8 ms·
Do banking applications work? I mean as in "I buy X online. It requires me to login to my bank application and press 'confirm'. I perform this sequence, and onl
by dgan 5y ago
Do banking applications work? I mean as in "I buy X online. It requires me to login to my bank application and press 'confirm'. I perform this sequence, and online purchase is completed. "?
- sorry_outta_gas 5y agoI just use the website
- salusinarduis 5y agoSome will, however I have heard some of these apps have janky hooks into Android's trust system which will break them on non-google distros. Personally I wouldn't suggest having banking apps on a phone. You can always use the web browser if you absolutely must access those accounts.
- dgan 5y agoI will try to do so with web account, however I doubt it will work..
- Kubuxu 5y agoMost banks in EU require phone app based confirmations for transfers and other operations (according to PDS2 directive). Visa and Mastercard also introduced 3DSecrue system which piggybacks on the same system of confirmations. Vendors are incentivised to adopt it by lower rates. In essence when paying with card or making a wire transfer (or using some instant transfer method, for example Blik in Poland), you get notification on you phone asking you to confirm operation, even if you initiate it from your account in the browser. In essence Bank apps became 2FA devices. The only way to avoid it is to opt-out of the App 2FA and use paper one-time code pad. You regularly then get sent a list of codes by snail mail, which you have to type to confirm operations.
- deleted 5y ago[deleted]
- gpvos 5y agoIt depends per bank; mine discontinued the paper OTP pad as well as the SMS codes, and gave me a separate 2FA device when I didn't want to use their app. I don't think banks can force you to have a smartphone yet.
- krageon 5y ago> I don't think banks can force you They can and do. There are a number of banks where you have absolutely no choice.
- robocat 5y ago> separate 2FA device FYI in New Zealand a few banks can provide a device (e.g. RSA SecurID) for proper non-bank 2 factor auth with consumer accounts. However some major banks only use phones for 2FA (app or SMS). The norms seem to vary considerably depending on country.
- bubblethink 5y ago
- andrepd 5y agoMy bank uses SMS. It's simple and platform agnostic: even a Nokia 3310 is compatible x)
- 5etho 5y agoalso not very safe. Attacker can duplicate your sim. This way he can call the bank and use the mobile numer as to restore bank account details. At least in Poland
- TeMPOraL 5y agoDidn't know this was driven by PDS2. As much as I appreciate the convenience, I still find the whole drive fucking annoying - especially that, with all the talk about data portability, I still can't get a simple API endpoint I could point a script at to fetch me my account's balance. Yes, I'm bitter. If there's ever a bank that puts end-user automation first, I'll switch in a second.
- selfhoster11 5y agoIf you are in the UK, Starling offers a relatively simple API.
- herbst 5y agoFrom all the banks I've tried over the years I always check for this feature, sometimes asked and never got what I wanted. "No the API is only available for our 100k a month or more users" is the closest I got. However when I really wanted a solution i build a small service that receives the confirmation SMS most banks offers and pushes my balance in a small API.
- soylentnewsorg 5y agoThe number one reason to use a banking app on your phone is to deposit a paper check by taking a photo of it. I am not aware of a bank that lets you do that from a webpage. Vanguard works on my completely google-free phone, although I had to change the OS language to English because w/ Android set to French their app would force the use of commas as the cents separator, then complain that commas are not a valid character. Another fun thing was it uses its own internal camera app, which would focus the preview, then completely ignore the focus setting and take a blurry photo of the check. Eventually I figured out the camera's default focus length and take the photo from that distance.
- dylan604 5y agoWhat kind of purchase/checkout system works like this? I have never seen one, but if I had, I would not complete the transaction.
- dgan 5y agoamazon paysend many others do too. bank is Boursorama
- dylan604 5y agoIs this something more popular outside of the US where credit/debit cards are not as ubiquitous?
- dgan 5y agoMaybe. I never owned a credit card, however I also basically didn't use cash for years, only debit card
- kevin_thibedeau 5y agoI've had a US debit card where 3D secure was triggered.
- joshuaissac 5y agoIt usually happens when someone pays with a credit or debit card. If the confirmation is not given in the app within a certain time limit, the bank rejects the card transaction. Edit: to clarify, my comment is about the UK, and it does not happen with most card transactions; "usually" here refers instead to card transactions being the usual trigger (in my experience) for this app-based authentication flow.
- dylan604 5y ago"Usually" is a bit of sticky word here. Your usual is not my usual, hence my questioning of it. My experience is US centric, so I'm assuming non-US but non-US is a really big place.
- slock83 5y agoI switched to /e/ rather recently, and it also just happen that I am in the process of switching banks, which means I currently have two banking apps on my phone. Both are rather strict on having a clean, non rooted, non modified phone. Currently, they both work without any caveats, but I had to install magisk, add them to magisk hide, and use the magisk renaming feature to have them work.
- toastal 5y agoI recently had a bank detect Magisk Hide. Since on principle, I don't think it's their business what I do with my phone, especially once added Magisk Hide, I went into my branch, told them just that and asked for everything in cash to move to a different bank. These are the same banks that only have SMS for 2FA and it's required.
- tjader 5y agoI also ironically had to install Magisk on my previously unrooted LineageOS phone in order to convince a bank app my phone is not rooted.
- hkt 5y agoOn /e/OS with microG, I successfully use the apps for Starling Bank and Hargreaves Lansdowne. Nationwide and Nivo also both work. (these are all UK services, not sure how far they are known elsewhere)
- thaumasiotes 5y ago> I mean as in "I buy X online. It requires me to login to my bank application and press 'confirm'. I perform this sequence, and online purchase is completed. " Huh? This is not a real thing.