M-Pesa Reversals and P2P Crypto Scams: How to Protect Yourself

Every Kenyan has sent money to the wrong number at least once, and Safaricom’s reversal service is the honest fix. Forward the confirmation SMS to 456 within 24 hours and, if the money is still in the other person’s account, it comes back. The same service has a dark side on P2PP2P tradingPeer-to-peer: you buy crypto directly from another person and pay them via M-Pesa or bank; the platform only holds the coins in escrow. Glossary crypto markets: a “buyer” pays you, takes your USDT, and then reverses the payment as a mistake. This guide covers both — how to get your own money back, and how not to lose your crypto to a reversalReversal / chargebackPulling back a payment after it was sent. A fraudster may pay a P2P seller, receive crypto, then request an M-Pesa reversal. Glossary.

How an M-Pesa reversal works

Safaricom calls it a DIY (do-it-yourself) reversal. It moves funds back from the recipient’s M-Pesa account to the sender’s without a call to customer care. According to Safaricom’s reversal page, the rules are simple and strict.

Notice the “partial” in the balance rule. If the recipient has already spent part of the money, you may only get part of it back. And the recipient is involved: Safaricom’s page shows that a recipient who cancels a reversal receives a message telling them they can still forward it to 456 to complete it.

Some transactions are outside the 456 service altogether. Money sent from a bank account to M-Pesa, airtime bought through a bank app, PaybillPaybill / Till numberSafaricom business numbers for receiving M-Pesa payments. A real company Paybill shows the registered business name before you confirm. Glossary and Till payments and M-Pesa GlobalPayM-Pesa GlobalPaySafaricom's virtual Visa card for paying international websites from M-Pesa. Safaricom lists cryptocurrency among the restricted merchant categories. Glossary card purchases are handled differently, usually through the bank or merchant first, with Safaricom helping only after escalation.

How to reverse M-Pesa sent to the wrong number

If you typed one digit wrong, here is the official route. Speed matters — the longer you wait, the more likely the recipient has withdrawn the money.

1. Do not call the recipient first

   It is tempting to phone and ask nicely, but Safaricom’s process does not need it, and some people withdraw the money as soon as they know. Start the reversal straight away.

2. Forward the confirmation SMS to 456

   Find the M-PESA confirmation message for the transaction, tap Forward and send it, unedited, to 456. Do this within 24 hours.

3. Read Safaricom's reply

   You get an SMS saying whether the request succeeded and the expected time to complete it. If it failed because of balance or timing, you can try again — up to three attempts per transaction.

4. Escalate if needed

   Past 24 hours, or after three failed attempts, call customer care on 100 (prepay) or 200 (postpay), or chat with Zuri on WhatsApp at 0722 000 100. Older transactions may still be looked at, but there is no guarantee.

5. Report if the money is gone

   If the recipient has withdrawn the money, Safaricom cannot recover it. Report to the nearest police station and keep the OB number for any follow-up.

A quick word on honesty: a reversal is for money sent by mistake. Using it to take back payment for crypto, goods or services you already received is fraud, and P2P platforms ban accounts caught doing it.

The P2P reversal scam, step by step

Here is how the scam usually runs against a Kenyan USDT seller.

1. The bait. A new or low-history buyer opens an order on a platform such as Binance P2P, often at a slightly awkward amount, and is friendly and quick in chat.
2. The payment. They send real M-Pesa by Send Money. Your balance shows it — everything looks fine.
3. The release. You release the USDT. They withdraw it from the exchange within minutes.
4. The reversal. Within 24 hours they forward the M-PESA message to 456 claiming they sent it to the wrong number. If the shillings are still in your account, the reversal can go through.
5. The vanishing act. The buyer’s account goes quiet. You are left without the USDT and without the money.

Variations include paying from a relative’s line (so the “sender” can claim they never traded) and using stolen M-Pesa lines after a SIM swapSIM swapA fraudster convinces a mobile operator to move your number to their SIM, then receives your SMS codes and M-Pesa messages. Glossary, where the real owner reverses the payment honestly — and you still lose.

Fake M-Pesa messages: how to tell

The cheaper version of the scam does not need a real payment at all — just a convincing text. Safaricom’s fraud pages describe fake messages that look authentic, but where the “new M-PESA balance” part is shown as locked or missing.

• Check the sender. Genuine confirmations come from M-PESA, never from a 07xx or 01xx number.
• Check your balance in the M-PESA app or menu. Balance enquiry is free. No money in the balance means no payment.
• Check the transaction code appears in your M-PESA statement, with the same amount and name.
• Ignore screenshots. They are pictures and can be edited in seconds.
• Forward the fake message to 333 so Safaricom can block the number.

If someone texts that they sent you money “by mistake” and asks you to refund it, do not send anything. Safaricom’s advice is to ask them to forward the message to 456 or call Safaricom — if the payment was real, the reversal returns it automatically.

Rules that protect sellers

Platform rules already lean towards protecting a careful seller. Binance’s P2P user policy, for example, says:

• the payer’s name must be identical to their verified Binance name;
• if the counterparty pays from a non-matching account, do not release — refund the money instead, with the counterparty covering any refund fees;
• in a dispute where a buyer used third-party paymentThird-party paymentPaying from an M-Pesa line or bank account that is not in your own name. P2P rules forbid it and it is a common cause of frozen accounts. Glossary details, the buyer bears the loss;
• buyers who use non-real-name payment methods can have P2P suspended for at least seven days.

Add your own rules on top:

• Prefer established buyers. Verified merchants with long histories have far more to lose than a single trade is worth.
• Do not release before the full amount is in your balance. Partial payments, split payments and “the rest is coming” all wait.
• Keep evidence. Download the day’s M-PESA statement and screenshot the order chat before you release.
• Watch your phone for 24 hours after larger sales. If a reversal notice arrives for an honest trade, call Safaricom on 100 at once and open an appeal on the platform with your order number.

Our guides to selling on Binance and cashing out from other platforms put these rules into the full selling flow, and the Paxful and LocalBitcoins alternatives page compares where the safest KES markets are now.

What to do if you were scammed

Move fast — the 24-hour reversal window cuts both ways, and evidence fades.

1. Open an appeal on the platform

   If the order is still open, do not release and tap Appeal. If you already released, contact support through the order and report the account. Upload your M-PESA statement, the chat and the order number.

2. Call Safaricom

   Call 100 (prepay) or 200 (postpay) and explain that the reversal or payment is linked to a fraud. Forward any fake messages and the fraudster’s number to 333.

3. Report to the police

   File a report at the nearest police station and get an OB number. Binance’s merchant guidelines say police can contact its law-enforcement team directly, which is how platforms release information about the other account.

4. Ignore 'recovery agents'

   People who contact you promising to recover your crypto for a fee are almost always a second scam. No legitimate service can reverse a blockchain transfer.

Reporting to Safaricom, the platform and DCI

Cases involving crypto fraud are investigated by the Directorate of Criminal Investigations, usually after a report at a police station. If the loss affects your tax position, note it in your records — our crypto tax guide explains what to keep. Keep everything — statements, chats, transaction IDs — in one folder. If your own account is restricted because a counterparty was investigated, the same paperwork is what gets it reviewed; see P2P crypto in Kenya for how to lower that risk, and crypto scams in Kenya for the bigger picture.