The Social Health Authority (SHA) Biometric Health Identification (BHI) system is a government-deployed AI-enabled biometric verification system used to authenticate members of Kenya's Social Health Authority at health facilities prior to authorising medical services and processing insurance claims. The system was officially launched on 4 August 2025 by Health Cabinet Secretary Hon. Aden Duale at Kenyatta University Teaching, Research and Referral Hospital (KUTRRH) in Nairobi, replacing the previous One-Time Password (OTP) verification method that had proven vulnerable to fraud and operational shortcomings (Ministry of Health, 2025, Biometric Health Identification launch press release; Willow Health Media, 2025).
The BHI system uses fingerprint-based biometric identification to verify patient identity at the point of care. When a patient presents at a SHA-accredited health facility, their fingerprint is captured and matched against records held in government databases. The eCitizen Health ID platform, which underpins the biometric eKYC (electronic Know Your Customer) process, performs biometric capture with liveness checks and interacts with the National Registration Bureau (NRB) for matching against the national biometrics database (eCitizen, 2025). This automated biometric matching process constitutes the AI-enabled component of the system, using algorithmic comparison of biometric templates (fingerprint and, in the eKYC context, facial biometrics) to confirm identity before healthcare services are authorised.
The system operates under Regulation 38 of the Social Health Insurance Regulations, 2024, and is implemented as part of a broader digital health transformation strategy anchored in the Social Health Insurance Act (2023), the Primary Health Care Act, the Digital Health Act (2023), and the Data Protection Act (2019) (Kenya Law, 2023; Willow Health Media, 2025). The Social Health Authority was established to replace the defunct National Health Insurance Fund (NHIF) and operates as Kenya's mandatory social health insurance scheme, with over 25 million Kenyans registered by August 2025 and nearly 10,000 health facilities contracted nationwide, including public, private, and faith-based institutions (Ministry of Health, 2025, registration milestone; Willow Health Media, 2025).
The biometric verification system was introduced specifically to address widespread fraud that had plagued both the predecessor NHIF and the early SHA operations using OTP-based verification. A month-long forensic audit by SHA's digital health system uncovered multiple fraudulent practices including upcoding (claiming for more expensive procedures than performed), falsification of medical records to inflate claims, conversion of outpatient visits to inpatient care for billing purposes, multiple billing, and ghost patients created through collusion between facilities (Ministry of Health, 2025, 40 facilities suspended). The Ministry of Health suspended 40 health facilities across Kenya and withdrew SHA platform access rights from eight doctors and four clinical officers linked to the fraud, forwarding their names to the Directorate of Criminal Investigations for prosecution (Ministry of Health, 2025, 40 facilities suspended). Health Cabinet Secretary Duale described the fraudulent practices as a 'grave threat' to the sustainability of Kenya's universal health coverage agenda.
The BHI deployment is accompanied by several complementary digital tools. The Practise360 mobile application is a geo-tagged, geo-fenced tool that restricts pre-authorisation codes to doctors physically present within their assigned facilities, preventing the sharing of authorisation codes that had facilitated previous fraud. A National Product Catalogue ensures only approved, quality-assured medicines reach patients. A Health Information Exchange (HIE) enables real-time secure data exchange between facilities. Additionally, 24 counties are transitioning to Hospital Management Information Systems (HMIS) for real-time patient tracking, with full digitalisation of all public hospitals planned by November 2025 (Ministry of Health, 2025, BHI launch; Willow Health Media, 2025).
Biometric registration became operational at all Level 4, 5, and 6 public health facilities (sub-county hospitals, county referral hospitals, and national hospitals), with KUTRRH alone deploying 29 biometric devices at launch and reporting that 99 percent of walk-in patients were already registered under SHA (Ministry of Health, 2025, BHI launch). Expansion to Level 2 and 3 facilities is planned. However, the system experienced significant technical difficulties shortly after launch, with hospitals countrywide receiving a directive to revert to OTP verification after a nationwide failure of the biometric system in late August 2025, indicating operational fragility in the early deployment phase (Daily Nation, 2025).
The anti-fraud strategy extends beyond biometric verification. In August 2025, the Ministry of Health convened a bilateral meeting with Chief Executive Officers of medical insurance companies to establish a Joint Anti-Fraud Action, agreeing on measures including biometric verification, joint audits, and a shared database of fraudulent providers (Ministry of Health, 2025, joint anti-fraud action). The meeting also agreed on complementary coverage arrangements, shared claims and data platforms linked to SHA's centralised claims system for real-time verification, and aligned empanelment standards across public and private insurers.
The system raises important accessibility concerns for vulnerable populations. An estimated 2.2 million Kenyan citizens with disabilities may face difficulties providing fingerprints due to amputation or medical conditions, and visually impaired users may struggle to navigate digital platforms. The system also assumes a level of technological literacy that may be lacking in rural areas (Willow Health Media, 2025). Furthermore, a previous iteration of the biometric system was abandoned after discovery that fraudulent actors had exploited it through stolen biometrics, causing the state to lose billions of shillings (Biometric Update, 2025).
As of August 2025, SHA had disbursed Ksh 47.5 billion under the Social Health Insurance Fund and an additional Ksh 6.9 billion under the Primary Healthcare Fund, with healthcare providers having served 1.2 million Kenyans and claims processed amounting to Ksh 45 billion (Ministry of Health, 2025, registration milestone; Willow Health Media, 2025). The implementing agencies are the Ministry of Health and the Social Health Authority, with the Office of the Data Protection Commissioner providing regulatory oversight for data protection compliance under the Data Protection Act (2019) and the Data Protection (General) Regulations (2021).