Skip to content
Book a demo
Use cases · Mobile money & e-wallets

Stop the payout that follows a SIM swap.

On a wallet, the phone number is the account. After a SIM swap, Sieve stops the payout before the money moves.

Book a demoEvents reference

For wallets, super-apps and agent networks in Kenya and Nigeria, on M-Pesa, Airtel Money, OPay, PalmPay, Moniepoint, USSD, bank transfer and card.

How it hits

Four ways the money goes missing.

Each looks like ordinary activity. Sieve scores every event in context, before the money moves.

  1. 01

    SIM-swap drain

    SIM swapped, PIN reset by OTP, wallet emptied within the hour.

    Caught by Recent SIM swap, credential reset before payout, SIM-swap drain pattern

  2. 02

    Account takeover

    Guessed PINs, a login from a new phone, then the balance leaves.

    Caught by Failed logins then success, new device money out, account takeover pattern

  3. 03

    New-account cash-out

    An account opened this morning adds its own payout number and withdraws everything.

    Caught by Details changed after signup, payout to new account, new-account cash-out pattern

  4. 04

    Money mules

    Accounts collect small sums from many strangers and pay it all to one account.

    Caught by Fan-in, pass-through, payout account shared by several customers

A catch, step by step

Minutes of activity. One decision.

A story from the Mobile money & wallets demo, run through the same engine as your events. Each reason is written for the analyst who acts on it.

31 minutes from SIM swap to payoutreplayed through the engine
  1. 14:02The customer’s SIM is swappedsim.swap from your SIM-swap check
  2. 14:14PIN reset from an unknown phoneCredential reset
  3. 14:27Login from that new phoneNew device
  4. 14:33Payout of KES 18,000, 99% of the balance, to a new number
  5. DecisionBlocked
    • SIM swapped 31 minutes ago
    • PIN reset 19 minutes before the payout
    • Withdrawing 99% of the balance

Blocked in milliseconds. The account is held, and the case opens with the story written. Nigerian demos run in naira.

What Sieve does

Choose “Mobile money & wallets” and these start enforcing.

Plain-English rules you can adjust, joined into fraud patterns. Everything else runs in Watch, scoring without acting, until you trust it.

Rules
  • Recent SIM swap
  • Details changed right after signup
  • Payout to a new account
  • Payout account shared by several customers
  • Failed logins, then a success
Patterns
  • New-account cash-out
  • Account takeover
  • SIM-swap drain
  • Money mule
Integrate

Send these events. One endpoint.

  • loginEvery attempt, with a device id. Takeovers start here.
  • customer.updatedPhone, PIN and payout changes, the usual step before a cash-out.
  • sim.swapFrom your SIM-swap check. A fresh swap holds the next payout.
  • payout.requestedBefore you release the money, with the destination number.
POST /v1/events
await sieve.events.create({
  type: 'payout.requested',
  customer_id: 'cus_1001',
  amount: 18000,               // KES
  balance: 18200,
  destination: { type: 'mpesa', account: '254712345678' },
  device: { id: deviceId },
})
Compliance

What your regulator will ask, answered.

Sieve supports your obligations. It doesn’t replace your compliance team.

CBK (Kenya) and CBN (Nigeria) payment oversight
An examiner can replay any payout, with its reasons, rule versions and who acted.
Kenya Data Protection Act (ODPC) and Nigeria Data Protection Act 2023 (NDPC)
Names, phones, IDs and BVNs are encrypted. Matching uses keyed hashes, not raw IDs.
Other use cases
Book a demo

See it on a workspace built for you.

A private Mobile money & wallets workspace for Kenya or Nigeria, with a month of traffic and the fraud above. We walk your team through a live catch.

Book a demoTalk to our team