Sent money by M-PESA? What to do next in Kenya

First, slow down and use your own transaction record

Realising that you paid the wrong person or responded to a suspicious request can be frightening. Move quickly, but do not let anyone rush you into a second payment. Start with the transaction record in your own M-PESA account, use Safaricom's official reversal or support channels, secure the account if you exposed a PIN or personal details, and keep a private record of what happened.

These steps cannot guarantee that money will be recovered. They give Safaricom and, where appropriate, investigators the clearest information while reducing the chance of a second loss.

Open the confirmation message or transaction history on your own phone. Write down the transaction code, date, time, amount, recipient number or business number, account reference, and the recipient name shown at confirmation. Do not rely on a screenshot sent by the other party.

Separate three situations before you act: money sent to the wrong number by mistake; money paid for goods or services that are now disputed; and money sent after a deceptive request. A reversal request is not the same as deciding a commercial dispute or proving a crime, so describe the facts accurately when contacting support.

1. Request a reversal immediately

For a person-to-person transfer sent to the wrong recipient, Safaricom's published reversal process says to send the M-PESA transaction code to 456. Safaricom then checks the circumstances with the sender and receiver before taking the necessary action. Safaricom also lists reversal requests through the M-PESA app. You can contact Safaricom through a channel you independently locate on its official website or app.

Act as soon as you notice the problem. Do not edit the confirmation message, and do not send your PIN or one-time code to anyone who calls offering to “complete” the reversal. A reversal request can be reviewed; it is not a promise that funds will be returned.

If the payment went to a Till or Paybill, give support the business number, account reference, transaction code, amount, and time. Explain whether the number itself was entered incorrectly or whether you believe the payment request was misleading. That distinction helps support route the case correctly.

2. Do not send a second payment

A person may claim that you must pay a release fee, tax, verification charge, reversal fee, or “unlock” amount before your original money can be returned. Stop. Verify any instruction inside the official M-PESA app or through a Safaricom contact you found yourself.

Do not dial a code supplied by an unknown caller, share your PIN, approve a prompt you did not initiate, or disclose your balance. If the recipient says they will refund you, confirm the incoming transaction in your own balance and history rather than trusting a forwarded SMS.

3. Secure the account if you shared more than money

Change your M-PESA PIN immediately if another person saw it, you entered it on an unfamiliar page, or you disclosed it during a call. Also change the password on any email or account that reused the same secret. Contact Safaricom promptly if your phone, SIM, PIN, or personal details may have been compromised.

If you installed an app at someone's request, remove its access to SMS, notifications, accessibility controls, contacts, and screen sharing. Use a different trusted device to change important passwords if you think the phone is still being controlled. Contact your bank separately if card or bank-login details were also exposed.

4. Preserve a private record

Keep the original M-PESA confirmation, transaction code, phone numbers, usernames, website address, advert, receipt, and the messages that explain what you were asked to pay for. Note the timeline while it is fresh. Preserve originals; make redacted copies only when you need to share them.

Do not post an unredacted M-PESA message, ID document, bank statement, PIN, OTP, home address, or unrelated private conversation online. A public warning should identify the payment route and reported pattern without exposing private data or declaring an unproven allegation as fact.

5. Report through the channel that fits the incident

Report the transaction to Safaricom first so the provider has the transaction code and can assess a reversal or account-security issue. If you believe deception or another crime occurred, make a report to the police or DCI and take your private record with you. The DCI publishes the toll-free 0800 722 203 hotline and the police hotlines 999, 911, and 112; use emergency numbers only for an immediate safety emergency.

You can also submit a report to ScamBusterKE to help other people recognise the identifier and payment pattern. Describe what you personally experienced: what was offered, what you were asked to pay, which identifier was used, and what happened after payment. Avoid statements that claim a person or business is a criminal. Reports are community accounts, not court findings.

6. Search every identifier before any further contact

Search the phone number, Paybill or Till, business name, website, email address, social handle, and any replacement payment number on ScamBusterKE. A matching community report is a warning signal to review alongside official information. No match does not prove that an offer is safe; a new number or account may have no history yet.

If the other party proposes a new number for a refund, delivery fee, account upgrade, or “final clearance,” do not treat the new identifier as trustworthy just because it differs from the first one. Verify it independently and do not compound the loss.

A short checklist

1. Save the original transaction code and details. 2. Request an official reversal immediately where applicable. 3. Do not pay a fee to recover the first payment. 4. Change your PIN and passwords if they may be exposed. 5. Preserve evidence privately and redact public copies. 6. Report suspected crime through official channels. 7. Search and report identifiers on ScamBusterKE using factual, allegation-safe wording.

Speed matters, but accuracy matters too. Record exactly what happened, use channels you verified yourself, and treat anyone asking for more money or secrets as a new risk—not as part of the recovery process.