0. Key words, in plain English

A handful of words come up again and again in this guide. Here is what each one really means — no jargon.

Term	What it means
Digital fingerprint	A unique code the system creates from a transaction's details. If even one detail changes later, the fingerprint stops matching — like a wax seal that cracks if someone tampers with a letter.
Chain of records	Every new transaction is linked to the fingerprint of the one before it — like a row of numbered receipts glued together. Pull one out or alter it, and the gap is obvious.
Treasurer	The one person authorized to start (initiate) a withdrawal. Must currently be both a group member and a WhatsApp admin.
Approver	The second person who must confirm a withdrawal, when a second confirmation is required.
Group creator	Whoever originally created the WhatsApp group. This person keeps a special role in approvals for as long as they remain a member.
Reconciliation	The everyday process of matching a payment against M-Pesa's confirmation — for example, marking a contribution "confirmed" once M-Pesa verifies it. This updates status only; it never rewrites who paid, how much, or when.

1. How Wallet Yetu protects transaction records

Think of Wallet Yetu as a digital notebook for your group's money. Every time a contribution is recorded, the system stamps it with a digital fingerprint (see glossary above) — proof that its key details haven't been secretly altered.

The records are chained together

Each new transaction links to the fingerprint of the one before it, forming a chain. Change an old transaction, and its fingerprint stops matching — the tampering is instantly visible.

What exactly is protected?

Once a transaction is recorded, these details are locked in for good:

• The transaction ID
• Which group the transaction belongs to
• The member's phone number
• The original amount
• The transaction type
• The original date and time it was created
• The transaction's fingerprint

Nothing gets secretly erased

Wallet Yetu will not permanently delete a transaction record. A contribution can't simply vanish from the history to cover something up.

So what is allowed to change?

A few things are expected to update after the fact — most commonly, the payment status once M-Pesa confirms a payment went through (reconciliation, see glossary). That is normal bookkeeping, not a loophole: it never lets anyone rewrite who paid, how much, or when.

2. Withdrawal security: who can take money out?

Recording money coming in is only half the picture. Wallet Yetu also controls money going out. The golden rule: being a WhatsApp admin, on its own, never lets someone withdraw group funds — think of it like a bank account that needs a specific signer, not just "anyone with keys to the office."

The key roles

Role	What it means
Authorized treasurer	Starts (initiates) a withdrawal. Must currently be both a group member and a WhatsApp admin.
Approver	Confirms a withdrawal when a second sign-off is required.
Group creator	Whoever originally started the WhatsApp group. Keeps a special approval role for as long as they stay a member.

Quick check: who needs to approve a withdrawal?

The full rules (below) cover every case, but most situations boil down to this:

Situation	Who approves?
Creator is the treasurer, and still an admin	No one else — the creator can withdraw alone.
Creator is not the treasurer, but is still a group member	The creator approves — even if the creator is no longer an admin.
Creator has left the group entirely	Another current admin must approve instead.

The full rules

• The treasurer must currently be both a group member and an admin to start a withdrawal.
• If the creator is the treasurer and is still an admin, they can withdraw without a second approver.
• If the creator is the approver, their admin status doesn't matter — they just need to still be a member.
• If the treasurer is an admin but not the creator, a second approval is always required.
• If the creator is still a member, they are the default approver — even if they're no longer an admin.
• If the creator has left the group, another current admin must approve instead.
• The treasurer and the approver must always be two different people — no one approves their own withdrawal.
• Demoting or removing the treasurer does not automatically hand treasurer powers to anyone else.

3. Withdrawal examples

Four real-life scenarios show how the rules play out.

Example A — Creator is the Treasurer

Jane is the group creator and the Wallet Yetu treasurer, and she's still a WhatsApp admin. She starts a withdrawal — no second approval needed.

Example B — Creator Approves, Not an Admin

Jane is still the creator and a member, but no longer an admin. Mike is the treasurer and an admin. Mike starts a withdrawal, and Jane can still approve it — creator approval depends on membership, not admin status.

Example C — Creator Has Left

Jane, the creator, has left the group. Mike, the treasurer, is still an admin. When Mike starts a withdrawal, another current admin must approve it instead of Jane.

Example D — Treasurer Removed by Another Admin

Dan, an ordinary admin, demotes Mike, the treasurer. Dan does not automatically become treasurer. Treasury authority stays locked until Mike is restored or Jane (the creator) rejoins.

4. What this means for ordinary group members

• An admin is not automatically the treasurer.
• Managing a WhatsApp group does not, by itself, allow someone to withdraw Wallet Yetu funds.
• The system checks roles and membership before any withdrawal is allowed to proceed.
• A withdrawal that needs approval simply cannot complete without that second person.
• Transaction records are built to stay permanent and resistant to unauthorized changes or deletion.

5. Why these controls matter

Chamas, welfare groups, fundraisers, weddings, funeral committees, church groups, and friend groups all involve many people and real money. These controls create a clean separation between recording money coming in and authorizing money going out — the same principle behind a shop where one person handles the till and a different person signs off on refunds.

6. One-minute summary

• 🔐 Contributions get a digital fingerprint.
• ⛓️ Transactions link together like a chain.
• 🚫 Key transaction details can't be secretly changed.
• 🗑️ Recorded transactions can't simply be deleted.
• 👤 Only the authorized treasurer can start a withdrawal.
• ✅ When a second approval is required, it must come from an authorized person.
• 👑 The group creator keeps a special approval role while still a member.
• ⚖️ A WhatsApp admin doesn't automatically become the treasurer.

Wallet Yetu — keeping group money records clear, controlled and accountable.

7. Frequently asked questions