Very sick indeed

August 2012 Access Control & Identity Management, Healthcare (Industry)

Back in 2009, it was pretty astonishing that fraud and wastage within the SA private healthcare sector was reportedly costing R13 billion a year. That huge estimate came from the Board of Healthcare Funders of Southern Africa (BHF), which represents the interests of most medical schemes in South Africa, Namibia, Lesotho, Zimbabwe and Botswana.

And it seems that the problem isn’t on the road to recovery. If anything, it’s getting worse. In July this year, Michelle David, a partner at the international law firm, Eversheds, said that she believed fraud-related losses were now costing medical schemes over R15 billion a year.

In terms of how this affects individual scheme members, David says that figures from the South African Medical Association showed that R150 of a member’s average contribution in 2002 went to combating fraud and covering the losses it causes. By 2010, this figure had risen to an estimated R400.

David says the level of fraud is now completely ludicrous and runs throughout the entire spectrum of medical aid claims. “On one side we have fraud being committed by the service providers. This ranges from medical practices that are overbilling through to pharmacies that are dispensing medicine that patients never asked for. And on the other side, med-aid members are getting cash, groceries and even expensive kitchenware through their medical schemes.”

Secure transaction control

Marius Coetzee, MD of Ideco Biometric Security Solutions, is adamant that levels of fraud within medical schemes can be cut dramatically by using fingerprint technology. “If you want to reinforce security within transactions, you have to be able to confirm the identities of the people involved in those transactions. If you can’t authenticate, you can’t differentiate – you can’t tell one person from another.”

To illustrate this point, Coetzee uses the straightforward example of card-sharing – a really simple fraudulent practice whereby a medical scheme membership card is used by a non-member. “We need to accept the fact that any transaction based on a card is wide-open to identity-based fraud. People share them and we can all use one another’s cards. Medical scheme cards are no exception.”

The ability of fingerprint-based identification to prevent this type of fraud has been proven repeatedly in SA. Thousands of local organisations now use fingerprint scanners instead of cards to securely manage workplace attendance and to accurately record their employees’ working hours for payroll purposes. “Buddy-clocking and the consequent losses caused by payroll fraud has been eliminated at these organisations,” says Coetzee. “People can no longer share their cards and clock-on at work for one another.”

Apply identity control into healthcare

Aside from the role that biometrics can play in preventing buddy-claiming, fingerprint technology has the potential to accelerate and reinforce the security of processes within other areas of the healthcare sector. Although perhaps not as immediately obvious as preventing card-based fraud, biometrics offer the potential to deliver a variety of benefits that flow directly from accurate identification.

Coetzee refers to Ideco’s approach as Applied Identity Control or AIC. “We are looking at ways in which the principles of AIC can enhance a huge variety of business processes,” he says. “The integrity and validity of so many processes and transactions are reliant upon recognising – identifying – the people involved. And this is particularly true of the healthcare sector which is so obviously highly focused on people. There is a very strong and direct link between accurate processes and accurate identification.”

Once we start thinking along these lines, it becomes clearer that, for example, managing patient identity has many implications – such as dispensing and administering medicines through to handling their records. In these instances, Coetzee says that the principles of AIC would require implementing straightforward mechanisms to record all the related transactions and link them directly to the fingerprint-based identities of everyone involved. “We can securely manage many different activities that relate directly to a patient’s identity.”

Haemorrhaging money?

Dr Jonathan Broomberg, CEO of Discovery Health, recently told Business Day that the company spent significantly more than R10m a year to prevent and investigate fraud. Presumably, this expenditure contributes to the company’s ability to recover about R250m a year through being able to prove fraudulent activity.

A 2011 report by KPMG, Medical Schemes Anti-Fraud Survey, found that of the R145 billion claimed for medical treatments between 2007 and 2009, more than R67m was attributable to fraud committed by members, with service provider fraud amounting to nearly R152m. During the three-year period, 11 200 cases of fraud were investigated and the survey was based on responses from eight medical schemes representing 84% of all SA scheme members.

Given all the contrasting figures, there is clearly not a definitive figure concerning the Rand value of medical scheme fraud. But as the old saying goes, the absence of evidence is not evidence of absence. What is perhaps more important than achieving consensus on the cost of fraud – both in terms of direct losses and the indirect losses of attempting to deal with it – is the fact that it is a recurring problem. It just goes on and on, year in, year out.



Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

NEC XON secures mobile provider’s hybrid identities
NEC XON Access Control & Identity Management Information Security Commercial (Industry)
For a leading South African telecommunications operator, identity protection has become a strategic priority as identity-centric attacks proliferate across the industry. The company faced mounting pressure to secure both human and non-human identities across complex hybrid environments.

Read more...
Cloud security in visitor management and access control
SA Technologies Access Control & Identity Management Infrastructure Residential Estate (Industry) Commercial (Industry)
Cloud has become the default platform for modern security operations, from visitor management portals and remote access control to incident logging, reporting, analytics, and integrations. But “in the cloud” does not mean “someone else is securing it for us”.

Read more...
Centurion raises the bar at HomeSec Expo
Centurion Systems News & Events Access Control & Identity Management Residential Estate (Industry) Smart Home Automation Commercial (Industry)
Centurion Systems unveiled its latest product lines at HomeSec Expo 2026, introducing SMART+, a simpler way for installers and end users to manage their Centurion installations - as well as a few new products.

Read more...
What’s in store for PAM and IAM?
Access Control & Identity Management Information Security
Leostream predicts changes in Identity and Access Management (IAM) and Privileged Access Management (PAM) in the coming year, driven by evolving cybersecurity realities, hybridisation, AI, and more.

Read more...
Protecting citizens’ identities: a shared responsibility
Access Control & Identity Management
A blind spot in identity authentication today is still physical identity documents. Identity cards, passports, and driver’s licences, biometric or not, are broken, forged, or misused, fueling global trafficking networks and undermining public trust in institutions.

Read more...
The challenges of cybersecurity in access control
Technews Publishing SMART Security Solutions Access Control & Identity Management Information Security
SMART Security Solutions summarises the key points dealing with modern cyber risks facing access control systems, from Mercury Security’s white paper “Meeting the Challenges of Cybersecurity in Access Control: A Future-Ready Approach.”

Read more...
Access as a Service is inevitable
Technews Publishing SMART Security Solutions ATG Digital Access Control & Identity Management Infrastructure
When it comes to Access Control as a Service (ACaaS), most organisations (roughly 90% internationally) plan to move, or are in the process of moving to the cloud, but the majority of existing infrastructure (about 70%) remains on-premises for now.

Read more...
From surveillance to insight across Africa
neaMetrics TRASSIR - neaMetrics Distribution Access Control & Identity Management Surveillance Products & Solutions
TRASSIR is a global developer of intelligent video management and analytics solutions, delivering AI-driven platforms that enable organisations to monitor, analyse, and respond to events across complex physical environments.

Read more...
Securing your access hardware and software
SMART Security Solutions Technews Publishing RBH Access Technologies Access Control & Identity Management Information Security
Securing access control technology is critical for physical and digital security. Every interaction between readers, controllers, and host systems creates a potential attack point for those with nefarious intent.

Read more...
Access trends for 2026
Technews Publishing SMART Security Solutions RR Electronic Security Solutions Enkulu Technologies IDEMIA neaMetrics Editor's Choice Access Control & Identity Management Infrastructure
The access control and identity management industry has been the cornerstone of organisations of all sizes for decades. SMART Security Solutions asked local integrators and distributors about the primary trends in the access and identity market for 2026.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.