Urgent Alert: IRS IDES Public Key Expiration & Mandatory Update for FATCA Filers

The IRS has issued a critical technical update (Issue Number: 2026-12) regarding the cryptographic keys required for all Foreign Account Tax Compliance Act (FATCA) submissions. The public/private key pairs that secure your sensitive XML payloads are expiring, and a mandatory key rotation is taking place immediately.
Starting Thursday, September 24, 2026, at 9:00 am EDT, the existing IRS Public Key will be officially deprecated. Any FATCA reports encrypted with the old key after this exact cutoff will fail IDES decryption and result in an automatic transmission rejection.

Immediate Action Required for Direct Filers

If your institution manages its own direct reporting pipeline and digital encryption, your compliance and IT teams must execute the following steps:

• Download the New Key: Log into the International Data Exchange Service (IDES) portal after 9:00 am EDT today to download and install the newly issued IRS Public Key into your encryption software. For mre details read IRS Digitial Certificates
• Audit Your Own Certificates: This IRS rotation serves as a critical reminder to verify the expiration dates of your institution's own digital certificates. IDES strictly requires digital certificates issued exclusively by IRS-approved Certificate Authorities (CA). Attempting to sign or transmit a payload with an unapproved or expired CA will trigger an immediate gateway failure.

The Novus Compliance Advantage: Zero-Touch Cryptography

Managing cryptographic keys, monitoring expiration dates, and navigating IRS-approved CA renewals introduces significant technical friction and operational risk into the already complex 2026 reporting season.
For institutions utilizing the Novus Compliance Professional Tier, this IRS update requires absolutely zero action on your part.
As an authorized Third-Party Transmitter, our infrastructure is built to handle the entire cryptographic lifecycle on your behalf. We seamlessly rotate the IRS Public Keys within our AES-256 encryption pipeline the moment they go live on the IDES portal, and we maintain the mandatory IRS-approved digital certificates required for direct submission.
You simply upload your raw account data to our secure environment. Our engine generates the FATCA v2.0.1 schema-compliant XML, applies the updated encryption protocols, and transmits the final package directly to the IRS gateway.
Do not let a missed key rotation or an expired certificate derail your reporting deadlines. If your team is spending cycles managing digital infrastructure instead of focusing on core compliance, it is time to upgrade your pipeline. Reach out to our team today to transition your 2026 reporting to a fully managed, error-free architecture.