The Home Office has begun rolling out Multi-Factor Authentication (MFA) for selected Sponsor Management System users, introducing an additional layer of security for sponsor licence accounts. Affected sponsors should ensure their Level 1 User details are accurate and prepare for the new SMS login process.
The change does not currently apply to all sponsors. Selected licence holders have been contacted directly by UKVI, with a recent phase of the rollout taking effect from 4 August 2026.
What does MFA mean for SMS users?
For affected Level 1 Users, the new login process is expected to require additional identity verification alongside existing SMS login credentials, including a one-time passcode sent to the email address or mobile telephone number registered to the user.
Sponsors included in the rollout should therefore ensure that the following details recorded for their SMS users are accurate and up to date:
- Email address
- Mobile telephone number
- Date of birth
Incorrect or outdated information could result in difficulties accessing the SMS once MFA has been activated.
Why does this matter?
The introduction of MFA comes in light of increased concerns around phishing and unauthorised access to sponsor accounts. Sponsors should continue to follow good SMS security practices as part of their wider sponsor licence compliance responsibilities, including ensuring that each user has their own individual SMS account, login credentials are not shared, and access for users who no longer require it are removed promptly.
Maintaining reliable access to the SMS is important given that sponsors rely on the system for key compliance functions, including assigning Certificates of Sponsorship and making time-sensitive reports to the Home Office.
What should sponsors do now?
If your organisation has been contacted by UKVI regarding the MFA rollout, you should review the relevant user details and follow the instructions provided by the Home Office. Sponsors who have not been contacted are not currently affected. However, it would be advisable to review SMS user details and access now in preparation for any wider rollout. The programme remains at an early stage, and the Home Office has not yet updated its guidance in relation to a wider implementation.
Hudson McKenzie will continue to monitor developments and provide further updates as additional Home Office guidance becomes available.
Get the latest insights on global immigration delivered straight to your inbox
