Safaricom—Safaricom began masking senders' phone numbers on M-Pesa transactions to curb fraud and protect user privacy
In March 2026, Safaricom introduced mandatory masking of sender mobile numbers displayed in M-Pesa transaction messages, a data-minimization measure intended to curb fraud and unwanted contact enabled by exposed phone numbers. The company said the change was part of a wider privacy-by-design push, alongside its ISO/IEC 27701:2019 privacy certification. The feature applies broadly to P2P transactions and cannot be opted out of, though transaction verification and reversal mechanisms remain in place.
Scoring Impact
| Topic | Direction | Relevance | Contribution |
|---|---|---|---|
| User Privacy | +toward | primary | +1.00 |
| Overall incident score = | +0.308 | ||
Score = avg(topic contributions) × significance (low ×0.5) × confidence (0.62)
Evidence (2 signals)
Safaricom's own data-minimization FAQ describes mandatory M-Pesa sender number masking
Safaricom's official data-minimization support page confirms mandatory masking of sender phone numbers on M-Pesa P2P transaction messages, framed as a data-minimization and fraud-prevention measure with no opt-out, alongside the company's ISO/IEC 27701:2019 privacy certification.
The Star reported Safaricom will mask M-Pesa sender numbers to curb fraud and nuisance
Kenyan newspaper The Star reported that Safaricom would begin masking senders' mobile numbers displayed in M-Pesa transaction messages, a measure aimed at reducing fraud and unwanted contact enabled by exposed phone numbers.