With the rise of the internet cyber crime has become one of the most burning issues of the modern society. M-pesa the generous money transfer method has been on the spot for being the favorite target for the fraudsters. (Kindly note that any information shared in this post is for educational purposes only, what you choose to do with it is entirely up to you and therefore your responsibility.)


The fraudsters seem to be devising new methods almost daily and Safaricom, the victim is surely getting overwhelmed by the loop holes in its system. The newest trick is to via sim swap, where your sim is swapped and your money transferred without your knowledge.

The first step is usually to obtain the targets number, which is mostly a random guess someone the fraudster knows to have stashed cash in M-pesa. Next is to get the IEBC app which plays the biggest role in the heist. The IEBC app provides all the targets details starting from the ID number to the sub-location the target voted in ( which in many occasions is usually the home sub-location of the target).
Next is usually to call the host and tell them that their number is registered twice or something as intelligent as that, ( note that its not the stupid calls that tell you you have won cash from a promotion you never even participated in.) to convince them that the call is from Safaricom, they tell you your three names, your national ID number, your county, your constituency, your ward, your location, your sub-location etc.
After this they ask you to confirm that the number is yours so that they can deregister the other number  that your number is co-registered with. They ask for your sim card's pin, the one on the sim card's plate. They then thank you for your time, or sometimes ask if you have cash in M-pesa, but that is if they only think that you've trusted them, and it is usually to make sure they don't waste their time on nothing. (Note that they don't ask for your M-pesa pin)
Lastly is to swap your sim-card, this is usually pretty easy since while doing this, you are only required to have the ID number, the phone number and the pin on the sim card's plate. After the sim swap they only do require to transfer the money to a bank account, note that this is done with a service pin which is pretty easy to create (without any of your personal details, not even the M-pesa pin), the first send a shilling to the number though to get the actual balance on your account.
With that you lose your sim card and your money, even if you report you probably can't get your sim card back since the latest pin on the plate is usually required to swap the sim card back to you.

To stay safe, always keep your money in M-shwari or KCB-M-pesa since they can only transfer money that is readily in M-pesa as the don't have the M-pesa pin. Also make sure that you confirm calls from your service providers.