M-PESA chargebacks and customer disputes 2026: how to handle

"Customer says they paid, money is not in my till" is the single most common M-PESA merchant dispute. The verification takes 30 seconds and the answer is almost always one of three: customer paid a wrong till (typo), customer forwarded an old confirmation SMS (mistake or fraud), or the payment is genuine but the merchant statement lags (very rare, resolves in minutes). This guide walks the verification and, when needed, the fraud escalation to Safaricom.

M-PESA has reversal, not chargeback

Kenyan merchants sometimes use the word "chargeback" imported from the card world. M-PESA does not work that way. What exists is reversal: within seven days of a Buy Goods or paybill payment, the customer can request reversal by dialling 456 or via the M-PESA App. The merchant has to agree; if they refuse, Safaricom will intervene only in clear customer-error or fraud cases. Past seven days, funds are settled to the merchant bank and reversal is functionally impossible.

Verifying an M-PESA confirmation SMS

A genuine confirmation SMS from Safaricom has these features. Sender: MPESA (not a phone number, not "+254...", not a lookalike). Contents: transaction code (usually 10 characters like TIA1234XYZ), the word "Confirmed", the KES amount, the merchant name, date and time, the customer's new M-PESA balance, and the transaction cost (KES 0 for Buy Goods).

The verification ladder

Read the till number aloud. If the SMS shows a till number other than yours, they paid the wrong till. Route to the reversal guide.
Cross-check the M-PESA transaction reference on Business Portal. Business Portal (m-pesaforbusiness.co.ke) shows every credit within seconds of the customer SMS. Search the reference. Present or absent gives a definitive answer.
Ask the customer to open the M-PESA App and show the record. The App record is much harder to fake than the SMS. If they cannot produce it and the SMS looks suspicious, treat as fraud.
If genuine but not in Business Portal, wait five minutes. On extremely rare occasions the Business Portal updates with a small lag. If still missing at ten minutes, escalate to Safaricom.
Escalate to Safaricom Business Support (0722 002 100) with the transaction reference, customer MSISDN, till shortcode and time. They can trace a transaction that appears in the customer SMS but not in the merchant portal.

Customer error vs staff error vs scam

Case	Signal	Action
Customer typo	SMS shows a different till	Route to reversal (456 or App)
Duplicate	Statement over; two matching credits from same MSISDN	Business Portal reversal of the duplicate
Genuine + statement lag	SMS looks real; not in portal at 0 minutes	Wait 5 to 10 min; then escalate to 0722 002 100
Staff pocketed	Credit on statement, no matching POS sale, goods gone	Internal HR investigation; check CCTV
Forwarded old SMS	Date on SMS is not today, or reference already in portal for another transaction	Refuse the sale; log the MSISDN
Fake SMS scam	Sender is a phone number; missing balance line; aggressive urgency	Refuse the sale; report to Safaricom Fraud (100)

The fraud escalation ladder

When the pattern is clearly fraud (fake SMS, spoofed sender, coordinated group), the merchant has three parallel routes.

Safaricom Fraud Management. Call 100 or email fraudmanagement@safaricom.co.ke with the customer MSISDN, the transaction reference they claimed, the till shortcode, screenshots, and time. Safaricom can block the MSISDN and flag their PIN for compromise.
DCI Cybercrime. If the amount justifies (typically KES 20,000+), file a report at the nearest DCI station or the Cybercrime Unit. Bring the same evidence pack. Reference number in hand strengthens any civil claim.
Local police station OB. An occurrence book (OB) number is useful documentation for insurance, for HR (if staff involvement suspected), and for barring the customer from your premises. File within 24 hours.

Prevention: verification thresholds

The cost of verification is 30 seconds. The cost of a missed verification on a KES 50,000 sale is KES 50,000. Set thresholds by segment.

Retail (below KES 5,000). Rely on the till confirmation SMS to the merchant device; spot-check.
Above KES 5,000. Cashier confirms the credit on the Business Portal on a phone before releasing goods.
Above KES 50,000. Owner or checker confirms; hand-over signed by both parties.
Above KES 250,000 (single-transaction cap). Split payment or move to bank transfer; explain the M-PESA per-transaction limit (Source: Safaricom Consumer Tariffs).

FAQ

A customer insists they paid but nothing is in my till. What do I do?

Stay calm. Ask for the M-PESA confirmation SMS or the M-PESA App transaction record. Read the till number on the SMS aloud back to them. If it does not match yours, they paid a wrong till (typo) and you have no legal or system claim on their money. If it matches yours, verify against your Business Portal in real time. Only escalate to Safaricom on 0722 002 100 once you have the transaction reference in hand.

Are M-PESA transactions truly chargeback-able like a credit card?

No. M-PESA has reversal, not chargeback. A customer can request reversal within seven days via 456 or the M-PESA App, but the merchant must agree (or Safaricom must intervene in a fraud case). Once the seven-day window passes, funds are settled and reversal becomes very hard. This is very different from Visa or Mastercard chargeback, where the issuer can force a reversal months later.

What is a genuine M-PESA confirmation SMS?

Sender is MPESA (not a phone number). Format: transaction code (like TIA1234XYZ), Confirmed. KshXXX,XXX paid to [merchant name] on [date] at [time]. New M-PESA balance is KshXXX,XXX. Transaction cost, Ksh0. Fake screenshots almost always miss the "New M-PESA balance" line or misspell "Confirmed". Verify against your Business Portal in real time before releasing any goods.

What if the customer is trying to scam me?

Common scam patterns: forwarded confirmation SMS from a previous transaction, edited screenshot showing your till number but wrong reference, verbal claim with no documentation, urgency and aggression to bypass verification. Response: verify against Business Portal (or dial *334# on the till number to check balance) before any goods leave. If the fraud is clear, refuse the goods and file at the nearest police station with the customer MSISDN and any messages. Report to Safaricom Fraud Management on 100 or fraudmanagement@safaricom.co.ke.

What if it is my staff who took the payment and pocketed it?

The signal is: the M-PESA statement shows the credit arrived at your till, but your POS shows no matching sale and the goods are gone. That is theft of stock, not an M-PESA failure. Cross-check with CCTV over the till, the reversal log for the day, and the sales log for that shift. Consider it an HR and legal matter, not a Safaricom matter.

How long does Safaricom take to investigate a fraud claim?

For clear-cut fraud (fake SMS, spoofed sender), Safaricom Fraud Management typically responds within 24 to 72 hours if you file with the customer MSISDN, transaction reference and screenshots. For merchant-vs-customer disputes without fraud (a customer paid you in error), the reversal route is faster.

Should I always verify large payments before releasing goods?

Yes, above your risk threshold (KES 5,000 for retail, KES 20,000 for wholesale is a common cut). Verification is two seconds: check the till dashboard on the Business Portal on a phone or tablet, or ask staff who monitor incoming SMS to confirm before you hand over. For anything over KES 50,000, insist on customer-present physical verification.

Verified 1 September 2026. Reversal window and Business Portal flows verified on m-pesaforbusiness.co.ke. Fraud escalation numbers from Safaricom Fraud Management. Per-transaction limits from Safaricom Consumer Tariffs.