W-9 Request Email Templates: 7 Copy-and-Paste Scripts
Seven W-9 request email templates for first asks, reminders, backup withholding notices, vendor packets, W-9 updates and accounting firm clients.
A good W-9 request email says why you need the form, gives one secure place to send it, and explains how to confirm the request is real. The seven W-9 request email templates below cover each stage, from first ask to a client-facing version for accounting firms. Replace everything in [brackets].
General information, not tax or legal advice.
The short answer
Ask at vendor setup, point to a secure upload link instead of an attachment, and say you'll never ask for an SSN or EIN in an email. Describe backup withholding accurately, and present any invoice hold as your policy, not an IRS rule.
Why this matters in a real workflow
A vendor who isn't sure a request is genuine, or how to send the form safely, may simply do nothing. Clear, consistent emails fix that and make fakes stand out. See how to request a W-9 from a vendor.
What the IRS and FTC say
When. You must make an initial request for the payee's TIN when the account is opened or the transaction occurs; if you don't get it, backup withholding begins (26 CFR 301.6724-1).
Signatures. For ordinary vendor payments the form doesn't require a signature, but requesters may ask, and a signed, dated W-9 is what the backup withholding reliance rules look for (Requester instructions; 26 CFR 31.3406(h)-3). Asking for one is good practice, not a universal mandate.
Backup withholding. The rate is 24% (IRS: Backup withholding). IRS General Instructions say nonemployee compensation and certain other payments may be subject to it (General Instructions).
Updates. A payee must give you a new W-9 if the name or TIN on the account changes, and must update you if they are no longer an exempt payee (Form W-9). Neither the W-9 nor the backup withholding certificate regulation sets an expiration date for a W-9.
Email. IRS Publication 4557 tells tax pros to send only password-protected, encrypted documents if they must use email, or to use secure file transfer instead (Pub 4557).
Phishing. The IRS's 2026 Dirty Dozen warns that tax professionals and businesses remain targets of "document request" emails that deliver malicious links or attachments (IR-2026-30). The FTC advises verifying any email that requests sensitive information through a separate channel, without using the links, phone numbers or websites in the email (FTC guide).
Tone and timing
This section is our recommendation, not an IRS rule.
- At vendor setup (AP): template 1 or 5.
- About five business days later (AP): template 2, with a fresh link if needed.
- About two weeks in (AP lead): template 3 or 4.
- When a vendor reports a change (AP): template 6.
- Each fall (accounting firm): template 7. See our year-end W-9 checklist.
Exception path: If a vendor isn't a U.S. person, stop asking for a W-9; IRS requester instructions say to point foreign vendors to the appropriate Form W-8 or Form 8233.
The seven templates
1. First request to a new vendor
When to use: at vendor setup, before the first payment.
Subject: W-9 request from [Your company]: secure upload link
Hi [Vendor name],
To set you up as a vendor, we need a completed Form W-9, signed and dated. We use it to report payments to the IRS where required.
Upload it here by [date]: [secure link]
Please use the link, not an email attachment. We will never ask for your SSN or EIN in the body of an email. To verify this request, call [Contact name] at a number you already have for us, not one from this email.
Thank you,
[Your name], [Your company]
2. Friendly reminder
When to use: about five business days after the first request.
Subject: Reminder: W-9 for [Your company]
Hi [Vendor name],
A quick reminder that we're still waiting on your Form W-9. Here's a fresh link: [secure link] (expires [date]). Already sent it? Let us know and we'll check.
Please don't send it as an attachment. We will never ask for your SSN or EIN in an email. To verify, call us at a number you already have for us.
[Your name]
3. Final notice
When to use: after two unanswered requests. Keep the bracketed paragraph only if it's your written AP policy.
Subject: Action needed by [date]: W-9 for [Your company]
Hi [Vendor name],
We asked for your Form W-9 on [date] and [date] and haven't received it.
[Our AP policy is to hold new payments until a completed W-9 is on file. Invoice [number] will be paid once it arrives.]
Separately, when a vendor hasn't provided a taxpayer identification number, payments may be subject to federal backup withholding at 24%.
Upload link: [secure link] (expires [date])
Not a U.S. person? Tell us and we'll say which form applies.
Please use the link, not an email attachment. We will never ask for your SSN or EIN in an email. To verify, call us at a number you already have for us.
[Your name]
The hold is a business choice, not an IRS requirement; the 24% is the IRS backup withholding rate.
4. Backup withholding may apply (no TIN provided)
When to use: a vendor still hasn't provided a TIN.
Subject: Your W-9 and backup withholding: [Your company]
Hi [Vendor name],
We don't have a taxpayer identification number (TIN) on file for you, and want to explain how that can affect your payments.
When a vendor hasn't provided a TIN, payments may be subject to federal backup withholding at 24%. If it applies, we withhold that amount and report it on your Form 1099, and you report the amount withheld on your own tax return.
To avoid this, upload a completed W-9 (please don't attach it to an email): [secure link] (expires [date]).
We will never ask for your TIN in an email. For tax questions, please ask your tax advisor. To verify this message, call us at a number you already have for us.
[Your name]
A payer that backup withholds must file a 1099 for that payee regardless of amount (1099-NEC instructions); the payee reports the withholding on their return.
5. New-vendor packet: W-9 and certificate of insurance
When to use: the contract requires proof of insurance.
Subject: Vendor setup: W-9 and certificate of insurance
Hi [Vendor name],
To finish your vendor setup, please upload both of these through one secure link by [date]: [secure link]
1. A completed Form W-9, signed and dated
2. A current certificate of insurance showing [required coverage]
If our contract requires us to be an additional insured, please ask your agent for the endorsement too.
Please don't email either document. We will never ask for your SSN or EIN in an email. To verify, call us at a number you already have for us.
[Your name]
Why the endorsement line: the standard ACORD 25 certificate confers no rights on the holder, and additional insured status needs policy provisions or an endorsement (ACORD 25, via NY DFS).
6. Updated W-9 after a change
When to use: a vendor reports a new business name, entity type, address or TIN.
Subject: Updated W-9 request: [Your company]
Hi [Vendor name],
Thanks for letting us know about the change to your [business name / entity type / address / tax ID number]. Please send an updated Form W-9 so our records match: [secure link] (expires [date])
Please use the link, not an attachment, and don't put your SSN or EIN in a reply. To verify, call us at a number you already have for us.
[Your name]
A new name, a new TIN or a lost exemption triggers a new W-9; the form and the regulation set no expiration date. An address change isn't among the triggers the form names; we still recommend a fresh form, and an optional periodic review of older W-9s is our suggestion, not a requirement.
7. Accounting firm to client: collect W-9s from your vendors
When to use: each fall, for clients with missing W-9s.
Subject: Year-end 1099 prep: W-9s we still need
Hi [Client name],
As we prepare your 2026 Forms 1099, we're missing W-9s for:
[Vendor 1]
[Vendor 2]
Could you ask each one for a completed W-9 by [date]? We can email each of them their own secure upload link, or send you a link for each vendor to forward.
Please don't forward W-9s to us as attachments. Tell vendors we will never ask for an SSN or EIN in an email, and that they can confirm by calling you at a number they already have. If anything from us looks unusual, call our office at the number you already have.
[Your name], [Firm name]
Example scenario
Example scenario: Cedar Point Accounting, a made-up firm, sends template 7 to a landscaping client in October. At the client's request, it sends template 1 to four vendors directly. One calls the client to check, then uploads; another reports a new business name and gets template 6.
Common mistakes
- Saying "the IRS requires us to hold your payment." A hold is your policy.
- Overstating backup withholding. Write "may be subject to."
- Accepting attachments "just this once." Standard email attachments are usually a poor channel for documents containing TINs.
- Calling it an "annual W-9 renewal requirement." Changes trigger a new W-9, not the calendar.
- Verifying via a number in the same email. The FTC advises against it.
Checklist
- ☐ Every placeholder replaced, including dates and the secure link
- ☐ No request for a TIN in the email body
- ☐ "Use the link, not an attachment" line included; verification points to a number the vendor already has
- ☐ Payment-hold language only if it's your written policy
How W9Vault supports this workflow
W9Vault can supply the [secure link]: an upload link that expires after 7 days. Files are encrypted in the vendor's browser before upload, so our server never receives the plaintext file, and uploaded files are automatically deleted 30 days after upload for completed requests. One request can ask for several documents at once (for example a W-9 plus an ACH authorization form), and your dashboard shows which requests are sent and completed. See W-9 email risks and our vendor onboarding checklist.
W9Vault is designed to support a secure collection workflow; the customer remains responsible for their own tax, recordkeeping and security obligations.
Give your W-9 emails a secure link
Paste a W9Vault upload link into any of these templates so vendors never have to email a W-9 as an attachment.
Frequently Asked Questions
No. Holding payment is a business policy, not an IRS rule. What IRS rules address is backup withholding: without a TIN, payments may be subject to it at 24%.
Neither the W-9 nor the backup withholding regulation sets an expiration date. A new W-9 is due when the name or TIN on the account changes. A periodic review is optional good practice.
Ask vendors to verify through a separate channel, such as a phone number they already have for you, never one from the email. Say in every request that you will never ask for a TIN by email.
Official resources
- Form W-9 (Rev. March 2024)
- Instructions for the Requester of Form W-9
- IRS: Backup withholding
- General Instructions for Certain Information Returns
- Instructions for Forms 1099-MISC and 1099-NEC
- 26 CFR 31.3406(h)-3
- 26 CFR 301.6724-1
- IRS Publication 4557, Safeguarding Taxpayer Data
- IRS Dirty Dozen tax scams for 2026 (IR-2026-30)
- FTC: Protecting Personal Information: A Guide for Business
