What is the two-step security check – known as multi-factor authentication (MFA)?

MFA is a two-step security check we use when you request any changes to your account or if you log in from an unknown location, device or IP address. This is designed to make sure only you have the ability to make changes to your account, to help protect your account from fraudulent activity. Here’s how it works:

• When you submit a request or log in from a new device, we’ll send a one-time security code to your mobile number or email address
• You’ll then need to provide this code to complete your request or log in from a new device

The security code we provide to your mobile is valid for 5 minutes from the time we send it, so if you don’t complete your request or log in during this time, you’ll need a new code. If you receive your code by email, you’ll have 30 minutes to complete your request.