Tricksters & dishonest people have always existed in our midst. It is definitely naive to imagine our techno-savvy way of life is an exception to the old age social patterns. This afternoon, an M-Pesa agent was a victim of a new line of M-Pesa fraud.
On Febuary 1st, 2009 in a peri-urban setting about 24 kilometres from the Nairobi City Centre:
- Around 2:00 p.m., a lady & gentleman who looked to be in their mid-twenties visited an M-Pesa outlet, claiming to be Safaricom supervisors. The two wore valid looking M-Pesa badges & even carried M-Pesa promotional material for the outlet. The two inspected the outlet’s logbooks and left. NOTE: It is normal for Safaricom to send supervisors to routinely inspect various parameters on operations of M-Pesa outlets. The supervisors usually wear Safaricom badges & often take with them M-Pesa promotional material to the outlets.
- About 20 minutes after the purported supervisors left, an old-looking man estimated to be in his late 50s or early 60s, came to the same outlet requesting to withdraw K.Sh. 35,000. The man was allowed to withdraw the desired K.Sh. 35,000 & went ahead to initiate the withdrawal from his phone, as is the normal procedure.
- Shortly after, the outlet attendants received an SMS purporting to record & authenticate the old man’s withdrawal transaction. The SMS received by the attendant had a valid looking M-Pesa transaction number & the old man’s purported names which were verified against an original national ID which he presented.
- The M-Pesa attendant, convinced about the validity of the transaction (just like hundreds of others processed daily), gave the old man an inital K.Sh. 30,000 & was reaching out for the remaining K.Sh. 5,000. Before the extra amount could be retrieved, the old man calmly signed the outlet transaction & walked away saying he would come for the remainder later.
- The M-Pesa attendant continued with the next customer, expecting their float to have increased by K.Sh. 35,000 as a result of the withdrawal. The expected float was then not reflected in the valid M-Pesa SMS after the next customer’s transaction, raising a red flag to the M-Pesa attendant.
- The M-Pesa attendant shortly after called 234 – Safaricom’s M-Pesa service line – for clarification & the service support person on the other end reported that the transaction withdrawing K.Sh. 35,000 wasn’t reflected in the M-Pesa system.
- Alarmed at the Safaricom claim, the M-Pesa attendant frantically attempted to call out for the old man who had disappeared by then without a trace.
- Late in the afternoon, the M-Pesa attendant went to the police station to report the incident. The police officers took initial details & promised to visit the outlet the following day for further investigations.
A number of discrepancies have since been highlighted on the fake M-Pesa SMS which is copied & pasted below:
P47DT685 confirmed on 01/02/2010 at 2:20 PM Give KSh 35,000 to DANIEL MAINA New M-Pesa balance is Kh 42,049
I shal leave the analysis of the text & resulting fraud to the reader for now.
According to the Safaricom M-Pesa support person, the M-Pesa attendant only has to count their loss as no indemnity is payable to the attendant for their predicament. When the known Safaricom / M-Pesa representative for the affected region was contacted, they disowned the “supervisory” visit by the lady & gentleman 20 minutes before the “withdrawal” was requested. I wonder how many more M-Pesa agents have fallen pry to this new M-Pesa trickery?