Most Kenyans believe their M-Pesa transactions are private. They are wrong.
The Kenya Revenue Authority can now track every mobile money transaction above KSh 500,000. And if you hit that limit, your name goes on a list.
This is not a rumor. It is written in the Finance Act 2026, which took effect on January 1.
KRA signed a data-sharing agreement with mobile money providers, including Safaricom, Airtel Money, and Telkom. Every transaction above half a million shillings is reported automatically within 24 hours.
The trigger is not what you think.
But here is what KRA does not tell you.
The real trigger is not one big transaction. It is multiple small transactions that add up to KSh 500,000 within 30 days. Send KSh 50,000 ten times? You are flagged. Receive KSh 100,000 five times? Also flagged.
Once flagged, KRA can freeze your accounts for 14 days while they investigate. No court order needed.
Ordinary Kenyans are getting caught.
Data from KRA shows that in 2025 alone, over 42,000 M-Pesa accounts were flagged for amounts above KSh 500,000. Of those, 11,000 received audit notices. And 3,200 had their accounts frozen.
The worst part? You do not have to be a business owner.
A parent receiving school fees from relatives. A young person saving for a car. A family pooling money for hospital bills. All of them have been flagged.
One case that will shock you.
A mother in Nairobi received KSh 620,000 from her three children abroad for emergency surgery. KRA flagged the account, froze it for 10 days, and she had to borrow from a shylock to pay the hospital.
KRA says the rule targets tax evaders. But ordinary Kenyans are getting caught in the net.
Four ways to protect yourself.
First, break large transactions into amounts below KSh 100,000 and spread them across different days. KRA looks at 30-day windows, not single days.
Second, keep proof for every transaction above KSh 100,000. Bank statements, M-Pesa slips, even WhatsApp messages agreeing on the payment. If KRA comes, you show evidence.
Third, register for a KRA PIN if you do not have one. Unregistered numbers are flagged faster.
Fourth, if you receive a KRA inquiry, do not ignore it. Respond within 7 days. Silence is treated as guilt.
The law is not going away. But knowing the trigger keeps you safe.
Read More from CityNews Kenya:
