Spotting Payment Scams: Fake M-Pesa Messages, Overpayment Tricks and How to Stay Safe

Most payment scams are not high-tech. They rely on something much simpler: getting you to act quickly, before you have time to think. A convincing message, a worried voice on the phone or a buyer in a hurry is often all it takes.

The good news is that a few consistent habits defeat the vast majority of scams. This guide covers the tricks most commonly used against individuals and merchants in Kenya and across Africa, and how to protect yourself.

The fake payment message

How it works: A "customer" claims to have paid and sends a screenshot or a text that looks like a mobile money confirmation. The format looks right, the amount is correct and the sender urges you to release goods immediately.

Why it works: Merchants are busy, and confirmation messages are familiar. A forged message can look almost identical to the real thing.

How to stop it: Only trust your actual balance or transaction history — in your mobile money app, your bank or your Paysasa dashboard. A message sent from an ordinary phone number is not a confirmation, no matter how it looks.

The overpayment trick

How it works: Someone sends you more money than the agreed price — or claims to — then asks you to return the "extra". Later, the original payment is reversed or turns out never to have existed, and the money you sent back is gone.

How to stop it: Never refund an "overpayment" until you have confirmed the full amount is genuinely in your account and settled. Even then, consider asking the payer to cancel and pay the right amount instead.

The "wrong number" refund

How it works: You receive a message saying money was sent to you by mistake, followed by a call begging you to send it back. Often, no money was ever received.

How to stop it: Check your balance. If money really did arrive in error, use your provider's official reversal process rather than sending it back to whoever calls.

PIN and one-time code requests

How it works: A caller claims to be from your mobile money provider, bank or payments app. They say there is a problem with your account and ask you to "confirm" your PIN or read out a code sent by SMS.

How to stop it: No legitimate provider will ever ask for your PIN or one-time code. Hang up. If you are worried, contact the provider through the official number or website you find yourself.

SIM swap fraud

How it works: A fraudster convinces a mobile network to move your number to a new SIM card. Once they control your number, they can receive your codes and try to access your accounts.

Warning signs: Your phone suddenly loses network for no clear reason, or you get messages about a SIM change you did not request.

How to stop it: Contact your network immediately if your signal disappears unexpectedly. Use accounts that support extra protections such as device checks and additional verification on payouts.

Phishing links

How it works: You receive a message with a link to "verify your account", "claim a reward" or "unlock a payment". The page looks official but captures your login details.

How to stop it: Do not log in through links in unsolicited messages. Type the website address yourself or use the official app. Check the spelling of the domain carefully.

Impersonation of friends and bosses

How it works: A message arrives from a new number, claiming to be a relative, friend or employer who has "lost their phone" and needs money urgently.

How to stop it: Call the person on the number you already have, or ask a question only they would know. Urgency plus a new number is a classic red flag.

Habits that protect you every time

• Pause before paying. Urgency is the scammer's best tool. A two-minute pause defeats many scams.
• Verify through your own channels. Check balances in your app; call back on known numbers.
• Protect your PIN like cash. Do not share it with anyone, including staff and family.
• Turn on every security feature available — PINs, two-factor authentication and notifications.
• Use protected payments for strangers. When buying from someone you do not know, pay through escrow rather than directly.
• Review your devices and sessions. Log out of devices you no longer use.

How Paysasa helps keep payments safe

Paysasa is designed with practical controls that make many of these scams harder:

• PINs and device checks on sensitive actions, with two-factor authentication on payouts.
• Holds on recent top-ups before withdrawal or M-Pesa send, which makes "pay then quickly withdraw" fraud harder. In-app transfers between wallets are not held.
• Escrow and buyer protection, so buyers can pay strangers without handing money over directly.
• Clear transaction references and audit trails so merchants confirm payments in their dashboard, not from an SMS.

You can read more on the Paysasa security page.

What to do if you have been scammed

1. Act fast. Contact your mobile money provider, bank or payments platform immediately.
2. Change your PIN and passwords, and log out of other devices.
3. Gather evidence: screenshots, phone numbers, transaction references and times.
4. Report the incident to the police and keep the report number.
5. Warn others in your community or business groups.

Conclusion

Scams change their stories, but the patterns stay the same: urgency, fake proof and requests for secret codes. If you remember to pause, verify through your own channels and never share your PIN, you will defeat the vast majority of them.

Want payments with protection built in? Create a Paysasa account and explore escrow, verified businesses and secure payouts.