Senators Press Treasury and IRS on ID.me Use and Identity Platform Plans

Senators Ron Wyden and Elizabeth Warren have asked the U.S. Department of the Treasury and the Internal Revenue Service (IRS) to explain their continued use of ID.me for identity verification. Their inquiry includes Treasury’s recent decision to require ID.me for access to TreasuryDirect, the electronic platform used to buy, manage, and redeem U.S. savings bonds. The lawmakers requested explanations and data by November 9, 2026, giving the agencies four days from the November 5 publication date to respond. Their questions place identity-platform governance, vendor reliance, user access, and privacy safeguards under renewed congressional scrutiny.

The timing matters because an Office of Management and Budget (OMB) memo issued in August 2026 directed agencies to make Login.gov the default authentication option where possible. The source material describes no confirmed Treasury or IRS migration decision, and the agencies’ responses will be important in determining how they interpret the memo in practice. Treasury has begun requiring ID.me for TreasuryDirect, while the IRS uses Login.gov for identity verification and also offers ID.me. The IRS additionally awarded ID.me a sole-source contract in January valued at more than $1 billion for identity and access management, underscoring the scale of the federal government’s current commitment to the vendor.

The senators’ concerns span both technology and public access. They characterized the transition deadline for TreasuryDirect as “needlessly rushed” and asked that it be delayed at least until after the 2027 tax filing deadline. They argued that savings bonds are mostly held by older Americans who may lack the digital proficiency needed to move to ID.me, and noted that TreasuryDirect is the only electronic platform for buying and claiming those bonds. Their letter also raised privacy, cybersecurity, data-breach, accountability, oversight, and the collection, retention, and use of sensitive personal information. A Treasury official said ID.me is a government-trusted tool intended to safeguard personal and financial information and protect against unauthorized access and identity theft.

For GovCon businesses, the immediate signal is oversight and possible requirements clarification—not a procurement opportunity. The agencies’ answers may reveal whether they will retain multiple authentication options, adjust implementation schedules, define stronger privacy or accessibility controls, or make changes to platform integration and performance assessment. Those developments could inform future work for identity-management, authentication, cybersecurity, and integration providers, but the supplied information identifies no active solicitation and no confirmed platform migration. As Jeremy Grant, director of the Better Identity Coalition, put it: “The government hasn’t taken steps to close what other countries have said is an obvious gap where the government should play a role.” The comment reflects a broader debate about the government’s role in providing digital identity services, while the near-term procurement outlook remains contingent on agency responses and subsequent policy decisions.

• Response deadline: Treasury and the IRS were asked to provide explanations and data by November 9, 2026.
• TreasuryDirect change: Treasury has begun requiring ID.me to access the platform for buying, managing, and redeeming U.S. savings bonds.
• Senate request: Wyden and Warren asked Treasury to delay the transition at least until after the 2027 tax filing deadline.
• Access concern: The senators said savings bonds are mostly held by older Americans and raised concerns about users’ digital proficiency; TreasuryDirect is the only electronic platform for buying and claiming the bonds.
• OMB direction: An August 2026 OMB memo directed agencies to make Login.gov the default authentication option where possible.
• IRS platform posture: The IRS uses Login.gov and also offers ID.me for identity verification.
• Contract exposure: The IRS awarded ID.me a sole-source identity and access management contract in January valued at more than $1 billion.
• Vendor position: ID.me said it has outperformed alternatives on customer service, ease of use, access, taxpayer-data protection, and fraud prevention; it said TreasuryDirect receives only information needed with user consent and that biometric data is not shared with the platform.
• Procurement watch: Monitor agency responses for implementation timing, authentication requirements, privacy controls, accessibility provisions, and any signals of future integration or platform competition; no open opportunity is identified.