Safaricom CEO, Peter Ndegwa/HANDOUT

Safaricom has introduced a data minimisation feature on its mobile money platform, M-Pesa, to enhance user privacy by masking customer phone numbers during transactions.

The plan is scheduled for rollout on March 24 after receiving approval from the Central Bank of Kenya (CBK).

This update masks numbers for Till, PayBill, and peer-to-peer payments, limiting personal data exposure.

This means that M-Pesa transaction notifications to merchants will no longer display the customer’s full phone number, showing only partial digits instead.

According to Safaricom CEO Peter Ndegwa, the feature will ensure that only two names of the sender are displayed and three middle figures of the mobile number on a transaction are masked.

Customers wishing to know the details of the sender will have a 24-hour window period to request the information.

“We have an obligation to ensure maximum digital security for our customers. This feature is a major step in the right direction towards fighting against fraud,” Ndegwa said.

As digital payments continue to grow, Ndegwa said that concerns around privacy and responsible data usage become increasingly important.

“Our customers want convenience, but they also need to feel that the information entrusted to us is handled with care, respect, and integrity.”

He revealed that the firm’s data minimisation journey started with Pochi la Biashara in 2020 by reducing the customer information that merchants could view.

In 2021, Safaricom internally cut back on the customer information that the front staff and support staff could access, strengthening internal privacy controls.

The following year, the telco began masking phone numbers on M-Pesa statements, reducing exposure of personal details across customer touchpoints.

“In 2024, we implemented API-level data minimisation, ensuring partners only receive the minimum data required to complete a service,” Safaricom’s chief financial services officer said.

She added that from March 24, recipients will only see two names and a masked number. “This journey reflects our ongoing commitment to embedding privacy-by-design across our financial ecosystem.”