From first filing to active authority — getting, keeping, and maintaining the CAF number your practice runs on.
Nothing in a resolution practice happens without an active CAF number and a posted Form 2848 or 8821. This short guide covers how you get your first CAF, why newly filed 2848s do not work immediately, the handful of provisioning failures that produce the overwhelming majority of support calls, and what to do when the IRS strips your authority or flags your file. It is written for practitioners whose time is better spent preparing cases than decoding IRS back-office quirks.
The Centralized Authorization File (CAF) is the IRS's database of third-party authorizations. Every time a taxpayer signs a Form 2848 (Power of Attorney) or Form 8821 (Tax Information Authorization) naming a representative or appointee, that authorization is routed to a CAF processing unit and associated with a CAF number unique to the rep. Until your CAF number exists and your specific 2848 or 8821 has posted under it, the IRS systems — Transcript Delivery System, A2A, e-Services — treat you as a stranger to that taxpayer's account.
Practically, the CAF number is the key that unlocks:
A nine-digit number, format XXXX-XXXXX, it is assigned once and stays with the practitioner for life — even if they change firms. It is not firm-specific, and it is not the same as any other IRS practitioner identifier.
XXXX-XXXXX.See also: Chapter 2 — Getting your first CAF, Chapter 3 — CAF vs PTIN vs EFIN.
There is no separate application for a CAF number. You do not file a form titled "Apply for CAF." Your CAF is created the first time you submit a Form 2848 or Form 8821 on which you are the named representative and the IRS does not already have a CAF on file for you.
Fill out a 2848 or 8821 for a real client, including your name, address, professional designation (CPA, EA, attorney, etc.), and — critically — leave the CAF number blank or mark "None" if that is the form's current instruction. When the CAF unit processes the form, they assign you a new CAF and notify you, usually by mail. You should also see the number reflected on the processed copy returned to you (where applicable).
Processing timelines vary considerably. Historically this has ranged from a few days to many weeks depending on submission channel and backlog. Submission channels are, roughly in order of speed:
The CAF unit sends a notice confirming your assigned CAF number. Historically this is CP547, though notice numbers change over time. Once you have it, record it in:
See also: Chapter 4 — CAF sync window, TRH Form 2848 guide.
Three IRS-issued identifiers sit on most tax pros' credentials pages, and they are routinely confused. They are not interchangeable.
| ID | Full name | What it does | Who holds it |
|---|---|---|---|
PTIN | Preparer Tax Identification Number | Identifies you as the paid preparer of a return. Required on every return you prepare for compensation. | Individual. Renewed annually. |
EFIN | Electronic Filing Identification Number | Authorizes you (or your firm) to e-file through the IRS e-file system. | Individual or firm. Application is rigorous. |
CAF | Centralized Authorization File number | Identifies you as an authorized representative or appointee under a 2848 or 8821. | Individual rep. Lifetime. |
Representing clients in front of the IRS requires eligibility under Circular 230 — typically an EA credential, CPA license, or law license. Unenrolled preparers have limited representation rights and cannot sign a 2848 for representation purposes in most matters. Having a CAF number does not grant representation authority on its own; you still need the underlying credential.
See also: Chapter 1 — What is a CAF.
Every practitioner runs into this once: you file a fresh 2848, wait a day, try to pull transcripts, and the IRS systems report that you are not authorized. The form is in processing. There is a gap between when a 2848 is filed and when the authority becomes live across the various IRS systems that need to see it.
A 2848 moves through several steps:
Each step takes some amount of time, and the propagation step is not instantaneous. Even after a 2848 has "posted" in the CAF database, it can take additional hours to a day or two before TDS and A2A honor it.
These ranges shift over time with IRS workload. The only reliable way to know whether your 2848 is live is to check: pull a transcript, or run a CAF list (see Chapter 7).
You fax a 2848 for a new client Tuesday afternoon. By Thursday the client is anxious, so you try to pull a transcript. TDS refuses. You call PPS — they say "no authorization on file." Three days later, on Monday, the pull succeeds without you having done anything in between. The 2848 simply finished propagating over the weekend. This is routine, and the fix is patience plus a realistic client-facing timeline ("expect transcript access 5–10 business days after we file your POA").
See also: Chapter 5 — Provisioning failures, Chapter 10 — When to call PPS.
When a 2848 gets rejected, the reason is almost always one of a short list. Knowing the list means you rarely file one that fails.
If your CAF record has you at an old firm address and you list a new one on the 2848 without updating your CAF profile, the form can bounce. Same for name changes, name suffix changes, or email changes. The 2848 rep block should match what the CAF unit has on file for you, or you should update your CAF record (Form 8822-B or similar process) before filing new 2848s.
Line 2 of the 2848 identifies the tax matters covered. The failure modes are:
Be specific. List every form number you need authority for, and every tax period. Ranges are generally acceptable in the form's own convention, but open-ended entries ("all years") are usually rejected.
SSN or EIN typos, name-control mismatches (see the Transcripts guide, Chapter 2), and outdated addresses. The IRS matches the 2848 against the taxpayer's account; mismatches cause rejection even when the form is otherwise correct.
The rep must sign. The taxpayer must sign. Joint returns generally require both spouses' signatures for joint matters. Date fields must be recent — 2848s older than a certain age at submission can be rejected as stale.
Representative type (EA, CPA, attorney, enrolled actuary, etc.) and the corresponding credential number (bar number, EA number, state CPA license number) are mandatory for representation authority. Form 2848 rejects a rep who checks a box without supplying the required credential data.
Sometimes a 2848 has not failed — it has simply not been reached yet. Backlog is part of the IRS reality; during busy seasons, CAF processing has run weeks behind at times. Before assuming rejection, verify the form was received and is in queue (fax confirmation, online submission receipt) and check your CAF list (Chapter 7).
See also: TRH Form 2848 walkthrough, Form 8821 walkthrough.
A processed 2848 is not permanent. Several events can remove your authority for a specific taxpayer or, in rare cases, disable your CAF entirely.
The taxpayer can revoke your authority at any time by notifying the IRS — typically by filing a new 2848 that supersedes the prior, or by a written revocation mailed or faxed to the CAF unit. When revocation posts, the Account Transcript typically shows a TC 961 entry. You will lose access on your next transcript pull without warning.
When a taxpayer signs a new 2848 naming a different rep, the new form generally supersedes prior authorizations for the same tax matters unless the new form explicitly retains them. Tax pros are sometimes surprised to find they have lost access to a client simply because the client engaged another rep for an unrelated matter. The fix is a new 2848 that explicitly does not revoke the prior authorization, or simply a fresh filing re-establishing your access.
When an ID-theft case opens (TC 971 AC 121), the IRS may freeze transcript access for all reps, not just the fraudulent one. Your legitimately filed 2848 still exists, but the account is under a broader hold. Resolution typically requires working through the ID-theft process and, sometimes, re-verifying rep authority after the freeze lifts.
If the IRS Office of Professional Responsibility (OPR) opens a case against a practitioner, the outcome can range from a private reprimand to suspension or disbarment from practice before the IRS. A suspended rep's CAF-based access is disabled during the suspension. This is a rare but serious event; Circular 230 governs the process.
Deceased practitioners, retired practitioners who have requested removal, and practitioners whose credentials (EA, CPA, bar) have been revoked at the state level all lose CAF access. Administrative revocations of this type are rare and almost always follow an event the rep is aware of.
See also: Chapter 7 — CAF list, Chapter 10 — PPS.
The CAF is not a set-and-forget database. You should be checking it periodically — both to confirm that recent filings posted and to catch drift, like clients who added or removed authorizations without telling you.
A CAF list (sometimes called a CAF77 list, for the internal form number) is a report of every taxpayer and tax period currently authorized under your CAF number. You can request it through e-Services or by written request. The report shows:
Pull a CAF list quarterly at minimum, monthly in active practice. It is the single best tool for catching both posted-but-you-didn't-know-it authorizations and revoked-authorizations-you-didn't-expect.
Update your CAF record whenever:
Stale rep records are a leading cause of 2848 rejects even when the substantive form is correct.
Once a year, pick a slow week and:
See also: Chapter 5 — Provisioning failures.
A CAF number is per-practitioner, not per-firm. However, there are scenarios where more than one CAF is in play.
There is no "firm CAF." 2848s name individual reps, each with their own CAF. When a firm refers to "the firm's CAF" informally, they usually mean the CAF of the partner who signs most 2848s. Multi-practitioner firms typically have multiple CAFs — one per credentialed rep — all referenced on 2848s as appropriate.
Form 2848 allows more than one representative. When you list two reps, both CAFs are associated with the authorization, and both can act on the case. This is the standard mechanism for "my partner handles the CP2000 responses while I handle audits" setups — list both on the same 2848 from the start.
Your CAF stays with you. Existing 2848s listing you as rep stay valid with respect to your authority, but the address on file for you may now be wrong. Update your rep record promptly; otherwise the IRS may send correspondence and notices to your old firm.
A state CPA license does not limit CAF authority geographically — a CAF rep can represent a taxpayer anywhere in the US, provided they have the underlying credential (EA, CPA, attorney). Attorneys licensed in one state can represent federal-tax matters nationally under Circular 230. There is no geographic sub-CAF.
In practice, rarely. A practitioner should have one CAF. If you have accidentally been assigned two CAFs (e.g., one from an early filing that slipped through without a prior check), contact the CAF unit to merge. Two active CAFs for a single person is an administrative error, not a feature.
The IRS's e-Services and Tax Pro Account systems support delegated-user access: a practitioner with their own credentials can grant limited system access to employees or partners. This is distinct from CAF authority.
A delegated user can, under the principal's supervision:
Delegation does not grant the delegated user their own CAF authority — they act under the principal's. If the principal's authorization is revoked, the delegated user's access to that client disappears.
Delegation is configured in the principal's e-Services account. The exact UI has changed over the years as the IRS has moved toward the Tax Pro Account; current instructions should be checked against live IRS documentation. General pattern:
When an associate needs independent authority, the right answer is usually their own CAF and their own 2848, not delegation.
The Practitioner Priority Service (PPS) is the IRS's dedicated line for tax pros. It is faster than the general taxpayer line but can still involve significant hold time during busy periods. The goal on every PPS call is to finish the case on the call — which means being prepared before you dial.
Before you dial, have:
Tax Resolution Hub (TRH) is a Windows desktop application for tax professionals running transcript-heavy practices. TRH handles A2A authentication, batches transcript pulls, and keeps your CAF-authorized client list cleanly separated from firm-wide data — all locally on your workstation. The software is not a substitute for knowing your CAF, but it is a faster front end to it.
Support: support@taxhub-usa.com
Web: taxhub-usa.com
Related guides: Reading IRS Transcripts, Pulling IRS Transcripts — Common Errors & Fast Fixes
© 2026 Tax Resolution Hub. This field guide is educational and does not constitute tax, legal, or accounting advice. Always verify CAF procedures against current IRS published guidance.