How you can lose money via Safaricom SIM swap and how to recover your Lost Cash

Safaricom SIM swap fraud (also called SIM swapping) is a serious scam in Kenya where fraudsters trick Safaricom into transferring your phone number to a new SIM card they control. 

This gives them access to your calls, SMS, and — most critically — your M-Pesa account and any bank accounts or services that use your phone number for verification (like OTPs or two-factor authentication).

How fraudsters typically carry out a SIM swap and cause financial loss

1. They gather your personal information. Fraudsters collect details like your full name, ID number, date of birth, phone number, approximate registration location, mother's maiden name, or other data from social media, data breaches, phishing, or public sources.

2. They impersonate you at Safaricom. They visit a Safaricom shop/agent (or sometimes exploit insider help) and pretend to be you, claiming they lost their SIM or need a replacement/new registration. 

3. They present fake/forged documents or use stolen identity info to convince staff to issue a new SIM linked to your number.

Your original SIM gets deactivated

Once the swap succeeds, your phone loses network signal immediately — you can't make calls, send SMS, or use mobile data. The fraudster now receives all calls and texts meant for you.

4. They access and drain your money  They receive M-Pesa transaction alerts, OTPs, or reset codes.  

5. They log into your M-Pesa (often knowing/guessing your PIN or resetting it via intercepted codes).  

6  They transfer your balance to their numbers/wallets.  

7  They take out Fuliza overdrafts, M-Shwari loans, or other mobile loans in your name (leaving you with debt).  

8. They target linked bank accounts, crypto wallets, email, social media, or any service using SMS-based 2FA to steal more or change settings.

Victims can lose thousands to hundreds of thousands of shillings in minutes, plus face loan recovery issues.

Safaricom has reduced successful malicious swaps significantly (to around 40 per 750,000 swaps in recent reports), thanks to stricter ID checks, biometric registration options, and bank APIs that flag recent swaps. 

However, cases still occur, with investigations rising in some periods.

Signs you've been SIM-swapped

1. Sudden loss of network (no calls/SMS/data).

2. Unable to access M-Pesa or receive expected OTPs.

3. Unknown transactions or loan requests appearing later.

How to protect yourself and minimize risk

1. Activate SIM swap protection immediately: Dial *100*100# on your Safaricom line. This locks your SIM so it can only be swapped if you are physically present (or via stricter verification).

2. Register biometrics (fingerprint/voice) at a Safaricom shop for extra security.

3. Use a strong, unique M-Pesa PIN (avoid 0000, birth year, etc.).

4. Never share personal details, ID copies, PINs, or OTPs.

5. Check lines registered in your name: Dial *106#.

6. If your phone suddenly loses signal, contact Safaricom fraud desk right away (call 0722 002 100 or visit a shop with ID).

Use app-based 2FA (e.g., Google Authenticator) instead of SMS where possible for non-M-Pesa accounts.

7  Forward suspicious messages to 333 to report.

If you suspect a swap has happened, act fast — contact Safaricom immediately to regain control and report to police if money is lost. Stay vigilant, as fraudsters evolve tactics.