How to Get Your UK Bank's 2FA Code Abroad — Barclays, HSBC, Lloyds, NatWest, Monzo, Starling, Revolut, HMRC & NHS (2026)

Summary

The scariest part of being a Brit abroad isn’t data — it’s getting locked out of your own bank because a verification step won’t complete. Good news: most UK banks now use app-based Strong Customer Authentication — an in-app push approval that works over your travel eSIM data, no SMS required. For the banks and government services that still text a code, keep your UK number active and turn on Wi-Fi Calling so the SMS arrives over Wi-Fi. Run a travel eSIM for data alongside, and you’ll never be locked out.

Ask any Brit who’s lived overseas about their worst phone moment and it’s almost never a roaming bill — it’s standing in a foreign flat at 2 a.m. trying to log into online banking while the “approve this in your app” or “we’ve texted a code” screen spins forever. This guide makes sure that never happens to you, bank by bank.

Why this breaks — and the two fixes that solve it

UK banking runs on Strong Customer Authentication (SCA), which mostly means one of two things: an in-app push approval you tap to confirm a login or payment, or a one-time passcode sent by SMS to your registered UK mobile. App approval is the travel-friendly one — it travels over any data connection, so your YonoSIM eSIM handles it without a UK signal. SMS is the fragile one abroad: cancel the line and the texts stop; keep the line but pay no roaming and the texts still won’t arrive — unless you turn on Wi-Fi Calling, which makes your UK number receive texts and calls over Wi-Fi, treated as domestic by your network.

So the foundation is the same dual-SIM setup from our UK guide to keeping your number abroad: UK line on Wi-Fi Calling for voice, SMS and 2FA fallback; travel eSIM for data; roaming off on the home line. One note worth flagging — since Brexit, many UK networks have reintroduced EU roaming charges, so don’t rely on “free EU roaming” to receive a code; check your network’s current terms.

Bank by bank — what to set up before you go

The pattern is identical across the big banks and app-only challengers, but each leans on its own 2FA method. Set these up while you’re still in the UK, on Wi-Fi, so you can confirm they work. Verify exact steps on each bank’s official security page, as methods change.

Barclays

Barclays uses in-app confirmation through the Barclays app, plus a physical PINsentry/card-reader option and SMS codes in some flows. The app approval is your best abroad bet because it runs over data — confirm the app is set up and your registered mobile is current before you leave.

HSBC

HSBC relies heavily on its Digital Secure Key inside the HSBC app to generate codes and approve logins on the device itself — no signal needed. Activate the Digital Secure Key while in the UK, and keep SMS to your UK number as a backup via Wi-Fi Calling.

Lloyds & Halifax

Lloyds and Halifax (same banking group) use app-based approvals and SMS one-time codes. Prefer the in-app method abroad since it works over your eSIM data; confirm your mobile number on file so any fallback text still reaches you over Wi-Fi Calling.

NatWest

NatWest offers approve-it-in-the-app sign-in alongside card-reader and SMS options. Set the app as your primary approval method and check your registered number, so an SMS fallback can still arrive on Wi-Fi if needed.

Monzo & Starling

The app-only banks are the most travel-proof of all: Monzo and Starling authenticate inside their own apps over data, so logins and payments approve wherever you have a connection — your eSIM is plenty. Just make sure you’re signed in on your device before you fly and have your recovery details saved.

Revolut

Revolut confirms actions through in-app approvals and biometrics over data, which works smoothly abroad. As with any app-based account, keep your sign-in details and any backup method recorded somewhere safe in case you change or lose your phone.

Government & everyday services: HMRC, One Login & the NHS app

It’s not just banks. HMRC and the Government Gateway typically text an access code to your registered UK mobile or use an authenticator app — set the authenticator option where offered, and keep Wi-Fi Calling on so the SMS still arrives. GOV.UK One Login and the NHS app follow the same idea: app or SMS verification tied to your UK number. Test each one on Wi-Fi-only before departure if you expect to file taxes, access records or prove your identity from abroad.

The bulletproof upgrade: app approval & authenticator apps

SMS-over-Wi-Fi-Calling works, but it still depends on having Wi-Fi the moment a code is sent. The most resilient setup is to move every account that allows it to in-app push approval or an authenticator app. These confirm or generate codes on the device itself over data — no UK signal, no SMS required. You can approve a login on a mountain with one bar of foreign data as long as you have your phone.

Do it before you fly, on Wi-Fi, so you can recover if setup goes sideways.
Save backup codes somewhere offline (a password manager) in case you lose the device.
Keep SMS as a secondary method on your UK number — belt and braces.

Before-you-fly banking checklist

Confirm the registered mobile number on every bank, HMRC, One Login and NHS account is your UK number.
Set up and sign into each bank’s app so in-app approval works over data abroad.
Turn on Wi-Fi Calling for your UK line and test it on Wi-Fi-only (Airplane Mode + Wi-Fi, request a code).
Activate authenticator / Digital Secure Key options wherever your bank offers them; keep SMS as backup.
Save authenticator and account-recovery backup codes offline.
Don’t cancel the UK line — downgrade to the cheapest plan that keeps the number.
Install a travel eSIM for data; roaming off on the UK line, on for the eSIM.

FAQ

How do I receive my UK bank’s verification while abroad?

Most UK banks now use app-based Strong Customer Authentication — an in-app push approval that works over any data connection (your travel eSIM is fine), with no SMS needed. For banks or government services that still text a one-time code, keep your UK number active and turn on Wi-Fi Calling so the SMS arrives over Wi-Fi, treated as domestic by your network. Set both up before you fly.

Is app-based approval better than SMS codes for travel?

Yes. App-based push approval and authenticator codes are generated or confirmed on the device itself over data, so they don’t depend on a UK SMS reaching you. That makes them the most travel-proof option. Keep SMS to your UK number as a backup via Wi-Fi Calling in case you lose the app or the device.

Will HMRC and the Government Gateway work when I’m overseas?

Yes, but they often text an access code to your registered UK mobile, or use an authenticator app. Set the authenticator option before you leave where it’s offered, and keep Wi-Fi Calling on for your UK number so any SMS code still arrives. The same applies to GOV.UK One Login and the NHS app.

What happens if I cancel my UK SIM to save money abroad?

You risk losing access to anything that texts codes to that number — banks, HMRC, the NHS app and more — which can lock you out from abroad and be painful to fix remotely. Instead of cancelling, downgrade to the cheapest plan that keeps the number, leave Wi-Fi Calling on, move accounts to app-based 2FA, and use a travel eSIM for data.

Bottom line

Your UK number is still a key to your accounts, but app-based approval is what makes you bulletproof abroad. Move every bank and service you can to in-app approval or an authenticator, keep the UK line alive on the cheapest plan with Wi-Fi Calling for any SMS fallback, and let a travel eSIM handle data. See the full UK guide to keeping your number abroad, then pick your data plan by destination — popular ones include Spain, France, Italy, Portugal, the wider Europe guide, and the USA.