PrivSec-dev / banking-apps-compat-report

Report and track banking app compatibility with GrapheneOS, including which workarounds may be required.
https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/
84 stars 4 forks source link

BBVA Perú #417

Closed deerf0x closed 7 months ago

deerf0x commented 7 months ago

Is there an existing issue for this?

App name

BBVA Perú

Link to app

https://play.google.com/store/apps/details?id=com.bbva.nxt_peru

App version

24.20.11

Country of the app

Peru

Build Number

2024030300

Device list

Pixel 6 Pro

Profile app tested in

Owner profile

Google Play installed?

Installed

Where did you install this app from?

Google Play Store

Google Play services Network permission revoked?

Native code debugging

Exploit protection compatibility mode

Stock OS compatibility

NFC payments

Description of the app's functionality

Peruvian branch of the well known spanish bank. App features: opening bank accounts, wire transfers, bill payments, and instant mobile payments via phone number or QR code (Plin), NFC payments.

Tested working:

Tested not working / broken, even with Exploit protection compatibility mode enabled:

Screenshot_20240307-233854

Are there any extra notes you think users should know about?

Sadly, it seems that NFC Payments might require passing Play Integrity's MEETS_STRONG_INTEGRITY check (if I'm wrong or anyone else has updates on this please comment below).

NFC Payments were tested with another phone running LineageOS without success, using the Play Integrity Fix by @chiteroman Magisk Module with a valid fingerprint to pass the MEETS_DEVICE_INTEGRITY check, after that, Google Wallet allowed NFC payments, but the option in the BBVA app was still disabled.

ADB logcat of the app if necessary

No response

spring-onion commented 7 months ago

Make sure to point them to the attestation compatibility guide too.