Supporting Private Capital Managers
Tailored solutions for the private capital industry.
Spotlight case study
Insights for your role
Featured theme
Private capital’s opportunity
Featured vacancy
We are recruiting an Associate/Senior Associate with two to six years’ PQE to join our Financial Services and Products practice.
Our people
Meet the people across the firm who help shape our thinking, culture and client results.
4 minute read
MFA adds an extra layer of security by requiring users to verify their identity using a one-time passcode (OTP), sent by text message or email, in addition to their existing username and password, each time they log in. The change is designed to protect accounts from unauthorised access, even where a password has been compromised.
Alongside the introduction of MFA, the Home Office has announced two further changes:
From 9 September 2026, sponsors are no longer able to appoint Level 2 users (who had more limited access to the SMS than Level 1 users), and existing Level 2 users must be upgraded to Level 1 (if eligible) by 8 March 2027, failing which their accounts will be deactivated. Additionally, from 9 September 2026, the Home Office has introduced email notifications to Authorising Officers to alert them to key activities on sponsor licences.
Timeline for the changes
The rollout of MFA is being implemented in phases, as follows:
The Home Office will contact each sponsor’s Authorising Officer, Key Contact, and Level 1 User(s) by email approximately two weeks before MFA is enabled on their specific licence. That notification will confirm the date on which MFA will take effect for that organisation and set out the actions that must be taken before that date.
It is important to note that the precise date on which MFA is enabled will vary from sponsor to sponsor within the phased rollout. The relevant date notified to each sponsor is specific to that sponsor’s onboarding phase and do not apply universally to all sponsors. Each sponsor should act on the dates confirmed in its own notification email from the Home Office.
Steps required by all SMS users now
Regardless of the date on which MFA is enabled on a particular licence, all sponsors and their SMS users should take the following steps as soon as possible:
If you have any questions relating to these changes, please reach out to your Macfarlanes immigration contact.
Michael Shaw
Partner
Samir Abugideri
Senior Associate
Jessica Jim
Senior Associate
Stay up to date with our latest insights, events and updates – direct to your inbox.
Browse our people by name, team or area of focus to find the expert that you need.
All content © 2026 Macfarlanes. All rights reserved.