W-9 for Vendor Setup: What Each Onboarding Form Does
A supplier code of conduct runs to fourteen pages and nobody reads it. It arrives stapled to three documents that decide whether you get paid — a W-9, an insurance requirements sheet, a bank details form — in a reply from a department you had not heard of that morning: before we can process this, we need you set up as a vendor.
None of that is payment. All of it sits in front of payment, and every day it sits there is a day your net 30 has not started counting.
Which is the useful way to think about an onboarding packet. It is not admin running alongside the work. It is a gate, each document in it opens a different lock, and if you misread which lock a document opens you can spend a fortnight arguing about the wrong form while the money sits in a queue you cannot see.
None of this is tax or insurance advice, and the distinction bites harder here than usual: knowing what a box on a form is for is not the same as knowing what belongs in it for the way you trade. I am not an accountant, a lawyer or a broker — the about page says where that line falls. What follows is what each document does, which field goes wrong most often, and what happens downstream when it does. Every figure below was read on 18 August 2026 against the issuing body's own page, and one of them moved recently enough that clients still quote the old one.
Four documents, four different locks
| Document | Who actually wants it | What it unblocks | Where it stalls |
|---|---|---|---|
| Form W-9 | Tax / accounts payable | Existing as a payee at all | Line 1 name does not match IRS records |
| Certificate of insurance | Risk, legal or procurement | Contract signature, site access | Client named as holder when it wanted additional insured |
| Bank / remittance form | Treasury | The payment run itself | Details submitted or changed mid-job |
| Code of conduct, W-8, supplier questionnaires | Compliance | Portal status flipping to active | One unsigned attachment nobody chased |
Two of these behave in ways that genuinely surprise people. The other two are mostly a matter of doing them on day one instead of day fifty.
The W-9 is a name-matching exercise, not a tax return
Nothing on the form calculates anything. Read the form itself (Rev. March 2024) rather than the client's summary of it and the job it is doing becomes obvious: you are handing over a legal name, a taxpayer identification number, and a signed certification that the two go together and that you are a US person.
The field that causes the most trouble is line 1. If you are a sole proprietor, line 1 is your individual name as shown on your Form 1040, and your business, trade or "doing business as" name goes on line 2. Put the studio name on line 1 and you have created a mismatch between the name and the TIN, which surfaces months later as an IRS notice to your client and a request from them to resubmit. A single-member LLC treated as a disregarded entity has its own rule on that line, which the form's instructions spell out and which is worth reading rather than guessing at.
The consequence of getting it wrong is not a scolding. It is money withheld. The backup withholding rate is 24% of reportable payments (Instructions for the Requester of Form W-9, 03/2024, read 18 August 2026), and for nonemployee compensation there is no grace period at all: the same instructions state that the 60-day exemption covering certain other payment types "does not apply to any payment other than interest, dividends, and certain payments relating to readily tradable instruments", so nonemployee compensation is subject to backup withholding immediately, even where the payee has applied for a TIN. Twenty-four per cent of a $6,000 invoice is $1,440 you will eventually recover through your return, next year, having financed it in the meantime.
One number moved recently and it is worth knowing before a client tells you the old one. For tax years beginning after 2025, the minimum reporting threshold for Forms 1099-MISC and 1099-NEC rose from $600 to $2,000, and it may be adjusted for inflation beginning in calendar year 2027 (Instructions for Forms 1099-MISC and 1099-NEC, Rev. December 2026, read 18 August 2026). Box 1a of the 1099-NEC now reads "Enter nonemployee compensation (NEC) of $2,000 or more." This changes what lands in your mailbox each January. It changes nothing about whether the income is taxable, and it does not get you out of sending a W-9, because no accounts payable department knows in March what you will have billed by December.
If you are not a US person, the W-9 is simply the wrong document and signing it is worse than sending nothing. Individuals use Form W-8 BEN instead, entities use the BEN-E version, and treaty positions are a specialist question.
When a mismatch does surface it surfaces on the client's side, and what follows has a tempo of its own. A payee listed on an IRS CP2100 or CP2100A notice is sent a first "B" notice by the payer with a fresh Form W-9 attached; listed a second time within three years, that payee is asked for a copy of the Social Security card or an IRS Letter 147C instead, because a W-9 will no longer settle it (Backup withholding "B" program, read 18 August 2026). Each of those exchanges is a round trip through a department with no particular reason to hurry, and the withholding carries on while they happen.
The certificate of insurance certifies less than the client thinks
Read the top of any ACORD 25, the standard US certificate of liability insurance (sample form, 2016/03 edition, hosted by the New York City Mayor's Office of Media and Entertainment, read 18 August 2026), before you get anywhere near the limits. Printed across the head of it, in capitals:
THIS CERTIFICATE IS ISSUED AS A MATTER OF INFORMATION ONLY AND CONFERS NO RIGHTS UPON THE CERTIFICATE HOLDER. THIS CERTIFICATE DOES NOT AFFIRMATIVELY OR NEGATIVELY AMEND, EXTEND OR ALTER THE COVERAGE AFFORDED BY THE POLICIES BELOW.
And immediately beneath that block, the sentence that decides most COI arguments:
If the certificate holder is an ADDITIONAL INSURED, the policy(ies) must have ADDITIONAL INSURED provisions or be endorsed. If SUBROGATION IS WAIVED... certain policies may require an endorsement. A statement on this certificate does not confer rights to the certificate holder in lieu of such endorsement(s).
So there are two different things a client can be asking for, and they cost different amounts of your time. Certificate holder means "send them a copy" and takes your broker about ten minutes. Additional insured means an endorsement attached to your actual policy, which takes a day or two, may change your premium, and produces a second document you should send along with the certificate. The ADDL INSD and SUBR WVD columns on the form are check boxes; the coverage behind them is not.
There is a second mismatch, quieter and more common. Most procurement templates ask for commercial general liability, commercial auto and workers' compensation, because the template was written for contractors who turn up with vans and ladders. General liability responds to bodily injury and property damage. The risk in copywriting, design, code or video is a professional one: the claim that the work was wrong, late or infringing, which is what errors and omissions cover is for. A freelancer who buys only what the template asks for has bought the wrong policy competently.
On price, the one broker figure worth quoting is an average rather than a range: Insureon puts a $1 million per-occurrence general liability policy at $45 a month, about $542 a year, across its own small-business customers, with E&O priced separately on top. That is a sighting shot and nothing more — it is one broker's book, weighted towards trades that are not yours. The number that matters is what your own broker quotes against your own class code.
A requirement that is real rather than aspirational lands on the policy rather than on the certificate, and federal contracting shows the shape of one. FAR 52.228-5 requires the policies themselves to carry an endorsement under which cancellation or material change does not take effect until the longer of the period fixed by the law of the state where the work is performed, or 30 days after written notice to the contracting officer (52.228-5, read 18 August 2026). Large private clients borrow the habit. Anything in that family is issued and priced by your insurer, so it belongs in the quote you ask for at renewal rather than in an email sent the week a contract is signed.
The bank form is the one somebody is watching
Treasury teams have spent a decade being defrauded by emails that look exactly like a freelancer sending updated payment details, and their controls reflect it. Expect a callback to a number they already hold, a portal upload rather than an email attachment, and a hard freeze on any payment run that touches a recently changed account.
Two practical consequences. First, submit bank details once, at onboarding, and then leave them alone for the duration of the engagement. Changing banks halfway through a project is a legitimate thing to do and it will cost you a payment cycle. Second, if an invoice has gone quiet, a stalled banking record is one of the likeliest causes and one of the least likely to be announced. That is worth checking before you escalate anything, because the first step in a collections process is working out whether you are looking at refusal or at plumbing.
A packet you can assemble in one afternoon
Keep a folder. Everything in it goes stale on a predictable schedule, so it is a small standing chore rather than a fire.
- Signed W-9, dated. Regenerate it whenever your name, address or entity type changes. There is no expiry, but a stale address invites questions.
- Certificate of insurance, current policy period. Note the expiry in your calendar 30 days ahead, because a lapsed COI can freeze payment on work already delivered.
- A standing note of your limits and endorsements. Per-occurrence and aggregate limits, whether you hold E&O, whether your policy will issue additional insured and waiver of subrogation endorsements at all.
- Bank details on your letterhead, matching the payee name on the W-9 exactly.
- Your entity details: legal name, DBA, EIN or SSN as used on the W-9, formation state.
Then ask two questions at kickoff, before any of this is urgent: what does your onboarding require, and roughly how long does it take? A procurement lead can usually answer in one line, and the answers vary enormously — a few days at a small studio, weeks at an organisation with a supplier portal and a compliance queue. Whatever the answer, it belongs in your schedule next to the delivery dates rather than being discovered afterwards, and the insurance requirement itself should already be visible in the contract you signed rather than arriving as a surprise attachment.
The one registration queue with a published timetable is the federal one, which makes it a passable yardstick for the rest. Registering an entity in SAM.gov is free and issues a Unique Entity ID, and the system's own guidance warns that registration "can take up to 10 business days to become active" (SAM.gov entity registration, read 18 August 2026). Nothing obliges a commercial supplier portal to beat that, and hardly any of them publish a figure at all, so a fortnight is the safe assumption until procurement offers you a better one.
The three things in the packet that are not paperwork
Everything above is about which document opens which lock. Three things in the packet only look like form-filling.
Whether your entity type, your line 1 name and your TIN are the right combination for how you actually trade is a question for a CPA or enrolled agent, not for a checklist. Whether a treaty position on a W-8 BEN is available to you is the same kind of question with a smaller pool of people who can answer it. And whether the insurance a client demands is the insurance that would respond to the claim they are worried about is a conversation with a broker who has read your contract.
Bring them the packet. It is a much cheaper meeting when the forms are already filled in.
Frequently asked questions
Why does a client need a W-9 before they can pay my invoice?
Because the person paying you is the person who has to file the information return, and they cannot file it without your legal name and taxpayer identification number. Form W-9 is how they collect both, and the certification you sign on it is what lets them treat you as a US person who is not subject to backup withholding. A client who pays you without a W-9 on file is exposed on two fronts: an information return they cannot complete, and a withholding obligation they may have failed to apply. That is why accounts payable will not release a payment run for an unregistered payee no matter how friendly the person who hired you is. The form takes four minutes. Send it at the kickoff rather than after the invoice, because the day it lands is often the real day zero for everything that follows.
Payments under $2,000 are not reported in 2026. Does that mean I can skip the W-9?
No, and the client will not skip it either. The reporting threshold for Forms 1099-MISC and 1099-NEC did rise from $600 to $2,000 for tax years beginning after 2025, with inflation adjustment possible from calendar year 2027 (Instructions for Forms 1099-MISC and 1099-NEC, Rev. December 2026, read on 18 August 2026). But the threshold is measured across the whole calendar year, and nobody in accounts payable knows in March whether you will cross it by December. Requesters therefore collect a W-9 from every new payee as a matter of policy. Separately, the threshold governs reporting, not taxability: income below it is still income, and you still report it on your own return.
The client asked to be listed as an additional insured. Is naming them as certificate holder enough?
No. The ACORD 25 form says so on its own face: "If the certificate holder is an ADDITIONAL INSURED, the policy(ies) must have ADDITIONAL INSURED provisions or be endorsed... A statement on this certificate does not confer rights to the certificate holder in lieu of such endorsement(s)." Certificate holder means the person who received a copy. Additional insured is a status created by an endorsement to your policy, and the same paragraph says the same thing about a waiver of subrogation. Ask your broker to issue the endorsement and send the endorsement itself alongside the certificate. Expect it to take a day or two and, depending on the policy, to change your premium.
I am not a US person. Do I fill in a W-9?
Not that one. Form W-9 is a certification that you are a US person, and signing it when you are not is the wrong document rather than a shortcut. Individuals who are not US persons generally give the withholding agent Form W-8 BEN, Certificate of Foreign Status of Beneficial Owner for United States Tax Withholding and Reporting (Individuals); an entity uses the W-8 BEN-E version. Whether a tax treaty reduces withholding on your particular payments, and what you must enter to claim it, is a question for someone who handles cross-border tax for a living, because the answer turns on your residence, the type of income, and the treaty article that covers it.