M-Pesa processes billions of shillings in transactions every day in Kenya. That makes it the biggest target for fraudsters. From SIM swap attacks to fake Safaricom calls, here’s how to protect your mobile money.
The Most Common M-Pesa Fraud Types in Kenya
SIM Swap Fraud
This is one of the most damaging attacks. A fraudster gathers your personal information (national ID number, phone number, date of birth) through social engineering or data breaches. They then visit a Safaricom agent posing as you and request a SIM replacement. Once they have your SIM, they control your M-Pesa.
Signs your SIM has been swapped: your phone suddenly loses network signal, you receive unexpected texts about SIM changes, or you can no longer make calls.
Fake Safaricom Customer Service
You receive a call from someone claiming to be Safaricom support. They tell you there’s a problem with your account, that you’ve won a promotion, or that they need to "verify" your details. They ask for your PIN or a confirmation code. Real Safaricom will never ask for your PIN.
OTP (One-Time Password) Scams
A fraudster initiates a transaction on your account, then calls you claiming the OTP sent to your phone is "needed for verification." Sharing this code gives them access to your account. Never share OTPs with anyone — ever.
The Fake M-Pesa Confirmation Screenshot
A buyer or seller sends you a screenshot of an M-Pesa confirmation. Screenshots can be easily faked. Always verify payments on your own phone by checking your M-Pesa messages — never trust a screenshot alone.
Overpayment Scam
Someone "accidentally" sends you too much money and asks you to refund the extra. The original "payment" was either fake or from a stolen account. You send back the "extra" money and later the original transaction is reversed, leaving you out of pocket.
How to Protect Your M-Pesa Account
Set a strong M-Pesa PIN: Use a PIN that isn’t your birthday, ID number, or any obvious sequence. Change it periodically and never share it with anyone — including family.
Enable SIM PIN lock: Go to your phone settings and enable SIM card PIN. This adds a layer of protection if your phone is stolen.
Register for M-Pesa Lock: Safaricom’s M-Pesa Lock feature allows you to lock your M-Pesa so transactions cannot be made without unlocking it first. Activate via *334#.
Monitor your account regularly: Check your M-Pesa statement regularly via *334# > My Account > Statement. Report unfamiliar transactions immediately.
Be very careful with your national ID details: Fraudsters use your ID number to attempt SIM swaps. Be cautious about who you share these details with.
What to Do If Your M-Pesa Is Compromised
- Call Safaricom immediately on 100 and report the fraud
- Visit the nearest Safaricom shop with your original ID for SIM replacement
- File a report with the police — this creates an official record
- Contact your bank if any bank-linked services are affected
- Report the fraudster on Legit Check KE if they were an online seller
Frequently Asked Questions
Q: Can Safaricom reverse a fraudulent M-Pesa transaction?
A: Safaricom can investigate and potentially reverse transactions if reported quickly. There is no guarantee, but fast reporting significantly improves chances.
Q: What is the Safaricom fraud line in Kenya?
A: Call 100 from your Safaricom line or 0722 000 100 from any phone. You can also email them or visit the nearest Safaricom shop.
Q: How do I know if my M-Pesa has been hacked?
A: Unexpected deduction messages, transactions you didn’t initiate, or loss of network signal are major warning signs. Check your M-Pesa statement immediately at *334#.
Stay protected and verify all online sellers at legitcheck.co.ke.
🔍 Shopping online in Kenya?
Always verify your seller first. Legit Check KE has verified reviews from real Kenyan buyers.
Leave a Reply