Kenya is considering a central database that would help banks, fintech companies and other businesses identify mobile numbers that have been reassigned to new owners. The proposed system aims to reduce privacy breaches and prevent sensitive communications from reaching unintended recipients.
According to a report by Business Daily Africa published on October 9, 2026, mobile network operators, including Safaricom and Airtel Kenya, could be required to submit updated records of deactivated and recycled numbers every three months. Businesses would then be able to check a number’s status before sending verification codes, financial alerts or other confidential messages.
Why Recycled Numbers Pose a Security Risk
Mobile phone numbers have become essential identifiers in the digital economy. They are commonly linked to mobile money wallets, bank accounts, email addresses, social media profiles and password recovery systems.
When a customer abandons a number and a telecom operator assigns it to someone else, those connections may not automatically disappear. The new subscriber could consequently receive messages intended for the previous owner. In some circumstances, an outdated phone number linked to an account could also create opportunities for unauthorised access.
A central database would give businesses an additional way to identify reassigned numbers and reduce the risk of exposing customer information. The proposal follows a similar approach to the Reassigned Numbers Database used in the United States.
Proposed Rules for Inactive SIM Cards
The planned database forms part of broader measures intended to protect subscribers whose phone lines have remained inactive.
Under the proposed framework, an operator could begin the deactivation process after three months without revenue-generating activity, including calls, text messages, data usage or airtime purchases. The subscriber would then receive a further three months to reactivate the line.
Operators would also be expected to publish notices 30 days before the relevant deactivation period ends, identifying numbers scheduled for deactivation.
Additional safeguards would restrict marketing messages to recycled numbers by default. Businesses would also be expected to remove reassigned numbers from marketing lists where the previous subscriber had given consent.
The database remains a proposed initiative, meaning businesses should not assume that a fully operational central verification service is already available.
Court Ruling Places Mobile Numbers at the Centre of Digital Privacy
The proposals follow a High Court ruling delivered on March 19, 2026, which recognised the privacy implications of registered mobile numbers as part of an individual’s digital identity.
The legal dispute raised concerns about people who may be unable to use their phones for extended periods, including individuals in prison. Losing a number in such circumstances could expose personal information or disrupt access to services still associated with it.
The court directed the government to establish safeguards by September 19, 2026. In early October, the Communications Authority reportedly outlined procedures requiring operators to contact subscribers after three months of inactivity, issue public notices ahead of recycling after six months and provide a mechanism for checking numbers facing deactivation.
People whose circumstances prevent them from using their lines, including illness or imprisonment, may also seek protection against the loss of their numbers under qualifying arrangements.
What the Proposal Means for Consumers and Businesses
A central database could improve coordination between telecom operators and the financial institutions and digital platforms that depend on mobile numbers to communicate with customers.
However, its effectiveness will depend on accurate records, regular updates and businesses consistently checking number status before sending sensitive information. The database would not automatically remove an old number from every bank account, online service or social media profile.
Consumers should therefore continue updating their registered contact details whenever they change phone numbers. Businesses, meanwhile, may face additional compliance requirements and operational costs as they incorporate the new safeguards into their systems.
If implemented effectively, the initiative could strengthen consumer privacy and reduce the risks associated with recycled SIM cards, while recognising that a mobile number can be much more than a means of communication.
Follow us on: Facebook, X, LinkedIn, WhatsApp, Telegram, TikTok and Instagram.
