Category: Payment Safety

Best Practices for Sending Money Online in Kenya: A Safety Guide

Whether you’re paying for goods, sending money to family, or making a business transaction, how you send money online in Kenya matters. Here’s a comprehensive guide to the safest payment practices.

Understanding Kenya’s Digital Payment Landscape

Kenya is a global leader in mobile money. The main payment channels include:

• M-Pesa — dominant mobile money platform
• Airtel Money — second largest mobile money
• T-Kash (Telkom) — smaller but growing
• Bank transfers (online banking, RTGS, EFT)
• Credit/Debit cards (Visa, Mastercard via bank accounts)
• Digital wallets (Equity EazzyPay, KCB MoBanking, etc.)

Each has different risk profiles and dispute resolution processes.

The Payment Safety Hierarchy for Online Purchases

From most to least safe for online seller transactions:

Most safe: Cash on delivery (you see the product before paying)

Very safe: Bank transfer to named business account with invoice

Safer: Paybill/Till (business M-Pesa with named account verification)

Moderate risk: Personal M-Pesa Send Money (limited reversibility)

Higher risk: Any cryptocurrency payment (essentially irreversible)

Avoid: Any request to pay via gift cards, foreign bank transfers, or unknown digital payment apps

M-Pesa Best Practices for Purchases

• Always confirm the recipient name before confirming payment
• Screenshot every confirmation message immediately
• For amounts over KES 5,000, request an invoice or receipt
• Never share your M-Pesa PIN with anyone for any reason
• The M-Pesa "confirm" screen shows the registered name — read it carefully

Bank Transfer Safety

For high-value purchases (KES 10,000+), request a bank transfer rather than M-Pesa. Banks offer better dispute resolution. When doing a bank transfer:

• Confirm account name matches the seller’s business name
• Request a proforma invoice before payment
• Keep all transaction receipts
• Transfer only to named accounts, never to unnamed accounts

Red Flags in Payment Requests

Be very cautious if a seller:

• Asks for payment in cryptocurrency (Bitcoin, USDT) for regular goods
• Requests payment via Western Union, MoneyGram, or international wire for a Kenyan seller
• Provides an account number that doesn’t have a recognizable business name
• Asks you to pay in installments to "different accounts" (money laundering indicator)
• Requests payment "urgently" before you’ve confirmed product details

How to Document Your Payments

Create a simple habit of documenting every online purchase:

1. Screenshot the product listing at time of purchase
2. Screenshot the payment confirmation
3. Screenshot all communication with the seller
4. Note the expected delivery date

This documentation is essential if you need to file a dispute.

Frequently Asked Questions

Q: Is it safe to use mobile banking apps for paying online sellers in Kenya?
A: Yes, when paying to verified business accounts. The same verification rules apply — confirm you’re paying to a legitimate, named account.

Q: What should I do if I accidentally sent M-Pesa to the wrong person?
A: Call Safaricom immediately on 100. Request a reversal providing the transaction code. Speed is critical — act within the hour if possible.

Q: Can I use credit cards to buy from Kenyan social media sellers?
A: Most informal Kenyan sellers don’t accept card payments. For card-accepting platforms like Jumia, card payments offer additional chargeback protection through your bank.

Verify every seller before paying — use legitcheck.co.ke as your first step.

Fake Paybill numbers are an increasingly sophisticated scam in Kenya. Fraudsters set up Paybill numbers with business names designed to look like legitimate companies. Here’s how to tell the difference.

How M-Pesa Paybill Numbers Work

When you pay via Paybill, you enter a Paybill number and an account number. The registered business name appears on your screen before you confirm payment. Safaricom registers Paybill accounts linked to real business names, but scammers deliberately register names that look official.

Common Paybill Impersonation Tactics

Slight name changes: "Safaricom PLC" vs "Safaric0m PLC" (zero instead of O), or "Jumia Kenya Ltd" vs "Jumia Kenya Lts."

Generic official-sounding names: "Kenya Delivery Services," "National Courier Kenya," or "Verified Sellers KE" — names that sound authoritative but aren’t linked to any real known company.

Matching legitimate brand aesthetics: Some scammers combine a fake Paybill with a fake website or social media page using logos that look similar to real brands.

How to Verify a Paybill Before Paying

Step 1: Enter the Paybill and check the displayed name carefully. Before confirming, read every letter of the business name. Watch for number substitutions (0 for O, 1 for I), missing letters, or unusual additions.

Step 2: Cross-reference the business name. Search the exact business name on eCitizen (ecitizen.go.ke) or Google. A legitimate registered business should have a verifiable online presence matching that exact name.

Step 3: Verify with the seller independently. Before paying, ask the seller to confirm their Paybill number via their social media bio or a screenshot. Cross-reference the number they confirm verbally vs the number on the payment screen.

Step 4: For large transactions, call Safaricom. Call 100 and ask them to confirm who owns a specific Paybill number. For transactions above KES 5,000 this extra step is worth the time.

What Legitimate Business Paybills Look Like

A genuine business Paybill will have the business’s registered name, correctly spelled, as it appears on their business certificate. It will match what’s on their website, social media bio, and physical receipts if they have any.

Red Flags in Paybill Names

• Names with number substitutions or spelling variations
• Generic names like "Online Shop Kenya" with no identifiable business
• Names that are similar but not identical to well-known companies
• Brand new Paybill numbers for sellers claiming to have been operating for years

Frequently Asked Questions

Q: How do I find out who owns a Paybill number?
A: Call Safaricom on 100 and request verification. They can confirm the registered business name for a given Paybill.

Q: If I pay the wrong Paybill, can I get my money back?
A: Report to Safaricom immediately on 100 with your transaction code. Recovery is not guaranteed but early reporting maximizes chances.

Q: Is paying via Paybill safer than sending to a personal number?
A: Yes, generally. Business accounts are more traceable. However, fake Paybills exist, so always verify the business name before confirming.

Verify sellers before you pay — use Legit Check KE at legitcheck.co.ke.

The Reality of M-Pesa Reversals

M-Pesa is Kenya’s dominant payment system, but it was designed for peer-to-peer transfers, not e-commerce buyer protection. This means reversals are limited and often difficult. The best protection is always verifying sellers before you pay.

What Can Be Reversed vs What Cannot

What can potentially be reversed: Send Money transactions to a wrong number (if reported immediately) and transactions involving fraud (with police report and prompt reporting).

What cannot be reversed: Completed transactions where the recipient has already withdrawn, Paybill payments once processed, and transactions older than 30 days.

Step-by-Step: How to Report a Fraudulent M-Pesa Transaction

Step 1: Call Safaricom immediately. Dial 100 (free from Safaricom) or 0722 000 100. Report the fraud and provide the M-Pesa transaction code. Speed is everything.

Step 2: Request the transaction be flagged. Ask Safaricom to flag the recipient account. If funds have not been withdrawn, they may be able to hold them.

Step 3: File a formal police report. Go to your nearest police station and file an OB (Occurrence Book) report. You need this for escalation.

Step 4: Write to Safaricom M-Pesa customer care. Email mpesa@safaricom.co.ke with your full name, phone number, transaction code, amount, date, police OB number, and description of the fraud.

Step 5: Escalate to the Communications Authority. If Safaricom does not resolve your case, file a complaint at ca.go.ke or call 0800 721 093.

Protecting Yourself Before the Transaction

Always verify payment details before sending money. Read our guide on how to identify a genuine M-Pesa Paybill vs a fake and best practices for sending money to online sellers. For M-Pesa account security, see our guide on how to secure your M-Pesa account.

If You Were Scammed by an Online Seller

Beyond M-Pesa, read the complete guide on what to do in the first 24 hours after being scammed and how to recover money lost to online scams in Kenya.

Frequently Asked Questions

Q: Can Safaricom reverse an M-Pesa payment if I was scammed?
A: They will investigate and may reverse funds if reported promptly and the recipient has not withdrawn. There is no guarantee, but reporting is always worth doing.

Q: What is the M-Pesa fraud reporting number?
A: Call 100 from a Safaricom line (free) or 0722 000 100 from any network.

Q: How long do I have to report M-Pesa fraud?
A: Report as immediately as possible. Aim for within 2 hours.

Q: What information do I need to report M-Pesa fraud?
A: Your phone number, recipient number, transaction code, amount, and date and time.

Protect yourself from online seller fraud by verifying sellers first at legitcheck.co.ke.

M-Pesa processes billions of shillings in transactions every day in Kenya. That makes it the biggest target for fraudsters. From SIM swap attacks to fake Safaricom calls, here’s how to protect your mobile money.

The Most Common M-Pesa Fraud Types in Kenya

SIM Swap Fraud

This is one of the most damaging attacks. A fraudster gathers your personal information (national ID number, phone number, date of birth) through social engineering or data breaches. They then visit a Safaricom agent posing as you and request a SIM replacement. Once they have your SIM, they control your M-Pesa.

Signs your SIM has been swapped: your phone suddenly loses network signal, you receive unexpected texts about SIM changes, or you can no longer make calls.

Fake Safaricom Customer Service

You receive a call from someone claiming to be Safaricom support. They tell you there’s a problem with your account, that you’ve won a promotion, or that they need to "verify" your details. They ask for your PIN or a confirmation code. Real Safaricom will never ask for your PIN.

OTP (One-Time Password) Scams

A fraudster initiates a transaction on your account, then calls you claiming the OTP sent to your phone is "needed for verification." Sharing this code gives them access to your account. Never share OTPs with anyone — ever.

The Fake M-Pesa Confirmation Screenshot

A buyer or seller sends you a screenshot of an M-Pesa confirmation. Screenshots can be easily faked. Always verify payments on your own phone by checking your M-Pesa messages — never trust a screenshot alone.

Overpayment Scam

Someone "accidentally" sends you too much money and asks you to refund the extra. The original "payment" was either fake or from a stolen account. You send back the "extra" money and later the original transaction is reversed, leaving you out of pocket.

How to Protect Your M-Pesa Account

Set a strong M-Pesa PIN: Use a PIN that isn’t your birthday, ID number, or any obvious sequence. Change it periodically and never share it with anyone — including family.

Enable SIM PIN lock: Go to your phone settings and enable SIM card PIN. This adds a layer of protection if your phone is stolen.

Register for M-Pesa Lock: Safaricom’s M-Pesa Lock feature allows you to lock your M-Pesa so transactions cannot be made without unlocking it first. Activate via *334#.

Monitor your account regularly: Check your M-Pesa statement regularly via *334# > My Account > Statement. Report unfamiliar transactions immediately.

Be very careful with your national ID details: Fraudsters use your ID number to attempt SIM swaps. Be cautious about who you share these details with.

What to Do If Your M-Pesa Is Compromised

1. Call Safaricom immediately on 100 and report the fraud
2. Visit the nearest Safaricom shop with your original ID for SIM replacement
3. File a report with the police — this creates an official record
4. Contact your bank if any bank-linked services are affected
5. Report the fraudster on Legit Check KE if they were an online seller

Frequently Asked Questions

Q: Can Safaricom reverse a fraudulent M-Pesa transaction?
A: Safaricom can investigate and potentially reverse transactions if reported quickly. There is no guarantee, but fast reporting significantly improves chances.

Q: What is the Safaricom fraud line in Kenya?
A: Call 100 from your Safaricom line or 0722 000 100 from any phone. You can also email them or visit the nearest Safaricom shop.

Q: How do I know if my M-Pesa has been hacked?
A: Unexpected deduction messages, transactions you didn’t initiate, or loss of network signal are major warning signs. Check your M-Pesa statement immediately at *334#.

Stay protected and verify all online sellers at legitcheck.co.ke.