CISR22040 - Authenticate customer: authentication: authentication of a limited company

| CISR22600 | Action guide contents | |鈥斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€斺€搢鈥斺€斺€斺€斺€斺€斺€斺€搢

Because of our commitment to keeping customer information confidential it is essential that you know that the person wishing to use our services is the customer or someone who you have on record as being authorised to act on their behalf. In order to 鈥榓uthenticate鈥� that person/contact successfully you must first establish their identity and ensure that they know sufficient details relating to the customer to pass 鈥楢uthentication鈥�.

Authentication of limited company

To pass 鈥楢uthentication鈥� the contact must supply:

  • Both 鈥楳andatory items鈥� of information, and
  • Three further items of information, with at least one of these being taken from the 鈥榮ecure鈥� panel.

Mandatory Items

  • Name (associated with the reference supplied)
  • Address (associated with the reference supplied)

Secure Items

  • COTAX UTR
  • AO Ref
  • EMPREF
  • Official correspondence from HMRC (or former IR or C&E) (for visual inspection at Enquiry Counter only)

Additional Items

  • Phone number (associated with the reference supplied)
  • Date and time of last contact by customer
  • Company registration number (CRN)
  • Nature of business
  • Other address (CIS communications address, for example)

Only after the person making contact has been authenticated successfully may you moveon to the next stage dealing with the purpose of the call. Where authentication is not successful the call should be terminated and the contact asked to send details to you in writing. Where you are suspicious as to the origins of the call or the caller you should consider marking the contact as Suspect/Bogus and noting your reasons. Refer to CISR22650 for more details about this.