Add or remove a UK business bank account signatory safely
A business-account signatory is someone authorised under the bank mandate to operate the account. Adding or removing one usually requires formal company authority and updated bank checks, not just an administrator changing a user in online banking.
Check the bank mandate and your company’s own approval rules. Record the board, partner or proprietor decision where required, complete the bank’s signatory process and separately review online-banking roles, payment limits and cards.
Map the legal authority and the bank mandate before changing access
This looks like a simple yes-or-no banking question, but the practical answer depends on timing, account status and the evidence the bank can see. Bank mandates and digital user permissions can overlap but are not always the same thing. Plan around those moving parts rather than the headline alone.
Removing someone from the company does not automatically remove their banking authority, card or online access. The risk is highest when an employee, director or partner leaves under difficult circumstances.
If a finance director leaves on Friday with a £50,000 payment limit, HR offboarding alone is not enough. The business should remove or suspend banking access, cards, tokens and mandate authority according to bank rules before the person’s role ends.
Treat the numbers in this example as a planning tool, not a promise from a bank. Check the bank’s mandate form, required company resolutions and identity checks for the new signatory. If the live tariff, app message or branch instruction differs, the live bank information wins.
Start by identifying who is authorised under the company, partnership, charity or other governing structure and then compare that with the bank’s current mandate. A person can have an internal job title without having banking authority, and the reverse can also happen after roles change. Record who may view, initiate and approve payments, who may sign instructions and which decisions require more than one person. That map prevents a simple staff change from becoming an accidental change in financial control.
Remove physical and digital permissions as one offboarding task
Document internal approval, submit the change, disable old digital access, collect physical cards or security devices, update dual-authorisation rules and test the new user with a low-risk task.
Coordinate the bank change with the person’s final working day; too early can block legitimate payroll work, too late leaves unnecessary authority active. Build in a margin rather than aiming for the last possible minute; banking cut-offs, fraud checks and document reviews rarely become easier when a deadline is already close.
Businesses often remove an online username but forget a physical card or signing mandate, or add a senior employee with broader payment rights than the role actually needs.
If a departing signatory is uncooperative, tell the bank and follow the company’s legal authority rather than sharing passwords or trying to impersonate the person. If the app gives a vague error, stop after one sensible retry and check the account status or contact the bank rather than guessing through multiple transactions.
When someone leaves or changes role, remove the whole access chain. That can include cards, online banking users, app devices, payment tokens, telephone passwords, cheque authority and third-party accounting connections as well as the formal mandate. Do not wait for the next annual review if the person should no longer control money. Confirm the effective time with the bank and test that old credentials no longer work before treating the offboarding as complete.
Set approval limits around the role rather than the individual
Use least privilege: the employee who uploads payments does not necessarily need power to approve unlimited payments as well.
Review signatories at least annually and whenever directors, partners or finance staff change. When the amount or consequence is material, get the answer in writing through secure message or save the relevant tariff page.
Keep a signed record of who authorised the mandate change and the effective date. That protects the business during audit, fraud investigation or a later ownership dispute.
A two-director company might require both directors to approve payments above £10,000 while a bookkeeper can prepare them. If one director leaves, replacing the signatory without rebuilding the approval rule can accidentally turn two-person control into single-person control.
For a new signatory, give only the authority the role needs. A staff member who prepares supplier payments may not need the power to approve them alone. Use dual approval, payment limits or view-only access where the bank supports those controls. Write down the reason for the chosen limit and review it if the person’s responsibilities change. This reduces fraud risk and also makes ordinary mistakes easier to catch before money leaves the account.
Turn this part of the guide into a decision record. Write down the relevant amount, date, status and the evidence you already have, then state the next action in one sentence. That prevents a support conversation from drifting between different versions of the problem and makes it easier to see whether the provider has actually answered the point that matters. This is the section 3 verification step for this specific guide. For add or remove a uk business bank account signatory safely, keep this check with the article evidence so the next review starts from the same record.
Keep a board-level record and test the mandate after the change
Before you finish this task, write down the outgoing person’s mandate rights, cards, online roles, payment limits, effective leaving date and the authority approving the replacement. Do not keep the plan only in your head.
Business offboarding is incomplete until banking access has been removed as carefully as email and payroll access.
Keep the board minute, partnership decision or other internal approval with the bank’s mandate-change confirmation. After the change, run a controlled test: can the correct people log in, can a low-value payment follow the intended approval route, and has the removed person lost access? Record the date and outcome. A completed form is not the end of the process; the practical test is whether the live account now matches the authority structure the business intended.
Use one worked check rather than a general impression. Put the account status, payment amount, deadline or cost on one line and compare it with the provider's stated rule. If the numbers or dates do not match, save the screen or document and ask a specific question. This is faster to resolve than reopening the whole story each time you contact support. This is the section 4 verification step for this specific guide. For add or remove a uk business bank account signatory safely, keep this check with the article evidence so the next review starts from the same record.
Sources and verification
Oliver Grant
I would treat signatory changes as security events, not paperwork. The mandate, cards, online roles and approval limits should all be reviewed together. A business can remove someone from payroll in five minutes and still leave them with banking authority for weeks if those systems are handled separately.
MyBankAnswers uses official provider and UK regulatory sources wherever practical. Information is general and does not constitute financial advice.