M-Pesa Fraud: What to Do, SIM Swap and Reversals

Updated 27 October 2026

M-Pesa fraud in Kenya usually starts with a phone call, SMS or fake reversal instruction — not a broken app. Safaricom says it only calls from 0722 000 000, never asks you to dial mystery USSD codes, and wants suspected SIM-swap or data theft reported on 100 or 200, or by SMS to 333, plus a report to the police. Accidental transfers can use the DIY reversal to 456 within 24 hours. Updated October 2026.

Sponsored

Sources: Safaricom — Common impersonation frauds / SIM swap; Customer advisory on sharing SIM and M-PESA PINs; M-PESA Reversal. Follow the live Safaricom pages if any short code changes.

M-Pesa fraud: what Safaricom says to do first

If you suspect SIM interference or theft of personal details, Safaricom’s customer advisory tells you to:

1. Call 100 or 200, or text 333, for assistance.
2. Report the case to law-enforcement agencies urgently.
3. Protect SIM and M-PESA PINs, date of birth and national ID numbers — Safaricom says it does not ask for personal information on random numbers.
4. End any call that claims to be customer care but is not from 0722 000 000, then dial 100 or 200 yourself.

SIM swap and impersonation red flags

From Safaricom’s impersonation / SIM-swap FAQ:

• There is no such thing as “double registration” — report the number to 333 instead of paying a threat.
• Register your voice as a password where available; never disclose PINs.
• Do not follow instructions from unknown callers or “too good to be true” stories; verify with known contacts before sending money.
• Do not share balances, call records or M-PESA details with inbound callers.
• If your PIN may be known, change it immediately and avoid obvious PINs such as your year of birth.
• Never dial codes such as *33*0000* because a caller claiming to be Safaricom told you to — you could block the line or send money to a fraudster.

Verified Safaricom social accounts listed on that page include the official Facebook, X/Twitter and Instagram handles with verification badges.

How to reverse a genuine wrong send

Safaricom’s M-PESA Reversal page describes DIY reversal for Safaricom-to-Safaricom (P2P) transfers:

1. Forward the original M-PESA SMS to 456 within 24 hours.
2. Only the sender or recipient can request; the recipient needs enough balance; a maximum of three attempts per transaction applies; blacklisted numbers cannot reverse.
3. You receive SMS confirmation of success or failure and timing.
4. If you are the recipient and cancelled a reversal prompt, forward the message back to 456 to complete it.

Hakikisha — confirming the recipient name before you send — is the prevention step Safaricom highlights on the same page. For statement checks after an incident, see how to check your M-Pesa mini statement and the wider Safaricom Help hub.

What M-Pesa fraud is not

A cold caller who already knows your name is still not proof they are Safaricom. Job, loan-app and study-abroad scams use the same social-engineering playbook — verify agents using official lists, as in how to verify a study abroad agent and how to check if a recruitment agency is licensed by NEA.

If you publish a community scam-alert page for your estate WhatsApp, you can compare hosting on Truehost (affiliate link).

Evidence to collect after M-Pesa fraud

While you are on the call with 100/200 or filing a police abstract, save: the fraudster’s number and any M-Pesa short code used, full SMS copies, approximate time of the SIM loss or call, and screenshots of fake social pages. Do not format your phone until Safaricom has logged the case if the handset still holds evidence. Tell your bank if the same PIN pattern is reused on bank apps. Neighbours and family WhatsApp groups should be warned with facts only — avoid forwarding unverified “Safaricom is sending new SIMs” rumours that are themselves social-engineering bait.

For NTSA or other official payment scams that travel the same SMS rails, keep the habit of checking the official paybill on the agency site, as in our NTSA instant fines payment and scam checks guide where published.

M-Pesa fraud on agent tills

Agent-assisted withdrawals introduce a second human in the loop. Shield your PIN, wait for the confirmation SMS before leaving the till, and do not hand the phone to strangers who offer to "help reverse" a payment. If an agent transaction goes wrong, use 100/200 immediately and retain the till number. Safaricom's official call line remains 0722 000 000 for outbound contacts claiming to be the company.

Frequently asked questions

What number does Safaricom use for genuine calls?

Safaricom’s fraud-awareness pages state that Safaricom only calls from 0722 000 000.

How do I report M-Pesa fraud or a suspected SIM swap?

Call 100 or 200, or SMS 333, and also report to the police. Change your PIN if it may be compromised.

Can I reverse M-Pesa fraud payments after 24 hours?

The DIY 456 reverse flow Safaricom documents is for eligible P2P transfers requested within 24 hours. Fraud cases still need customer-care and police escalation even when DIY reversal no longer applies.

Is forwarding my M-Pesa message to a caller safe?

No. Only use official channels such as 456 for reversals or 100/200/333 for support. Callers asking you to read back full SMS contents or OTCs are a classic fraud pattern.

Does Safaricom ask me to dial a USSD code to “secure” my line?

Safaricom explicitly warns you not to press codes dictated by someone allegedly from Safaricom.