📖 M-PESA Security Guide
Your M‑PESA PIN is the key to your mobile money. If someone obtains it, they can empty your account. Unfortunately, scammers have devised clever ways to trick you into revealing your PIN when you try to buy airtime or bundles. This guide explains how to stay safe, how STK push protects you, and why using a verified reseller till like 509947 is secure.
🎣 How Scammers Try to Steal Your M‑PESA PIN
- Fake customer care calls: Someone calls pretending to be from Safaricom or Airtel, asks you to “verify” your PIN to fix an issue.
- Phishing links: You receive an SMS with a link saying “your M‑PESA has been suspended – click to reactivate”. The fake site asks for your PIN.
- Fake resellers: A WhatsApp “reseller” asks you to send your PIN “to complete the transaction”. Legitimate resellers never ask for your PIN.
- SIM swap fraud: Scammers trick your carrier into transferring your number to a new SIM, then reset your M‑PESA PIN.
🛡️ How STK Push Protects You
When you pay using Lipa na M‑PESA (Buy Goods or Paybill), the transaction is completed via an STK push – a secure prompt that appears directly on your phone. You enter your PIN into the M‑PESA app, not into a website or to a person. The merchant never sees your PIN. This is the safest way to pay.
Safe methods: M‑PESA STK push via till numbers (e.g., 509947) or official Paybill (263263).
Unsafe methods: Sending money to a personal M‑PESA number and then sharing your PIN or trusting someone to “process” the transaction for you.
✅ Safe vs. Risky Practices – At a Glance
| Practice | Safe? | Why? |
|---|---|---|
| Entering PIN into M‑PESA STK push (Buy Goods) | ✅ Safe | PIN never leaves your phone; merchant cannot see it. |
| Giving PIN to a “reseller” over WhatsApp | ❌ Very dangerous | They can empty your account immediately. |
| Using a till number (e.g., 509947) for bundles | ✅ Safe | Standard M‑PESA STK push – no PIN sharing. |
| Clicking on links in random SMS to “verify” PIN | ❌ Phishing scam | Fake website captures your PIN. |
🔐 How to Buy Airtime or Bundles Without Risking Your PIN
- Always use Lipa na M‑PESA → Buy Goods or Paybill. Never send money to a personal number.
- Use a verified till number. For example, Till 509947 (BingwaSokoni) is a well‑known reseller till with a secure STK push process.
- Never share your PIN. If anyone asks for it, they are scammers. Hang up or block them.
- Enable M‑PESA transaction alerts. You will receive an SMS for every transaction – report any unauthorised activity immediately.
- Keep your SIM safe. Do not share personal details that could enable a SIM swap.
📞 Why Till 509947 Is a Safe Reseller Option
BingwaSokoni (Till 509947) uses the standard M‑PESA Buy Goods flow. When you pay:
- You receive an STK push on your phone.
- You enter your PIN into the M‑PESA app (not into a website).
- The platform receives a confirmation that payment was made, but never sees your PIN.
- The bundle is delivered automatically.
This is the same secure process used by supermarkets, petrol stations, and other legitimate businesses.
🚨 What to Do If You Suspect Your PIN Is Compromised
- Immediately change your M‑PESA PIN: Dial *100# → “Change PIN” or use the M‑PESA app.
- Check your transaction history: Look for unauthorised payments.
- Report to Safaricom/Airtel: Call 100 (Safaricom) or 100 (Airtel) and explain the situation.
- If money is stolen, report to the police. Keep the transaction SMS as evidence.
Verified Merchant – Till 509947
Secure M‑PESA STK Push payments. Your PIN is never shared – only the payment confirmation reaches us.
Security and mobile money specialists. Helping Kenyans protect their M-PESA accounts.
Last reviewed: 26 May 2026