ARTICLE
Safe Online Payments with Mpesa
How CarTrust uses Mpesa STK Push for secure, instant payments. Your transaction safety is our top priority.
How STK Push Works
When you purchase a report on CarTrust, we use Safaricom's STK (SIM Toolkit) Push technology. Instead of entering payment details on a website, you receive a prompt directly on your phone asking you to confirm the payment with your Mpesa PIN. This means your PIN is never shared with CarTrust or any third party — it's entered only on Safaricom's secure interface on your device.
Why Mpesa Is Secure
Mpesa transactions are protected by multiple layers of security: SIM-level encryption, PIN verification, and Safaricom's real-time fraud detection systems. Every transaction generates a unique confirmation code sent via SMS. CarTrust receives only a payment confirmation — we never see or store your Mpesa PIN. The entire process is compliant with Central Bank of Kenya regulations and Safaricom's merchant requirements.
What Happens After Payment
Once your Mpesa payment is confirmed, your report is generated instantly. You'll receive it on-screen and via email. The transaction reference is stored in your CarTrust dashboard for future reference. If a payment fails or times out, no charge is applied — you can simply retry. In the rare case of a duplicate charge, our system automatically detects it and initiates a reversal within 24 hours.
Tips for Safe Online Payments
Always verify you're on the official CarTrust website before making a payment. Never share your Mpesa PIN with anyone, including anyone claiming to be from CarTrust support. Ensure your Mpesa is registered with your current phone number. Keep your Safaricom SIM secure — if you lose your phone, contact Safaricom immediately to suspend Mpesa access. Check your Mpesa statement regularly for any unauthorised transactions.