Method and system for authenticating and controlling access to customer data is disclosed. Initially, a mobile agent raises a login request and a customer raises an authentication request through a pre-installed mobile application available on agent device and customer device. The unique identification details of customer device and agent device are stored on the system. The system performs a location match between the customer device and agent device thereafter a session key is generated. The session key is sent in parts to the customer device and mobile devices wherein at the time of authentication of agent device, the system performs a location match, session key match and identification detail match.