Logged In Again, From Doha to Dallas: How Safaricom's Quiet OneApp Fix Hands the Diaspora Back Its M-PESA
A small update to My OneApp now lets diaspora users stay logged in on Airtel, foreign carriers and WiFi, ending six weeks of expensive, broken roaming workarounds for Kenyans abroad.
On a Sunday morning in Manchester, a Kenyan night-shift nurse sits down at a Costa Coffee, takes a first sip of an Americano, and taps the green M-PESA tile on her home screen. For six weeks, that small gesture has been a trapdoor. The My OneApp icon would load, then ask her to log in again. The login would demand a fresh activation handshake. The handshake would not complete because she was not connected to Safaricom. The only sanctioned fix was to switch on data roaming, at per-megabyte rates that could rival the school fees she was trying to send home.
This week, the loop quietly broke. Safaricom has updated My OneApp to remain logged in when the handset is connected to Airtel Kenya and other non-Safaricom networks, including, in practice, the foreign carriers that diaspora customers rely on every day. The change is unglamorous, narrowly described and easy to miss in a news cycle dominated by visas and politics. For the Kenyans who keep families, mortgages and small businesses running across thousands of kilometres of fibre and migration, it is the single most consequential M-PESA news of the month.
A Six-Week Headache No One Wanted
My OneApp launched in April as Safaricom's super app, a single front door for M-PESA payments, airtime, fibre billing, customer care and a marketplace of mini apps. The pitch was clean: one login, one passcode, one experience across Kenya's most-used consumer services. The execution was anything but. Within days, Google Play reviews and Kenyan X threads were filling with complaints about login failures, broken one-time password codes, forced sign-outs, and an activation flow that refused to complete unless the phone was sitting on Safaricom mobile data.
Diaspora users carried the worst of it. They were the ones whose handsets, by definition, were not roaming on a Safaricom mast in Kayole or Eldoret. They were on EE in Birmingham, T-Mobile in Dallas, Etisalat in Dubai, Bell in Toronto. Every time the app demanded another reactivation, the only sanctioned path back in was a Safaricom roaming bundle, a product whose per-megabyte cost has long been a sore point. In a candid mid-April statement, the company apologised for the poor experience and singled out roaming and diaspora customers as the group most affected.
What Changed This Week
According to TechCabal, which first reported the rollout on 23 May, My OneApp can now stay active on the phone even after the user switches between Safaricom and any other mobile network. The handset can drift onto Airtel Kenya, onto a foreign carrier, onto hotel WiFi, and the session holds. The app also appears to handle network swaps more smoothly, which matters less for travellers crossing borders and more for the everyday diaspora reality of moving between a home WiFi router, a phone's mobile data and a workplace network in the space of an hour.
In plain terms: a Kenyan in Doha can now open M-PESA on her lunch break, send 5,000 shillings to her mother in Kisii, and close the app without being told to verify her account. A Kenyan in Edmonton can pay his Faiba bill before bed without being asked to top up a roaming bundle he never wanted. This is what the service was always supposed to be.
Why Network-Locking Hurt the Diaspora Specifically
To understand why this update has landed so loudly in diaspora WhatsApp groups, you have to understand how aggressively M-PESA is woven into life abroad. It is the channel for school fees, for hospital deposits, for funeral contributions, for SACCO loan repayments, for the rent on a relative's house in Kahawa Wendani. It is how a son in Atlanta keeps his ageing father in Murang'a stocked with unga. When that pipe blocks for six weeks, the consequences are not abstract. Money does not move. Promises break. Stress accumulates in households that have already organised their finances around the assumption that the phone in their pocket is also their bank.
The original network-binding rule was designed to fight fraud, and it did. SIM-binding makes account takeover harder because an attacker must control both the SIM and the device. But it also assumed something that simply is not true for a customer base of millions: that the user would always be sitting comfortably on the Safaricom network. The diaspora is the visible counter-example, and within Kenya, so are the growing number of Airtel and Telkom subscribers who still rely on M-PESA. By relaxing the network requirement after activation, Safaricom has kept the security benefit of binding the account to a specific device while letting the customer's data path be whatever is cheapest and most convenient.
What Still Does Not Work
The update is real, but it is partial. Initial activation of My OneApp still requires a Safaricom mobile-data connection and cannot, at the moment, be completed over WiFi. That means a customer who lands at Heathrow with a new phone, no Safaricom roaming bundle and an expired login is still stuck unless they can find a Safaricom signal, which outside Kenya they cannot. Diaspora users who plan to upgrade their handsets in the next few months should activate My OneApp on the old device before they wipe it, or arrange to do the activation on their next trip home. Safaricom has not published a timeline for opening up WiFi-based activation, but its public statements have repeatedly named this group as a priority, and the fact that the post-activation lock is now gone suggests the company is moving in the right direction rather than the wrong one.
What Diaspora Users Should Do Now
If you have been locked out for weeks, the first step is to update My OneApp from the Play Store or App Store, then try logging in on whatever network you are currently using. Most diaspora users who lost access in April should now be able to get back in without buying a roaming bundle. If the app still demands reactivation and you are stuck without Safaricom data, the legacy backstops still work. The USSD shortcode 334# for sending and withdrawing M-PESA, and the SIM Toolkit menu on the SIM card itself, both run independently of any app. They are not pretty, but they move money. Safaricom's customer-care channels on Facebook, X and email remain the fastest route to a human if your account ends up in a bad state. The company has also confirmed that the older standalone M-PESA and MySafaricom apps will be retired within six months of My OneApp's launch, so any diaspora customer who has been clinging to the old apps as a workaround should plan to migrate before that window closes.
The headline here is small and technical. The story underneath is not. For thousands of Kenyans abroad, the green tile on the home screen has stopped being a daily reminder of how the network forgot them.
