Protect your account: spotting M-Pesa and SACCO scams

Most financial fraud does not involve hacking. It involves persuading you to hand over a code, send money or reveal information. The good news: a few simple habits stop almost all of it.

The golden rules

1. Never share your PIN, password or verification code — with anyone, including someone who says they work for KISE SACCO, Safaricom or a bank.
2. Pay only to the official SACCO paybill, using your member number as the account number. Never pay loan “processing fees” to a personal number.
3. Sign in only through the official website address or the installed app — never through a link in an SMS or WhatsApp message.

KISE SACCO will never call, text, email or WhatsApp you to ask for your password, PIN or verification code.

Common scams and how to spot them

“Wrong transaction” reversal requests

You receive an SMS that looks like an M-Pesa confirmation, followed by a call begging you to send the money back. Check your actual M-Pesa balance before doing anything. Genuine mistaken transfers can be reversed through Safaricom, not by sending money to a stranger.

Fake loan approvals

A message says your loan is approved and asks for a fee to release it. SACCO loan charges are deducted at disbursement — you never pay a person to receive your loan.

Impersonation calls

A caller claims to be from the SACCO and says your account is “blocked” or “under review”, then asks you to confirm a code sent to your phone. That code is the key to your account. Hang up and call the SACCO on its official number.

Phishing links

Messages with urgent links (“verify your account now”) lead to fake login pages. Look closely at the address, and when in doubt, type the website address yourself.

Built-in protection in your portal

• Turn on two-factor authentication so a stolen password is not enough.
• Read new sign-in alerts — if one was not you, change your password immediately.
• Use Sign out other devices on your profile if you ever suspect something.

If you think you have been targeted

1. Stop — do not send money or share any code.
2. Change your portal password and sign out of other devices.
3. Call KISE SACCO on the official number shown on this website.
4. Forward suspicious M-Pesa-related SMS messages to Safaricom’s fraud short code 333, and report crimes to the police.