Does the HMRC agent MFA change affect my personal Government Gateway account?

No. MFA was already required for individual and business taxpayers signing into their own Government Gateway accounts. The September 2026 change applies only to accountants and tax advisers using HMRC agent services accounts to act on behalf of clients. Your own login process is unchanged.

What happens if my accountant misses the 7 November MTD deadline because of MFA problems?

HMRC applies a penalty for late quarterly updates under MTD for Income Tax. You can appeal on grounds of reasonable excuse, but HMRC expects taxpayers to take reasonable steps to ensure their agent has working access. Confirming your accountant's MFA setup before the deadline is your best protection against this risk.

Will the new MFA requirement affect the MTD software my accountant uses to file on my behalf?

No. MFA applies to the human sign-in to the agent services account, not to the API connections that most MTD-compatible software uses to transmit data to HMRC. Your existing accounting software integrations with Xero, QuickBooks, Sage, or FreeAgent should continue to work normally.

How quickly can I automate my MTD record-keeping to reduce deadline risk?

Most SMEAutomate clients are live with automated bookkeeping and MTD record preparation within seven to fourteen days, using integrations with accounting tools already in place. The process connects your bank feeds, invoicing, and expenses to produce a submission-ready data set without manual effort.

HMRC Agent MFA Is Now Mandatory: What UK SME Owners Must Do Before the 7 November MTD Deadline

HMRC has automatically switched on multi-factor authentication (MFA) for all remaining accountant and bookkeeper "agent" accounts between 28 September and 15 October 2026. If your accountant cannot complete the MFA setup, they may temporarily lose access to your tax account - and the next Making Tax Digital quarterly update deadline is 7 November.

What is agent MFA and why has HMRC switched it on now?

HMRC's agent services account (ASA) and online services account (OSA) give accountants and tax advisers delegated access to submit returns, view tax positions, and manage PAYE on behalf of their business clients. Multi-factor authentication adds a second verification step - typically a code sent to a phone or generated by an authenticator app - before anyone can sign in.

HMRC began rolling out MFA to agents who volunteered for early activation in June 2026. From 28 September, it has been applied automatically to all remaining agent accounts. According to ICAEW, agents who had not yet registered voluntarily had MFA switched on between 28 September and 15 October 2026.

The change was accelerated after a series of cyberattacks in which fraudsters exploited agent accounts to file fraudulent repayment claims. MFA closes that attack vector.

Why does this matter for your next MTD quarterly update?

If you are one of the 864,000 taxpayers required to use Making Tax Digital for Income Tax in 2026-27 - sole traders and landlords with income above £50,000 - your next quarterly update covers the period to 5 October 2026 and is due to HMRC by 7 November 2026.

The first quarterly update in August 2026 saw only 436,000 of the 864,000 eligible taxpayers file on time, according to analysis published by VisaVerge. That is roughly half. If your accountant's MFA setup encounters a problem - particularly in shared practices where a single mobile device was registered for multiple staff logins - your second submission could also be at risk.

What you should ask your accountant this week

Has your MFA activation been completed successfully?
Is the practice using an authenticator app or SMS codes? Authenticator apps are more reliable when multiple staff share account access.
Do you have a backup login method set up in case the primary device is unavailable?
Are my records up to date enough to prepare a Q2 submission now, well before 7 November?

Asking these questions takes five minutes but prevents a late filing penalty.

How automated record-keeping reduces your exposure

The core risk behind MTD late filings is not authentication alone - it is data readiness. Accountants who have to chase incomplete or inconsistent records are more likely to rush the submission close to the deadline, leaving no room for technical issues such as MFA problems.

An AI agent connected to your accounting software, bank feeds, and invoicing system maintains a rolling, submission-ready record automatically. When the quarterly deadline approaches, your accountant receives a clean, categorised data package rather than a folder of receipts and rough notes.

Typical deployment takes seven to fourteen days and integrates with HMRC-compatible software including QuickBooks, Xero, Sage, and FreeAgent.

The bottom line

HMRC has activated MFA for agent accounts this week. The next MTD quarterly update deadline is 7 November. Speak to your accountant now to confirm their access is working - and if your bookkeeping records are not yet automated, now is the time to change that before Q3 compounds the problem.