diff --git a/app/controllers/submit_form_controller.rb b/app/controllers/submit_form_controller.rb
index a9e2f88c..5a6a0ae5 100644
--- a/app/controllers/submit_form_controller.rb
+++ b/app/controllers/submit_form_controller.rb
@@ -16,8 +16,8 @@ class SubmitFormController < ApplicationController
   def show
     submission = @submitter.submission
 
-    return redirect_to submit_form_completed_path(@submitter.slug) if @submitter.completed_at?
     return render :email_2fa unless Submitters::AuthorizedForForm.pass_email_2fa?(@submitter, request)
+    return redirect_to submit_form_completed_path(@submitter.slug) if @submitter.completed_at?
 
     @form_configs = Submitters::FormConfigs.call(@submitter, CONFIG_KEYS)