Unauthorised: IRD Third Party Information Access

Please note this sub-forum does not provide professional finance advice. You should seek advice from a licensed financial advisor.

To post in this sub-forum you must have made 100 posts or have Trust status or have completed our ID Verification.

If investing please consider our affiliate link for new accounts: Sharesies.

Forums › Finance and wealth management › Unauthorised: IRD Third Party Information Access

firefuze

510 posts

Ultimate Geek

#252993 20-Jul-2019 17:03

Got a notification online on my IRD 'MyIR' account during the early hours of this morning to say access to my IRD information has been given to a third party, listing an accounting firm I have never heard of, nor any association with.

It reads:

Third party access to your information

[XYZ] accountants now has access to your information for:
New Access: Income Tax Individuals, Student Loans
Mail sent to tax agent: Yes

I did not authorise this! How is it even possible for a company to gain access to my private IRD information, intercepting mail correspondence etc. without any-form of consent? What is the normal process for companies to request/gain access?

I promptly removed their access via 'MyIR' but haven't been able to call IRD as of yet, at least not until Monday now.

Note; I have not used any form of online tax refund agents or the similar

1 | 2

470 posts

Ultimate Geek

#2280359 20-Jul-2019 17:17

Sounds like IRD did an upgrade and this is a post upgrade issue. They may have broken many other accounts as well. I checked mine and no associated access at all.

afe66

3181 posts

Uber Geek

Lifetime subscriber

#2280363 20-Jul-2019 17:45

In my case, my accountant asked what services I wanted them to provide in form of a tick box which I signed and from this they presumably were given access to myird.

I got a email like you says xxx accountancy has access to my accounts.

Presumably they have gone through some trusted process to gain access. There are varying powers that can be given I think.

Hopefully there is a lockout period from you being notified before they actually have permission.

boosacnoodle

963 posts

Ultimate Geek

#2280367 20-Jul-2019 17:59

Pretty sure they just go in and tick a box to add you. Technically they need to have your permission, but I imagine that mistakes can happen.

Geektastic

17942 posts

Uber Geek

Trusted

Lifetime subscriber

#2280467 20-Jul-2019 21:30

I got the same, for personal and company taxes. However it was only our accountants so no problem - they are not much use if they cannot get the information.

KiwiSurfer

1449 posts

Uber Geek

ID Verified

Lifetime subscriber

#2280480 20-Jul-2019 22:15

Have you used any of the tax refund services? Last time I looked the tax refund service I used had that sort of access to my IRD accounts.

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2280525 20-Jul-2019 22:21

KiwiSurfer:

Have you used any of the tax refund services? Last time I looked the tax refund service I used had that sort of access to my IRD accounts.

What I was going to say. These services offer not much more than "check the balance on the account and by the way we charge you 40% to do it"...

Either way you should contact IRD and ask this to be removed if you do not agree.

raytaylor

4014 posts

Uber Geek

Trusted

#2280526 20-Jul-2019 22:38

I noticed a local loan shark was doing tax refunds for people so they could get some cash back as part of a deposit or loan.

They ended up removing access for my accountant which was annoying because it meant i had to remember a complex password to get back in to give her access again.

Ray Taylor

There is no place like localhost

Spreadsheet for Comparing Electricity Plans Here

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

dimsim

848 posts

Ultimate Geek

Trusted

Lifetime subscriber

#2280561 21-Jul-2019 08:14

Lol, another IRD "upgrade" I spoke to my accountant the other day and apparently in that "upgrade" IRD lost all previous correspondence with them.

I wonder how many more millions we've all spent on that?

firefuze

510 posts

Ultimate Geek

#2280577 21-Jul-2019 09:09

KiwiSurfer:
Have you used any of the tax refund services? Last time I looked the tax refund service I used had that sort of access to my IRD accounts.

Never used one, always done my return myself through IRD.

snnet

1410 posts

Uber Geek

#2280875 21-Jul-2019 16:59

Be aware while the IRD can remove access from someone else at your request, it's just as easy for the third party to tick the box again. The IRD will be counting on people who have this kind of access to be trustworthy and perhaps it being a mistake.

firefuze

510 posts

Ultimate Geek

#2282088 23-Jul-2019 10:57

Looked up the accounting firm on the companies office website, registered to a local guy who's name sounded familiar.

After speaking with my parents, This is their accountant.

However, my parents called their accountants to find out what was going on and turns out the guy has recently left that firm and gone solo. So appears to be poaching clients? But the weird thing is, I wasn't myself a client of theirs. Anyway, will leave it at that.

Slightly related note; appears to be a scam SMS going around, got it today pretending to be from IRD to claim my tax refund. Link directs to a fake IRD login page (reported to IRD)

"Inland Revenue: After the last calculation of your fiscal activity, we have determined that you are eligible to receive a refund. (visit this link: eg. xyz.info/auth)"

I haven't induced the actual link

maoriboy

1007 posts

Uber Geek

Trusted

#2282094 23-Jul-2019 11:01

@firefuze I received that exact same txt message this morning. Deleted it and carried on with my day 😀

frankv

5680 posts

Uber Geek

Lifetime subscriber

#2282099 23-Jul-2019 11:09

firefuze:

Looked up the accounting firm on the companies office website, registered to a local guy who's name sounded familiar.

After speaking with my parents, This is their accountant.

However, my parents called their accountants to find out what was going on and turns out the guy has recently left that firm and gone solo. So appears to be poaching clients? But the weird thing is, I wasn't myself a client of theirs. Anyway, will leave it at that.

I suggest you don't leave it at that. It illustrates a failure of IRD's processes (giving people access without authorisation) and/or fraudulent activity by the accountant (claiming to IRD to have been authorised by you). If no-one complains, it will happen again. Not only that, but this apparently unethical accountant has your private information.

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2282101 23-Jul-2019 11:13

frankv:

firefuze:

Looked up the accounting firm on the companies office website, registered to a local guy who's name sounded familiar.

After speaking with my parents, This is their accountant.

However, my parents called their accountants to find out what was going on and turns out the guy has recently left that firm and gone solo. So appears to be poaching clients? But the weird thing is, I wasn't myself a client of theirs. Anyway, will leave it at that.

I suggest you don't leave it at that. It illustrates a failure of IRD's processes (giving people access without authorisation) and/or fraudulent activity by the accountant (claiming to IRD to have been authorised by you). If no-one complains, it will happen again. Not only that, but this apparently unethical accountant has your private information.

I agree. I would be very concerned. First because you don't have any signed agreement with this accountant so there's no commercial relationship here. Second he is using your information without your consent. Third he's got access to all your information - and pottentialy money - and you don't know what he's up to. And lastly, he could have just screwed up your whole financial life by doing this, if you had other plans in place with your actual accountant (if you had one).

Also, consider he will charge you for his "services".

No, don't leave at that.

firefuze

510 posts

Ultimate Geek

#2282105 23-Jul-2019 11:28

frankv:

I suggest you don't leave it at that. It illustrates a failure of IRD's processes (giving people access without authorisation) and/or fraudulent activity by the accountant (claiming to IRD to have been authorised by you). If no-one complains, it will happen again. Not only that, but this apparently unethical accountant has your private information.

Absolutely agree, I could have been a bit more detailed in my post. I have sent an email through to IRD detailing what has happened and requesting an explanation/proof of authorisation. I am waiting on a reply.

I meant more along the lines of 'got to the bottom of that part' I know who/when/why(ish) etc

I certainly won't be settling until I get an outcome with IRD

1 | 2