Trust, plainly explained

Real payment activity

The activity feed on our landing page shows only completed, confirmed M-Pesa payouts. We never display invented payments, invented user counts or invented withdrawal notifications.

Phone numbers in the public feed are always masked. We never publish a complete phone number, and we never publish names.

Your money is recorded, not estimated

Every movement in your account writes an entry to an append-only ledger with an amount, a type, a status, a reference and a timestamp. Your dashboard balance is a projection of that ledger.

Corrections are never made by deleting a record. If something must be corrected, we write a reversal entry that points at the original.

Security measures in place

• HTTPS across the entire site
• PINs hashed with a strong algorithm, never stored or logged in plain text
• Login attempt limiting and temporary account lockout
• CSRF protection on every form
• Prepared database statements everywhere
• Authenticated and idempotent payment confirmations
• Duplicate payment and duplicate payout protection
• Audit logs for account, money and admin actions

How payments are actually confirmed

We never trust a browser to confirm a payment. When you approve an M-Pesa request on your phone, the payment provider sends a confirmation to our servers. Only that server-side confirmation can mark a payment as successful.

This is also why a payout can never be paid twice, even if the provider sends the same confirmation more than once.