Money moves.
Trust stays.
Paysasa is built around verified identities, encrypted data, protected escrow funds and compliance with Kenyan payments law.
Protection status
SecureHow we protect your money and data
Encryption
All traffic uses TLS. Sensitive data is encrypted at rest, and API keys and secrets are hashed or vaulted.
Strong authentication
One-time codes, device checks and optional extra confirmation for withdrawals and large payments.
Verified identities
Customers and merchants complete KYC. Gold and Platinum badges show which businesses have been checked.
Protected escrow funds
Escrow balances are held separately from operating funds and released only on agreed conditions.
Fraud monitoring
Rules and risk scoring watch for unusual patterns, with holds and manual review for high-risk activity.
Audit trails
Sensitive actions, payouts and settings changes are logged so businesses can review who did what.
Compliance and standards
Paysasa is designed around Kenya’s payments and data laws. Licences and certifications are listed here as they are confirmed.
CBK payments framework
Operated under the National Payment System Act, 2011 and CBK regulations through an authorised structure. [Confirm licence details.]
Data Protection Act, 2019
Registered with the ODPC [reg. no.], with processes for data-subject rights and 72-hour breach notification.
POCAMLA and AML
KYC, sanctions screening, transaction monitoring and suspicious-activity reporting to the FRC.
PCI DSS via partners
Card data is handled by PCI DSS-compliant partners and never stored on Paysasa servers.
How escrow keeps a deal safe
Read the full Escrow Terms.
Buyer funds the trade
Money moves into a protected balance the seller cannot touch.
Seller delivers
Delivery or milestones are confirmed in the app, with messages and evidence on record.
Funds are released
The buyer approves or the inspection period ends, and Paysasa pays the seller. Disputes are reviewed by our team.
Stay safe with a few habits
Most fraud starts with a message, not a hack. These habits stop nearly all of it.
- Never share your one-time codes or PIN, even with someone claiming to be Paysasa
- Pay and release escrow only inside the Paysasa app or website
- Check the Gold or Platinum badge before paying a new merchant
- Keep API keys on your server and rotate them if exposed
Found a vulnerability?
We welcome responsible disclosure. Send the details to our security team and we will acknowledge within two business days. Please do not access other users’ data or disrupt the service while testing.
Frequently asked questions
Wallet and escrow balances are held in protected accounts at licensed financial institutions and are separate from Paysasa’s own operating funds. [Confirm structure.]
No. Card payments are processed by PCI DSS-compliant partners, and full card numbers are never stored on our servers.
Contact support immediately. We can freeze the account and pending payouts, review recent activity and help you recover access.
Email [email protected] with the payment reference and any messages. We can flag the account and hold related funds while we investigate.
We follow recognised good practice. Formal certifications will be listed here as they are obtained.
Ready to accept payments
you can explain?
Create free account
Free to start · Verified in minutes · Cancel anytime