Skip to content
Scam checker

Is this paybill legit?

Got a paybill number that feels off? Paste it below. We check it against our verified directory and run scam-pattern detection.

We check it against our directory of verified Kenyan paybills and run it through our scam-pattern detector. We do not store what you type.

How the scam checker works

The checker runs three layers of validation:

  1. Format check. Real Kenyan M-PESA paybills are 4-7 digits. Numbers shorter, longer, or non-numeric are not valid paybills.
  2. Database match. We check the number against our directory of verified Kenyan paybills. A match returns the merchant name, sector, and a link to full details.
  3. Pattern detection. Some scam patterns are structural, paybills starting with 0, all-same-digit numbers (other than 222222 for government services), and other heuristics that map to common attack patterns.

If the checker says "unknown"

Kenya has over 100,000 active M-PESA paybills. Our directory covers the most-searched 282+. An "unknown" result doesn't mean the paybill is fake, it means we can't confirm it from our data. Before you send money:

  • Visit the merchant's official website (.co.ke, .go.ke, .org domain) and find their published paybill
  • If physical, look for the paybill on in-branch posters
  • Call the merchant's customer service line to confirm
  • Be especially cautious of paybills shared via WhatsApp or unsolicited SMS. These are common vectors for paybill spoofing

Common Kenyan paybill scams

The four scam patterns that catch the most Kenyans:

  1. Phone number disguised as paybill. Number starts with 0 (e.g., 0712345678). Sent to victim as a "new paybill". Victim sends money via M-PESA Send Money (which works for any phone), funds go straight to the scammer's wallet.
  2. Look-alike paybill. KCB is 522522. Swap or repeat one digit and you get a number that is visually near-identical and belongs to somebody else entirely, which a hurried reader will not notice. The name that comes back on the confirmation screen is what catches it, every time.
  3. WhatsApp "updated" paybill. Victim receives a WhatsApp message claiming the official paybill has changed and to use a new number. The new number routes to the scammer.
  4. SMS impersonation. SMS appears to come from a brand (KPLC, Safaricom, KRA) telling the victim to pay a "new paybill" for an outstanding bill or fine. The number is the scammer's.

Read our full guide on paybill scams in Kenya, and how to spot them for more detail and additional patterns.

If you've already sent money to a scam paybill

Act fast. Call Safaricom customer care on 100 (prepay) or 200 (postpay) with the M-PESA code and ask for a reversal; the 456 SMS route covers person-to-person sends only. See our how to reverse an M-PESA transaction guide. Ask Safaricom to flag the recipient's account too, and report to the police DCI Cyber Crime Unit.