Back to guides

Online safety

Online earning platform in Kenya? Check it before you pay

A practical Kenyan checklist for task, referral and earning platforms: identify the business model, verify licences, test withdrawals and protect your details.

Quick check

Got a suspicious number, Paybill, Till, email, website, or company name? Search it before sending money.

Examples: 0712345678, 123456 (Paybill), Pettmall Shelters

Start with the offer, not the testimonials

An app, website or WhatsApp group may promise money for watching videos, clicking adverts, completing tasks, recruiting friends or making a deposit. Some platforms sell a real service. Others may describe a job, membership or investment in ways that make the source of the promised earnings difficult to understand.

Do not decide from testimonials or a successful first withdrawal alone. Before paying, work out how the platform says money is made, identify the legal business behind it, check any licence the activity requires, and keep control of your M-PESA account and personal details.

This checklist does not declare whether a particular platform is genuine. It helps you collect independent facts and recognise when the risk is too high.

1. Write down exactly what you are being offered

Separate four things that are often mixed together: work, where you perform a defined task for an employer or client; a product or service with a clear use and price; an investment, where you contribute money expecting a financial return; and recruitment rewards, where bringing in new paying members increases what you earn.

Ask for the terms in writing. What task creates value? Who buys the result? How is your payment calculated? Can you participate without depositing money? What happens if you recruit nobody? Who carries the risk if the promised income does not arrive?

If the explanation changes between the advert, WhatsApp group and payment screen, pause. A label such as “job,” “AI,” “e-commerce,” “package” or “digital product” does not by itself explain where the money comes from.

2. Treat pay-to-earn and recruitment promises as high-risk signals

The Central Bank of Kenya warns about schemes that promise unusually high or guaranteed returns, pressure people to act quickly, rely on impressive testimonials, or promise higher returns as more people are recruited. CBK describes pyramid schemes as depending on new recruits' money rather than profits from a genuine product.

Be especially cautious if you must buy a tier, activate an account, recharge a wallet or make a “refundable” deposit before you can work. Also pause if your balance grows mainly when other people pay to join through your link.

A product or task displayed inside the platform does not settle the question. Ask whether real customers outside the recruitment chain pay for it and whether the promised rewards could continue without new member deposits.

3. Check the business and the activity separately

Find the legal name, registration number, physical address, directors or responsible officers, support contacts, and written terms. Compare those details across the website, app store listing, invoices, payment recipient and official records. Do not use a link supplied only in a recruiter's message; locate the official register yourself.

A business-registration record can help confirm that a legal entity with that name exists. It does not prove that every offer using the name is authorised, profitable or safe. It also does not replace an activity-specific licence.

If the platform takes deposits, pools money, sells investments, manages funds, trades forex or promises returns from financial products, identify the relevant Kenyan regulator and check the regulator's own current licensee list. A joint public notice from Kenya's financial regulators says a business permit is not enough for a regulated financial institution; the institution also needs a valid licence from the relevant financial regulator.

For capital-market investments, check the Capital Markets Authority's live licensee register. Match the exact legal name and licence category, not a similar logo or trading name. The CMA source linked below is the investment-bank category, not a universal directory. If you cannot identify the activity or regulator, do not assume that “registered in Kenya” answers the licensing question.

4. Verify every contact and payment route independently

Search the platform name, website domain, phone number, Paybill or Till number, email address and social handle on ScamBusterKE. Treat community reports as warning signals to investigate, not as court findings. No result is not proof of safety; new identifiers may have no history.

Before an M-PESA payment, read the recipient name displayed on your own phone. Compare it with the legal or trading name you independently verified. Stop if a recruiter tells you to ignore a mismatch, pay a personal number, split the payment, or use a new number because the normal account is “full” or “under maintenance.”

Contact the business through a number or email you found independently. Ask it to confirm the offer, payment route, withdrawal rules and identity of the person recruiting you.

5. Read the withdrawal rules before depositing

Look for minimum withdrawal amounts, waiting periods, service charges, inactivity rules, verification requirements and the circumstances in which an account can be frozen. Save the version of the terms you relied on.

Do not count an on-screen balance as money received. A small early withdrawal may show only that the platform paid once. It does not prove where the money came from or that larger withdrawals will remain available.

Never pay an unexpected “tax,” “clearance,” “unlock,” “upgrade” or “verification” fee to release your balance. A demand for a second payment after you request a withdrawal is a new risk signal. Verify any claimed tax or regulatory requirement directly with the named authority rather than through the platform.

6. Protect your identity, phone and accounts

Do not share an M-PESA PIN, bank password, one-time code, full card details or screen-sharing access. CBK advises people not to disclose personal information in response to unsolicited contacts, to use strong unique passwords and multifactor authentication where possible, and to go to an official website rather than a login link in a message.

Be cautious if an app requests access to SMS, notifications, accessibility controls, contacts, photos or device administration when those permissions are not necessary for the stated service. Provide an ID document only after verifying who is collecting it, why it is required, how it will be protected and how long it will be kept.

Do not upload private transaction messages or identity documents to a public review or community report. Keep originals privately and redact copies before sharing them where appropriate.

7. Stop safely if the checks do not add up

Do not deposit more money to “recover” an earlier deposit. Save the original advert, terms, transaction codes, website address, phone numbers and messages privately. Record dates and amounts while they are fresh.

Contact your bank or mobile-money provider immediately if you disclosed credentials or made a payment you now dispute. Change exposed passwords and PINs using a trusted device. If you believe a crime occurred, report the facts to the police or DCI. DCI publishes the toll-free 0800 722 203 hotline as available 24/7 and lists 999, 911 and 112 as police hotlines; reserve emergency numbers for an immediate safety emergency.

You may also file a ScamBusterKE report describing what you personally experienced. Say what was promised, what you were asked to pay, which public identifier was used and what happened next. Do not publish private evidence or state that a person or business is a criminal.

A five-minute check before you pay

1. Explain the business model in one sentence. 2. Confirm the exact legal entity and independently found contacts. 3. Check the relevant regulator's live licensee list if money is invested, pooled or managed. 4. Compare the M-PESA recipient name with the verified business details. 5. Read the withdrawal rules and refuse extra release fees. 6. Search every public identifier on ScamBusterKE. 7. Walk away if income depends mainly on recruiting new paying members.

The safest answer is sometimes “not yet.” A legitimate opportunity should survive independent checks and reasonable questions. Pressure to pay before you can verify the basics is a reason to pause, not a reason to hurry.

Help someone check before they pay

Share this practical guide without making claims about any person or business.

Related checks

Related guides

Useful source links