Rey MungaiProduct designer
← My Work

Moving M-PESA statement verification out of the branch

Safaricom · Senior Product Designer · Fintech · 3 months

A self-serve verification flow for 50M+ users, including a USSD path for feature phones, that removed tens of thousands of branch visits a day.

A street in Kenya with a man loading a bicycle beside a yellow crate, an M-PESA shop with a blue door behind him.
50M+users in scope
10,000sdaily branch visits removed
−40%related support tickets
USSDpath alongside the smartphone one

Context

Replacing an in-person verification process with a self-serve flow for M-PESA’s 50 million-plus users, built to work whether or not someone owns a smartphone.

Problem

M-PESA statements needed to be verified in person. A customer who needed to prove a transaction, for a loan application, a dispute, a legal matter, had to physically visit a Customer Experience Centre, wait in a queue, and have staff confirm it manually. At the scale M-PESA operates, that meant thousands of people a day standing in branches for something a phone should have been able to do, and a manual process sitting between a customer and their own financial record was also a slower, less consistent way to catch fraud than a system built to check for it automatically.

A crowd queuing outside a Safaricom Customer Care centre, with motorbikes parked in the street.

Before

  1. 1Need to prove a transaction: a loan, a dispute, a legal matter
  2. 2Visit a Customer Experience Centre in person
  3. 3Wait in a queue
  4. 4Staff confirm the statement manually
In person

After

  1. 1Generate a verified statement yourself
  2. 2PDF carries a QR code and a digital stamp
  3. 3Anyone can check that it's genuine
  4. 4No human in the loop on Safaricom's side
Self-serve
The same verification, before and after.

Solution

The shipped flow gave customers a self-serve way to generate a verified statement: a PDF embedded with a QR code and a digital stamp, checkable by anyone who needed to confirm it was genuine, without a human in the loop on Safaricom’s side. Because a meaningful share of M-PESA’s user base uses feature phones, the flow needed a USSD path alongside the smartphone one, treated as a requirement rather than a secondary option, since a verification tool that only worked on a smartphone would have excluded exactly the customers least able to make a special trip to a branch instead.

Verified PDF statementsEmbedded with QR codes and digital stamps for authenticity.
USSD fallbackSo non-smartphone users could still validate statements.
Inside the M-PESA appSeamless integration into the existing app, for scale and trust.
Key design decisions.

A verified M-PESA statement with a QR code and a digital stamp showing the statement verification code, above the summary and detailed transaction tables.

The verified statement: a QR code and a digital stamp let anyone check it is genuine.

Result

Daily visits to Customer Experience Centres for statement verification dropped by tens of thousands, and related support tickets fell by 40%. Customers got a verified document they could produce anywhere, and Safaricom got a fraud check that didn’t depend on a person’s judgment at a counter.