identification numbers, unclear tax classifications, or outdated addresses. By then, AP is racing against the Form 1099 filing deadline while trying to obtain corrections from vendors that may no longer be responsive.

A better process begins when the vendor is onboarded.

This checklist explains how to collect and review vendor tax documentation, validate name and TIN information, classify payments for Form 1099 reporting, and establish supporting controls for sanctions screening and payment-account changes.

For payments made during 2026, the reporting threshold for many payments previously subject to a $600 threshold increased to $2,000. Different rules and thresholds still apply to certain categories, including royalties, attorney payments, and payments made through card or third-party settlement networks.

Part 1: Tax-Information Controls

Step 1: Determine Whether the Vendor Is a U.S. or Foreign Payee

Before requesting any form, confirm the vendor's status:

The applicable W-8 form documents foreign status and, where applicable, a treaty claim or other withholding status. Payments to foreign vendors require additional review because Form 1042-S reporting and Chapter 3 or Chapter 4 withholding may apply. Consult your tax advisor for payments to foreign vendors.

Step 2: Collect the Correct W-9 or W-8-Series Form

As a best-practice onboarding policy, require the applicable tax form before activating the vendor for payment.

What to review on the W-9:

Common W-9 issues to catch:

If a vendor declines to provide a W-9:

A refusal to provide required tax documentation should prevent normal onboarding from being completed. Offer a secure submission method, explain the tax-reporting requirement, and escalate unresolved cases under company policy.

Step 3: Perform TIN Matching When Eligible and Appropriate

TIN matching is the process of submitting a name/TIN combination to the IRS to confirm it matches their records. It is the principal IRS tool available to eligible payers for validating a reportable name/TIN combination before filing.

The IRS provides two TIN matching programs through IRS e-Services:

Access is limited to eligible payers and authorized agents that apply through IRS e-Services.

TIN Matching returns a response indicating whether the submitted name/TIN combination matched IRS records and whether additional review may be needed. Follow the current IRS TIN Matching guidance when interpreting response codes.

What to do when there is a mismatch:

Step 4: Determine the Correct Form 1099 Category and Threshold

Not all vendors require a 1099, and the correct form and threshold depend on the nature of the payment, the vendor's federal tax classification, applicable exceptions, and how the payment was made.

Form 1099-NEC (nonemployee compensation):

For payments made during 2026, businesses generally must file Form 1099-NEC when they pay $2,000 or more for reportable nonemployee services. Whether a payment is reportable depends on the nature of the payment, the vendor's federal tax classification, applicable exceptions, and how the payment was made.

A Form 1099-NEC may also be required when federal income tax was withheld under the backup-withholding rules, even if total payments were below the normal reporting threshold.

Common reportable payees include individuals and sole proprietors, disregarded single-member LLCs, partnerships, and certain estates or trusts, subject to the nature-of-payment and payment-method rules.

Vendors generally exempt from 1099-NEC reporting include C corporations and S corporations — with important exceptions.

Payments for an attorney's legal services are generally reported in Box 1 of Form 1099-NEC, including payments to incorporated law firms. Certain settlement or other gross proceeds paid to an attorney — but not constituting payment for the attorney's own services — are generally reported in Box 10 of Form 1099-MISC. The $2,000 threshold applies to attorney service fees for payments made during 2026.

Form 1099-MISC may be required for:

This is not a complete list of Form 1099-MISC categories; consult the current instructions for less common payment types.

Thresholds vary by payment type and may be adjusted for inflation after 2026. Confirm current thresholds and exceptions with your tax advisor.

Step 5: Identify Payment-Method Exclusions

Identify payments made by credit card or through a qualifying third-party settlement network and exclude amounts that are reportable by the payment settlement entity under Form 1099-K rules. Do not assume every payment application or electronic transfer qualifies — some payments sent through platforms may not be reportable by the platform on Form 1099-K, depending on how the transaction is processed.

When calculating reportable vendor spend, identify the payment method for each transaction and apply the exclusion only where it clearly applies. Failing to do so can result in over-reporting.

Step 6: Track Missing Forms, Mismatches, and Reportable Spend

Maintain a running record throughout the year so year-end is not a scramble:

Re-run TIN matching when:

You can also run a pre-year-end exception review of all reportable vendors to catch missing documentation before the filing deadline.

Part 2: Broader Vendor-Risk Controls

The following controls are AP best practices — not IRS requirements — but they address the most common and costly vendor fraud risks. They are included here because they are typically implemented alongside the tax-information controls above.

Step 7: Validate Entity Existence Where Warranted

For new vendors or higher-risk relationships, confirm that the entity is registered and review its current state filing status:

Step 8: Apply Risk-Based Sanctions Screening

Establish a risk-based sanctions-screening process appropriate for your business. Depending on the vendor, geography, ownership, industry, and payment activity, screening may include the vendor's legal name, alternate names, and relevant owners against applicable OFAC sanctions lists. Re-screen based on your risk policy and when material vendor information changes.

Note that OFAC administers multiple sanctions lists beyond the SDN List. Consult your compliance team or legal advisor to determine which lists are relevant to your business.

Step 9: Authenticate Initial and Changed Payment Instructions

Bank account fraud — where a vendor's payment details are changed by a fraudster — is one of the most common and costly AP fraud schemes. Letterhead and email requests can be fabricated, so payment-detail changes should be independently authenticated through a controlled process.

For all new vendor bank account setups and any changes to existing payment instructions:

Step 10: Separate Vendor Setup, Approval, and Payment Responsibilities

No single person should be able to add a vendor, approve the vendor, and initiate a payment to that vendor without a second reviewer. Segregation of duties is the foundational control that makes all other vendor controls meaningful.

Where staffing does not permit full segregation, require a documented independent review of newly created vendors, bank changes, and the first payment before release.

Step 11: Preserve an Audit Trail

Maintain documentation of every step in the vendor onboarding and verification process:

Retain W-9s, information-return support, correction records, and related compliance evidence for the period required under your company's tax-record retention policy. Many organizations retain these materials for at least four years, but confirm the applicable period with your tax advisor.

1099 Vendor Onboarding Checklist Summary

| Step | Action | Category | |---|---|---| | 1 | Determine U.S. or foreign payee status; collect W-9 or applicable W-8 | Tax | | 2 | Review W-9 for completeness and common errors | Tax | | 3 | Perform TIN matching; follow B Notice procedures if needed | Tax | | 4 | Classify vendor and payment for correct Form 1099 | Tax | | 5 | Identify payment-method exclusions (Form 1099-K) | Tax | | 6 | Track missing forms, mismatches, and reportable spend | Tax | | 7 | Validate entity existence where warranted | Risk | | 8 | Apply risk-based sanctions screening | Risk | | 9 | Authenticate payment instructions through an independent verification process | Risk | | 10 | Enforce segregation of duties for vendor setup and payments | Risk | | 11 | Preserve a documented audit trail | Tax / Risk |

Frequently Asked Questions

What is the 1099 threshold for payments made during 2026?

For payments made during 2026, the reporting threshold for Form 1099-NEC and many Form 1099-MISC categories increased to $2,000. Royalties retain a separate $10 threshold. Attorney gross proceeds and certain other categories have their own rules. Confirm current thresholds with your tax advisor, as thresholds may be adjusted for inflation after 2026.

Do I need a W-9 from every vendor?

Businesses should obtain a Form W-9 from U.S. vendors when the nature of the relationship or payment may create an information-reporting obligation. Many companies collect one from nearly every U.S. vendor at onboarding so they can document the payee's federal tax classification before payments accumulate. Corporations are commonly exempt from 1099-NEC reporting, but important exceptions apply, including payments for legal and medical services.

What happens if I file a 1099 with an incorrect TIN?

For information returns due in 2026, penalties generally range from $60 to $340 per return depending on how quickly the failure is corrected. Higher penalties may apply for intentional disregard, and separate penalties can apply to the IRS filing and the recipient statement. A reasonable-cause defense may be available based on the facts and the taxpayer's documented efforts, but relief is not automatic.

What is backup withholding and when does it apply?

Backup withholding (24%) generally applies when a vendor fails to provide a TIN or provides an obviously incorrect TIN. It may also be required after the payer receives and processes an IRS CP2100 or CP2100A notice under the applicable B Notice procedures. A CP2100 notice initiates prescribed procedures — including identifying missing versus incorrect TINs and sending the applicable B Notice — and does not necessarily mean withholding must begin immediately for every listed payee. Collecting a valid W-9 and performing TIN matching before the first payment is the most effective way to avoid backup-withholding situations.

What is the difference between TIN matching and W-9 review?

W-9 review is the process of checking the form for completeness and obvious errors. TIN matching is the process of submitting the name/TIN combination to the IRS to confirm it matches their records. W-9 review catches form errors; TIN matching catches mismatches between the vendor's information and IRS records. Both are part of a complete onboarding process.

How do I handle a vendor who declines to provide a W-9?

A refusal to provide required tax documentation should prevent normal onboarding from being completed. Offer a secure submission method, explain the tax-reporting requirement, and escalate unresolved cases under company policy.

Summary

A well-designed vendor onboarding process separates tax-information controls — such as W-9 collection, TIN matching, classification, and payment-method exclusions — from broader vendor-risk controls, including entity validation, sanctions screening, payment authentication, segregation of duties, and audit-trail retention. Clearly distinguishing legal requirements, IRS procedures, and company controls makes the process more defensible and practical.

ApprovedAP helps teams using BILL and QuickBooks Online identify missing W-9s, track vendor tax-document status, monitor vendor-record changes, document and monitor sanctions-screening results, and preserve evidence of vendor-review activity. The goal is not merely to prepare Forms 1099 faster in January — it is to maintain a controlled vendor file throughout the year so that missing documentation, questionable changes, and reporting exceptions are identified before they become filing-season problems.