Report Category
Submitting Agency
- Department of Education OIG (32)
- Department of Justice OIG (263)
- National Science Foundation OIG (14)
- National Security Agency OIG (1)
- Pandemic Response Accountability Committee (1)
- Railroad Retirement Board OIG (5)
- Small Business Administration OIG (46)
- Treasury Inspector General for Tax Administration (46)
- U.S. Agency for International Development OIG (26)
State/Local Agency
State (State and Local Reports)
Fraud Type
Agency Reviewed
- (-) Department of Education (32)
- (-) Department of Justice (263)
- (-) Internal Revenue Service (46)
- (-) National Science Foundation (14)
- (-) National Security Agency (1)
- (-) Railroad Retirement Board (5)
- (-) Small Business Administration (47)
- (-) U.S. Agency for International Development (26)
- Amtrak (National Railroad Passenger Corporation) (1)
- Architect of the Capitol (5)
- Board of Governors of the Federal Reserve System (3)
- Board of Governors of the Federal Reserve System & CFPB (5)
- Chemical Safety and Hazard Investigation Board (2)
- Consumer Financial Protection Bureau (1)
- Department of Agriculture (25)
- Department of Commerce (5)
- Department of Defense (39)
- Department of Health & Human Services (72)
- Department of Homeland Security (34)
- Department of Housing and Urban Development (28)
- Department of Labor (48)
- Department of State (2)
- Department of the Interior (36)
- Department of the Treasury (107)
- Department of Transportation (9)
- Department of Veterans Affairs (41)
- Election Assistance Commission (22)
- Environmental Protection Agency (12)
- Farm Credit Administration (1)
- Federal Deposit Insurance Corporation (2)
- Federal Housing Finance Agency (4)
- General Services Administration (10)
- Government Publishing Office (1)
- Multiple Agencies (23)
- National Aeronautics and Space Administration (1)
- National Reconnaissance Office (2)
- Office of Personnel Management (2)
- Peace Corps (4)
- Pension Benefit Guaranty Corporation (3)
- Securities and Exchange Commission (2)
- Social Security Administration (7)
- Tennessee Valley Authority (4)
- Troubled Asset Relief Program (1)
- U.S. Postal Service (16)
Related Organizations
- Department of Defense (1)
- Department of Health & Human Services (3)
- Department of Health & Human Services OIG (10)
- Department of Homeland Security (19)
- Department of Labor OIG (8)
- Department of Veterans Affairs (1)
- Department of Veterans Affairs OIG (1)
- Environmental Protection Agency (1)
- Federal Deposit Insurance Corporation OIG (14)
- Federal Housing Finance Agency OIG (8)
- Federal Reserve Board & CFPB OIG (2)
- Internal Revenue Service (18)
- Postal Inspection Service (21)
- Small Business Administration OIG (37)
- Social Security Administration OIG (2)
- Treasury Inspector General for Tax Administration (13)
Management Challenges
- Agency Operations (21)
- Data Transparency and Completeness (3)
- Federal Workforce Safety (9)
- Financial Management of Relief Funding (5)
- Grants and Guaranteed Loan Management (33)
- Informing and Protecting the Public from Pandemic-Related Fraud (1)
- IT Management and Security (2)
- Preventing and Detecting Fraud against Government Programs (2)
- Protecting the Health and Safety of the Public (16)
Any Recommendations
Any Open Recommendations
Reports
Audit of the Implementation of the Coronavirus Aid, Relief, and Economic Security (CARES) Act, Section 3610
Perform a thorough review of OIG-sampled CARES invoices with questionable costs, and request additional contractor documentation necessary to determine accuracy of CARES hours, rates, and contractor status. If any charges are not allowed, recover as appropriate.
Perform a risk assessment of all CARES invoices and process to determine, at a minimum, the nature and extent of testing required to sufficiently identify unsupported payments.
Final Report – The IRS Leveraged Its Telework Program to Continue Operations During the COVID-19 Pandemic
Processing of Recovery Rebate Credit Claims During the 2021 Filing Season
On June 15, 2021, we alerted IRS management of our concerns with the systemic calculation of the allowable RRC amount. We recommended that IRS management review the returns we identified and provide us with any corrective actions they intended to take.
Conduct analysis of Tax Year 2020 tax returns processed after May 27, 2021, to identify additional individuals who received an RRC for a qualifying child for which the IRS has already paid an EIP or an RRC to someone else and take the actions needed to recover RRC payments that are determined to be erroneous.
Review the 7,022 individuals identified in which the IRS issued multiple RRCs for a qualifying child who was claimed on more than one tax return and take the actions needed to recover payments that are determined to be erroneous.
Conduct analysis of Tax Year 2020 tax returns processed after May 27, 2021, to identify additional individuals who received an RRC for a qualifying child who was claimed on more than one tax return and take the actions needed to recover payments that are determined to be erroneous.
Review the 75,594 tax returns identified in which the individual is potentially a nonresident alien and take the actions needed to recover the RRC payments that are determined to be erroneous.
Perform analysis of Tax Year 2020 tax returns filed after May 27, 2021, to identify additional tax returns with the same characteristics as those the IRS determined were filed by a nonresident alien and take the actions needed to recover erroneous RRC payments.
The Commissioner, Wage and Investment Division, should coordinate with the Territories to confirm and recover erroneous RRCs.
Review the nearly 6.9 million potentially eligible individuals we provided to the IRS who had not filed a Tax Year 2020 tax return as of May 27, 2021, and send a letter to those individuals who still have not filed a Tax Year 2020 return to encourage them to file a return and claim the RRC if eligible.
Review the 3.1 million eligible individuals we identified who filed a Tax Year 2020 return and proactively issue these taxpayers their credit.
Conduct additional analysis to identify tax returns filed after May 27, 2021, in which an individual is eligible for the RRC based on their Tax Year 2020 tax return and did not claim the credit, and proactively issue the taxpayer their credit.
If IRS management does not proactively issue the RRC to individuals who filed a return and did not claim the credit, the IRS should notify these individuals that they are eligible to claim the RRC and should file an amended tax return to claim the credit.
On March 19, 2021, we alerted IRS management of our concerns that an incorrect amount of advance payments was being used to calculate the RRC for some taxpayers. We recommended that IRS management review the returns we identified and provide us with any corrective actions they intended to take.
Work with the BFS to ensure that individuals who were denied the RRC and have still not activated their EIP1 or EIP2 debit card as of December 31, 2021, have EIPs reversed in their tax account and are issued their RRC. These processes should include notifying Metabank that the debit cards in question are to be cancelled.
Work with the BFS to obtain recurring data during Processing Year 2022 to identify individuals who have not activated their advance ARPA RRC debit card at the time a return is filed and implement processes to reverse the advance payment so these individuals can receive the RRC on their Tax Year 2021 tax return.
We alerted the Commissioner, Wage and Investment Division, of our concerns that the IRS was unnecessarily burdening taxpayers whose RRC claims were identified for manual ERS review. We recommended the IRS develop processes to systemically adjust RRC claims using the computer-generated RRC calculation.
On April 6, 2021, we alerted IRS management of our concerns regarding ERS tax examiners incorrectly computing the RRC (see management’s action in response to Recommendation 1). We recommended the IRS review the returns we identified and take the actions necessary to ensure that these taxpayers receive the amount of the RRC
they are entitled to receive.
On March 12, 2021, we alerted IRS management of our concerns that some tax returns were not being identified by fraud filters. We recommended IRS management review the returns we identified and associated fraud filters to identify why these returns were not selected and make programming changes as necessary to ensure proper
identification of returns with potentially questionable claims.
Conduct analysis to identify Tax Year 2020 RRC claims processed after May 27, 2021, to identify other returns in which ERS tax examiners incorrectly calculated the number of allowable dependents and returns that were not reprocessed per IRS guidance after programming was corrected, and ensure that these taxpayers receive the correct amount of the RRC.
Review the 14,508 individuals identified in which the IRS issued an RRC to an individual who was claimed as a dependent on someone else’s tax return but did not check the dependent box and take the actions needed to recover payments that are determined to be erroneous.
Conduct analysis of Tax Year 2020 tax returns processed after May 27, 2021, to identify additional individuals who received an RRC and were also claimed as a dependent on someone else’s tax return but did not check the dependent box, and take the actions needed to recover the RRC payments that are determined to be erroneous.
Review the 238,680 individuals under the age of 25 identified as potential dependents and take the actions needed to recover payments that are determined to be erroneous.
Review the 15,741 individuals identified in which the individual incorrectly received an RRC and an EIP for the same qualifying child and take the actions needed to recover RRC payments that are determined to be erroneous.
The Child Tax Credit Update Portal Was Successfully Deployed, but Security and Process Improvements Are Needed
The Child Tax Credit Update Portal Was Successfully Deployed, but Security and Process Improvements Are Needed
Ensure that the ELC coaches comply with existing agency requirements related to the independent verification and validation of all ELC artifacts.
Ensure that the ELC coaches comply with existing agency requirements related to the independent verification and validation of all ELC artifacts.
Ensure that the ELC coaches comply with existing agency requirements related to the independent verification and validation of all ELC artifacts.
Prioritize remediation efforts on the two noncompliant SADI system servers that have weighted noncompliance scores of less than 90 percent.
Prioritize remediation efforts on the two noncompliant SADI system servers that have weighted noncompliance scores of less than 90 percent.
Prioritize remediation efforts on the two noncompliant SADI system servers that have weighted noncompliance scores of less than 90 percent.
Ensure that only authorized approving authorities provide status updates and grant final approval of ELC artifacts during required milestone reviews.
Ensure that only authorized approving authorities provide status updates and grant final approval of ELC artifacts during required milestone reviews.
Ensure that only authorized approving authorities provide status updates and grant final approval of ELC artifacts during required milestone reviews.
Establish a formal process, which includes routine updates, to identify primary and proxy approvers for all ELC artifacts.
Establish a formal process, which includes routine updates, to identify primary and proxy approvers for all ELC artifacts.
Establish a formal process, which includes routine updates, to identify primary and proxy approvers for all ELC artifacts.
The Chief Information Officer should ensure that systems supported by the CSPs have an approved IRS ATO prior to a system’s deployment.
The Chief Information Officer should ensure that systems supported by the CSPs have an approved IRS ATO prior to a system’s deployment.
The Chief Information Officer should ensure that systems supported by the CSPs have an approved IRS ATO prior to a system’s deployment.
The Chief Privacy Officer should establish a process that complies with Office of Management and Budget requirements regarding the selection, implementation, assessment, and continuous monitoring of privacy controls.
The Chief Privacy Officer should establish a process that complies with Office of Management and Budget requirements regarding the selection, implementation, assessment, and continuous monitoring of privacy controls.
The Chief Privacy Officer should establish a process that complies with Office of Management and Budget requirements regarding the selection, implementation, assessment, and continuous monitoring of privacy controls.
The Chief Privacy Officer should ensure that formal documentation is created that shows that all the privacy controls applicable to the SADI system are properly selected, implemented, and assessed.
The Chief Privacy Officer should ensure that formal documentation is created that shows that all the privacy controls applicable to the SADI system are properly selected, implemented, and assessed.
The Chief Privacy Officer should ensure that formal documentation is created that shows that all the privacy controls applicable to the SADI system are properly selected, implemented, and assessed.
The Chief Information Officer should ensure that the Cybersecurity function validates that all required NIST physical and environmental protection and media protection controls are implemented.
The Chief Information Officer should ensure that the Cybersecurity function validates that all required NIST physical and environmental protection and media protection controls are implemented.
The Chief Information Officer should ensure that the Cybersecurity function validates that all required NIST physical and environmental protection and media protection controls are implemented.
The Chief Information Officer should ensure that the IRS prioritizes completing the processes that will validate newly built servers being placed into the production environment meet minimum compliance requirements and initiate vulnerability scanning and remediation during the server build process.
The Chief Information Officer should ensure that the IRS prioritizes completing the processes that will validate newly built servers being placed into the production environment meet minimum compliance requirements and initiate vulnerability scanning and remediation during the server build process.
The Chief Information Officer should ensure that the IRS prioritizes completing the processes that will validate newly built servers being placed into the production environment meet minimum compliance requirements and initiate vulnerability scanning and remediation during the server build process.
Ensure that all CTC Update Portal and SADI system associated POA&Ms (listed in Appendix II) are completed timely based on IRS-defined timelines and processes.
Evaluation of SBA’s Disaster Assistance Loan Recommendation Services
Implement procedures to ensure contracting officers use effective proposal
analysis techniques to determine prices are fair and reasonable in accordance
with FAR 15.404
Implement procedures to require contracting officers to assess compliance with
size requirements when small businesses propose using subcontractors to
perform significant work requirements.
Request a formal size determination in accordance with FAR 19.302 to evaluate
whether the loan processing contractor exceeded the size standard and remedy
any violation in accordance with 15 U.S.C. 645(d).
Implement procedures to assess prospective firms’ ability to comply with
subcontracting limitations prior to contract award.
Implement procedures to monitor post-award compliance with subcontracting
limitations.
Before exercising options or awarding additional task orders against the contract,
assess alternative contracting actions, such as pursuing another contract using
competitive procedures to ensure fair and reasonable prices. SBA should then
document the determination in the award file.
American Rescue Plan Act: Implementation of Advance Recovery Rebate Credit Payments
The Commissioner, Large Business and International Division, should coordinate with the territories to share information that will enable the territories to recover duplicate payments that the territories have issued, to the extent permitted under the relevant territory’s domestic law.
If Congress enacts additional stimulus payments, the Commissioner, Wage and Investment Division, should consider additional programming changes to prevent ineligible individuals from receiving advance payments, including individuals claimed as dependents or dependents claimed on multiple returns, nonresident individuals, individuals who had a filing status or filing partner change, deceased individuals, and individuals affected by the mentioned related programming errors.
Program and Organizational Changes Are Needed to Address the Continued Inadequate Tax Account Assistance Provided to Taxpayers
On September 20, 2021, we notified the Director, Accounts Management, that the Austin site was not requiring Accounts Management screeners to come into the office to perform their duties, resulting in a significant backlog and delays in inventory being routed to Accounts Management to be worked. We recommended that the IRS establish consistent guidance and clarification on when resources can be directed to the office to help with screening inventory, to ensure that sufficient staff is available to screen documents in a timely manner, and establish processes to monitor the progress,
The Commissioner, Wage and Investment Division, should update existing scanning software or obtain a new scanning software to
address document capacity concerns.
The Commissioner, Wage and Investment Division, should ensure that programming is updated to systemically reject electronic
submissions of Forms 2848 and 8821 when missing one of the five essential elements (name, address, signature, etc.) without manually mailing a rejection letter.
The Commissioner, Wage and Investment Division, should ensure that the rejection letter used for Forms 2848 and 8821 is updated
to include language that a revised form can be submitted electronically via an IRS Tax Pro Account25 or through Taxpayer Digital Communication.
The Commissioner, Wage and Investment Division, should develop an action plan to prioritize the continued expansion of documents that can be sent in via electronic fax and converted into a Correspondence Imaging System (CIS) image.
Develop an action plan to prioritize the continued expansion of documents that can be sent in via electronic fax and converted into a CIS image.
The Commissioner, Wage and Investment Division, should Identify priority work that needs to be expedited by the Image Control Team (ICT) and assess the feasibility of creating an electronic fax number to receive this inventory.
On July 12, 2021, TiGTA notified the Director, Accounts Management, of concerns regarding inaccuracies as it related to the compiling and reporting of the Accounts Management Inventory Report (AMIR). TIGTA recommended that the IRS perform a reconciliation of each Accounts Management site’s AMIR to the source reports to identify inventory inconsistencies and reporting errors by site
The Commissioner, Wage and Investment Division, should complete the inventory reconciliations for the four remaining Accounts
Management site’s to identify and correct inventory inaccuracies and inconsistencies and implement processes to provide oversight by periodically performing reconciliations for each site so that any future inconsistencies and errors are identified and corrected in a timely manner.
The Commissioner, Wage and Investment Division, should develop specific and detailed instructions for preparing the Accounts Management Inventory Report (AMIR), including how controlled and uncontrolled inventory should be captured
The Commissioner, Wage and Investment Division, should develop a process to systemically pull all controlled inventory for each
Accounts Management site for the Accounts Management Inventory Report (AMIR) to ensure consistency, reduce human error, and
increase efficiencies
The Commissioner, Wage and Investment Division, should modify Accounts Management inventory reporting to report unassigned
controlled inventory separately on the nationwide Accounts Management Inventory Report (AMIR) and limit the site-specific AMIRs to only
the inventory assigned to be worked in each site.
The Commissioner, Wage and Investment Division, should evaluate directing taxpayers to send tax account correspondence and
replies intended for Accounts Management directly to Campus Support Sites for processing to reduce backlogs at Tax Processing Centers and improve services to taxpayers.
The Commissioner, Wage and Investment Division, should prioritize the development and implementation of tools that will enable
taxpayers seeking assistance or responding to Accounts Management to correspond with the IRS electronically, including the ability to directly upload documents into Accounts Management’s inventory.
The Chief Taxpayer Experience Officer, in conjunction with the Director, IRS NEXT Office, should evaluate establishing two distinct IRS programs as part of the IRS reorganization under the Taxpayer First Act – one dedicated to answering toll-free telephone calls and one dedicated to working Accounts Management inventory – with adequate staffing to provide appropriate service to taxpayers using each channel.
On June 9, 2021, we notified the Director, Customer Account Services, that Submission Processing requested resources from Accounts Management to assist with clearing the Image Control Team (ICT) backlog and was told by Campus Support management that no resources could be made available to assist with reducing the ICT backlog. We recommended that the IRS assess the availability of Campus Support’s ICT staffing or other resources that could be made available to assist with clearing the ICT backlogs at Tax Processing Centers.
On September 3, 2021, we notified the Director, Accounts Management, of concerns relating to the newly stood-up Fresno Campus Support Site, including scanners not being used to the full extent possible. We recommended that IRS management provide us with it plans to address our concerns identified with the new Fresno Campus Support Site, including additional staffing to assist Image Control Team (ICT).
The Commissioner, Wage and Investment Division, should complete a strategic review of all 10 Image Control Team (ICT) sites to determine what contributes to the ICT’s inability to timely scan and validate documents. Based on the results of this review, initiate steps to address the concerns identified. This should include the development of an action plan to ensure that the high-capacity ICT scanners and staffing are realigned to the appropriate sites based on actual or expected inventory levels and that responsibility of the ICT operations are consolidated under the appropriate function.
The Commissioner, Wage and Investment Division, should cross-train additional mail clerks at Campus Support Sites to work Image Control Team (ICT) validations, freeing up additional resources in sites with higher inventories needing to be scanned, or consider shipping inventory to sites with less inventory to be scanned.
The Commissioner, Wage and Investment Division, should develop specific instructions and a common template for all 10 Image Control Team (ICT) sites to consistently capture ICT inventory information.
Railroad Retirement Board Did Not Implement Sufficient Internal Controls in the Mobile Phones Deployed as a Result of the Pandemic
The Bureau of Information Services should update their mobile phone policies to include and implement a National Archives and Records Administration-approved records schedule and transfer procedures for electronic records associated with mobile phones.
The Bureau of Information Services should develop and implement a records management and retention system for electronic records.
The Bureau of Information Services should research the capabilities of Railroad Retirement Board's Microsoft Azure Cloud's functionality to determine feasibility of incorporating the automated records management and retention capabilities to govern the mobile phones electronic records.
The Bureau of Information Services should submit a yearly affidavit to confirm electronic records associated with mobile phones have been identified and retained until the full transition into Microsoft Azure Cloud.
The Railroad Retirement Board's Director of Administration should define and communicate 'personal usage' establishing Railroad Retirement Board's core hours of 5:00 am to 7:00 pm. Any usage outside of core hours would be considered personal usage excluding business management purposes.
The Railroad Retirement Board's Bureau of Information Services should 1) continue efforts to update the Telecommuting and Mobile Security Computing Policy with current laws and regulations and 2) develop a periodic monitoring control to assess personal usage and address it according to agency guidance.
The Bureau of Information Services should incorporate the mobile phones in an existing assessable unit and update their mobile phone policies to include documentation regarding the specific roles and responsibilities of each office overseeing the mobile phone program.
The Bureau of Information Services should enforce and execute a review and approval process for application and software download and restrict access to specified applications found in their Railroad Retirement Board G-6 Rules of Behavior.
The Bureau of Information Services should implement procedures to periodically track, log, and monitor iPhone usage and the completion of the G-6 Acknowledgement Statement.
The Bureau of Information Services should periodically review the mobile phone inventory for completeness and accuracy to include a comparison with Railroad Retirement Board's personnel position index.
The Bureau of Information Services should implement the use of unique identifiers between disparate data sets (e.g., mobile phone inventory, personnel position index) to facilitate comparisons and reconcile inconsistent information.
Management Information Report - Railroad Retirement Board's Actions in Response to Pandemic Funding
The Bureau of Fiscal Operations should reconcile the obligations as reported to USAspending.gov and the weekly outlay report to determine the correct total for Coronavirus Disease 2019 obligations charged to the $5 million technology appropriation.
The Railroad Retirement Board's Executive Committee should establish a group tasked with hiring decisions for appropriated funds from the American Rescue Plan Act. This group should use documented and reliable procedures that are based on accurate and reliable data sources to determine hiring and staffing levels using appropriated funders from the American Rescue Plan Act.
The Railroad Retirement Board's Executive Committee should reconsider and revise its plans concerning hiring based on the American Rescue Plan Act appropriation because adequate supporting documentation had not been prepared.