How do I report a scam?

Email support@paysasa.com with the payment reference and any messages.

Security & trust

Payment security and
fraud prevention

Q: What happens if my account is compromised?

Contact support@paysasa.com immediately with the payment reference so the team can review recent activity.

Paysasa keeps buyer payments, business wallets and payouts on controls you can explain to a customer and to an auditor.

AML and KYC policy Privacy policy

Payment controls

Secure

Signed API requestsTenant signature headerOn

Wallet holdsRecent top-ups held before withdrawalActive

Buyer protectionCheckout funds held until deliveryHeld

Fraud reviewUnmatched deposits reviewed by a personManual

How payments stay accounted for

PCI DSS

Card data is handled through compliant payment partners.

Signed requests

Business API calls use a tenant signature header so a captured request cannot be replayed from another host.

Wallet holds

Recent top-ups stay on hold before withdrawal or M-Pesa send. In-app transfers between wallets are not held.

Checkout settlement

Paid sales settle to the business wallet chosen for that checkout, not a personal fallback.

Access control

Business staff see only the permissions they are given. Closed or suspended businesses cannot change settings.

Fraud review

Unmatched paybill deposits stay unmatched until a person matches them. They are not credited automatically.

Verification and compliance

Customers and businesses are verified before checkout and withdrawals, and activity leaves an audit-ready trail.

KYC verification

Identity checks before checkout and withdrawals. Gold and Platinum badges show which merchants have been reviewed.

AML and KYC policy

Read how Paysasa approaches anti-money laundering and know-your-customer checks in the AML/KYC policy.

Privacy

How personal data is collected and used is set out in the Privacy Policy. Questions go to [email protected].

How buyer protection works

Open the payment from your Paysasa activity and choose dispute while the funds are still held. Paysasa pauses release while the case is reviewed, then releases the payment to the seller or returns it to the buyer.

Pay into protection

The buyer pays through Paysasa checkout. Funds stay held until the order terms are met.

Seller fulfils

The seller ships or delivers. Both sides can see the payment status in one place.

Release or review

When the buyer confirms, the seller is paid. If something is wrong, open a dispute before release.

Stay safe with a few habits

Most fraud starts with a message, not a hack. These habits stop nearly all of it.

Never share your one-time codes or PIN, even with someone claiming to be Paysasa
Pay and release funds only inside the Paysasa app or website
Check the Gold or Platinum badge before paying a new merchant
Keep API keys on your server and rotate them if exposed

Found a vulnerability or scam?

Send the details and any payment reference to our team. Please do not access other users’ data or disrupt the service while testing.

[email protected]Contact us

Frequently asked questions

Card data is handled through PCI DSS-compliant payment partners.