M-Pesa has become an essential part of everyday life in Kenya. Millions of people use it to send and receive money, pay bills, buy goods and services, purchase airtime and manage other financial transactions.
But as mobile money becomes more popular, scammers continue to develop new ways of tricking users into revealing sensitive information or sending money to fraudulent accounts.
Some scams involve people pretending to be Safaricom representatives. Others use fake M-Pesa reversal claims, SIM-swap attempts, fraudulent promotions or messages designed to create panic.
The good news is that many M-Pesa scams can be avoided by following a few basic security rules.
Here are seven practical ways to protect your M-Pesa account from scammers in Kenya.
1. Never Share Your M-Pesa PIN
Your M-Pesa PIN is one of the most important security credentials protecting your money.
Never give your PIN to another person, even if the person claims to be from Safaricom, a bank, a shop or another legitimate organisation.
Scammers may call and claim that they need your PIN to:
- Fix your M-Pesa account
- Reverse a transaction
- Upgrade your account
- Confirm your identity
- Activate a promotion
- Resolve a technical problem
These requests should immediately raise a red flag.
Safaricom’s published M-Pesa security guidance says customers should keep their PIN secret and should change it if they suspect someone else has seen it.
Remember: No legitimate reason should require you to disclose your M-Pesa PIN to another person.
2. Be Careful With Fake Safaricom Calls and Messages
One of the most common ways scammers operate is by pretending to represent Safaricom.
You might receive a phone call or message claiming that you have won money, your account has a problem, or a transaction needs to be reversed.
The scammer may then ask you to provide personal information, an M-Pesa PIN, an OTP or other security details.
Don’t make decisions simply because the caller knows your name or some information about you.
Instead:
- End suspicious calls.
- Do not disclose your M-Pesa PIN.
- Don’t share OTPs or authentication codes.
- Don’t follow suspicious links.
- Verify unexpected requests through Safaricom’s official customer-service channels.
- Check your actual M-Pesa messages and transaction history rather than relying on what someone tells you.
Safaricom’s published guidance also warns users not to rely on transaction messages shown on another person’s handset.
3. Don’t Fall for Fake M-Pesa Reversal Scams
A reversal scam can happen when someone claims they accidentally sent money to your number and asks you to send it back.
For example, you might receive a message claiming that KSh 5,000 was accidentally sent to your number. The caller then urgently asks you to return the money.
The message may look convincing, but don’t immediately send money back.
First verify the transaction yourself.
Check your actual M-Pesa transaction history and confirm whether the money was genuinely received.
Don’t rely solely on a screenshot or a message shown to you by another person.
Safaricom’s published M-Pesa guidance advises customers to verify reversal requests before reversing money or consenting to a reversal on their behalf.
If you receive a suspicious reversal request, use official Safaricom support channels rather than following instructions from the person who contacted you.
Why this matters
A scammer may try to convince you to send money from your own balance before a legitimate transaction has been verified.
Never allow urgency to replace verification.
4. Protect Yourself From SIM-Swap and Account Takeover Attempts
A SIM swap can become particularly dangerous because your mobile number may be connected to M-Pesa and other accounts.
Scammers may attempt to obtain personal information and use it to impersonate you.
Warning signs can include:
- Your phone suddenly loses network service without an obvious reason.
- You receive unexpected notifications about changes to your mobile account.
- You receive authentication messages you did not request.
- You discover unusual activity involving your mobile number or financial accounts.
If you suddenly lose mobile connectivity and suspect that someone may have taken control of your SIM, treat the situation seriously.
Contact your mobile provider through an official channel and secure your financial accounts as quickly as possible.
Also avoid sharing unnecessary personal information publicly. Details such as your full name, phone number, identification information and other personal data can potentially be useful to fraudsters.
5. Ignore Fake Promotions and Prize Messages
“Congratulations! You have won KSh 100,000.”
Messages like this can be tempting, especially when they appear to come from a familiar company.
But scammers frequently use fake competitions, prizes and promotions to persuade victims to provide personal information or send money.
A fake promotion may ask you to:
- Pay a processing fee.
- Send money to claim a prize.
- Provide your M-Pesa PIN.
- Provide an OTP.
- Click a suspicious link.
- Share your identification details.
- Call an unknown number.
Don’t assume that a promotion is genuine simply because it uses the name or logo of a well-known company.
Verify promotions through the company’s official website, application or verified communication channels before taking action.
Safaricom’s own terms and online services warn against using its brand or services to create the impression that a fraudulent offer is endorsed by Safaricom.
6. Always Check the Recipient Before Sending Money
Not every M-Pesa loss happens because an account was hacked.
Sometimes scammers simply persuade people to send money voluntarily.
Before confirming an M-Pesa transaction, carefully check:
- The recipient’s name.
- The phone number.
- The amount.
- The reason for the payment.
Be especially careful when someone pressures you to send money immediately.
Scammers often create urgency by saying things such as:
“Send it now.”
“Don’t disconnect the call.”
“You will lose the offer if you wait.”
“Your account will be blocked.”
Take a moment to verify the request before completing the transaction.
A few seconds of checking can prevent a costly mistake.
7. Act Quickly If You Suspect Fraud
If you believe someone has accessed your M-Pesa account, obtained your PIN or carried out an unauthorized transaction, don’t wait.
Take action immediately.
Depending on what happened, you should:
- Secure your M-Pesa account.
- Change your PIN if you believe it has been exposed.
- Check your recent transactions.
- Contact Safaricom through an official customer-service channel.
- Report suspicious transactions or attempted fraud.
- Secure other accounts connected to the affected phone number.
- Keep transaction messages and other evidence that may help with an investigation.
Safaricom’s published guidance specifically recommends changing your PIN if you suspect that someone else has seen it.
How to Recognise an M-Pesa Scam
A message or phone call deserves extra caution when it contains several of these warning signs:
- Someone asks for your M-Pesa PIN.
- Someone asks for an OTP or security code.
- You are pressured to act immediately.
- You are told that your account will be blocked unless you act.
- Someone claims you have won a prize you never entered.
- Someone asks you to pay a fee before receiving a prize.
- Someone asks you to return money without allowing you to verify the transaction.
- You receive a suspicious link.
- Someone asks for unnecessary personal information.
When in doubt, stop the transaction and verify the information independently.
What Should You Do If You Have Already Been Scammed?
If you have already shared your PIN, sent money to a scammer or suspect that your SIM or M-Pesa account has been compromised, act immediately.
First, secure the account and change your M-Pesa PIN if it may have been exposed.
Next, review your recent transactions and contact Safaricom through its official customer-support channels to report the incident.
Do not continue communicating with the scammer or follow additional instructions they provide.
If the incident involves significant financial loss or suspected criminal activity, consider making a report to the relevant authorities and keep evidence such as transaction messages, phone numbers, screenshots and timestamps.
Final Thoughts
Protecting your M-Pesa account doesn’t require complicated technology.
The most important habits are simple: keep your PIN secret, verify unexpected requests, don’t trust unverified reversal claims, protect your SIM, and never allow someone to pressure you into sending money.
Scammers often depend on panic, urgency and confusion. Taking a few moments to verify a request can make the difference between keeping your money safe and becoming a victim.
Your M-Pesa PIN is yours alone. Keep it secret.
Quick M-Pesa Safety Checklist
Before completing a suspicious transaction, ask yourself:
☑ Did I initiate this transaction?
☑ Do I know the recipient?
☑ Have I verified the recipient’s details?
☑ Is anyone asking for my PIN or OTP?
☑ Is someone pressuring me to act immediately?
☑ Have I independently verified the claim?
If something doesn’t feel right, stop and verify before sending money.
Disclaimer: This article provides general security information and is not a substitute for official customer support. For account-specific issues, use Safaricom’s official customer-service channels.
