VAT / TIN Validation
Checking a business's VAT or tax identification number against official registries, such as the EU VIES system, to confirm it is valid and matches the named business.
What Is VAT / TIN Validation?
VAT and TIN validation is the process of checking that a tax identification number supplied by a business or individual is genuine and currently valid, and, where the source allows it, that it belongs to the name and address the customer has given. A VAT number identifies a business registered for value added tax. A TIN, or taxpayer identification number, is the broader term for numbers that tax authorities issue to identify taxpayers, such as an Employer Identification Number in the United States.
Validation is usually done by querying an official source in real time. In the European Union, the main tool is VIES, the VAT Information Exchange System operated by the European Commission, which checks a VAT number against the records of the member state that issued it. Other countries provide their own lookup services, and in the United States the IRS offers a TIN Matching program to authorized payers who file certain information returns.
Why VAT / TIN Validation Matters
A tax number is one of the few identifiers that a government issues to a business after its own registration process. Checking it gives an early, low-cost signal about whether a business customer is real and active.
The main uses are:
- Onboarding and KYB: confirming that a business exists and is registered, as one input into KYB alongside company register checks and beneficial ownership.
- Fraud prevention: catching fabricated or borrowed tax numbers used to open merchant or business accounts.
- Tax compliance: within the EU, a supplier making intra-community supplies generally needs a valid VAT number from its business customer to apply the relevant VAT treatment, and should keep evidence of the check.
- Invoicing and B2B pricing: ensuring business-only terms are given to actual businesses.
How Validation Works
Format check
Each country uses its own structure for tax numbers, often with a country prefix, a fixed length and a check digit. A format check catches typing errors and obviously invented numbers before any external query is made.
Registry query
The number is then sent to the official service. For EU VAT numbers, VIES returns whether the number is valid for intra-community transactions on the date of the query. Depending on the member state, the response may also include the registered name and address, and some services provide a consultation number that can be kept as evidence of the check.
Since the United Kingdom left the EU, VIES no longer validates Great Britain VAT numbers. HMRC provides its own service for checking UK VAT numbers, while VAT numbers with the XI prefix for Northern Ireland can be checked through VIES for goods transactions.
Name and address comparison
Where the registry returns details, they are compared with the name and address the customer provided. Small differences in legal form, abbreviations or transliteration are common and need sensible matching rules rather than exact comparison.
What Validation Does and Does Not Prove
A successful check shows that the number exists, is currently active, and, where details are returned, is registered to a business with that name. It does not prove that the person submitting it is authorized to act for that business. Fraudsters can copy a real company's VAT number from an invoice or website. For that reason validation should be combined with other checks, such as verifying the company in the official register, identifying directors and beneficial owners, and confirming that contact details and bank accounts match the business.
Red Flags
- A number that fails validation or is reported as inactive
- A valid number registered to a different name or a very different address
- A recently registered number for a business claiming a long trading history
- Several applicants using the same tax number
- Repeated attempts with slightly different numbers, which may indicate automated testing
Common Challenges
- Service availability: national systems behind VIES can be temporarily unavailable, so firms need a policy for retrying and for provisional decisions.
- Limited data: some countries return only valid or invalid, with no name or address.
- Coverage: many countries do not offer a public lookup, and rules on who may query differ.
- Evidence: tax and audit purposes may require storing the date, result and any reference of each check.
How on8.ai Helps
on8.ai's Pre-KYC checks include VAT validation as part of screening before onboarding, alongside email, phone, IP risk, velocity and bot detection. Business customers can then move on to KYB checks in SmartSanction, where the company and its owners are screened against sanctions, PEP and risk data.
Related Terms
Related Articles
Account Takeover (ATO)
A form of identity theft where a fraudster gains access to a user's bank accounts, email, or other services.
Adverse Media
Adverse media is published information linking a person or company to crime or serious misconduct, screened as part of customer due diligence.
Alert Rules
Configured parameters within AML software that automatically trigger an alert when suspicious activities match defined criteria.
Algorithmic Fraud
Automated and programmatic approaches to attempting financial fraud at scale utilizing bots and specialized software.