Small firms should prepare for HMRC's new online verification

by Susie Hughes at 16:44 06/09/17 (News on Business)

Businesses who need to access online HMRC tax accounts should prepare for an additional layer of security that becomes compulsory later this month.

HMRC is making it mandatory for businesses accessing their online tax accounts to use the 2 Step Verification (2SV) procedure. Examples of tasks that will involve the use by a business of their HMRC tax accounts include filing VAT or corporation tax returns or PAYE data. The new security procedures are similar to those used in online banking and are intended to reduce the risk of accounts being hacked. 2SV combines something the taxpayer knows, their login details, with a second element of something they own, such as a mobile or landline. After the initial login, a security code is issued to the mobile or landline which must be entered for access to be granted to the account. Alternatively a code can be generated from a mobile or tablet by an HMRC app which has been associated with that account. Although HMRC will introduce the 2SV procedure gradually from September 25, 2017, it could be some weeks or months further down the line before businesses come across the extra security depending on what they are filing and how often. Agents acting on behalf of businesses use separate agent portals to access client details and will not be affected by this change. Yvette Nunn, from the Association of Taxation Technicians (ATT), said: "Businesses must consider now what online HMRC accounts they have, who needs access and how their staff will receive the security code. There are various options and businesses should decide in advance of logging on which works best for them. “Receiving the security code via a business landline may work well for a small business, but probably would not for a larger business with a central switchboard. Businesses with poor mobile reception may need to use the HMRC app. Advertisement “For businesses with a number of staff needing online access to HMRC systems, there is a function which allows separate logins or delegate access to be given to individual employees. These employees will have to set up 2SV in turn on their own or company mobiles, landline or app. “Where a business allows staff to use their own mobiles or tablets to receive codes or run the app, procedures should be introduced to ensure these devices are dissociated from the business account if the employee leaves. “Some businesses might choose to acquire a company mobile for the specific purpose of receiving codes or running the HMRC app. With this approach, the device will need to be secured and someone given responsibility for keeping it charged – the modern equivalent of winding up the office clock!” Tweet -- If you wish to comment on this article, please log in and use the Reply button below. Registering is free and easy - see 'Join Shout99'. - Susie Hughes © Shout99 2017

This article was printed from Shout99.com
Copyright 1999-2015 Shout99 Ltd
All Rights Reserved