Safaricom has announced a major update to its M-PESA platform that will reduce the amount of personal information shared during transactions, in a move aimed at strengthening customer privacy and curbing misuse of data.
In a statement released on Wednesday, March 18, the company said the changes will take effect on Tuesday, March 24, introducing a data minimization approach that limits what users can see when sending or receiving money.
Under the new system, customers making peer-to-peer (P2P) transactions will no longer view full phone numbers in transaction notifications. Instead, numbers will appear in a masked format, such as 0722***000, helping to shield users from exposure.
Safaricom said names will also be shortened, with only two names displayed instead of three. The adjustment is meant to make it easier for users to identify transaction parties while avoiding unnecessary disclosure of personal details.
Despite the changes, key transaction information will remain visible. Details such as the date, transaction number, and amount sent will continue to be fully displayed to maintain clarity and accountability.
To complement the update, M-PESA has introduced a new recipient verification feature through Code 334. This allows recipients to confirm the sender’s identity by forwarding the transaction message to the code. Once initiated, the sender receives an SMS asking whether they are willing to share their full contact details.
If the sender agrees, the recipient receives the full name and mobile number. If the request is declined, the recipient is notified accordingly. Safaricom noted that each verification request is limited to one per transaction and remains valid for 24 hours.
The company said the changes are designed to protect users from risks such as unwanted calls, spam messages, and harassment that can arise after sharing phone numbers. It also aims to reduce cases of fraud and social engineering, where scammers exploit transaction details to target individuals.
Safaricom added that the update aligns with global data minimization practices, which focus on sharing only the necessary information required for a service. The move is expected to build trust among users and enhance confidence in digital transactions.
The rollout builds on earlier privacy measures already applied to Buy Goods and Paybill services, as well as internal systems and transaction statements over the years.
Speaking during a media briefing, Safaricom CEO Peter Ndegwa said the initiative is part of a broader effort to protect customer data while supporting seamless transactions.
"Our deliberate Data Minimization journey, from Pochi la Biashara in 2020 to masking P2P recipient details starting March 24th, ensures we handle your information with the utmost care, so you can transact and grow with absolute peace of mind," he said.
Ndegwa also urged collaboration across the industry to strengthen digital safety.
"We call on our industry partners, regulators, and customers to join us in protecting digital footprints. Together, we can build a trusted, secure Kenya where every individual and business can thrive without compromise," he added.
Safaricom Chief Financial Services Officer Esther Waititu said the update reflects the company’s focus on balancing convenience with privacy.
"M-PESA is more than a service; it is a partner in your daily life, empowering you to build your future. Because we know you trust us deeply, protecting that journey is our highest priority. As awareness around data privacy grows, we are taking proactive steps with Data Minimization," she explained.
Waititu added that the changes go beyond protecting transactions and are aimed at strengthening the wider digital space.
"By ensuring your personal information is handled with the utmost care and sharing only what is absolutely necessary, we are doing more than securing transactions; we are building a safer, more inclusive digital economy where every Kenyan can thrive with confidence," she added.
