Trust & Safety

Payment Security

How payments work on SOKONI MARKETPLACE  •  Questions? Help Center

OUR PAYMENT PROVIDER

Payments by IntaSend

M-Pesa

Payments processed by IntaSend  ·  M-Pesa  ·  IntaSend’s security page →

How We Protect Your Payments

🔒

Encrypted connection

SOKONI MARKETPLACE is served only over HTTPS, so what you send between your browser and SOKONI is encrypted in transit.

🛡

Processed by IntaSend

Payments are processed by IntaSend, our payment provider. IntaSend describes its own security and compliance on its security page.

🏦

Paid only when confirmed

An order is marked paid only after IntaSend confirms the payment to SOKONI’s server — never because a page or a screenshot says so.

🔄

Duplicate-payment checks

Each payment request carries a unique reference, so a repeated request for the same order is recognised instead of being charged again.

🚨

Report anything suspicious

If a payment, seller or message looks wrong, tell us through the Help Center or the in-app “Report” button and our team will look into it.

📋

Digital receipts

Confirmed payments come with a digital receipt and a unique reference you can quote to support. See payment receipts.

📱

M-Pesa Native

M-Pesa payments go through Safaricom's secure STK Push — your PIN stays on your phone. SOKONI never sees your M-Pesa PIN.

👤

No card details stored

Card payments are not available on SOKONI yet. SOKONI does not store card numbers, CVVs or PINs.

⚖️

Your personal data

We handle personal data under the Kenya Data Protection Act 2019. See our Privacy Policy.


Accepted Payment Methods

📱

M-Pesa (available now)

Processed by IntaSend. A prompt is sent to your phone — enter your M-Pesa PIN on your phone to complete. Your order shows as paid once the payment is confirmed.

Available now

💳

Other methods (not available yet)

Cards and other IntaSend methods are added only after each has been verified with a real, confirmed payment on SOKONI. Until then they are not offered at checkout.

🏦

No manual payments

Pay only through SOKONI’s checkout. Do not send money to a personal number, Paybill or bank account that someone gives you outside the checkout.

👛

SOKONI Wallet

Your SOKONI wallet is SOKONI’s record of amounts owed to you, such as earnings or refunds. It is not a bank account. Seller withdrawals are temporarily unavailable; earnings remain recorded and you will be told in the app when withdrawals reopen.


Refunds and Returns

If something goes wrong with an order you paid for through SOKONI’s checkout, you can ask for a refund or a return.

See our Refund Policy and Returns Policy for full details on how to claim.


Protecting Yourself from Scams

SOKONI will NEVER: ask for your M-Pesa PIN, bank password, or card number via email, phone, or chat. If you receive such a request claiming to be SOKONI, it is a scam.

Common Payment Scams — How to Avoid Them

🚩 Off-Platform Payments

If a seller asks you to pay via personal M-Pesa transfer or bank deposit outside SOKONI, refuse. SOKONI cannot see or verify payments made outside its checkout and cannot refund them.

🚩 Fake Confirmation Messages

Scammers send fake M-Pesa confirmation screenshots. Always verify payment in your M-Pesa messages — not from what a seller shows you.

🚩 Too-Good-to-Be-True Prices

Listings priced far below market value for high-value items (phones, cars, laptops) are often scams. Pay only through SOKONI’s checkout and check seller ratings.

🚩 Urgent Payment Requests

Pressure to pay quickly before an offer expires is a social engineering tactic. SOKONI never pressures buyers. Take your time; use the platform checkout.

Report suspected scams to security@mysokoni.co.ke or via the in-app "Report" button.


Security Disclosure

SOKONI takes security vulnerabilities seriously. If you discover a security issue on our platform, please report it responsibly:

Security Team: security@mysokoni.co.ke

Please include: description of the issue, steps to reproduce, and (if applicable) proof-of-concept. We review every report and will reply to you.

SOKONI does not currently operate a formal bug bounty programme but recognises responsible disclosure contributors.