Introduction
Mobile money has made financial transactions easier for millions of Kenyans. From paying bills and sending money to receiving salaries and managing everyday expenses, M-Pesa has become an essential part of personal financial management.
However, the convenience of mobile money also comes with security risks. Fraudsters use tactics such as SIM-swap fraud, phishing messages, fake customer care calls and stolen PINs to gain unauthorized access to M-Pesa accounts.
For civil servants who rely on their monthly salaries to meet household expenses, loan repayments and other financial commitments, losing access to an M-Pesa account can cause significant financial disruption.
If someone accesses your M-Pesa account without permission, acting quickly can help limit further losses. Here are the steps you should take.
1. Contact Safaricom Immediately
The first thing to do when you notice suspicious activity is contact Safaricom through its official customer support channels.
Report the unauthorized access and request assistance in securing your M-Pesa account. You can contact M-Pesa support through 234 or Safaricom customer care on 100 for prepaid customers and 200 for postpaid customers.
If your phone has been stolen or your SIM card compromised, request assistance in securing or suspending the affected line.
Do not wait until additional transactions occur before reporting the incident. Safaricom’s M-Pesa terms require customers to report suspected PIN compromise or unauthorized account access immediately.
2. Change Your M-Pesa PIN
If you can still access your account, change your M-Pesa PIN immediately.
Choose a PIN that is difficult to guess. Avoid using your birth year, identification number, phone number or other easily identifiable information.
Remember:
- Never share your M-Pesa PIN with anyone.
- Do not disclose your OTP or verification codes.
- Avoid using the same PIN across multiple financial accounts.
- Never enter your PIN when responding to an unsolicited payment prompt.
If you cannot access your account, contact Safaricom through verified channels for assistance with securing it.
3. Check Your M-Pesa Transaction History
Review your M-Pesa messages and account statement to identify suspicious transactions.
Look out for:
- Money sent to unfamiliar phone numbers.
- Unrecognised PayBill or Buy Goods transactions.
- Unexpected withdrawals.
- Unfamiliar credit transactions or Fuliza activity.
- Changes to your account that you did not authorise.
Record the transaction IDs, amounts, dates and recipient details. This information will be useful when reporting the incident and following up on your complaint.
Do not delete suspicious messages because they may serve as evidence during an investigation.
4. Report Unauthorised Transactions
After securing your account, formally report the suspicious transactions to Safaricom.
Provide the transaction details and explain which activities you did not authorise. Request a reference number for your complaint and ask whether the affected transactions can be investigated or reversed.
You should also report suspected fraud to the police, particularly where money has been stolen or your identity has been misused.
If the incident involves unauthorized access to your personal information, you may also report suspected data misuse to the Office of the Data Protection Commissioner (ODPC).
It is important to remember that reporting fraud does not guarantee that stolen money will be recovered. However, prompt reporting gives the service provider an opportunity to investigate and take appropriate action.
5. Watch Out for SIM-Swap Fraud
One common method fraudsters use to access mobile money accounts is SIM-swap fraud.
This happens when criminals obtain control of your mobile number through an unauthorized SIM replacement. Once they control your number, they may receive your calls and SMS verification codes, potentially allowing them to access financial accounts.
Warning signs include:
- Your phone suddenly loses network connectivity without an obvious reason.
- You stop receiving calls and SMS messages.
- You receive unexpected SIM replacement notifications.
- You notice transactions you did not initiate.
If you suspect SIM-swap fraud, contact your mobile network provider immediately using another phone or visit an official service centre to secure your number.
6. How Can You Prevent Unauthorised M-Pesa Access?
Protecting your mobile money account requires consistent security habits.
Here are some practical precautions:
- Keep your PIN private: Never disclose it to friends, colleagues, agents or people claiming to be customer care representatives.
- Verify payment prompts: Check the recipient and transaction amount before approving any M-Pesa request.
- Avoid suspicious links: Do not click unsolicited links requesting your M-Pesa details.
- Secure your phone: Use a strong screen lock and avoid leaving your device unattended.
- Beware of fake reversal requests: Never follow instructions from strangers asking you to enter USSD codes or share verification details.
- Use official support channels: Verify customer care contacts before sharing account information.
These simple habits can significantly reduce your exposure to mobile money fraud.
7. Why M-Pesa Security Matters for Civil Servants
For teachers, police officers, county employees and other public-sector workers, M-Pesa is often used to manage monthly salaries, household expenses, school fees and loan repayments.
Unauthorised access can disrupt these financial commitments and expose individuals to additional financial pressure.
Protecting your M-Pesa account is therefore part of protecting your overall financial wellbeing. Being cautious about suspicious messages, verifying financial service providers and monitoring transactions can help you maintain better control over your money.
Frequently Asked Questions
1. What should I do if someone withdraws money from my M-Pesa without permission?
Contact Safaricom immediately through 234 or 100, report the unauthorized transaction, secure your account and request an investigation. Preserve all transaction messages and report suspected theft to the police.
2. Can someone access my M-Pesa account without knowing my PIN?
Yes, depending on the security vulnerability or fraud method involved. For example, SIM-swap fraud, stolen verification codes, compromised devices or social engineering may expose your account to unauthorized access.
3. Can Safaricom reverse money stolen through M-Pesa fraud?
Safaricom can investigate reported transactions and may attempt a reversal where possible. However, recovery is not guaranteed and depends on the circumstances of the transaction and availability of the funds.
4. How do I report an M-Pesa scam in Kenya?
Contact Safaricom through its official customer support channels, including 234 for M-Pesa support. You can also report the incident to the police and preserve relevant transaction details and communication records.
5. How can I protect my M-Pesa account from fraudsters?
Use a strong, private PIN, avoid sharing OTPs, secure your SIM card, verify payment prompts and never follow suspicious instructions from unsolicited callers or messages.
Conclusion
Mobile money offers convenience, but protecting your account requires vigilance. Unauthorised M-Pesa access can happen through stolen credentials, SIM-swap fraud, phishing and other deceptive techniques.
If you notice suspicious activity, act immediately by contacting Safaricom, securing your account, reviewing your transaction history and reporting the incident.
At Hela Pesa, we believe financial wellbeing goes beyond accessing credit. It also means protecting your money, making informed financial decisions and staying aware of digital financial risks.
Your salary is hard-earned. Protecting it starts with protecting your financial information.