California FTB Notice Full Online Account Access Requested (FTB 3911)

The FTB 3911 is a security notice from California’s Franchise Tax Board informing you that a request has been made to grant full online account access to your MyFTB account. MyFTB is the FTB’s online portal where taxpayers can view their tax account history, check refund status, make payments, and see notices. Full access means the requesting party can view all your account information, not just a limited view. The FTB sends this notice to verify that you—or someone authorized by you—made the request.

If you did request online access for yourself or a new device, this notice is expected. The FTB uses it as a two-factor verification step to confirm the access request is legitimate before granting it. If you didn’t make this request or don’t recognize who did, that’s a significant problem—it could indicate someone is attempting to access your California tax account without your permission, which raises identity theft concerns.

The Reed Corporation alerts clients immediately when we receive any FTB 3911 notices associated with accounts we manage. Unauthorized access attempts to tax accounts are a growing problem, and the FTB’s notification process exists precisely to catch these situations early. If you receive this notice unexpectedly, contact the FTB’s Identity Theft Resolution unit right away.

Call the FTB’s Identity Theft hotline at 800-852-5711 immediately. Tell them you received an FTB 3911 notice for an access request you didn’t make. The FTB will flag your account, investigate the access attempt, and take steps to secure your MyFTB profile. They may also recommend placing a fraud alert on your credit report with Equifax, Experian, and TransUnion—which is free and lasts 90 days initially but can be extended to seven years with a police report.

Tax identity theft in California is particularly damaging because it can result in fraudulent refunds claimed in your name before you even file your return. California Revenue and Taxation Code Section 19551 gives the FTB authority to hold refunds for additional verification when identity theft is suspected. If someone has accessed your account, they may also have information about prior-year returns, which could be used to answer identity verification questions with other agencies.

The Reed Corporation helps clients work through FTB identity theft cases from start to finish. We coordinate with the FTB’s Identity Protection Unit, file the necessary identity theft affidavits, and monitor the account to make sure the fraudulent activity is contained and doesn’t result in any erroneous tax assessments being issued in the client’s name.

MyFTB offers tiered access levels. Limited or view-only access allows a user to see basic account information—like current balance and payment history—without being able to see full tax return details, notices, or sensitive correspondence. Full online account access opens everything: all return data, notices, audit correspondence, payment history, pending adjustments, and refund status for all years on the account. The FTB 3911 notice is specifically about someone requesting that higher-tier full access.

For tax professionals, MyFTB access comes through a separate representative account, which requires a Power of Attorney (Form 3520-BE) or a Tax Information Authorization (Form 3534) to be on file. Client-level full access for individuals requires identity verification through the FTB’s online verification process. The 3911 notice applies when any user—individual or representative—requests the higher access level.

The Reed Corporation maintains proper MyFTB representative access for all clients through Form 3520-BE. If a client receives an FTB 3911 related to our representation, it’s because we’ve properly requested authorized access. If you receive a 3911 and aren’t sure why, check whether you recently hired a new tax preparer or gave someone power of attorney—legitimate requests generate this notice too.

Yes. The FTB 3911 is designed to give you the ability to confirm or deny the access request. If the notice was expected—you or your authorized representative made the request—you can confirm it and the FTB will grant the access. If you didn’t make the request, you can report it as unauthorized and the FTB will deny it and investigate. The FTB’s notice typically includes instructions for both paths.

The window for responding to an FTB 3911 is usually short—often just a few days—because security access decisions are time-sensitive. If you don’t respond at all, the FTB may deny the access request by default as a protective measure. That means if you legitimately wanted the access and you ignored the notice, you’d have to restart the request process.

The Reed Corporation advises clients to read FTB 3911 notices immediately and respond without delay. If you’re unsure whether the request came from us or someone else, call us directly before responding to the FTB. We can confirm whether we submitted the access request and give you the information you need to respond confidently and correctly.

It can be. The FTB 3911 is a security safeguard specifically designed to catch unauthorized access attempts. Tax account takeover is a recognized form of identity theft where criminals gain access to your tax account to redirect refunds, steal personal information, or manipulate your filing history. California has seen increases in tax-related identity theft, prompting the FTB to use multi-step verification like the 3911 notice before granting sensitive access.

Warning signs that an FTB 3911 might be connected to fraud: you haven’t used MyFTB recently, you haven’t hired a new tax professional, or the access request originated from an unfamiliar device or location. If the notice includes an IP address or device description you don’t recognize, treat it as suspicious. The FTB’s Identity Theft Resolution process exists specifically to handle these situations under Revenue and Taxation Code Section 19551.2.

The Reed Corporation takes any unexplained FTB 3911 seriously. Tax account access fraud can take months to fully unravel—fraudulent returns, misdirected refunds, and account changes made by the thief all need to be corrected one by one. Catching the unauthorized access attempt at the 3911 stage—before any damage is done—is by far the easiest and least costly outcome.