Safaricom

For nearly two decades, every M-Pesa payment in Kenya quietly exposed one critical piece of personal data: the sender’s phone number. Whether paying for fuel, groceries, or a boda boda ride, users automatically shared their mobile numbers with recipients and merchants. That number could be stored, shared, resold — or worse, harvested for fraud. Now,