What is the single best defence against M-PESA scams?

Verify the recipient name on the Hakikisha confirmation prompt before entering your PIN. Roughly 95% of consumer M-PESA scams collapse the moment the victim reads that name.

How do I report M-PESA fraud?

Call Safaricom on 100 from a Safaricom line or 234 from any Kenyan number. Email mpesafraud@safaricom.co.ke with the transaction code, recipient number, amount, and time. File an OB at your nearest police station. Report cyber-enabled scams to the DCI Cyber Crime Unit.

How can I tell if an M-PESA agent is fake?

Real agents give you a system-generated confirmation SMS from M-PESA within seconds of the transaction. If you only get a handwritten receipt, or an SMS that looks like a copy of the M-PESA format but is sent from a phone number rather than the M-PESA short code, walk away.

What is the M-PESA reversal trick?

A scammer sends you money by mistake, then calls in a panic asking you to send it back. If you send from your own wallet, the original send later reverses (because it was funded fraudulently), and you lose what you sent. Never return money by initiating a new send. Ask the sender to raise a reversal via SMS to 456.

What is a paybill lookalike scam?

Scammers register or share a Paybill number that is one digit off from a legitimate business Paybill. The recipient name on the Hakikisha prompt will not match the business you meant to pay, that is the tell.

Guide

The 5 M-PESA Scams to Know in 2026

Q: What are the biggest M-PESA scams in 2026?

The five dominant scams are SIM-swap fraud, fake agent scams, the reversal trick, paybill lookalikes, and Hakikisha name-mismatch tricks. Each abuses a specific weak point in the M-PESA flow.

SIM-swap, fake agents, the reversal trick, paybill lookalikes, and Hakikisha name-mismatch tricks. What they are, red flags, and the single rule that beats them all.

by Arnold Ochieng Reviewed by Michael Mwangi 8 min read Updated 29 August 2026Verified 29 Aug 2026

The 5 dominant M-PESA scams in 2026 are SIM-swap fraud, fake agent scams, the reversal trick, paybill lookalikes, and Hakikisha name-mismatch tricks. The single rule that beats 95% of scams: verify the recipient name on the confirmation prompt before entering your PIN. M-PESA shows you exactly who is about to receive your money. Read it. If the name is missing, wrong, or unfamiliar, cancel. That single habit closes the door on almost every consumer fraud circulating this year.

The 5 scams at a glance

Scam	How it works	Red flag	Defence
SIM-swap	Attacker gets a duplicate SIM in your name, drains M-PESA and bank.	Sudden loss of signal for hours.	Set an M-PESA PIN separate from your unlock PIN, enable SIM PIN, guard ID copies.
Fake agent	Stall claims to deposit or withdraw, no genuine M-PESA SMS follows.	SMS arrives from a phone number, not the M-PESA short code.	Wait for the SMS before leaving. Use official till only.
Reversal trick	Scammer sends you money then begs for a return. Their send later reverses.	Urgent call, unfamiliar sender, story about a mistake.	Never send back by fresh transaction. Tell them to SMS 456 for a reversal.
Paybill lookalike	Fake Paybill one digit off from a real one.	Hakikisha name does not match the business.	Verify Paybills on the business website or paybill.ke.
Hakikisha mismatch	You are pressured to ignore or override the name prompt.	Recipient hurries you: "just enter the PIN."	Never send without reading the name. Cancel if it looks off.

1. SIM-swap fraud

The attacker collects enough of your personal data (name, ID copy, phone number, date of birth) to convince a Safaricom shop, or a corrupt insider, to issue a duplicate SIM for your number. As soon as the new SIM activates, your handset loses signal and the attacker owns your line. They then reset your M-PESA PIN via SMS, drain the wallet, and often push into linked bank apps that use SMS OTP.

Red flags: your phone shows "No SIM" or "Emergency calls only" without you having removed the card, incoming calls fail, mobile data stops. Signal loss at 2am is a classic tell, attackers time the swap for when you are asleep.

Defence:

Set an M-PESA PIN that is different from your phone unlock PIN and different from your bank card PIN.
Enable a SIM PIN in phone settings so a stolen SIM will not activate without it.
Never share a scan or photo of your national ID over WhatsApp or email.
If signal disappears unexpectedly, borrow a phone and call Safaricom on 100 or 234 immediately to freeze the line.
Turn on Safaricom's SIM Swap Notification via *100# where available. It sends a warning SMS to a backup number.

2. Fake agent scams

A pop-up stall or an itinerant "agent" offers to deposit or withdraw cash. They take your money (or ask for your PIN to complete a withdrawal) and hand you a printed receipt or a spoofed SMS from a normal phone number. The real M-PESA network never registered a transaction.

Red flags: no visible till number, receipts written by hand, the confirmation SMS arrives from a 10-digit phone number instead of the M-PESA short code, the agent asks for your PIN, the agent tells you to leave before the SMS arrives.

Defence:

Only transact at agents with visible signage and a till number.
Wait for the M-PESA SMS from the M-PESA short code before you leave the stall.
Never share your PIN. Agents never need it. Withdrawals are authorised from your handset, not theirs.
If in doubt, check the agent's balance-visible screen or move to a Safaricom branded agent.

3. The reversal trick

You receive an unexpected M-PESA credit, often a round number like KES 5,000 or KES 10,000, followed by a panicked phone call. The caller says they sent to the wrong number and begs you to send it back. If you initiate a fresh send from your wallet, the original credit later reverses (because it was funded by a stolen card, a hacked wallet, or a chargeback), leaving you short by the amount you "returned."

Red flags: the sender is a stranger, the story is urgent, they insist you use Send Money rather than raise a reversal.

Defence:

Never return an unexpected credit by fresh transaction. Tell the caller to forward the original SMS to 456 to raise a proper reversal, which will pull the money back through Safaricom.
Report the caller's number to Safaricom on 100 or 234.
If you have already sent the money back, call Safaricom immediately and file an OB at the police station.
Full playbook in the M-PESA reversal guide.

4. Paybill lookalikes

Scammers register Paybill or Buy Goods numbers that differ from a legitimate business by one or two digits. They then advertise the fake number in WhatsApp groups, on cloned Facebook pages, on Google Ads that pretend to be the official brand. Victims who trust the WhatsApp forward send to the wrong Paybill, and the money is withdrawn before anyone notices.

Red flags: the Paybill was received in a chat rather than fetched from the company's website, the Hakikisha name on the confirmation prompt does not match the business, the number is being pushed with urgency ("offer ends today").

Defence:

Search the Paybill on paybill.ke or on the company's official website before you pay.
Read the Hakikisha name every single time.
Do not trust Paybills forwarded in DMs, even from people you know, their contact list may have been compromised.
For repeat billers, save the Paybill in the M-PESA app so autofill locks in the correct number.

5. Hakikisha name-mismatch tricks

Every M-PESA transaction shows the recipient's registered name (or the business name for a Paybill) before you enter your PIN. This is the Hakikisha step. Scammers try to break it in three ways:

They pressure you to type your PIN quickly ("the signal is bad, just go, go") so you skip reading the name.
They set up wallets in names that sound close to a legitimate person or business (e.g. "JAMES KAMAU MWANGI" instead of "JAMES KAMAU MWAI") hoping you skim past the difference.
They lean on cultural politeness, insisting that questioning the name is rude.

Defence: read the name aloud if you have to. Cancel and re-check if anything is off, even a middle-name difference. There is no downside to cancelling, the transaction has not left your wallet.

If you have already been scammed

Call Safaricom on 100 from a Safaricom line or 234 from any Kenyan number. Ask for the fraud team.
Email mpesafraud@safaricom.co.ke with the transaction code, recipient number, amount, date and time, and any messages the scammer sent.
File a report at the nearest police station and collect the OB number. Safaricom will not release recipient KYC without one.
Report cyber-enabled scams to the DCI Cyber Crime Unit at cid.go.ke.
Notify your bank if the M-PESA float was topped up from a bank push, some banks reverse the bank leg within 24 hours.
Preserve every screenshot. Do not delete SMS threads or WhatsApp chats with the scammer, investigators need them.

The single rule that beats 95% of scams

Read the recipient name on the Hakikisha prompt every time, on every send, no matter how small. The prompt exists precisely because Safaricom knows most fraud collapses at that step. Full mechanic in Hakikisha explained.