District Kenya featureCurrent Affairs · 7 minute read
Back to District KenyaDistrict KenyaSearch

Current Affairs

M-PESA Tap to Pay in Kenya: How It Works Safely

Contactless M-PESA payments are designed to shorten the checkout, not remove your control. Here is what you need, what happens after the tap and the checks worth making before you enter your PIN.

A hand holding an NFC-enabled phone over a contactless payment terminal
A hand holding an NFC-enabled phone over a contactless payment terminal · HLundgaard · Wikimedia Commons · CC BY-SA 3.0

A shorter payment should still be a deliberate payment. M-PESA Tap to Pay lets an eligible customer bring an NFC phone close to an enabled payment device, review the transaction and authorise it with an M-PESA PIN.

That is different from blindly touching a screen and hoping for the best. The tap starts the process; it does not replace the most important checks.

What M-PESA Tap to Pay actually does

M-PESA Tap to Pay is a contactless way to begin an M-PESA merchant payment. NFC, short for near-field communication, allows two compatible devices placed very close together to exchange a small amount of information.

In a shop, the customer holds an eligible phone near the merchant's enabled device or point-of-sale terminal. The phone receives the payment request, shows the details and asks the customer to approve it. Safaricom's guidance says an M-PESA PIN is required for every transaction.

That last step matters. Contactless does not mean uncontrolled. A payment should not be complete merely because a phone passed near a terminal.

The service is useful in places where a merchant accepts it and the customer's phone and account meet the requirements. It does not replace every existing M-PESA route. Till numbers, paybills, QR payments and an STK Push may still be available when the tap route is not.

What you need before the first tap

Safaricom lists several basic requirements. You need an active Safaricom line registered for M-PESA, a compatible NFC-enabled phone, the official My OneApp and a merchant with an enabled payment device.

Before trying it at a busy counter, do a calm setup check:

  • Update the phone's operating system and the official app.
  • Download My OneApp only from the recognised Google Play Store or Apple App Store listing.
  • Confirm that the phone has NFC and that it is switched on.
  • Protect the phone with a strong passcode or biometric screen lock.
  • Keep your M-PESA PIN private and different from the screen-lock code.
  • Check that the Safaricom line in the phone is active and can access M-PESA normally.

On many Android phones, NFC appears under Connected devices, Connections, Contactless payments or a similarly named area in Settings. The wording depends on the manufacturer. Use the Settings search box for “NFC” if the option is difficult to find.

Owning a recent-looking smartphone is not enough proof. Some models sold in different markets have different hardware. Check the specification for your exact model number rather than relying on a friend's version of the same phone.

How an M-PESA Tap to Pay transaction should feel

The merchant begins the sale on an enabled device and presents the payment request. You bring the NFC area of your phone close to the marked contactless point. The phone should then show the amount and merchant information for review.

Pause there. A quick checkout still gives you time to compare the displayed amount with the total at the counter. Check the merchant identity, especially in a shared food court, market or event where several payment devices may sit close together.

If the details are correct, approve the transaction using the official prompt and your M-PESA PIN. Wait for the confirmation before leaving. The merchant should also receive confirmation through their authorised system.

Do not hand an unlocked phone to a stranger so that they can “help it tap.” You should keep physical control of the device, read the screen yourself and enter the PIN without anyone watching.

M-PESA Tap to Pay safety checks that matter

The familiar M-PESA safety habits still apply. A new interface does not change who must protect the secret information.

Read before you approve

Check the amount digit by digit. Kenyan shoppers are used to reviewing a till number after typing it; the same level of attention belongs here. If the amount is wrong, cancel and ask the merchant to restart the sale.

Check the merchant name or identifier shown. A legitimate attendant should be comfortable explaining which device belongs to the business.

Enter the PIN privately

Shield the screen and keypad. No merchant, rider, cashier or support agent needs to know your M-PESA PIN. Do not say it aloud, type it into a message or share it during a phone call.

If somebody claims a transaction failed and asks you to enter the PIN again, first check your M-PESA confirmation and balance. Duplicate approvals can create duplicate payments.

Treat unexpected prompts as a warning

Cancel a request you did not begin. Move away from the terminal, lock the phone and open My OneApp or M-PESA through your own trusted route. A hurried stranger should not decide what appears on your account.

Keep proof until the purchase is settled

Retain the M-PESA confirmation until you have the goods, receipt or service. If the merchant's screen is slow, your confirmation can help identify the transaction, but avoid exposing your full balance or unrelated messages.

What happens if the tap does not work

A failed tap is inconvenient, not a reason to surrender control. First confirm that NFC is on, the phone is unlocked and the correct part of the phone is near the terminal. NFC antennas sit in different positions, often near the back or top of the device.

Remove a very thick or metal-backed case if it blocks the signal, then try once more. Do not tap repeatedly while approving every prompt that appears.

If the terminal or phone still cannot connect, use a normal alternative offered by the merchant. Safaricom's guidance lists routes such as an STK Push, QR payment, till number or paybill. Verify the details on that route with the same care.

Never let a failed contactless attempt push you into sending money to a personal number unless that is clearly the merchant's authorised, verified method. Ask for a supervisor or choose another payment option if the request feels improvised.

NFC is short range, but your phone still needs protection

NFC is designed for very close-range communication. That helps prevent accidental connections from across a room, but it is not a replacement for device security.

Set the screen to lock quickly when idle. Turn on device-finding features and keep a secure backup of important information. Do not let notification previews reveal one-time codes on a locked screen.

If the phone is lost, use Safaricom's official channels promptly to protect the line and M-PESA account. Also use the phone maker's official lost-device service to lock or erase the device when possible. Do not follow a link sent by an unknown person claiming they found the phone.

Avoid modified copies of finance apps. An unofficial application can imitate a login screen, collect credentials or display misleading prompts. Store listings should show the genuine publisher, a sensible update history and the expected name.

Contactless payment etiquette for merchants and shoppers

Good payment design is partly human behaviour. A merchant should show the amount before asking for a tap, position the device where the customer can see it and allow enough time for review. The shopper should keep the phone ready without exposing the PIN.

At a queue, do not let pressure turn a secure payment into a rushed one. Ten seconds spent checking the screen is cheaper than hours spent tracing the wrong transaction.

If the amount changes after a discount, return or split bill, ask the attendant to cancel the old request and create a new one. The transaction on the phone should match the final receipt.

Families sharing shopping responsibilities should avoid sharing an M-PESA PIN. Send the required amount to the person making the purchase or use an account arrangement intended for that purpose. Shared secrets become difficult to protect and harder to investigate when something goes wrong.

When an older payment method is the better choice

Tap to Pay is optional. Use a till number, paybill or another official channel when the merchant is not enabled, your phone lacks NFC, the app is unavailable or you simply want a familiar route.

People using a basic phone are not excluded from M-PESA merely because contactless is available. USSD, SIM Toolkit and merchant prompts remain important. Accessibility also matters: a customer who cannot easily read a fast-changing screen should ask for the total aloud, review it at their own pace and use the method they can verify confidently.

Contactless is most valuable when it removes typing without removing clarity. The best payment method is the one that lets you confirm the recipient, amount and authorisation before money moves.

A one-minute checkout checklist

Before approving, ask yourself:

  • Did I start this transaction?
  • Does the amount match the bill?
  • Does the merchant information make sense?
  • Am I using an official Safaricom prompt or app?
  • Can I enter the PIN without anyone seeing it?
  • Have I received a clear confirmation?

If any answer is no, cancel and begin again through a trusted route. M-PESA Tap to Pay can make an ordinary checkout smoother, but the customer's best security feature remains the same: stop, read and approve only what you understand.

DI
Written by

District Kenya Editorial

District Kenya contributor