Safaricom has officially rolled out a new M-Pesa feature that masks users’ phone numbers during transactions, in a move aimed at enhancing privacy and reducing fraud.
The update, which took effect on Tuesday, March 24, 2026, changes how transaction details appear in confirmation messages by partially hiding the sender’s phone number while retaining key transaction information.
The telecommunications giant said the new feature is part of broader efforts to protect customer data and align with Kenya’s Data Protection Act, 2019.
How the new M-Pesa feature works
Under the new system, recipients will no longer see the full phone number of the sender. Instead, the number will appear partially masked, for example as 0705***734, while the sender’s first and last names remain visible.
Previously, M-Pesa confirmation messages displayed the sender’s full phone number alongside all three names, raising privacy concerns among users.
Safaricom said the change will apply across person-to-person transactions, as well as Paybill and Buy Goods payments, especially for small merchants who were not initially covered in earlier privacy updates.
“Ukituma doo via M-Pesa, only essential sender details will be visible to the recipient. This enhancement will help protect your personal information, reduce misuse, and support safer transactions,” Safaricom said in a statement.
Why Safaricom introduced the update
The rollout follows approval by the Central Bank of Kenya (CBK), which allowed the expansion of the feature to merchant payments.
According to Safaricom, the main goal is to strengthen user privacy and curb misuse of personal data, particularly in cases where phone numbers have been used for fraud or unsolicited contact.
The feature comes at a time when digital privacy concerns are rising, with regulators pushing companies to better safeguard user information.
By masking the middle digits of phone numbers, Safaricom says it reduces the risk of exposure while still maintaining transparency in transactions.
Impact on millions of daily transactions
The update is expected to significantly affect M-Pesa’s person-to-person transactions, which handle about 37 million transactions daily worth approximately KSh27 billion.
Overall, the platform processes around 137.9 million transactions each day valued at KSh118 billion, with 14.1 million users engaging in peer-to-peer transfers.
These figures highlight the scale of the change, making it one of the most notable upgrades to the M-Pesa platform in recent years.
Option to reveal sender details
Safaricom has also introduced a mechanism for users who may need to verify the sender’s identity.
Recipients can forward the transaction SMS to 334, prompting the sender to approve sharing their full details. If the sender consents, their full name and phone number are revealed; if not, the requester is notified of the rejection.
Each request is valid for 24 hours and limited to one attempt per transaction.
Legal context and consumer protection
The update comes shortly after a High Court ruling barred telecommunications companies from reallocating inactive phone numbers without the consent of the original owners.
The court noted that mobile numbers form part of an individual’s digital identity, reinforcing the need for stronger protections.
Safaricom maintains that the new feature is designed to enhance trust and security within its ecosystem while ensuring compliance with evolving legal and regulatory frameworks.
