The short answer: it can be, if you're careful about what you share and where. Tax forms carry your Social Security number, your income, your address and sometimes your bank account. That's exactly what identity thieves use to file fake returns and claim refunds in your name. A few minutes of thought before you upload goes a long way.
This guide covers what's on your forms, what's fine to share, what to keep out of any chat, and the settings to check first.
Why tax documents are different
Most things you might paste into an AI assistant, like an email draft or a recipe, wouldn't hurt you if someone else saw them. Tax forms are different. With your name, Social Security number, date of birth and income, a criminal can try to file a return as you before you do. You'd find out when your own return is rejected because "a return with this Social Security number was already filed."
So the question isn't only "is this AI company trustworthy?" It's also "where does this copy of my W-2 end up, and for how long?"
What's on each form
| Form | Sensitive details on it |
|---|---|
| W-2 (wages) | Full Social Security number, name, address, employer's ID, wages |
| 1099-NEC / 1099-MISC | Your taxpayer ID (sometimes partly masked), payer details, amounts |
| 1099-INT / 1099-DIV / 1099-B | Account numbers, investment amounts |
| 1098 (mortgage interest) | Loan account number, property address |
| 1095-A (Marketplace insurance) | Names and Social Security numbers or birth dates of everyone covered |
| Last year's return | Everything: all Social Security numbers, bank account, income, dependents |
| Your IRS notices | Notice numbers and personal details, sometimes an Identity Protection PIN |
Before you upload anything
Check the assistant's data settings
Most AI assistants let you control whether your chats are saved and whether they're used to improve the company's models. Look for these settings before sharing anything sensitive, and read what the service says about how long it keeps uploaded files.
Use your own account
Not a shared family account, and not a work account, where your employer may be able to see what you share.
Prefer a temporary or private chat if it's offered
Some assistants offer a mode where the conversation isn't saved to your history. It's a good fit for one-off tax questions.
What's usually fine to share
- Questions about what a form or box means ("What's box 14 on my W-2?")
- Amounts, like your wages or interest, without names and numbers attached
- General facts about your year: a new job, a move, a baby, a side business
- A form with the sensitive details covered (see below)
What to keep out of a general chat
- Your full Social Security number, and your family's
- Bank account and routing numbers
- Your IRS Identity Protection PIN. Never share it with anyone except the tax software or preparer filing your return.
- Copies of your driver's license or passport
- Your IRS online account password or one-time codes
How to share a form safely
If you want help reading a specific form:
- Take a screenshot or photo of just the part you need. If your question is about box 12, you don't need the top of the form.
- Cover the sensitive parts. Crop or black out your Social Security number, account numbers and address before uploading. A phone's built-in photo markup tool works.
- Delete the chat afterwards if your assistant lets you.
Or skip uploading entirely and type the question with the box name and amount.
Watch for tax scams, AI-powered or not
Tax season brings a wave of scams, and AI makes fake messages more convincing. Some rules that don't change:
- The IRS normally contacts you first by mail. A call, email or text that's unexpected, rushes or threatens you, asks for personal or financial information, or demands payment now isn't from the IRS.
- A social media direct message is never from the IRS.
- Don't trust a link in an unexpected tax message. Go to irs.gov or your tax software directly.
- Be wary of "AI tax helpers" you haven't heard of that ask for your Social Security number or bank login up front.
- The IRS will never ask for your Identity Protection PIN. Anyone who does is a scammer.
Protect yourself with an IRS Identity Protection PIN
An Identity Protection PIN is a six-digit number the IRS gives you each year. Your return must include it to be accepted electronically, so someone who has your Social Security number still can't e-file as you. Anyone who can verify their identity can get one through their IRS online account. It's one of the best protections against tax identity theft.
How Navo handles it
We're building a way to start your Navo return from inside an AI assistant. It's designed so the assistant can help gather your information while the most sensitive parts happen on Navo itself:
- You give permission on Navo first. The assistant can't do anything with your Navo return until you sign a consent on Navo's site, and you can withdraw it.
- Sensitive details go into Navo, not the chat. You enter your Social Security number, date of birth, bank account and last year's tax information on Navo.
- Only you can file. The assistant can't sign or submit your return. You review, sign and file on Navo.
How Navo protects your information
Frequently asked questions
Is it safer to use the AI built into tax software? Tax software companies handle tax data under IRS rules for e-file providers. A general chatbot may not. That doesn't make a general assistant unsafe, but it's a reason to check its settings first.
I already uploaded my W-2 to a chatbot. What should I do? Delete the chat and any uploaded files if the service allows it, and check whether it was used for training. Consider getting an Identity Protection PIN for next season.
Can AI help if I think someone filed a return in my name? It can explain the steps, but report it to the IRS directly through irs.gov. The IRS has an identity theft process for exactly this.
Related guides
- How to file your taxes free with AI
- Can ChatGPT, Claude or Gemini do your taxes?
- Tax return rejected? What to do
This post is general information, not tax or legal advice. Sources: IRS, Get an Identity Protection PIN; IRS, How to know it's the IRS; IRS, Identity theft central.