UK Government Seeks Market Input on Fraud and Contact Validation for One Login

The UK’s Department for Science, Innovation & Technology (DSIT) has issued a request for information (RFI) seeking supplier feedback on two proposed services designed to strengthen the government’s flagship digital identity program, GOV.UK One Login. The initiative aims to streamline and secure access to government services through a unified authentication system, replacing a range of legacy login platforms.

The RFI, published on October 28 under the title “Identity Fraud Check and, Email and Phone Validation” (ref. prj_6102), invites vendors to share technical and pricing information for potential email and phone validation services and identity fraud checks. DSIT says the engagement is intended to help refine requirements and shape a future procurement process rather than to solicit formal bids. Interested parties were asked to request the full engagement pack via commissioning-digital@dsit.gov.uk by October 30, with written responses due by November 7.

According to the notice, the prospective contract would run from June 1, 2026, to June 1, 2028, with a possible one-year extension to 2029 and an estimated total value of £1 million (ex VAT). The work falls under CPV codes for software and information-system services (48600000, 48000000, 72212219). DSIT stresses that all information shared will remain confidential and that participation in the RFI does not affect eligibility for any later tender.

Expanding the One Login Ecosystem

GOV.UK One Login, operated by the Government Digital Service (GDS) under DSIT, offers a single route for citizens to log in and, where required, prove their identity to access central government services. Users can complete verification remotely using recognized identity evidence—such as passports or driver’s licences—or in person through the Post Office. To date, more than three million people have successfully proved their identity through the system, according to the government’s figures.

The latest RFI signals that DSIT and GDS are exploring additional fraud-prevention and data-integrity layers within the One Login framework. Email and phone validation could help verify that contact points used in the authentication process belong to the right individual, while the identity fraud-check service would address impersonation and duplicate-account risks.

The UK’s effort to consolidate authentication and identity proofing under One Login has been a multi-year undertaking. In recent months, Post Office branches across the UK began offering in-person identity verification services for citizens who cannot complete the process digitally, and the government announced plans to expand One Login to additional services. The new market-engagement exercise underscores the government’s ongoing attention to fraud mitigation and user-trust measures as adoption expands across departments.

Sources: Find a Tender Service

—

By the ID Tech Editorial Team