M-Pesa prompt scam: How fraudsters are swindling unsuspecting Safaricom users

Millions of Kenyans rely on M-Pesa for everyday transactions, from sending money to paying bills and buying goods.

However, the platform’s widespread use has also made it a target for fraudsters, who are increasingly exploiting payment prompts to trick unsuspecting customers into sending them money.

Silent scam explained

Unlike scams that begin with phone calls or text messages, the silent M-Pesa prompt scam can happen without any warning. A customer may suddenly receive an M-Pesa payment prompt on their phone asking them to enter their PIN to complete what appears to be a legitimate transaction.

The request could be disguised as a Lipa na M-Pesa payment, an airtime purchase, a subscription renewal or a payment to a merchant. Because the prompt comes through Safaricom’s genuine M-Pesa system, it looks identical to the payment requests customers receive every day.

The scam works because fraudsters only need a person’s mobile number. They initiate a payment request through platforms that support M-Pesa payments, such as online payment gateways or merchant tills. Safaricom then automatically sends the confirmation prompt to the customer’s phone.

Victims caught unaware

Many victims unknowingly approve the transaction because they assume it relates to a payment they had forgotten about or fail to notice that the recipient’s details are unfamiliar. Once the customer enters their M-Pesa PIN, the money is transferred instantly to the fraudster’s account.

The scam exploits routine behaviour, with many users entering their PIN without taking time to verify who they are paying. Since the prompt is genuine, it can easily be mistaken for a transaction the customer intended to make.

Safaricom’s warning

Safaricom has warned customers that their M-Pesa PIN is the final line of defence against fraud and should only be entered after carefully verifying every payment request.

Through its “Jiulize, Hii ni Ukweli?” campaign, the telecommunications company is urging customers to pause before approving any prompt. Users are advised to confirm that they initiated the transaction and check the PayBill number, till number, business name or recipient displayed on the screen.

“Your M-PESA PIN is your final line of defence. Before approving any prompt, take a moment to confirm who you’re paying and why,” Safaricom said.

The company added that if customers receive an unexpected payment request or do not recognise the recipient, they should decline the prompt immediately and report the incident through Safaricom’s official support channels instead of approving the transaction.

You might also like

Money

What happens to your money if your M-Pesa account stays inactive for too long?

Money

Step-by-step guide on what to do when an M-Pesa reversal request is rejected