Secured by IntaSend Payments
CBK-Regulated · PCI DSS Certified · M-Pesa Approved · Verify →
How We Protect Your Payments
256-bit SSL Encryption
Every connection between your browser and SOKONI is encrypted using TLS 1.3. Your payment details are never transmitted in plain text.
IntaSend — PCI DSS Compliant
All card and M-Pesa transactions are processed by IntaSend, a CBK-regulated payment provider certified to PCI DSS standards.
Payment Escrow
Your money is held in escrow until you confirm delivery. Sellers receive payment only after you confirm the order — protecting you from fraud.
Idempotent Payments
Every payment request carries a unique key. Duplicate or double charges are impossible — the system rejects any repeat charge for the same order.
Real-Time Fraud Detection
Automated monitoring runs 24/7 — detecting unusual patterns, velocity anomalies, and suspected fraud before it reaches your account.
Digital Receipts & Audit Trail
Every transaction generates a tamper-proof digital receipt with a unique reference and QR code. Verifiable at any time via payment-receipt.
M-Pesa Native
M-Pesa payments go through Safaricom's secure STK Push — your PIN stays on your phone. SOKONI never sees your M-Pesa PIN.
No Card Storage
SOKONI does not store your card number, CVV, or PIN on our servers. Card data is tokenised by IntaSend and processed in their PCI-DSS vault.
CBK & KDPA Compliance
SOKONI operates within the framework of the Central Bank of Kenya's digital payments regulations and the Kenya Data Protection Act 2019.
Accepted Payment Methods
M-Pesa STK Push
The fastest, safest payment method for Kenya. A prompt is sent to your phone — enter your M-Pesa PIN to complete. Instant confirmation.
Recommended
Visa & Mastercard
Debit and credit cards with 3D Secure authentication. Processed by IntaSend with PCI DSS security. Tokenised — SOKONI stores no raw card data.
M-Pesa Paybill
For users who prefer manual M-Pesa payment. Use the SOKONI Paybill number displayed at checkout. Reference your order number.
SOKONI Wallet
Pre-load your SOKONI Wallet with funds for faster repeat purchases. Wallet is secured with the same encryption as all other payment methods.
Buyer Protection
Every purchase on SOKONI's marketplace is covered by our Buyer Protection programme:
See our Refund Policy and Returns Policy for full details on how to claim.
Protecting Yourself from Scams
SOKONI will NEVER: ask for your M-Pesa PIN, bank password, or card number via email, phone, or chat. If you receive such a request claiming to be SOKONI, it is a scam.
Common Payment Scams — How to Avoid Them
🚩 Off-Platform Payments
If a seller asks you to pay via personal M-Pesa transfer or bank deposit outside SOKONI, refuse. Off-platform payments are not covered by Buyer Protection.
🚩 Fake Confirmation Messages
Scammers send fake M-Pesa confirmation screenshots. Always verify payment in your M-Pesa messages — not from what a seller shows you.
🚩 Too-Good-to-Be-True Prices
Listings priced far below market value for high-value items (phones, cars, laptops) are often scams. Use escrow payments and verify seller ratings.
🚩 Urgent Payment Requests
Pressure to pay quickly before an offer expires is a social engineering tactic. SOKONI never pressures buyers. Take your time; use the platform checkout.
Report suspected scams to security@mysokoni.co.ke or via the in-app "Report" button.
Security Disclosure
SOKONI takes security vulnerabilities seriously. If you discover a security issue on our platform, please report it responsibly:
Security Team: security@mysokoni.co.ke
Please include: description of the issue, steps to reproduce, and (if applicable) proof-of-concept. We will acknowledge within 24 hours and resolve critical issues within 30 days.
SOKONI does not currently operate a formal bug bounty programme but recognises responsible disclosure contributors.