Safaricom is set to introduce a major privacy upgrade to its M-Pesa service, with phone numbers in transaction messages set to be partially hidden starting next week. Under the new system, users will no longer see full mobile numbers when sending or receiving money. Instead, only a masked version such as 0722***000 will appear alongside the sender’s name.
The move follows approval from the Central Bank of Kenya and is part of broader efforts to align digital payments with Kenya’s Data Protection Act, which emphasizes limiting the sharing of personal data to what is strictly necessary.
The update is expected to significantly reduce cases of fraud, spam messages, and unauthorized use of customer data, which have long been linked to the exposure of phone numbers during transactions. Previously, every payment whether to an individual or a business revealed both the sender’s name and full number, creating opportunities for misuse by marketers and fraudsters.
But with the new system, recipients who need full details will have to request access, and the sender must approve before the information is shared.
Safaricom says the change is aimed at strengthening trust and security across its platform, which serves millions of users daily. While transactions will continue seamlessly, the update marks a significant shift in how personal data is handled within Kenya’s mobile money ecosystem.
Ultimately, the feature reflects a growing focus on privacy-by-design in digital finance, as regulators and service providers move to better protect consumers in an increasingly connected economy.