<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=us-ascii" http-equiv=Content-Type>
<STYLE type=text/css>DIV {
MARGIN: 0px
}
</STYLE>
<META name=GENERATOR content="MSHTML 8.00.6001.18928"></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=578005814-15082011><FONT color=#0000ff
size=2 face=Arial>Hi Robert,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=578005814-15082011><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=578005814-15082011><FONT color=#0000ff
size=2 face=Arial>Assuming it was the sender of the cash reporting the
way you did ( a wrong funds transfer), the other party</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=578005814-15082011><FONT color=#0000ff
size=2 face=Arial>on the other end would have gleefully withdrawn the cash
before you could spell MPesa backwards as </FONT></SPAN><SPAN
class=578005814-15082011><FONT color=#0000ff size=2
face=Arial>the </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=578005814-15082011><FONT color=#0000ff
size=2 face=Arial>telecon cross-</FONT></SPAN><SPAN
class=578005814-15082011><FONT color=#0000ff size=2 face=Arial>examination
rolled on nonstop..</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=578005814-15082011><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=578005814-15082011><FONT color=#0000ff
size=2 face=Arial>Maybe the Telcos need to review how they can
quickly & concisely ask the right questions & press the
</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=578005814-15082011><FONT color=#0000ff
size=2 face=Arial>pause button on the transaction, on verifying
authenticity. Perhaps a small "negligence" fee can be levied
</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=578005814-15082011><FONT color=#0000ff
size=2 face=Arial>where applicable..</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=578005814-15082011><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=578005814-15082011><FONT color=#0000ff
size=2 face=Arial>On the other hand, I suppose it's worthwhile for subscribers
to migrate to the new generation SIM cards </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=578005814-15082011><FONT color=#0000ff
size=2 face=Arial>that allows you to choose from your contact list whom you wish
to wire funds. This</FONT></SPAN><SPAN class=578005814-15082011><FONT
color=#0000ff size=2 face=Arial> immensely limits </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=578005814-15082011><FONT color=#0000ff
size=2 face=Arial>such mistakes.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=578005814-15082011><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN><SPAN class=578005814-15082011><FONT
color=#0000ff size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=578005814-15082011><FONT color=#0000ff
size=2 face=Arial>Harry</FONT></SPAN></DIV>
<DIV dir=ltr lang=en-us class=OutlookMessageHeader align=left>
<HR tabIndex=-1>
<FONT size=2 face=Tahoma><B>From:</B>
kictanet-bounces+harry=comtelsys.co.ke@lists.kictanet.or.ke
[mailto:kictanet-bounces+harry=comtelsys.co.ke@lists.kictanet.or.ke] <B>On
Behalf Of </B>robert yawe<BR><B>Sent:</B> Monday, August 15, 2011 11:27
AM<BR><B>To:</B> harry@comtelsys.co.ke<BR><B>Cc:</B> KICTAnet ICT Policy
Discussions<BR><B>Subject:</B> [kictanet] A suspected flaw in
MPesa<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV
style="FONT-FAMILY: 'times new roman', 'new york', times, serif; COLOR: #000000; FONT-SIZE: 12pt">
<DIV
style="FONT-FAMILY: 'times new roman', 'new york', times, serif; COLOR: rgb(0,0,0); FONT-SIZE: 12pt"></DIV>
<DIV
style="FONT-FAMILY: 'times new roman', 'new york', times, serif; COLOR: rgb(0,0,0); FONT-SIZE: 12pt">Hi,</DIV>
<DIV
style="FONT-FAMILY: 'times new roman', 'new york', times, serif; COLOR: rgb(0,0,0); FONT-SIZE: 12pt"><BR></DIV>
<DIV><FONT class=Apple-style-span size=3
face="'times new roman', 'new york', times, serif">I had an
interesting </FONT><FONT class=Apple-style-span
face="'times new roman', 'new york', times, serif">experience</FONT><FONT
class=Apple-style-span size=3
face="'times new roman', 'new york', times, serif"> with MPesa on Saturday
when I received a payment received notification with a deadline message as would
happen with an unregistered recipient yet I am a registered user. My
registered account did not register the transaction at all which was
interesting.</FONT></DIV>
<DIV><FONT class=Apple-style-span size=3
face="'times new roman', 'new york', times, serif"><BR></FONT></DIV>
<DIV><FONT class=Apple-style-span
face="'times new roman', 'new york', times, serif">Being a law abiding citizen
and client I called customer service, the person I spoke to as usual went off
script to ask me all kinds of irrelevant questions such as do I have a dual SIM
phone, was I expecting money from the person and when was my last transaction
all of which are questions that do not assist in resolving my
question.</FONT></DIV>
<DIV><FONT class=Apple-style-span
face="'times new roman', 'new york', times, serif"><BR></FONT></DIV>
<DIV><FONT class=Apple-style-span
face="'times new roman', 'new york', times, serif">I sometimes wonder why I
actual take the trouble yet all I should have done was gone to an mpesa agent
and withdrew the money. As in the case of funds wrongly credited to a bank
account I would have paid back the amount at my own rate. The error in
this case was equivalent to me picking cash from the floor of the
supermarket.</FONT></DIV>
<DIV><FONT class=Apple-style-span
face="'times new roman', 'new york', times, serif"><BR></FONT></DIV>
<DIV><FONT class=Apple-style-span
face="'times new roman', 'new york', times, serif">I noted that the transaction
has been reversed this morning still and the message still assumes that I am an
unregistered recipient. It is my hope that Safaricom's technical team have
identified and sealed the hole as its exploitation will open them up to
money laundering charges.</FONT></DIV>
<DIV><FONT class=Apple-style-span size=3
face="'times new roman', 'new york', times, serif"></FONT> </DIV><FONT
class=Apple-style-span size=3
face="'times new roman',
'new york', times, serif">Robert
Yawe</FONT><BR><FONT class=Apple-style-span size=3
face="'times new roman', 'new york', times, serif">KAY System Technologies
Ltd</FONT><BR><FONT class=Apple-style-span size=3
face="'times new roman', 'new york', times, serif">Phoenix House, 6th
Floor</FONT><BR><FONT class=Apple-style-span size=3
face="'times new roman', 'new york', times, serif">P O Box 55806 Nairobi,
00200</FONT><BR><FONT class=Apple-style-span size=3
face="'times new roman', 'new york', times, serif">Kenya</FONT><BR><BR>
<DIV
style="FONT-FAMILY: 'times new roman', 'new york', times, serif; COLOR: rgb(0,0,0); FONT-SIZE: 12pt">Tel:
+254722511225, +254202010696
<DIV><BR></DIV></DIV>
<DIV
style="POSITION: fixed; FONT-FAMILY: 'times new roman', 'new york', times, serif; COLOR: rgb(0,0,0); FONT-SIZE: 12pt"></DIV></DIV></BODY></HTML>