Healthcare Fraud Prevention
Kenya's Social Health Authority Rolls Out Mandatory Child Biometrics to Combat Billions in Healthcare Fraud
Key Points
Before biometric capture, the child must be registered as a dependant on the SHA portal; you cannot enroll an unregistered child. The process requires logging in with the National ID, verifying the child's birth certificate number in the Dependants tab, and if missing, uploading the birth certificate and waiting about 48 hours for verification.
The Digital Health Agency has deployed 8,067 high-resolution biometric scanners nationwide across public and contracted private facilities (Level 4–6 hospitals) to enable real-time authentication and link minors to their principal beneficiaries.
The rollout is underpinned by the Data Protection Act 2019, with the broader legal framework anchored in the Social Health Insurance Act 2023 and its 2024 Regulations to govern privacy and beneficiary management.
Audits uncovered about 11 billion Kenyan shillings in losses to phantom claims and fraud between late 2024 and April 2025, prompting the biometric verification push.
When fingerprint capture isn’t possible or prints are unreadable, facilities can verify using the principal contributor's identification number and a secure OTP sent to the registered mobile device.
Kenya's Social Health Authority has made biometric fingerprint checks mandatory for all registered child dependents aged 7 to 17 years, according to People Daily. The move targets fraud that cost the system roughly 11 billion Kenyan shillings in phantom claims between late 2024 and April 2025.
Under the new rules, a child's fingerprint is scanned at the point of care and matched against a central SHA database before any service is provided. Nairobi Leo reports that the Digital Health Agency has already deployed 8,067 high-resolution biometric scanners across public and private contracted hospitals nationwide.
Billions Lost to Ghost Patients Forced SHA's Hand
Audits revealed that fraudsters were billing SHA for patients who never existed or were not the rightful beneficiaries. The losses reached about 11 billion Kenyan shillings, according to Streamline Feed. SHA described the biometric rollout as a direct response to those findings.
The scheme targeted child dependents because they are harder to verify at the point of care. By requiring a fingerprint match before treatment begins, SHA closes the gap that allowed impersonation and false billing to thrive across its contracted facilities.
8,000 Scanners Deployed From Level 4 to Level 6 Hospitals
The Digital Health Agency placed 8,067 biometric scanners at Level 4, Level 5, and Level 6 facilities, covering major public hospitals and contracted private ones. The scanners work in real time, linking a child's fingerprint to their principal beneficiary's account the moment they arrive for care, People Daily reports.
When a fingerprint cannot be read — due to technical faults or unclear prints — facilities fall back to a two-step check. Staff use the principal contributor's national ID number plus a one-time password sent to the registered mobile phone, according to Streamline Feed.
How Parents Must Register a Child Before the First Scan
A child must be registered as a dependent on the SHA portal before any biometric capture can happen. Parents log in with their national ID, go to the Dependants tab, and confirm the child's birth certificate number. If the number is missing, they upload the birth certificate and wait about 48 hours for verification, according to Streamline Feed.
Parental consent is required throughout the process. SHA stresses that the system will not enroll an unregistered child under any circumstances, making the portal registration step non-negotiable before a hospital visit.
Data Protection Law Anchors the Biometric Framework
SHA frames the entire rollout under Kenya's Data Protection Act of 2019. The broader legal backbone comes from the Social Health Insurance Act of 2023 and its 2024 Regulations, which set the rules for beneficiary management and privacy, People Daily notes.
The authority says all biometric data is stored and processed in line with those laws. The goal is to protect both the child's privacy and the integrity of public healthcare funds — ensuring that services reach the right people and no one else, according to Nairobi Leo.
Sentiment
Mostly NegativePublishers
12
Articles
4
Reach
16
