M-PESA scams
How to identify a fake M-PESA message in Kenya
Check an M-PESA payment and sender details in your own account, understand masked numbers, and handle unexpected money or refund requests safely.
Updated 24 September 2026
Quick check
Got a suspicious number, Paybill, Till, email, website, or company name? Search it before sending money.
How to check the M-PESA number that sent you money
Start with the transaction in your own M-PESA account, not a screenshot supplied by the person claiming to have paid. Open your usual provider app or account menu yourself and review the received payment. Compare its amount, time and transaction reference with the payment you expected; check the sender details available there.
A balance alone does not tell you which payment changed it. If the receipt is missing, delayed or does not match, pause before releasing goods or sending a refund and ask Safaricom to check the transaction through an official support channel you find independently. Do not enter your PIN into a link sent by the caller.
A masked sender number is not proof of fraud
Maudhui House reported Safaricom's March 2026 introduction of partially masked sender numbers and consent-based access to fuller details. A missing full number therefore does not by itself mean a payment message is fake. Use Safaricom's official verification or support process if you need clarification, rather than a third-party lookup promising to reveal private details.
ScamBusterKE checks community reports; it cannot identify a hidden sender or confirm that money reached your account. Do not guess the missing digits and search or accuse an unrelated number. A caller claiming to be the sender still needs independent verification.
A screenshot or familiar sender label is not enough
Treat a forwarded message, copied receipt or screenshot as a claim to check against your own account. Its layout, name or confirmation code is not independent proof of payment. There is no need to download an app to edit or recreate M-PESA messages to perform this check.
K24's coverage of Safaricom's July 2026 warning describes messages asking people to send money without verification, share a PIN or follow an account-verification link. End the conversation if you are pressured into those actions. Never disclose a PIN, password or one-time code to someone offering to verify a payment.
Unexpected money: leave it untouched and contact the provider
If money really arrived but you were not expecting it, do not spend or withdraw it. People Daily's September 2026 guidance recommends checking the transaction and contacting the mobile-money provider through official channels to resolve a mistaken payment.
Do not make a separate transfer to an unrelated number supplied by a caller. Ask Safaricom to handle the reversal through its recognised process. A request for help is not proof that the caller owns the payment, and a community report cannot reverse a transaction or guarantee recovery.
Keep control of your phone and report suspicious requests
The DCI advises M-PESA agents and customers not to hand phones or SIM cards to customers during transactions. If someone insists on handling your phone to confirm a payment or fix a problem, stop and seek help through an official channel.
K24 reports Safaricom's instruction to forward suspicious messages to 333. If money has left your account or your credentials may have been exposed, contact Safaricom promptly through its official app, website or shop for account support. Keep the original receipt privately for the provider or investigators.
Use community reports without exposing private evidence
Search the actual phone number, Paybill, Till, company or website involved on ScamBusterKE when you have it. Reports describe what people report; they are not a finding of guilt. No reports does not prove that an identifier is safe, and a matching report does not establish who sent a particular payment.
If you submit a report, describe the request and what happened in neutral terms. Evidence uploads are private supporting material for moderation. Remove PINs, one-time codes, ID numbers, unrelated balances and private contacts; do not put full receipts or personal transaction details in the public description.
Help someone check before they pay
Share this practical guide without making claims about any person or business.