2 min read
Steps
- You are signing in from a new device or browser the account hasn't seen before.
- You are on a new network or location, or a VPN that changes your apparent location.
- You are about to do something sensitive — change bank details, add a user, close the account.
- A trusted-device period expired, so the account asks again as a matter of routine.
Good to know
Extra prompts are the account protecting you, not a fault. If you ever get a prompt when you are not signing in — a code arrives out of the blue — that could mean someone has your password and is trying to get in. Do not approve it; instead change your password and see reporting suspected fraud.
Related reading

Setting up an authenticator app for two-factor authentication
Two-factor authentication adds a second step to sign-in: after your password you enter a six-digit code from…
Read →
Trusted device
A trusted device is one you designate as yours, so it may skip the two-factor prompt for a set period —…
Read →
Managing trusted devices and active sessions
Your account keeps a list of the devices and browsers currently signed in. Reviewing it — and removing…
Read →
Reporting suspected fraud to Credit Corp
If you spot something wrong — a scam pretending to be us, a strange login, an unexpected change — report it…
Read →Funding for UK limited companies
Credit Corp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.