How to Protect Yourself from Scams

Before You Send Money

• 1.
  Verify the recipient. Search the phone number, paybill, or till number on ScamBusterKE before transacting. Check if anyone has reported it.
• 2.
  Confirm the name on M-Pesa. Before completing a transaction, M-Pesa shows the recipient's registered name. Make sure it matches who you expect to pay.
• 3.
  Never share your PIN. No legitimate service — not Safaricom, not your bank, not anyone — will ever ask for your M-Pesa PIN, ATM PIN, or OTP codes.
• 4.
  Be wary of urgency. Scammers create fake urgency ("send now or lose the deal"). Legitimate transactions can always wait for proper verification.

M-Pesa Safety Tips

• •Register for M-Pesa statements to track all transactions on your account
• •Never respond to "wrong number" M-Pesa messages asking you to return money — call Safaricom on 100 to verify
• •Lock your SIM card with a PIN to prevent SIM swap attacks (dial *100*100#)
• •Safaricom will never call you asking for your PIN — their official number is 0722 000 000
• •For large transactions, meet in person at an M-Pesa agent or bank
• •Be careful with "Buy Goods" till numbers — verify the business name displayed before confirming

Verifying Businesses

• •Check company registration on the eCitizen portal (ecitizen.go.ke)
• •For investment companies, verify registration with the Capital Markets Authority (cma.or.ke)
• •For recruitment agencies, check registration with the National Employment Authority
• •For land transactions, conduct an official search at the Lands Registry before paying
• •For tenders, verify on the Public Procurement Information Portal (tenders.go.ke)

Online Safety

• •Check that websites use HTTPS (padlock icon in browser) before entering personal information
• •Be suspicious of social media stores with no reviews, no physical address, and only M-Pesa payment
• •Never click on links in unsolicited SMS messages claiming to be from Safaricom, KRA, or banks
• •Use unique passwords for each online account and enable two-factor authentication where possible
• •Reverse-search images from online sellers to check if they're stolen from other sites

If You've Been Scammed