Training built for the scam M-Pesa agents hear every single day
Njoroge runs an M-Pesa shop in Nakuru. Most weeks, someone calls claiming 'I sent money to the wrong till, please reverse it' - and the pressure to reverse fast, before checking anything, is exactly how agents lose their own float. Till operators and merchant-facing teams need the same instinct built in.
What agents and merchant staff actually face
- The "wrong number, please send it back" message - a real deposit notification is spoofed or a small genuine transfer is sent, then the agent is pressured to reverse a larger amount before verifying the sender.
- Fake "Safaricom support" or "M-Pesa support" calls asking an agent to share their PIN, one-time code, or agent till number to "fix an error" or "upgrade" their account.
- SIM-swap attempts targeting the agent's own registered line, which can hand a fraudster control of the agent float.
- Fraudulent "float loan" or "agent upgrade" messages that ask for a deposit or ID details before any real benefit is delivered.
- Customers asking an agent to process a transaction that does not match the ID presented, testing whether the agent checks properly.
The Data Protection Act and Computer Misuse and Cybercrimes Act
M-Pesa agents and merchants handle personal and financial data covered by Kenya's Data Protection Act, and the Computer Misuse and Cybercrimes Act is the legal basis for prosecuting the fraud they see. We map modules openly to both and recommend confirming current guidance with your aggregator or Safaricom before citing a specific clause.
See Kenya's regulatory drivers →Frequently asked questions
Is this training only for bank staff, or does it work for independent M-Pesa agents?
It is built for anyone handling mobile money transactions, including independent agents, till operators, and merchant staff - not just bank employees. The scenarios use agent-specific situations like float reversal pressure and fake "support" calls.
What is the single most important thing an agent should do differently after this training?
Never reverse or resend a transaction based on a phone call or text alone. Verify the actual deposit in the M-Pesa app first, and never share a PIN, one-time code, or till number with anyone claiming to be "support" - real Safaricom support never needs it.
Can this run as short modules an agent can finish between customers?
Yes. Modules are 3-7 minutes, designed to be completed in short breaks rather than requiring a long training session away from the till.