Skip to main content
Version: 1.7.3

W-9/W-8 Settings

In the Developer Console, you can control the following key preferences related to W-9/W-8 forms.

  • Form Preferences
  • PDF Preferences
  • TIN Privacy

Form preferences​

When you use the WhCertificate endpoint, recipients are presented with the option to choose and complete the W-9 or W-8 form applicable to them.

To reduce confusion and improve the recipient experience, you can customize the list of forms displayed so they only see the ones relevant to them. This preference can be managed in your Developer Console → Settings → W-9/W-8 Preferences.

w9w8PreferenceSettings

Key points​

  • Supported forms: W-9, W-8BEN, W-8BEN-E, W-8ECI, W-8IMY, W-8EXP.
  • W-9 will be enabled by default and can’t be disabled. If you do not have international recipients, you can disable all W-8 forms.
  • Disabling a form hides it from the recipient’s landing page but does not delete any previously submitted records for that form.
  • You can re-enable or disable a form at any time. Changes take effect immediately.

PDF Preferences​

When you call the Get endpoint to retrieve completed W-9, W-8BEN, and WH Certificate forms for any recipient:

  • The API response will include the PDF URL of the completed form.
  • This same URL will also be included in webhook notifications.

Include/Exclude PDF URL​

If you choose not to include the PDF URL in the API and webhook responses, you can disable it in your Developer Console → Settings → W-9/W-8 Preferences.

w9w8PdfUrl

PDF Encryption​

If the PDF URL is enabled in responses, you can choose to encrypt the URL to protect its contents. This is strongly recommended because W-9 and W-8 forms contain sensitive Personally Identifiable Information (PII). You can enable encryption in Developer Console → Settings → W-9/W-8 Preferences.

w9w8PdfEncryptSettings

Steps to decrypt​

If encrypted, you must follow the steps below to decrypt the URL before it can be accessed.

  • Identify the following parameters under the PDF Credentials section: AWS AccessKey, AWS SecretKey, Base64Key, and S3 Bucket Name.
  • Use these along with the S3 file path you receive in the Get endpoint response for W-9/W-8 forms.
  • Pass these parameters in your code to decrypt the PDF URL before downloading the file. To view sample code, click here.

TIN Privacy​

When you download W-9 or W-8 forms through the Get endpoint, or when you receive data in webhook responses, you can choose how the Taxpayer Identification Numbers (TIN) are handled.

Mask TIN​

The recipient TIN will be masked in the W-9/W-8 PDF, and only the last 4 digits are visible (e.g., xxxxx1234).

Note:

For security, it’s recommended to mask the TINs unless your business use case specifically requires full visibility.

Mask Tin

Exclude TIN in webhook responses​

The full recipient TIN will be returned in the webhook payload. If you choose to exclude, you can enable this.

Note:

For security, it’s recommended to include TINs in webhook responses only if your business use case demands it.

Exclude TIN