Skip to content

Withdrawals and wallet security

When ISPMan collects payments for you, your share builds up in your collection wallet. You withdraw it to M-Pesa from Payments → Withdrawals (/dashboard/payments/withdrawals). Before the first withdrawal you must protect the wallet with an authenticator app and set the one phone number that money can be sent to.

The page has three parts: your collection wallet card(s) on the left, Wallets Security on the right, and the Withdrawals history below. Wallets Security can only be managed by the Owner or an Admin.

Step 1: Lock your wallets with an authenticator

Section titled “Step 1: Lock your wallets with an authenticator”

You need an authenticator app on your phone, such as Google Authenticator or Microsoft Authenticator.

  1. Under Wallets Security → Use Authenticator to lock wallets, click Enable.
  2. The Security Payment Wallet window shows a QR code. Scan it with your authenticator app.
  3. Type the code your app shows into Enter the code from your authenticator app.
  4. Click Complete Setup. You see “Wallets protection setup successfully” and a shield icon appears.

The authenticator code is then required for every withdrawal and for changing the cash-out number.

This is the only phone number your wallet can be cashed out to.

  1. Under M-Pesa Cashout Phone Number, click Add (or Change Phone Number if one is already set). The button is disabled until the authenticator is set up.
  2. Enter the number in Enter M-PESA Number.
  3. Enter the current code from your authenticator app in Enter Security Code.
  4. Submit. You see “Phone number set successfully” and the number appears as Current.
  1. Click your collection wallet card to select it, then click Withdraw. The button stays disabled until both the authenticator and the cash-out number are set.
  2. In Withdraw to Mpesa, check your available balance and the cash-out number (shown, but not editable here).
  3. Enter the amount in Enter Amount (Consider transaction fees). The window shows the expected M-Pesa transaction fee for that amount, or “No transaction fee for this amount”. The minimum is 100.
  4. Click Next - Security Verification.
  5. Enter the code from your authenticator app and click Start withdrawal.

You see “Withdrawal to M-PESA started”. The withdrawal appears in the table below and the money is sent to your cash-out number.

Message What to do
Please setup wallet security first Complete Step 1.
Insufficient available balance Withdraw no more than the Available figure.
Invalid security code Codes change every 30 seconds. Wait for a fresh code and try again; check your phone’s clock is correct.
Amount exceeds maximum limit or is invalid Use a smaller amount, within M-Pesa’s limits.

The Withdrawals table lists every withdrawal with ID, Amount, Account Number, Account Name, Phone Number, Status, Transaction ID, Confirmed At and Created At.

Status Meaning
Pending Started, waiting for M-Pesa to confirm.
Completed Sent. The M-Pesa transaction ID is shown.
Failed Did not go through.

If you change phones or lose your authenticator app, the Owner can reset wallet security:

  1. Click Reset Wallets Security and confirm.
  2. A reset code is sent by SMS to the registered cash-out number.
  3. Enter the code when asked. You see “Security code accepted. You can re-setup authenticator now.”
  4. Set up the authenticator again (Step 1).