 transactions){kind=link}
Safaricom’s mobile money platform, M-PESA, is set to introduce masked phone numbers in its Send Money (P2P) transactions, marking a significant shift in how customer data is shared across its network.
The update, scheduled to go live on March 24, 2026, is part of a broader data minimization strategy by Safaricom aimed at strengthening user privacy while maintaining the simplicity that has made the platform ubiquitous in everyday transactions.
A Shift Toward Data Minimization
As digital payments scale rapidly, M-PESA is increasingly focusing on limiting the exposure of personally identifiable information. Under the new update, transaction notifications will no longer display full phone numbers. Instead, users will see partially masked numbers—for example, 0722*000—reducing the risk of misuse.
The move reflects a growing emphasis on data minimization, a principle that ensures only essential information is shared during transactions. By restricting access to sensitive details, Safaricom aims to curb fraud, social engineering attempts, and unwanted contact between transacting parties.
What Will Change
Once implemented, several elements of M-PESA transaction alerts will be adjusted:
- Phone numbers will be partially hidden instead of fully visible
- Customer names will be reduced from three names to two
- Transaction details such as amount, date, and transaction ID will remain unchanged
This ensures that while privacy is enhanced, transparency and usability are not compromised.
Optional Identity Sharing
In cases where users need to verify the identity of a sender, M-PESA will introduce an opt-in verification feature via a dedicated shortcode.
Recipients will be able to request full details by forwarding the transaction message to 334. The sender will then receive a prompt asking whether to share their full name and phone number. If approved, the recipient receives the complete details; if declined, they are notified accordingly.
The verification request will be limited to one attempt per transaction and will remain valid for 24 hours.
Addressing Spam and Fraud Risks
The masking of phone numbers is expected to significantly reduce the prevalence of spam calls, unsolicited marketing messages, and post-transaction harassment—issues that have quietly grown alongside Kenya’s digital payments boom.
Fraudsters often rely on harvested phone numbers from transaction messages to execute scams. By limiting access to these numbers, M-PESA is effectively cutting off a key entry point for such activities.
Building Trust in Digital Payments
With over 14 million daily P2P users and billions of shillings transacted daily, M-PESA remains central to Kenya’s financial ecosystem. As usage grows, so do concerns around data privacy and security.
This latest update signals Safaricom’s intent to embed privacy deeper into the platform’s architecture, aligning with global data protection trends while reinforcing customer trust.
Ultimately, the change reflects a simple but powerful shift: less data shared, more privacy for every transaction.