Safaricom Will Hide Your Name and Phone Number When You Send M-Pesa

Privacy on M-Pesa has always been a bit of an oxymoron. For years, every time you sent money to a vendor or a stranger, you were essentially handing over a business card with your full name and phone number attached. Starting March 24, Safaricom is finally closing that tap. In a long-awaited update to its peer-to-peer (P2P) service, the telco will begin masking personal identifiers in transaction notifications.

The change is straightforward but significant. Instead of seeing your entire mobile number and three names, recipients will now see a truncated version—think 0712***678—and only your first and last name. It has taken six years of incremental steps to get here, but the move signals a fundamental shift in how Safaricom views the phone number: it is moving from a public identifier to a private backend credential.

The End of the Unsolicited Follow-up We’ve all been there. You pay for a service or send money to someone you don't know, only to find yourself on the receiving end of unsolicited marketing texts or, worse, strange phone calls an hour later. This update directly attacks that "leakage." By masking the number in the SMS inbox, Safaricom is preventing your data from being passively captured, screenshotted, or scraped by anyone with access to the recipient's phone.

There is a fallback for genuine cases where identity verification is necessary. If a recipient needs to know exactly who paid them, they can forward the transaction message to 334. This triggers a request to the sender, who must explicitly give consent to share their full details. It places the power back into the hands of the person sending the money. Default privacy is now the standard, and disclosure is a conscious choice.

The Gaps That Still Exist Bank-to-M-Pesa transfers remain unmasked on the sending bank's end. When someone sends from their banking app, what gets displayed in the notification depends on what that bank chooses to implement.

Inter-network transfers—sending from M-Pesa to Airtel Money or T-Kash—involve a handoff between separate operators. What Safaricom masks on its side does not automatically carry through to the notification the recipient sees on another network. Until the CBK mandates industry-wide standards covering every bank and network, privacy will remain a patchwork.

Toward a Post-Phone Number Identity The most interesting aspect of this is what it says about the future of M-Pesa. Currently, your identity is tied to your SIM card. However, the trajectory suggests a move toward something closer to how bank cards function. Your card number is just a visible alias that hides your actual bank account number in the backend. The card takes the exposure risk; the account stays buried.

While Safaricom has officially denied plans to decouple transactions from phone numbers entirely, their actions suggest otherwise. We are moving toward a version of M-Pesa where your phone number stays buried in the system and only a secure transaction ID ever surfaces. March 24 isn't just a date for a software update; it is a milestone in the journey toward a truly private digital economy in Kenya.