+254 748 799 227 bepentstechservices@gmail.com Mlolongo · Nairobi · Countrywide 24/7 emergency support
Bepents TechServices
Home / Blog / Cybersecurity
Cybersecurity

Spot M-Pesa and Phishing Scams Before They Cost You

Bepents Tech Team· · 2 min read

Fake M-Pesa messages, "wrong number" refunds, fake bank links and impersonated bosses: how the common scams in Kenya work and the habits that stop them.

Most fraud that hits Kenyan businesses is not sophisticated hacking. It is a convincing message that gets someone to send money, share a code or type a password into a fake page. Training your team to spot these is the cheapest security you will ever buy.

Fake M-Pesa confirmations

A message arrives that looks like an M-Pesa confirmation, followed by a call: "I sent money to your number by mistake, please send it back." Genuine M-Pesa messages come from the official MPESA sender, not an ordinary phone number. Always check your actual M-Pesa balance or statement before releasing goods or sending anything back.

Safaricom lets you report fraud messages by forwarding them to 333.

Emails and SMS that say your account is locked, a parcel is waiting or a payment failed, with a link to "verify". The page looks real and asks for your password or PIN. Check the address carefully, and go to the service by typing its address yourself instead of tapping the link.

Boss or supplier impersonation

A WhatsApp from a new number with your director's photo urgently asking for a payment, or an email from a supplier announcing new bank details. Confirm by calling the person on the number you already have. Make it a rule that payment details are never changed by message alone.

Code-sharing tricks

"I sent you a code by mistake, please forward it." That code is the key to your WhatsApp, email or bank account. Never share a one-time code with anyone.

Habits that stop most scams

  • Pause on anything urgent that involves money or codes.
  • Verify by a second channel you already trust.
  • Use two-factor authentication on email, banking and social accounts.
  • Keep devices updated.
  • Report and share scam examples with your team.

Train your team

Bepents Tech Services runs short, practical security awareness sessions for staff using real local examples, and audits your accounts and devices. Book a session on WhatsApp.

Let's talk

Need it fixed, built or secured?

Tell us what you need. We reply fast on WhatsApp, usually within minutes during working hours, and handle emergencies 24/7.

Bepents AIInstant answers · team on standby
Leave your phone number here and we'll call you back. Never share passwords or codes.