M-Pesa Checkout on TikoYetu: A Step-by-Step Guide

Here's the actual sequence, not a marketing summary of it — because the one detail that matters most (how your payment gets verified) is exactly the part most checkout explainers skip.

Step one: your order is created, unpaid

The moment you pick your tickets and enter your details, an order is created in an unpaid, pending state. Nothing is issued yet — this step just reserves what you're trying to buy while payment happens.

Step two: the M-Pesa prompt

TikoYetu triggers an M-Pesa STK push — the payment prompt that appears directly on your phone asking you to enter your PIN. You're paying through Safaricom's own system at this point, not typing your PIN into the website.

Step three: the part that actually matters — server-to-server verification

This is the step a lot of checkout systems get wrong: TikoYetu doesn't mark your order paid because your browser says "payment complete." It waits for Safaricom's own payment platform to call TikoYetu's server directly and confirm the transaction actually cleared. That server-to-server confirmation, not anything happening in your browser, is what a payment being "verified" actually means here — and it's why an order can't be faked by simply refreshing the page or claiming success client-side.

Step four: the ticket is issued exactly once

Once that verified confirmation lands, your ticket and its QR code are issued. The system is built to be idempotent — meaning if the same payment confirmation somehow arrives twice (a network retry, for instance), you still get exactly one ticket, not two.

Step five: confirmation

You receive your ticket by email with the QR code attached, ready to scan at the door.

— The ArtCollect Desk