An M-Pesa payment request can arrive at exactly the wrong moment: when you are in a matatu, serving a customer, rushing to pay rent, trying to complete a loan application, or responding to a message from someone who sounds official. The prompt may look ordinary, but one careless PIN entry can send money out of your account.
The safest habit is simple: verify before you approve. Do not treat an M-Pesa prompt as a formality. Treat it as a payment instruction that deserves the same attention as handing over cash.
This guide explains how to verify an M-Pesa payment request, especially when borrowing, repaying, or paying a fee. It is written for everyday Kenyan users who want practical steps, not technical language.
Start with the most important question
Before reading the amount or recipient, ask: did I initiate this request?
If you did not start a payment, do not enter your PIN. A payment prompt that appears randomly should be treated with suspicion. It may be a mistake, a delayed prompt from an earlier action, or an attempt to make you approve a payment while distracted.
For example, if you are applying for a loan and you click a button to pay a processing fee, an M-Pesa prompt may be expected. But if you are only chatting with someone on WhatsApp and a prompt appears without you using an official app, website, PayBill, Till, or checkout process, pause. Ask where it came from and why.
The rule is not "all unexpected prompts are fraud." The rule is "unexpected prompts should not be approved until verified."
Check the amount carefully
The amount is the easiest detail to check and one of the easiest to ignore. Scammers rely on speed. They may tell you the fee is small, then send a prompt for a higher amount. Or they may send several prompts and hope you approve one without reading.
If you were expecting to pay KES 250, the prompt should not say KES 2,500. If you were repaying KES 4,800, the prompt should not say KES 8,400 unless there is a clear explanation such as late penalties or another outstanding balance. Even then, you should verify the balance before paying.
When borrowing, always compare the requested amount with the written loan terms, repayment schedule, invoice, or official message. Do not rely only on what someone says in a call. Spoken instructions are easy to deny later. A screenshot from an unknown person is also weak evidence. The safest information comes from the official app, website, SMS short code, account dashboard, or support channel.
Check the recipient name
An M-Pesa prompt often includes a business or recipient name. Read it. Does it match the company you intended to pay? Is the spelling correct? Is it a business name, Till, PayBill, or personal name?
If you expected to pay a lender but the recipient looks like a private person, do not approve until you understand why. Some small businesses use personal numbers, but that is exactly why borrowers must be careful. A personal name can make later disputes harder, especially if the person disappears.
For loan-related payments, an official payment channel is safer than a random phone number. A lender should be able to tell you the official PayBill, Till, or registered account used for that payment. The details should be consistent across their website, app, customer care, and written instructions.
Be cautious with names that look close but not exact. Fraudsters sometimes use similar names, extra words, swapped letters, or informal labels to appear legitimate. If the name feels wrong, cancel the prompt and verify through a channel you find independently.
Check the purpose of the payment
A genuine payment request should have a clear purpose. You should be able to say, in one sentence, what the money is for.
Examples of clear purposes include:
- "I am repaying my loan balance of KES 3,950."
- "I am paying a disclosed processing fee of KES 300."
- "I am paying KES 1,200 for a service I requested."
- "I am completing a bill payment with the account number shown."
Vague purposes are risky. Be careful with phrases such as account activation, loan unlocking, system refresh, disbursement code, clearance, file opening, CRB removal, insurance release, or verification deposit if they are not clearly explained in the official terms.
Some of those words may be used legitimately in certain contexts, but scammers also use them because they sound official. The word is not enough. You need the amount, reason, recipient, and official record.
Confirm through an official channel
If you are unsure, verify through an official channel before entering your PIN. That may be the lender's official website, app, customer care number, support email, verified social media page, or branch. Do not verify only with the same person who sent the suspicious request.
For example, suppose someone claiming to be from a lender calls and says your loan is approved, but you must pay KES 700 immediately. They send an STK push. Instead of asking that caller whether it is real, go to the lender's official website or app and contact support from there. Ask whether that exact payment is required and whether the payment destination is correct.
If a person becomes angry because you want to verify, that is a warning sign. A serious provider should understand that borrowers need to protect their money.
Do not share your M-Pesa PIN
Your M-Pesa PIN should remain private. You should enter it only on your own phone to authorize a transaction you have verified. No legitimate support agent needs to know it. No lender needs you to say it out loud. No customer care person needs it to reverse a payment.
Also protect one-time passwords, SIM registration details, and app login codes. A scam may begin with a payment request and continue with a request for a code. The goal may be to access your account, reset something, or control your number.
If you suspect your PIN has been exposed, change it immediately through the official M-Pesa menu or app. If you suspect your SIM or account is compromised, contact Safaricom through official support channels.
Look for pressure tactics
Payment fraud often uses pressure. The person may say the offer expires in five minutes, the system will close, your loan will be cancelled, your account will be blacklisted, or you will miss a special limit. Pressure is designed to stop you from thinking.
Borrowers are especially vulnerable because they may urgently need money. A scammer knows that someone looking for KES 5,000 for rent or medicine may approve a KES 500 request quickly. The first payment may be followed by another, then another, with explanations that sound technical.
A useful response is: "I will verify through the official channel first." If the offer disappears because you wanted to verify, it was not a safe offer.
Verify loan repayment requests
Repayment requests deserve the same caution as application fees. Before approving a repayment prompt, check your outstanding balance, due date, and any penalties. If the repayment amount is higher than expected, ask for a breakdown.
Keep your M-Pesa confirmation message after paying. It should show the transaction code, amount, recipient, date, and time. If your lender has an app or dashboard, check whether the repayment reflects. If it does not reflect after a reasonable time, contact support and provide the transaction code.
Never repay a loan to a new number simply because someone calls and says the company's payment details have changed. Payment channel changes should be communicated clearly through official channels. If in doubt, delay long enough to confirm.
Verify processing fee requests
Processing fee requests are common in lending, and they need extra care. Before paying a fee, ask whether it is disclosed in the terms, whether it is refundable if the loan is not approved, and whether it is paid to an official account.
Avoid paying fees to personal numbers unless you have a strong reason and official confirmation. Be careful if the fee keeps changing. A common scam pattern is to ask for one small fee, then claim there is another charge for insurance, transfer, approval, clearance, CRB update, or disbursement. Each payment is presented as the final step.
If a fee is genuine, the provider should be able to explain it clearly before you pay. The amount should match the prompt. The payment channel should be consistent. The confirmation should be traceable.
What to do after approving a payment
After entering your PIN, wait for the M-Pesa confirmation. Do not assume payment succeeded just because the prompt disappeared. If you receive a success message, check the details. If you receive a failure message, confirm that no money left your account before trying again.
If a business says it did not receive your payment, provide the transaction code through official support. Do not approve another prompt until you understand what happened to the first transaction.
If you paid the wrong person or suspect fraud, act quickly. Save all messages, screenshots, call logs, and transaction details. Contact Safaricom support for guidance. Contact the company being impersonated if applicable. Report the matter through the appropriate channels if money has been stolen.
A simple verification routine
Use this routine every time:
1. Stop for a moment. 2. Confirm you initiated the payment. 3. Read the amount. 4. Read the recipient name. 5. Confirm the purpose. 6. Check against official instructions. 7. Enter your PIN only if everything matches.
This may sound slow, but it takes less than a minute. That minute can protect your rent money, fare, business stock, school fees, or emergency cash.
Safer borrowing starts with safer payments
Borrowing safely is not only about interest rates and repayment dates. It is also about how money moves. A borrower who verifies payment requests is less likely to lose money to impersonation, wrong accounts, or pressure-based scams.
Quick Cash encourages borrowers to keep control of every M-Pesa approval. If you choose to apply for credit, use official channels, read the payment details, and confirm the purpose before entering your PIN. The right loan should help you handle a real need, not expose you to avoidable payment risk.