Home / Guides / Payment security and fraud controls / wholesalers and distributors
DASNET business guide · Kenya

Payment security and fraud controls for wholesalers and distributors | DASNET

Payment safety combines secure credentials, trusted status checks, careful recipient verification, least-privilege access and a documented exception process.

This guide explains the workflow, how to prepare, which checks matter and how to handle common exceptions for wholesalers and distributors.

Explore DASNETDeveloper documentation
Business team reviewing operational controls
In this guide

Understand the workflow, apply the checklist, and confirm which payment channels and features are enabled for your account before using them in production.

What Payment security and fraud controls means for wholesalers and distributors

Payment safety combines secure credentials, trusted status checks, careful recipient verification, least-privilege access and a documented exception process. For wholesalers and distributors, the goal is to manage larger orders, customer balances and supplier obligations. A reliable workflow makes the request, responsible person, reference and final outcome visible rather than leaving the process in disconnected messages.

The operational challenge

A common challenge is that orders, partial fulfilment and multiple payments create reconciliation complexity. When the source request, payment status and business record do not line up, staff can repeat work or act on an assumption. A consistent process separates initiation from completion and records the evidence used to make a decision.

A practical end-to-end workflow

  1. Keep API secrets and access tokens server-side and restrict who can retrieve them.
  2. Use secure authentication, review high-risk actions and remove unnecessary access.
  3. Verify recipients, amounts and merchant destinations before authorisation.
  4. Validate callbacks, process duplicates idempotently and monitor unusual patterns.
  5. Have a documented incident response and escalation process.

A workflow shaped around this use case

  1. Use a distinct reference for each order and payment allocation.
  2. Record partial fulfilment and partial payments explicitly.
  3. Review credit limits, returns and outstanding balances before dispatch.

How DASNET fits

DASNET is a business workspace for supported payment workflows and everyday business operations. Depending on account configuration, teams may use it to manage payment requests and collections, review transaction records, handle supported wallet and payout activity, organise invoices or bills, and keep customer and operational information together. The precise menu, channel and automation available to a business should be confirmed in its account. DASNET is not a promise that every payment rail, bank destination or provider feature is automatically enabled.

Controls and measures to review

  1. Track the number of unresolved items and how long they remain open.
  2. Separate pending, successful, failed, reversed and disputed outcomes in reports.
  3. Keep a clear owner for exceptions and a reference for every consequential action.
  4. Review access permissions and avoid storing credentials or sensitive authentication data in notes.
  5. Compare material payment totals with trusted provider or bank records.

Frequently asked questions

Should support ever ask for an OTP?

No. Never share OTPs, PINs, passwords or API secrets with anyone.

Is a customer screenshot sufficient proof of payment?

Use the trusted provider or DASNET transaction record, not a screenshot alone.

What does idempotency mean?

Repeated delivery of the same event should not create duplicate financial or business effects.

Can software eliminate all fraud risk?

No. Controls reduce risk but require monitoring, sound processes and timely response.

How does this apply to wholesalers and distributors?

The main objective is to manage larger orders, customer balances and supplier obligations. Start with the workflow and controls on this page, then verify the exact features enabled for your DASNET account.

What should we do if a payment or record looks wrong?

Pause any consequential action, keep the non-sensitive reference and timestamp, check the trusted source record, and follow your documented support or reconciliation process. Never share PINs, OTPs, passwords or API secrets.

Does DASNET guarantee that every feature is enabled?

No. Product availability depends on account setup, permissions, provider approvals and enabled services. Confirm the live configuration before making operational commitments.

Related DASNET guides

Continue with these related workflows:

M-Pesa STK Push for wholesalers and distributors · STK Push integration guide for wholesalers and distributors · Safaricom Daraja API workflows for wholesalers and distributors · Online payment links for wholesalers and distributors · Customer payment requests for wholesalers and distributors · Merchant payment collections for wholesalers and distributors

Get started with DASNET