M-Pesa Scams
M-Pesa scams — SIM swap fraud, fake promotions, and overdraft exploitation.
Last reviewed: 1 June 2026
M-Pesa's mobile-money infrastructure is the financial backbone for millions of people across Kenya, Tanzania, and other markets. Its ubiquity makes it a target for SIM-swap attacks, fake promotional messages, and social-engineering scams that exploit both agents and users.
This guide covers the fraud types most commonly reported on M-Pesa, the warning signs, and the protective settings that reduce your exposure.
Common scams using M-Pesa
SIM-swap account takeover
Scammers convince a mobile operator to transfer a victim's number to a new SIM, then access M-Pesa and drain the account.
Fake promotion messages
SMS messages impersonating Safaricom or M-Pesa claim the recipient has won a prize that requires a small fee or PIN to claim.
Wrong-number refund scam
A scammer sends money 'by mistake' and calls urgently asking for it back — the original transfer turns out to be fraudulent and is later reversed.
Agent impersonation
Fraudsters pose as M-Pesa agents to assist with transactions, harvesting PINs or redirecting funds to their own accounts.
Common red flags
- SMS claiming you have won an M-Pesa prize and must pay a fee
- Calls from people who 'accidentally' sent you money and want it returned immediately
- Your SIM card suddenly showing no network signal (potential SIM swap)
- Any request to share your M-Pesa PIN — no legitimate agent or Safaricom representative needs it
- Requests to reverse a transaction to an account you do not recognise
How to protect yourself
- Never share your M-Pesa PIN with anyone, including people claiming to be agents
- Register a SIM-lock PIN with your mobile operator to prevent unauthorised SIM swaps
- Confirm receipt of any transfer in your M-Pesa messages before returning any portion
- Report suspicious promotional messages to Safaricom by forwarding to 333
- Use M-Pesa's transaction limit and notification settings to alert you to unusual activity
How to report it
- Call Safaricom customer service on 100 or 0722 000 100 to report fraud immediately
- Report SIM-swap attacks to your mobile operator and police simultaneously
- Report to your national communications authority if operator negligence contributed to the fraud
Frequently asked questions
What should I do if my M-Pesa account has been accessed without my permission?
Call Safaricom on 100 immediately to freeze the account. Report to the police and your local Safaricom service centre with your national ID. Act within hours — the faster you report, the higher the chance any remaining funds can be protected.