A message arrives: "Confirmed. You have received GH₵800 from a customer. Please return the money, it was sent by mistake." Your wallet balance may not even show the money. But the caller is already on the phone, polite at first, then pushing. This is one of the most common ways mobile money users lose cash, and the same pattern shows up with M-Pesa in Kenya and with similar wallets elsewhere.
This guide covers how wallet fraud usually works, the red flags that give it away, a lock-down routine you can finish in ten minutes, and what to do in the first hour if you've already been hit. Nigerian readers will recognise much of it from bank-app and POS fraud; the mechanics are close, only the apps and regulators differ.
Why mobile money wallets are a target
Mobile money moves value instantly, often with just a phone number and a PIN. Many users are first-time digital money users, agents handle large volumes of cash, and the whole system runs on text prompts that look official. Fraudsters don't need to hack anything. They only need you to approve a prompt, read out a code, or hand over your PIN.
That's the key idea: nearly every wallet scam is social engineering. The scammer gets you to do the work. So your best protection is a few fixed rules you never break, whatever story you're told.
The common scams and how each one works
1. The "sent by mistake" reversal
You get a text that looks like a credit alert, or you really do receive a small amount. A caller says they sent it in error and begs you to send it back. Often the alert is fake, so returning money means paying out of your own balance. Where the credit is real, it may be linked to a stolen or disputed transaction.
What to do: Check your balance through the provider's official menu or app, not the SMS. If money really did arrive by mistake, don't send it back yourself. Contact your provider's customer care and let them handle the reversal formally.
2. The fake customer care call
Someone says they're from your provider. Your account will be "blocked", "upgraded" or "verified" unless you share your PIN, an OTP or a code just sent to you. Real staff don't need your PIN. Ever.
3. SIM swap and number takeover
A fraudster convinces a retail outlet, or an insider, to move your number to a new SIM. Your phone suddenly loses network and the wallet is emptied from their device. Sudden "no service" with no explanation is the warning sign. Our Nigerian-focused notes on this are useful background, as the pattern is the same: act on loss of signal immediately, using another phone to call your provider.
4. Agent-side tricks
At a kiosk, a dishonest person may watch you enter your PIN, ask you to "confirm" a transaction on a different phone, or process a withdrawal different from what you asked for. A few cases involve cash handed over after a fake confirmation message. Our post on fake bank alert scams at shops and POS explains how to confirm payment properly, and the same habit applies to mobile money agents.
5. Fake prizes, jobs and loans
"You've won a promo, pay a small fee to release it." "Your job application was successful, send a registration fee to this wallet." "Instant loan, pay insurance first." Any request to pay before you receive something is the red flag. For job-related versions, see how to spot fake job adverts and recruitment fee scams.
6. Romance and "investment" setups
Someone you met online asks you to send money to a wallet for a "customs fee", "flight" or "guaranteed returns". Wallets are popular here because transfers are fast and hard to recall. The warning signs are laid out in our guide to romance scam warning signs.
Red flags that should make you hang up
- The caller creates urgency: "within 10 minutes", "your account closes today".
- They ask for your PIN, a one-time code, your full ID details or your wallet password.
- They want you to dial a code they dictate. Some codes forward calls or authorise transfers.
- They call from an ordinary mobile number but claim to be the company.
- They ask you to send money first to receive money.
- They ask you to keep it secret from family or the agent.
- Their message has odd spelling, a strange sender name or an unfamiliar link.
If two or more apply, end the call. You lose nothing by hanging up; a real provider will still be there when you call back through its official line.
A ten-minute lock-down routine
- Change your PIN if it's a birthday, phone number, "1234" or something anyone close to you could guess. Choose a number not tied to your life.
- Never share the PIN with an agent, relative or "helper". If you must have someone transact for you, move only the amount needed.
- Save your provider's official customer care line in your phone, taken from the provider's website or app, not from a text message or social media comment.
- Turn on transaction alerts and, if your provider offers it, app or SIM-based extra verification.
- Link your wallet to a SIM you protect. Don't leave an old SIM unregistered or unused; numbers get recycled.
- Keep a low balance. Treat the wallet like a purse, not a savings account. Move larger sums to a bank or a savings product.
- Review limits. Lower daily transfer limits, if your provider allows it, cap the damage from any single breach.
A worked example (hypothetical)
Ama, a trader in Kumasi, gets a text showing GH₵1,200 received, then a call from "a customer" asking for GH₵1,000 back because they "typed the wrong number". She feels pressure, and the caller offers her GH₵200 "for her trouble".
Instead of sending anything, Ama dials her provider's official menu and checks her balance. The GH₵1,200 isn't there. The text was fake. Had she sent GH₵1,000, she would have lost her own money, with no refund. She blocks the number and forwards the SMS to the provider's fraud channel.
The same happens with a Kenyan trader, say in Nakuru, who receives a "confirmed" message for KSh 5,000. The names and currency change; the check does not. Balance first, panic never.
If you've already been scammed: the first hour
- Call your provider's official line immediately from another phone if needed. Ask them to freeze the wallet and flag the transaction. Speed matters most.
- Write down details: time, amount, recipient number, transaction ID, the scammer's number and what they said.
- Screenshot messages and call logs before deleting anything.
- Change your PIN and any linked passwords, including email and banking apps connected to the number.
- Report to the police and get a reference number. In Ghana, your provider and the police cyber unit are the starting points. In Kenya, report to the police and your provider; ask the provider how to submit the case formally. Check each official site for current channels.
- Warn your contacts if the scammer may have got access to your messages or number.
Be realistic: recovery isn't guaranteed. Funds already cashed out are hard to return. But quick reports increase the chance that a receiving account is frozen. Beware of "recovery agents" who then contact you offering to retrieve funds for a fee; they target the already-defrauded.
Common mistakes to avoid
- Trusting caller ID. Numbers can be faked or look local.
- Trusting a screenshot as proof of payment. Confirm in your own wallet or bank record.
- Dialing codes someone reads to you. If you don't understand what a code does, don't dial it.
- Sharing codes "to cancel" a transaction. A code sent to you is for you only.
- Waiting until morning. Overnight delays give fraudsters time to cash out.
- Letting agents hold your phone. Keep control of the device during the transaction.
How the advice differs by country
| Situation | Ghana | Kenya | Nigeria |
|---|---|---|---|
| Main wallet type | Mobile money wallets tied to a telecom or bank | M-Pesa and other telecom wallets | Bank apps, fintech wallets and POS agents |
| First call | Your wallet provider's official line | Your wallet provider's official line | Your bank or fintech's official line |
| Common identity link | SIM registration and national ID | SIM registration and national ID | NIN and BVN linked to accounts |
| Next step | Police report, provider complaint | Police report, provider complaint | Police report, bank complaint |
Rules, limits and complaint channels change, so confirm them on your provider's and regulator's official pages. Nigerians should also read our post on fake BVN update calls and phishing SMS, since the same scripts get reused across borders.
Frequently asked questions
Can I reverse a mobile money transfer I sent by mistake?
Sometimes, but only through your provider, and only if the recipient hasn't moved the funds or if the system allows it. Report fast and give the transaction ID.
Does the provider ever ask for my PIN?
No. If anyone asks for your PIN or a code, treat it as fraud, even if they know your name or balance. Scammers often buy or steal personal details.
Is it safe to use agents?
Yes, with care. Use agents with a visible, established kiosk, enter your PIN yourself while covering the screen, and confirm the balance after each transaction.
What if the scammer knows my name and ID number?
That doesn't make them genuine. Data leaks and insiders mean details can be bought. Judge the request, not the knowledge.
Your next step today
Pick up your phone, change your wallet PIN if it's guessable, and save your provider's official care number from its own website or app. Then tell one relative who uses mobile money about the "sent by mistake" trick. It takes five minutes and covers the most common loss.
This article is for general information only and is not financial, legal, or tax advice. Prices, rates and rules change quickly, so check current details before making money decisions.