Payments & Security
Payments use Safaricom M-Pesa (Daraja STK Push). You approve the payment on your phone with your M-Pesa PIN; we never see or store your PIN.
How we protect payments
- Prices are set on our server; the amount cannot be changed from your browser.
- Downloads unlock only after a server-confirmed M-Pesa callback with a matching amount.
- Every paid document carries a signed verification code you can check at https://docs.olivetphonespares.co.ke/verify.
- Rate-limiting, CSRF tokens, content checks, input sanitising and an audit log protect the system.
Problems?
If money left your M-Pesa but nothing downloaded, open Re-download and enter your phone and M-Pesa code, or contact support@example.co.ke.