ITIN (Individual Taxpayer Identification Number) numbers are issued by the IRS (Internal Revenue Service) to individuals who do not have, and are not eligible to obtain, a valid U.S. Social Security Number, but who are required by law to file a U.S. Individual Income Tax Return.
ITIN is a nine digit number and always begins with the number 9 and has a 7 or 8 in the fourth digit, such as 9XX-7X-XXXX.4th and 5th digits, also known as second section (xxx-xx-xxxx), range from 70 to 88, 90 to 92 and 94 to 99.

ITIN identity theft occurs when someone uses a stolen SSN and ITINSocial Security number to file a tax return to claim a fraudulent refund. A taxpayer’s SSN can be stolen through a data breach, a computer hack or a lost wallet. Although identity theft affects a small percentage of tax returns, it can have a major impact on victims by delaying their refunds.

Consequences of ITIN Theft

• More than one tax return was filed for you.
• You owe additional tax, have a refund offset or have had collection actions taken against you for a year you did not file a tax return.
• IRS records indicate you received more wages than you actually earned.
• Your state or federal benefits were reduced or cancelled because the agency received information reporting an income change.

Tips to protect you from becoming a victim of identity theft

• Don’t carry your Social Security card or any documents that include your Social Security number (SSN) or Individual Taxpayer Identification Number (ITIN).
• Don’t give a business your SSN or ITIN just because they ask. Give it only when required
• Protect your financial information.
• Check your credit report every 12 months.
• Review your Social Security Administration earnings statement annually.
• Secure personal information in your home.
• Protect your personal computers by using firewalls and anti-spam/virus software, updating security patches and changing passwords for Internet accounts.
• Don’t give personal information over the phone, through the mail or on the Internet unless you have initiated the contact or you are sure you know who you are dealing with.

Here, you will know about mask ITIN on web page so that can’t see by fraud person there other cases also where sensitive information need to mask by organization for come over from privacy violation.

See Also :

• Log4j2: How to Mask Logs Personal/Confidential/SPI Information
• How to Mask JSON Confidential/Personal Information in logs :JAVA
• How to mask JAVA Object confidential/personal information in logs while Printing
• How to MASK XML Confidential/Personal Data : JAVA
• How to mask Personal/Confidential Information on web page

ITIN masking Example:

Here considering, ITIN of length 9 digits. By masking will hide initial 5 digits and show only last 4 digits. For example, ITIN is 123456789 than after mask will display as XXX-XX-6789.

HTML Changes

Create a text box on your page as in attachment in download section.

Java Script/JQuery Changes

Copy below java script in your head section of page.

var originalVal;
$(document).ready(function()
{
       if($('#txtITIN').val().length>0)
		 {
		 if($('#txtITIN').val().indexOf("X")==-1)
			{
			  originalVal=$('#txtITIN').val();
			}
		    maskITIN(this);
		 }

	    $('#txtITIN').blur( function(e)
		{
	    	if($('#txtITIN').val().indexOf("X")==-1)
	    	{
	    	  originalVal=$('#txtITIN').val();
	    	}
	    	 maskITIN(this);
		});

		$('#txtITIN').focus( function(e)
		{
			$(this).val(originalVal);
		});
});
function maskITIN(regularITIN)
{
	 var varlen =$(regularITIN).val().length;
	 if(varlen > 9)
	 {
	 $("#error").text('Not Valid ITIN.');
	 }
	 else
	 {
	 $("#error").text('');
	 var str = $(regularITIN).val();

	 var mask = varlen > 0 ? varlen > 1 ? varlen > 2 ? varlen > 3 ? varlen > 4 ?
	        'XXX-XX-'
          : 'XXX-X'
          : 'XXX-'
          : 'XX'
          : 'X'
          : '';
          if (varlen < 4) {
          $(regularITIN).val(mask);
          } else {
          $(regularITIN).val(mask + $(regularITIN).val().substring(5));
          }
   }
}

Note :
This masking example is created considering standard length of text size and formatting of text field, that can vary according to organizations. If your organizations having different format and text size modify source code according to your need.
If you are facing any issue drop a comments will try to connect as soon as possible.

Download Source code

To download the source code of this example, click on below given download link. Mask ITIN

References

• https://www.irs.gov/newsroom/identity-theft-information-for-taxpayers-and-victims
• https://en.wikipedia.org/wiki/Individual_Taxpayer_Identification_Number
• https://www.tomsguide.com/us/what-to-do-ssn-stolen,news-18742.html