Safaricom To Mask Phone Numbers In M-PESA Transactions

Safaricom is set to introduce new privacy measures on its M-PESA platform that will mask users’ phone numbers in peer-to-peer (P2P) transactions, as part of a broader push to strengthen data protection and reduce fraud.

The changes, scheduled to go live on March 24, 2026, will see transaction notifications display partially masked mobile numbers instead of full phone numbers. For example, users will see numbers formatted as 0722**000*, while names will be limited to two identifiers for easier recognition.

The move is part of Safaricom’s data minimisation strategy, aimed at ensuring that only essential personal information is shared during transactions. According to the company, the approach is designed to reduce exposure of sensitive data while maintaining transparency and usability for customers.

“We have an obligation to ensure maximum digital security for our customers. This feature is a major step in the right direction towards fighting against fraud,” Peter Ndegwa Safaricom CEO said.

Under the new system, users who need full details of a transaction counterpart can request verification by sending the transaction message to a dedicated code, after which the sender can choose whether to share their full name and number.

Safaricom says the changes are intended to address growing concerns around fraud, spam, and social engineering attacks, which often rely on harvesting phone numbers from transaction messages. By limiting access to full contact details, the company aims to reduce unwanted calls, marketing messages, and potential harassment following transactions.

The update comes as M-PESA continues to scale rapidly, with approximately 14.1 million daily active P2P users, handling 37 million daily transactions valued at about $208 million (Sh27 billion), according to the briefing.

Safaricom noted that the initiative aligns with broader data protection and privacy principles, including minimising the amount of personally identifiable information shared across digital platforms. The company has progressively implemented similar measures across its services, including merchant payments and internal systems, over the past few years.

The move reflects a growing focus on privacy-by-design in digital financial services, as mobile money platforms face increasing scrutiny over data usage and customer protection. The update could set a new standard for privacy in mobile financial transactions in Kenya and across the region.