Form W-9: Who Fills It Out, and What You Do With It

There is a version of January that I do not miss. Eleven vendors paid across the year, four of them with no paperwork on file, and me writing polite emails to people who had long since stopped caring whether I could file my own tax forms.

Form W-9 is the cheapest insurance in small business administration. It is one page, it takes a vendor four minutes, and collecting it before the first payment rather than after the last one is the difference between a routine January and a week of archaeology.

This is the employer side of it: who you collect it from, what each line actually asks, the three things worth checking on the day it arrives, and what you are required to do when somebody simply will not give you one. I build the people and records tooling for businesses without an HR department at FirstHR, and FirstHR is an onboarding and HR platform rather than a payroll provider. This is general information, not tax advice.

What Form W-9 Is

Form W-9 is the Request for Taxpayer Identification Number and Certification. A business sends it to a payee, the payee completes and signs it, and it comes back to the business. It is a collection instrument rather than a filing, and it never travels to the IRS (Form W-9).

Two things follow from that description and they are the two most useful facts about the form. First, it is not a filing, which means there is no deadline attached to it and no penalty for having collected it late, only the practical consequences of not having it when you need it. Second, the signature is the substance. The certification is what shifts responsibility for the accuracy of the number onto the person who gave it to you.

It also is not an employment document. If the person completing it should have been on payroll, a signed W-9 does not make them a contractor, and the classification question is entirely separate from the paperwork question.

Who You Collect It From

Collect a W-9 from any US person you might need to file an information return for. The word might is deliberate: you frequently cannot know at the start of a relationship whether payments will cross a reporting threshold, and the cost of collecting one unnecessarily is nothing.

The fifth row is the one worth internalising. People routinely skip the form for a vendor whose name ends in a corporate suffix, on the reasonable assumption that corporations do not get 1099s. The assumption is usually right and the method is wrong, because a trading name tells you nothing reliable about the entity type. The tax classification box is the answer, and the form is how you get it.

When to Ask for It

Before the first payment, without exception. Not at the threshold, not at year end, and not when you realise in December that you have a problem. The rule is simple because the leverage is simple: a vendor waiting to be paid returns a form quickly, and a vendor who has already been paid has no particular reason to.

Attaching it to the engagement paperwork rather than sending it as a separate request is what makes this stick. It arrives alongside the contract and the payment details, at the one moment when the vendor is already filling things in, and it stops being a task anybody has to remember.

What Each Line Actually Asks

The form is one page and only five areas of it matter to the business receiving it. Reading them in order takes less time than looking up what a box means later.

The name lines cause more downstream trouble than anything else on the page. The IRS matches the name and the taxpayer identification number as a pair, and a sole proprietor who writes their trading name on line 1 and their Social Security number in Part I has given you a combination that will not match anything. The legal name goes on line 1; the trading name goes on line 2.

The tax classification box is the one that changes your workload. It is the difference between owing a form in January and owing nothing, and it is the reason a W-9 from a vendor you were confident was incorporated is still worth having.

The Three Checks Worth Thirty Seconds

Most W-9 problems are visible the moment the form arrives and invisible for the next eleven months. Three checks catch nearly all of them.

The requester instructions set out what you may accept, including the conditions under which a substitute form of your own is permitted (Instructions for the Requester of Form W-9). Where the stakes justify it, the IRS operates a matching service that lets authorised payers verify that a name and taxpayer identification number combination matches its records before a return is filed. For a business dealing with a handful of vendors it is more setup than it is worth; for one onboarding dozens a year it removes an entire category of notice.

The 24 Percent Trap

If a payee does not furnish a taxpayer identification number in the required manner, you are required to withhold 24 percent of reportable payments and deposit it with the IRS. This is an obligation on the payer, not an option, and it is the part of the W-9 process with real money attached (Internal Revenue Service).

Backup withholding is not a punishment in substance. The money is credited against the payee's own tax liability, so it is a timing mechanism rather than a levy. Saying so plainly when you raise it with a vendor usually resolves the standoff faster than any amount of insisting, because most refusals come from suspicion about why you want a Social Security number rather than from a desire to avoid tax.

Foreign Payees Use a Different Form

The W-9 is for US persons. A foreign individual or entity completes the appropriate form in the W-8 series, or Form 8233 where a treaty exemption for personal services is being claimed, and the withholding rules that follow are entirely different from backup withholding.

This matters more than it used to, because hiring a developer or a designer in another country is now routine for businesses that have never thought about international tax. Sending a W-9 to somebody who is not a US person and accepting it back does not make the classification correct, and the withholding regime you land in is the one determined by the facts rather than by the form you happened to use.

If any of your contractors are outside the United States, that is a conversation with a tax professional rather than a form to pick from a list. The domestic side of the process is straightforward; the cross-border side has genuine complexity and the penalties for getting withholding wrong are not small.

Storing It, and for How Long

A completed W-9 usually contains a Social Security number, which makes it one of the more sensitive documents a small business collects and one of the most casually handled. Email attachments and shared drives are both bad answers, and they are both the most common answer.

Keep it for as long as it supports something: the information returns you filed, and the decision not to file where you relied on an exemption. Information return records are generally retained for at least four years, and the W-9 is the evidence behind both sides of that.

Access matters as much as retention. The people who need to see a taxpayer identification number are the ones preparing returns, and that is usually one or two people rather than everybody with a login. Keeping it with the vendor record, in a place with actual access control, is the whole of the requirement and it is the part FirstHR is built to carry alongside the rest of the people file.

Building the Habit

The businesses that never think about W-9s have made it structural rather than remembered. Three things do most of the work.

None of this is complicated and all of it is boring, which is exactly why it does not happen at businesses without somebody owning the process.

Where Small Employers Get This Wrong

Six patterns, and only one of them is about the form itself.

Asking in January is first and causes the most hours lost. Every other problem on this list is downstream of it.

Skipping the form for an apparent corporation is second. The suffix on a business name is not evidence of entity type, and the tax classification box is what actually tells you whether a return is required.

Accepting an unsigned form is third. It gives you the number and none of the certification, which is the half that mattered.

Not starting backup withholding is fourth. Where a number has not been furnished, withholding is an obligation, and a payer who skips it can end up liable for the amount themselves.

Storing it in email is fifth. A Social Security number sitting in a searchable inbox indefinitely is a data problem waiting for an incident.

And treating a signed W-9 as proof of contractor status is last, and it is the most expensive misconception of the six. The form records how somebody is paid; it says nothing about whether that treatment was correct, and misclassification analysis pays no attention to which form was collected.

Frequently Asked Questions