ACR 60608 – TINS Unmask Account Numbers on DDEP
Effective March 11, 2024

Introduction

Application Change Request (ACR) 60027 for the Texas Identification Number System (TINS) implemented the Direct Deposits – Reversals and Reclamations (DDEP) web application. DDEP was implemented with masked account numbers; only the last four digits were displayed. This new TINS ACR 60608 unmasks the account numbers in DDEP to display the full numbers.

Issue 1

DDEP displays only the last four digits of account numbers. When agencies need to verify a full account number, they need to obtain that information from internal files or agency reports. Payments in DDEP are maintained for the eight most recent fiscal years; account information may have changed several times throughout the years.

Solution 1

ACR 60608 unmasks the account number on the DDEP web application as the default setting. Users who receive security access to DDEP have a business need to view the full account number to verify the appropriate reversal or reclamation is processed.

Each agency can request a change to the default setting and mask account numbers to display only the last four digits for their payments by emailing payment.services.dd@cpa.texas.gov with the subject “Mask/Unmask Account Numbers – DDEP.”

Issue 2

ACR 60027 created daily agency reports of processed reversals and reclamations with the full account numbers displayed as the default setting. Once reports are downloaded and printed, they may be left unattended and accessible to unauthorized staff.

Solution 2

To protect account numbers, ACR 60608 masks the account number on all direct deposit reports including the daily reversals and reclamations reports to display only the last four digits. Each agency can request a change to the default setting and unmask the account numbers on all their direct deposit reports by emailing payment.services.dd@cpa.texas.gov with the subject “Mask/Unmask Account Numbers – DD Reports.”