1Introduction
Most retail transactions run on devices the bank does not control.
2Discussion
Threats include fake apps, SMS/OTP-stealing malware, reverse engineering and traffic interception.
Countermeasures: encrypted storage, certificate pinning, obfuscation, root detection and biometrics, assessed against OWASP MASVS.
3Conclusion
Customer education on official app sources and in-app fraud warnings also reduce losses.
Sources
همفکران فناوری شریفThis article summarises the official sources cited, prepared by the Hamfekran Fanavari Sharif team for finance leaders.
Want to see these solutions in your organisation?Book a free demo
همفکران فناوری شریف

