Safaricom Attains Payment Card Industry Data Security Standard Certification

Safaricom has been accredited with the Payment Card Industry Data Security Standard (PCI DSS) Certification.

The PCI SSC is a worldwide standard of data security for businesses that process card transactions, by the PCI Security Standard Council (PCI SSC).

The approval is a great feat for the company and aligns with its mission to transform from a telco to a tech company by 2025 as it will now be a global payment facilitator for partners such as Google, Uber, and Microsoft, among others.

Speaking during the event, Safaricom CEO Peter Ndegwa noted that the certification for M-PESA is a recognition of the company's dedication to safeguarding financial transactions for customers. 

“Safaricom has always been driven by the desire to innovate and provide cutting-edge solutions to our customers. As we navigate the digital landscape, security remains at the heart of everything we do," Mr Ndegwa stated. 

The approval means the company can begin offering various solutions such as tap-to-pay, and merchants receive online and in-person card payments from our customers.

With this certification, Safaricom will become part of a few institutions in Africa that can create a regional payment switch system while safeguarding customers, merchants and partners payment data.

The company can now enhance API capability to grow developers on the M-PESA platform to provide enhanced services and expand the portfolio of mobile money services and payment solutions.

Payment Card Industry Data Security Standard is a globally recognised standard that offers a comprehensive framework to safeguard sensitive customer information during transactions.

It ensures robust controls and security measures are in place to protect against data breaches, fraud and unauthorised access.