search

PrivSec-dev / banking-apps-compat-report

Report and track banking app compatibility with GrapheneOS, including which workarounds may be required.
https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/
87 stars 4 forks source link

BHIM - MAKING INDIA CASHLESS #135

Closed takeda-discord closed 2 years ago

takeda-discord commented 2 years ago

Is there an existing issue for this?

App name

BHIM - MAKING INDIA CASHLESS

Link to app

https://play.google.com/store/apps/details?id=in.org.npci.upiapp

App version

v2.9.7

Country of the app

India

Build Number

TP1A.220624.014.2022082400

Device

Google Play installed

Google Play services Network permission revoked?

SafetyNet Enforcement

Native code debugging

Stock OS compatibility

Profile app tested in

Description of the app's functionality

BHIM is a UPI payment app used in India. The app opens as expected and I was able to register my device without any issues. I was also able to successfully send money using the app.

Are there any extra notes you think users should know about?

No response

ADB logcat of the app if necessary

No response

akc3n commented 2 years ago

Thank you

pixincreate commented 1 year ago

BHIM does work without GMS installed too. It throws unsupported message. But allows you to do payments. However, it comes with a cost of inability to scan. You can, but it does not detect the QR code. If you scan through the scanner within the Camera app, it will redirect you to payments, but that flags as a fraud payment and 99% of the transactions fail. However, if you take a picture of the QR Code and select choose from gallery at the time of scanning, it works like a charm.

Edit:

You need to have GMS for initial scans as it downloads QR patterns to detect the payment QRs

PVTejas commented 3 weeks ago

I'm unable to log in with phone number on Pixel 8a with GOS. The app wants to auto-detect OTP and is unable to, and will not allow me to type it in manually.

pixincreate commented 3 weeks ago

Yes, this is a new issue that started to occur recently.
You'll need GMS for initial setup of BHIM (at least for now).

Install GMS, you do not need to provide it internet permissions but only SMS permission for Play services. Open BHIM and try sending a request, it should work.

Once verified and logged in, you can uninstall GMS and GPlay altogether.

PVTejas commented 3 weeks ago

I'll try that in 24 hours - got hit with the rate limit.

when you say GMS, do you mean google play services or a separate app called google messaging services?

pixincreate commented 2 weeks ago

play services.

PVTejas commented 2 weeks ago

It worked. The update to from Android 14 to 15 seems to have messed up the ability of the secondary user to send SMSes, and I had to delete and reinstall the secondary user space. It was smooth sailing after that, so thank you so much for the help!