MikroTik hotspot M-Pesa payment: STK Push for hotspot and PPPoE customers
Last updated: 14 October 2026
Selling vouchers by hand and checking M-Pesa messages one by one takes your whole day. With RadiusNest your hotspot and PPPoE customers pay for themselves: they type their M-Pesa number, a payment request pops up on their phone, they enter their PIN - and their login on your MikroTik is renewed by itself, the sale recorded and the receipt kept. The money goes straight to your own Paybill or Till.
How it works
- The customer chooses a package on your shop page or in your own Telegram bot - or taps Renew on the reminder the bot sends before their package ends.
- They pick M-Pesa and type their number. RadiusNest asks M-Pesa to send an STK Push for the exact package price.
- A payment request pops up on their phone. They enter their M-Pesa PIN.
- M-Pesa confirms the payment and RadiusNest renews the login, or makes a new one, at once. The customer is told on the page or in the bot, and you see the order with its M-Pesa receipt.
Your MikroTik keeps doing what it already does: it asks RadiusNest whether a login may connect. Nothing changes on the router, and nobody has to approve anything.
What you need
- A Paybill or a Till (Buy Goods) in your own name - the money is paid into it directly.
- A Daraja app approved for Live on developer.safaricom.co.ke. From it you copy the consumer key, the consumer secret and the Lipa Na M-Pesa Online passkey. Safaricom usually approves Live in one to three working days.
- A RadiusNest account with the self-service page and the shop switched on.
Set it up in RadiusNest
- Open Shop & payments and press Add mobile money (prompt on the phone).
- Choose M-Pesa (Kenya), then Paybill or Till, and type your business short code (and, for a Till, the Till number).
- Paste the consumer key, consumer secret and passkey, and press Check the keys and add. RadiusNest tries them with Safaricom before saving; a wrong key is pointed out at once. The keys are stored encrypted and never shown again.
- That is all. Your customers now see M-Pesa on your shop page and in your bot.
Why it is safe
- A login is renewed only after M-Pesa itself confirms the payment - a fake message changes nothing.
- Paid once means renewed once and recorded once, even if the confirmation arrives twice.
- If a confirmation is lost, RadiusNest asks M-Pesa itself every minute.
- Cancelled on the phone, or no PIN within 10 minutes: the order closes and nothing is charged.
- A payment that arrives late waits on your Orders page for you to approve.
Mobile money in other African countries
Outside Kenya, connect your own pawaPay account the same way. The customer gets the PIN request on MTN MoMo, Airtel Money, Orange Money, Wave, M-Pesa or another mobile money wallet in Benin, Burkina Faso, Cameroon, Cote d'Ivoire, DR Congo, Ethiopia, Gabon, Ghana, Kenya, Lesotho, Malawi, Mozambique, Nigeria, Republic of the Congo, Rwanda, Senegal, Sierra Leone, Tanzania, Uganda, Zambia and Zimbabwe. The network is found from the number. Everywhere else, customers can pay you in crypto to your own wallet.
Questions
Does M-Pesa STK Push work with a MikroTik hotspot?
Yes. The customer pays from the hotspot's shop page or your Telegram bot: they type their M-Pesa number, enter their PIN on the request that pops up, and RadiusNest renews the login on your MikroTik by itself. Nothing extra runs on the router.
Do I need my own Paybill or Till?
Yes. The money goes straight to your own Paybill or Till; RadiusNest never holds it. You also need a Daraja app that Safaricom has approved for Live, for its consumer key, consumer secret and passkey.
What if the customer cancels or does not enter the PIN?
Nothing is charged and nothing is renewed. The order closes and the customer is told; they can try again straight away.
Which countries besides Kenya are supported?
Through pawaPay: Benin, Burkina Faso, Cameroon, Cote d'Ivoire, DR Congo, Ethiopia, Gabon, Ghana, Kenya, Lesotho, Malawi, Mozambique, Nigeria, Republic of the Congo, Rwanda, Senegal, Sierra Leone, Tanzania, Uganda, Zambia and Zimbabwe - on MTN, Airtel, Orange, Wave, M-Pesa and other mobile money. Crypto works everywhere.
Can a fake payment message renew a login?
No. A message about a payment only tells RadiusNest which payment to look at. The login is renewed only after M-Pesa or pawaPay itself confirms, with your own keys, that the payment went through.