Using M-Pesa and online banking safely

Mobile money changed Kenya: paying school fees, rent, shops and bills from a phone. The same convenience attracts fraudsters. These habits protect your money.

Know the payment types

Always double-check the name shown before entering your PIN. If it doesn't match the business you expect, cancel.

The PIN is yours alone

• Nobody legitimate ever asks for your M-Pesa PIN or bank PIN: not Safaricom, not the bank, not the police, not the shop.
• Don't use your birth year or 1234.
• Cover the keypad at agents and ATMs.
• Change the PIN if you think someone saw it.

Checking payments you receive

Fraudsters send fake confirmation SMS from ordinary numbers, or show fake screenshots.

• ✅ Genuine M-Pesa messages come from MPESA, not a phone number.
• ✅ Check your actual balance or M-Pesa statement (in the M-PESA app or by dialling *334#) before releasing goods.
• ✅ Business owners: use the M-PESA for Business app or statement to confirm Till payments.

Transaction limits and costs

Charges depend on the amount and type; check the current tariff in the M-PESA app before sending large sums. Paying a Till is free for customers; sending money and withdrawing have charges. Keep this in mind when setting prices.

Online and app banking

• Download banking apps only from the official Play Store/App Store listing (check the publisher name).
• Turn on biometric login and transaction alerts.
• Never log in to banking from a link in an SMS or email: type the address or use the app.
• Use your own phone, not shared cyber café computers, for banking.
• Log out when done, and don't let the browser save banking passwords on shared devices.

Lending apps and M-Pesa loans

• Borrow only from licensed lenders (the Central Bank of Kenya publishes a list of licensed digital credit providers).
• Read the total cost: interest plus fees. A "small" 10% monthly fee is over 120% a year.
• Illegal lenders may shame borrowers by contacting their contacts. Don't give lending apps access to your contacts.
• Borrow for things that earn money, not for gambling.

If something goes wrong

Good money habits online

• Save receipts and M-Pesa codes for important payments (school fees, rent, KRA).
• Use Pay Bill with the correct account number so your payment is matched to you.
• Set up M-Shwari/KCB M-Pesa lock savings or bank standing orders to save automatically.
• Review your statement monthly: you'll spot mistakes and fraud early.

Why mobile money safety matters

Mobile money is how most Kenyans pay rent, school fees, shop bills and salaries, and send money to family. Because so much money moves through phones, criminals constantly invent new tricks: fake confirmation messages, "wrong number" refund requests, SIM swaps, fake customer care calls, fake job and loan offers. Most of these scams don't break technology; they trick people. Knowing the common tricks is the best protection.

Common scams and how to spot them

The pattern in almost every scam: urgency ("act now"), secrecy ("don't tell anyone"), and a request for your PIN, a code, or money first.

How to verify a payment you received

1. Look at the sender: genuine confirmations come from MPESA.
2. Check that your balance actually increased (dial the M-Pesa menu or check the app).
3. Check the transaction code in your M-Pesa statement or app.
4. For businesses, the till/Paybill statement or business portal is the real proof.
5. Never release goods based only on a screenshot or a forwarded message.

Protecting your PIN and phone

• Choose a PIN that isn't your birth year, ID digits, or 1234/0000.
• Cover the keypad when entering your PIN in public.
• Never share your PIN, even with family members, agents or "customer care".
• Lock your phone with a strong screen lock, and lock individual apps if your phone supports it.
• Hide notification content on the lock screen so M-Pesa messages aren't visible to others.
• Change your PIN immediately if you think someone saw it.

Using agents and paying merchants safely

• At an agent: confirm the agent's name and number on your screen before entering your PIN; count cash before leaving.
• When paying a till or Paybill, check the business name shown before confirming.
• For Paybill, use the correct account number (often your ID, admission number or invoice number) so the payment is matched to you.
• Keep the confirmation message until the service is delivered or the receipt issued.

Online banking and card safety

• Download banking apps only from Google Play or the App Store, checking the developer is the real bank.
• Turn on transaction notifications by SMS or email.
• Use virtual cards or set limits for online shopping where your bank offers them.
• Shop online only on sites you trust, and check for https:// and the correct domain.
• Never save card details on shared or public computers.
• Log out of banking on shared devices, and avoid banking on public Wi-Fi.

Digital loans: understanding the true cost

Borrow KSh 5,000 for 30 days with a 10% fee:
   Repay KSh 5,500
   Cost: KSh 500 for one month
   If borrowed every month: 12 × 10% = 120% of the amount per year (before compounding)

• Late repayment can be reported to credit reference bureaus (CRBs) and affect future loans from banks.
• Borrowing from one app to repay another creates a debt trap.
• Check that a lender is licensed by the Central Bank of Kenya before borrowing.

Helping vulnerable people

Older relatives and people new to smartphones are frequent scam targets. Help them by:

• Explaining the "never share your PIN" rule and the most common scams.
• Setting up a strong PIN and screen lock.
• Agreeing that they'll call you before sending money to anyone who calls them unexpectedly.
• Saving official customer care numbers in their phone.

Business owners: extra protection

• Use a separate till or Paybill for business and personal money.
• Check payments in the business statement, not customer screenshots.
• Limit who knows the business PIN; use operator accounts with limited permissions where available.
• Reconcile payments daily against sales records.

Practice

1. List five warning signs that a message or call is a scam.
2. Practise checking your M-Pesa statement and find the last three transaction codes.
3. Calculate the cost of borrowing KSh 2,000 at 7.5% for one month, and over 6 months if repeated.
4. Explain the "wrong number, please send back my money" scam to a family member.
5. Save the official customer care numbers for your network and bank.