From last month, HMRC are making it mandatory that all businesses using their online tax accounts register for 2 Step Verification (“2SV”), if not already using it. The result of this change should mean greater security for taxpayers and a safer experience when using HMRC online services.

What is 2SV?

2SV is a way of adding a layer of security to a taxpayer’s Government Gateway credentials. Instead of relying on something you ‘know’, like a User ID or Password, HMRC add in the extra factor of something you ‘have’, a mobile or landline.

Is 2SV new?

No it isn’t. The use of 2SV is backed by the National Cyber Security Centre and promoted by Cyber Aware and Action Fraud. 2SV is used widely across well-known brands in the tech industry, it’s also commonly used for online banking.

HMRC began introducing 2SV in December 2015 and, since then, more than 11 million individuals and businesses have successfully set up 2SV to protect their online tax accounts.

Why is HMRC requiring 2SV for businesses?

HMRC takes the protection of customer data extremely seriously and are a well-known brand because of its unique tax collection role. Similar to other large financial organisations, that makes HMRC an obvious target for fraudsters and cyber criminals.

Threats evolve and change, so HMRC are constantly reviewing its security approach to ensure everything is done to keep businesses secure.

If you encounter issues using 2SV with HMRC, please contact HMRC’s Online Services Helpdesk.