Tag Archives: AOSP

Kenyan con men take to the air waves!

Some guy called me last week and told me that he had accidentally sent me money on M-PESA, and could I please send it back. I told him that no, I hadn’t noticed any text messages, but that I would look. “Tafadhali, ndugu yangu, niangalilie” (please, my brother, look for me). As I had just been on the phone before he called, I hadn’t seen that there was, in fact, an SMS confirmation of an M-PESA transaction. I gave him a call back and told him that I’d return the money to him right away.

BC8JT386 Confirmed you have received Ksh 1,230 from JAMES KORIR on6/4/11 at 5:40 pm your new M-PESA balance is Ksh2,150

The M-PESA transaction confirmation SMS from “James Korir”…

M-PESA is Safaricom’s mobile banking platform. It’s kinda like a bank account that runs on your phone… as long as you have your phone and your PIN you can send or receive money extremely flexibly. The M-PESA application is embedded into your GSM SIM card using what’s called the “SIM Toolkit.” That means the M-PESA functionality can move from phone to phone, without having to be “installed.”

Android confusion…

CyanogenMod 7 logoThat model works well for most people, but because I always like to live on the edge my Android-powered Samsung Galaxy S doesn’t support the SIM Toolkit. The stock firmware does, but I’ve replaced Samsung’s boring software with CyanogenMod, a fork of the Android Open Source Project’s public Android 2.3 “Gingerbread” source code. Since it’s a known issue I always have to pop my SIM card into a crappy $20 Nokia phone whenever I want to use M-PESA.

Right as I was about to press the “Ok” confirmation to send the money back, the guy CALLS ME. Because this phone doesn’t have any sophisticated multitasking I freak out and cancel the call, only to find that my M-PESA dialog has disappeared. I navigated to the M-PESA application again but it refused to launch. Assuming that the transaction hasn’t gone through, I reboot my phone and try again. Surprise: “not enough funds to complete transaction!”

Now I’m really freaking out. “Stupid Android,” I think to myself; 1,230 shillings ($15) has just disappeared from my account and I still have to send this guy’s money back. Money I apparently DON’T have! In a moment of what appears to have been brilliance, I call Safaricom’s free customer service line to explain this bizarre scenario. I don’t bother explaining that I’m running some crazy operating system on my phone, and just stick to the facts.

Safaricom lady: “Sir, who sent the message? Did it say “M-PESA” at the top?
Me: “No.

And that’s when the light bulb turned on, this guy is a con man. Crap. How embarrassing. If I hadn’t have been so broke I would have gladly sent this guy “his” money and never thought twice about it!

Moral of of the story…

Stay sharp, people! M-PESA SMSes will always be from “M-PESA!” Con men rely on confusion and take advantage of nice guys like you and me.

In retrospect, the confirmation SMS was close to the “real thing,” but far from perfect. It’s crystal clear now, but in the heat of the moment I admit I didn’t even notice the flaws in grammar and punctuation! For the record, I also blame the preoccupation with SIM swapping and crappy Nokia phones! I’m not always so daft…