M-payment architecture is based on two architectures, namely, remote M-payment and proximity M-payment architectures. In this paper, an online and offline secure M-payment system is proposed. The proposed system aims to secure online and offline payment processes from different attacks. This system is divided into two sides, including server and phone sides. Three levels of security are used on the phone side, including information sniffing, logging, and malware detecting. In contrast, the server side depends on authenticating and validating the M-payment users by using blacklist tables and applying different instructions based on users’ activities. After analyzing the proposed framework, the leading security principles are achieved, including confidentiality, authentication, integrity, and non-repudiation. Besides that, the framework could prevent double spending, overspending, and money laundry.