Calling GeSA? Starting October 7th, you'll need an SMS code.

From Wednesday, October 7, 2026, GeSY will introduce additional identity verification during calls to the service center. Those requesting information containing personal data will receive a one-time SMS code sent to the phone number stored in the system. The code will be valid for five minutes.

The change does not apply to general questions that do not require access to patient data. However, the Health Insurance Organization, which manages GeSY, appeals to all beneficiaries to check their contact details – especially their mobile phone number.

New verification in GeSY - when will it be needed?

This additional procedure is designed to protect the data of individuals using the Cypriot healthcare system. It will be implemented when answering a caller's question requires access to personal information.

If the conversation concerns only the general principles of GeSY's operation, additional verification will not be necessary. The consultant will still be able to provide information that does not require accessing specific beneficiary data.

This is an important distinction: an SMS code won't be required for every call. Its use depends on the type of information the caller requests.

SMS code and additional consultant questions

The first step will be to send a one-time code, known as OTP, to the mobile number registered with GeSY.

The code must be entered into the telephone system according to the instructions. It will be valid for five minutes. However, entering it correctly will not complete the entire process.

The call center employee will then conduct additional identity checks. They may ask for your ID number and date of birth, among other things.

Only after successful completion of both stages will it be possible to transfer information containing personal data.

An outdated number may make it difficult to resolve the matter

The SMS will be sent to the phone number saved in the system, so the correct contact details are crucial.

If the beneficiary has changed their number and hasn't updated it in GeSY, they may not receive the code needed to confirm their identity. In such a situation, don't assume the consultant will be able to bypass the security check.

The organization encourages you to verify your details before contacting the service center. This is especially important after changing your phone number.

No identity confirmation, just general information

If identification is unsuccessful, the employee will not provide personal information. The caller will only be able to obtain general information.

This means that a conversation can still help you learn how the system works, but it won't provide an answer that requires access to individual data.

The new procedure applies to telephone support for beneficiaries. It is not a reassessment of eligibility for GeSY—this is conducted as part of a separate process.

Data protection during a call

According to the Health Insurance Organization, the change is part of efforts to improve service and strengthen the security of personal data.

Combining the SMS code with additional questions is intended to reduce the risk of information being shared with an unauthorized person. For beneficiaries, the most important thing now is to verify the phone number and prepare for two-step verification.

From Cyprus, the GeSY service centre can be contacted on 17000. For calls from abroad, call +357 22 017000.

Sources: GeSY, Cyprus Mail, Politis.