My bank account was compromised!

My bank account was compromised!

At the branch(Galleria specifically), I got top tier service. I was asked to fill in two forms, they informed me that my ATM card could have been compromised if it wasn’t me transacting. We trashed the existing ATM card and applied for a replacement card for me at no fee. (Big WIN). They later informed me that they (Stanbic) will be contacting me via email.

3 ways M-Pesa APIs are changing retail payments in 2021

3 ways M-Pesa APIs are changing retail payments in 2021

If you’ve shopped in any major retailer in Kenya, you know the variance in Mobile money payments. In large retailers, on the retailer’s side; You are requested to pay to a Cashier specific till umber, in some, one branch utilizes one till number, in some, they request your number and push authorization to transact to your phone.  On the User side, the cashier asks for your number, or name for them to authenticate the transaction. In others the transaction auto authenticates itself. This show cases the API Variants in action.


Before integration

As a retail shop there are certain things one is to think about. Before pursuing Botlab to help you with the integration process, perhaps start with finding out if you are eligible and whether you can meet the requirements later.


Below is a checklist on what you need to kick off the process and what is required.

  • Paybill or Till number: This is what will be required to integrate your business. If you would like to sign up for one, one can apply online from here, or get assistance from any Safaricom Shop close to you. And who owns the till/store number
  • System: This is the system with which we will integrate the Safaricom M-Pesa System to. This can be a POS system for a shop, eatery/restaurant or ERP for a hospital or school
  • Internet Access: Both systems communicate in Realtime. For this to happen stable internet access is required
  • Domain and SSL: Domain means you need a website address. One can have a website or register a domain for the purpose of initiating this. In addition, its required that one has to have an SSL Certificate appended to the website.


During Integration

Just like any project, the lifecycle of integration depends on whether It’s important to understand the integration scope of the business integration cycle. Who owns the till number/paybill or is it by a merchant/aggregator? What systems do you want to integrate? Do you have an internal tech support or its outsourced? Do you have everything on the checklist or do you need help setting some of these requirements in place? What type of APIs would work in this scenario for your retail.

The Botlab integration process starts when consulting with the team to find out if you are eligible, and what requirements do you meet, and which ones we can acquire for you in readiness.


Integration can be done in 72hrs to 30days. This variance is brought about by the readiness of the client to meet all the requirements by Safaricom to kick off the process and also the details that are required throughout the process between Botlab and Safaricom on the clients behalf.

After integration

We will feature the different Retailers that we have seen utilize M-Pesa Integration for their business.

  1. In Supermarket- A, they ask for your number and push a request to your phone for you to authorize the transaction and complete the payment process. Other times they offer Cashier specific till number pegged to the counter.
  2. Supermarket B offer a branch specific till number, and ask for your number to key in the system to complete the transaction.
  3. Retail shops: Through their shops, once you pay to the till number the transaction authenticates without further information required.


Some of the benefits of integrating as a retailer are;

  • Reduction on time at the till: Different variants of the API when combined help reduce the time used by a customer paying for the goods.
  • Easy Reconciliation as transactions paid using Mobile money are reconciled in real time.
  • Access to “value-ads“ provided by Safaricom such as Web Platform access to monitor transactions, access to paying bills directly from the till among others.


Start your journey towards getting integrated now!

Are you looking to integrate your business? Do you have the requirements in place? Reach out to us and we will get your business integrated at a fee. We offer support throughout the entire integration process and even after the process is done depending on the package chosen.


BY: Mercy Njue & Faith Mwanyolo

Mpesa Integrated To School Fees Payment Doesn’t Have To Be Hard in 2021. Read These Tips

Mpesa Integrated To School Fees Payment Doesn’t Have To Be Hard in 2021. Read These Tips


The thought of integrating MPESA into our businesses tends to come with a lot of questions. Am I doing my business a favor? Are the costs incurred worth it? Worry not, it is not as intricate as it seems. Before we dive into the nitty gritty we should first understand the general concept that is MPESA. This is a name that will never be erased from the entire history of Fintech.
What started as a means to ease the process or repayment of microloans has quickly turned into the biggest mobile money transfer in the country and is a household name. It is recognized globally and has expanded to Tanzania, Mozambique, DRC, Ghana, Egypt, Afghanistan, Lesotho, and South Africa. It is fast, offers affordable, and generally saves the customer’s time as the trip to the bank that is riddled with long queues is eliminated.

With schools reopening after their closure of about 10 months, parents are all rushing to pay school fees for their children thus brings us to one of the ways MPESA is incorporated into day-to-day activities. The Lipa Karo service eases the process of paying school fees as it’s completed in simple and short procedure and can be done from wherever meaning the person paying the school fees can do it from the comfort of their own home.

Once an institution signs up for the Lipa Karo paybill number, they are issued with a business number that parents and guardians can use to make the payments. One can always obtain a Paybill or till number online.

This works like a normal paybill and the user journey is the same as making a regular payment. One simply goes to the Lipa na MPESA option on the app and selects Paybill. Next, the business number that is provided by the school is keyed in. If unsure of the business number, a USSD code (*234#) is used where the school name is the keyword. Once the payment is done, Safaricom sends the generic confirmation message and the process is completed.

From a Technical perspective:

This process makes use of Safaricom’s C2B API. The customer sends a payment request to the paybill from their mobile phone. MPESA receives the request and internally validates it first. By default, external validation is disabled and a special request has to be made to MPESA Business to enable it. If enabled MPESA sends a validation request to the validation URL registered for the school. The third-party (the school) validates the request and thereafter sends back a relevant message to MPESA. This has to be done within 8 seconds or the endpoint will be considered unreachable. MPESA then proceeds to act on the transaction according to the response given.

If the transaction is completed, MPESA now sends a confirmation request to the confirmation URL with the usual details of any transaction for example Transaction ID and time of payment. If canceled from the third party’s side, MPESA simply cancels the payment. What happens in external validation is disabled? MPESA automatically completes the transaction and sends a confirmation request to the Confirmation URL. This is the only API call that will be received as opposed to the two API calls received when external validation is enabled.

If there are no URLS registered, MPESA simply completes the request. Lastly, a generic MPESA message is sent to the customer and owner of the paybill with all the relevant details.


Prioritizing Your Mobile Payments. To Get The Most Out Of Your restaurant and hotel business in 2021

Prioritizing Your Mobile Payments. To Get The Most Out Of Your restaurant and hotel business in 2021


Kenya is highly dependent on the tourism industry (it contributes to 9% of  Kenya’s GDP) and the tourism industry goes hand in hand with the hospitality industry. If the hospitality industry is being competitive and keeping up with trends this also impacts the tourism industry. This can be achieved through the use of M-Pesa. In the last 10 years, M-Pesa has experienced great leaps of growth from being a mobile money transfer service to being a fully functional mobile money platform; it offers services such as loans, savings, payment offers, and many others. This growth has led it to be incorporated into our everyday life and no sector should be left behind in embracing this technology especially the hospitality industry.

M-Pesa offers a variety of payment options using its APIs. The APIs that are currently on offer within the daraja platform are:

  • B2C API:  an API that enables Business to Customer transactions. Companies can transact with customers as end-users of their products or services.
  • C2B API:  this API allows customers to business transactions. Customers can use Paybill or buy goods and services using this API.
  • Lipa na M-Pesa Online Payment API:  utilizes STK push to initiate transactions on behalf of a customer.

These different APIs can be utilized by hotels to increase efficiency in their payment process.

Safaricom has applications that hotels (including small hotels) can take advantage of as they can use the application to track transactions and store records, with M-Pesa for Business App they can maximize their effectiveness and efficiency. M-Pesa for business is an application that allows merchants to transact and track M-Pesa collection and disbursements.

Hotels should take advantage of these applications because it will allow businesses to:

  • Track business growth: Through this, they can be able to track income flows that support their growth. At the close of business each day they can view all accumulated values per day.
  • View full statements: Business can see all transactions that were made or received in the account. They can use money-in and money-out to filter between credit and debit cards.
  • Transact the pay feature allows one to send money that pays suppliers, refunds, or salaries and is directly sent to an individual M-Pesa The business can withdraw money collected from the till and move to the owner’s M-Pesa account, M-Pesa agent or bank account.
  • Manage account: M-Pesa business allows multiple access with weighted rights access to manage and transact on multiple till numbers under the same nominated number.
  • Roll up: allows you to push funds collected to the head office.

It goes without saying that when customers pay via till number you minimize the number of times you come into contact with cash and the possibilities of contracting the virus.


Case Scenario 

A business owner has an upcoming hotel with 10 employees. They can sign up for a till number online, through contracted merchants or through visiting any Safaricom customer care shop. Using a till number, they allow customers to pay using M-Pesa. Instead of the traditional way where the cashier asks for personal information such as name or phone number, Using Safaricom Daraja APIs they can now authenticate transactions from their hotel system OR POS. This will benefit the business to reduce the time and inefficiencies of manually verifying transactions.

For restaurants and hotels the C2B API is best for integration whereby customers can pay against their till and all the transactions can be reflected against one’s URL. However, for greater efficiency, they should use the M-Pesa for Business app which will enable them to not only allow payments but also keep better transaction records, pay employees and supplier directly from the till as well as move funds

If you are keen on discovering the possibilities of M-Pesa through integration, talk to us.