Health Insurance Pre-Authorisation Codes โ what they are, how to get one & avoid claim pitfalls
What is a pre-authorisation code?
A pre-authorisation code (also called an authorisation number, pre-auth code or reference number) is the confirmation from your health insurer that they will fund a specific episode of private medical care. Think of it as a green light โ issued before you attend, confirmed in writing, and used by the hospital and consultant to invoice your insurer directly.
Without a pre-authorisation code, two things can happen: the hospital may ask you to pay a deposit or the full amount upfront (and you reclaim later โ which isn’t always guaranteed), or your insurer may simply refuse to pay when the claim arrives. Neither is a position you want to be in while you’re unwell.
What a pre-auth code confirms
- Who: Your policy details, the named consultant, and the specific hospital or clinic
- What: The procedure or diagnostic scan, often referenced by a CCSD code
- When: The date or episode of care being authorised
- How much: Any excess you need to pay, benefit limits remaining, and whether shortfalls are expected
When you need pre-authorisation โ and when you don’t
Always get pre-authorisation for:
- MRI scans, CT scans, PET-CT scans and ultrasound
- Specialist consultant consultations (new episodes)
- Endoscopy, gastroscopy and colonoscopy
- Echocardiogram and cardiac investigations
- Day-case and inpatient surgery of any kind
- Physiotherapy (on most plans โ check your policy)
- Mental health treatment beyond initial triage
You may not need pre-authorisation for:
- Bupa Direct Access: MSK and mental health pathways allow you to start care without a GP referral and without a separate pre-auth call in some cases
- AXA guided care: Some pathways issue authorisation as part of the referral process
- Vitality pathways: Virtual GP and app-based routes sometimes combine consultation and authorisation
- Self-pay treatment: If you’re paying privately without insurance, no code is needed
How to get a pre-authorisation code โ exact steps
| What your insurer will ask | Where to find it |
|---|---|
| Policy/membership number | Digital portal, app or policy schedule |
| Full name & date of birth | Your personal details (or dependant’s) |
| Consultant name & GMC number | On your referral letter or hospital booking team |
| Hospital name and site | Hospital booking letter or website |
| Diagnosis or suspected condition | GP or consultant referral letter |
| CCSD procedure code | Consultant’s secretary or pre-assessment team |
| Proposed treatment date | Clinic or theatre booking team |
Pre-authorisation by insurer โ what actually happens
Every UK insurer handles pre-authorisation slightly differently. Here’s what to expect from each major provider in 2026:
CCSD & OPCS codes โ why they matter and where to get them
CCSD codes (Clinical Coding and Schedule Development) are the standard procedure codes used across UK private healthcare to describe treatments. They allow your insurer to identify exactly what procedure is planned, apply the correct benefit category, and issue authorisation for the right amount.
Common CCSD code examples
- MRI scan (head): W850
- MRI scan (spine): W851/W852
- Ultrasound (diagnostic): U031โU090 range depending on area
- CT scan: X300โX399 range depending on area
- Knee arthroscopy: W851 (varies โ always confirm)
OPCS and ICD-10 codes
Some insurers also reference OPCS-4 codes (used by NHS and some private coding) and ICD-10 diagnostic codes. These are more common in complex claims and surgical pre-authorisations. Your consultant or hospital team will provide these if needed โ you don’t need to source them yourself.
Fee schedules and shortfalls
Each insurer maintains a fee schedule โ a list of maximum amounts they’ll pay for each CCSD code. If your consultant charges above this limit, the difference is a shortfall that you pay personally. To avoid this:
- Use fee-assured or fee-approved consultants (recognised by your insurer)
- Ask the consultant explicitly: “Do you charge within [insurer’s] fee schedule?”
- For London hospitals, check whether a London surcharge applies to your hospital tier
Top reasons pre-authorisation is refused โ and how to fix them
1. No referral or incomplete referral notes
Your insurer needs to see a GP or consultant referral letter stating your symptoms, suspected diagnosis, and the requested test or treatment. A referral that simply says “please see” without clinical detail will often be rejected. Request a detailed letter from your GP and provide it when you call.
2. Using a non-recognised consultant or hospital
Consultants and hospitals must be on your insurer’s recognised list. If your chosen consultant isn’t fee-approved, expect a shortfall โ or outright refusal if they’re not recognised at all. Check before booking, not after.
3. Benefit not included in your plan
Many claims are refused because the treatment isn’t covered under your specific plan level. Common examples: no outpatient diagnostics cover, physiotherapy not included, mental health pathways not activated, or outpatient limit already exhausted. Review your policy schedule before calling.
4. Moratorium or waiting period
New policies often temporarily exclude conditions that were present or investigated before the policy start date. Under moratorium underwriting, these exclusions typically lift after two continuous symptom-free years. See our guide on CPME vs moratorium underwriting.
5. Six-week NHS option triggered
Some policies include a six-week wait condition โ if the NHS can treat you within six weeks, your policy directs you to NHS care rather than funding private treatment. Understand your policy’s rules before assuming private treatment is automatically covered.
Phone script & email template โ use these word for word
Phone script โ call this in
Have your policy number, consultant details, CCSD code and referral to hand before you call. Read this script directly:
Email template โ confirm in writing
Always follow up a phone call with an email to create a paper trail. Send this to your insurer’s pre-authorisation email address (found in your policy documents or app):
Leave a comment