CITT

    Scan results

    Easy Banking App

    Android

    BNP Paribas Fortis Easy Banking App. Manage daily banking transactions wherever and whenever you want in complete security: make payments, track your balance, request and monitor insurance policies, loans and investments, and more. Manage everything on your smartphone or tablet.

    CITT SCORE
    77
    out of 100
    TRUSTish

    Quick Verdict

    Best for: BNP Paribas customers doing everyday banking

    What It Means For You

    In-app behavior is shared with marketing and customer experience analytics services, including Adobe Marketing Cloud and Medallia, which track how users navigate and interact with the app. Crash and performance data is collected by Firebase. Actual banking transactions stay with the bank, but usage patterns are monitored by third-party analytics providers.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (10)

    Data Security

    2 total
    1 Medium
    1 Low

    Network Security

    1 total
    1 Medium

    Code Security

    3 total
    1 Medium
    2 Low

    Privacy

    3 total
    1 High
    1 Medium
    1 Low

    Third-Party Risk

    1 total
    1 Medium

    Third-Party Services

    Adobe Marketing Cloud, Medallia Digital Experience, Gemalto/Thales Digital Security, Firebase (Crashlytics, Cloud Messaging, Remote Config), Google ML Kit, Bancontact Payconiq, IBM ISAM

    Security Strengths

    • ✓Strong encryption (AES-256-GCM, ECC secp521r1) with Android Keystore backing
    • ✓Certificate pinning implemented (8 pins per environment)
    • ✓No JavaScript interfaces in app WebView (RCE risk eliminated)
    • ✓HTTPS-only enforcement with network security configuration
    • ✓Root detection and emulator detection
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    sensitive data
    location
    camera
    contacts
    ads

    Package

    com.bnpp.easybanking

    Version

    40.55.8

    Analysis Date

    Feb 1, 2026

    0

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Trustworthy

    Key Findings

    Data Security - 2 findings (1 medium, 1 low)

    Network Security - 1 finding (1 medium)

    Code Safety - 0 findings

    Privacy - 3 findings (1 high, 1 medium, 1 low)

    Privacy Concerns

    What Data is Collected

    The app collects data about how users navigate and use it, including which screens are visited, which features are used, and how users move through the app. Crash reports and performance diagnostics are also collected when errors occur.

    Third-Party Data Sharing

    In-app behavior is shared with Adobe Marketing Cloud for marketing analytics and with Medallia for customer experience measurement. Crash and performance data is sent to Firebase (Google). Payment-related interactions involve Bancontact Payconiq for compatible transactions.

    Understanding the Scores

    CategoryScore
    Security82/100
    Privacy72/100
    Data Security85/100
    Network Security92/100
    Code Safety85/100
    Data Collection75/100
    Data Sharing78/100
    User Control88/100

    Positive Security Features

    • Enterprise-grade access management through IBM ISAM helps protect user accounts from unauthorised access.
    • Gemalto/Thales Digital Security technology is used to strengthen sensitive operations within the app.
    • Network communications are secured to a high standard, reflected in the 92/100 Network Security score.

    Areas for Improvement

    • How user usage data is shared with third-party marketing and analytics services could be made clearer, with better in-app controls for opting out.
    • Some on-device data storage practices could be strengthened to better protect information saved locally on the device.
    • More transparent disclosure about which third parties receive user behavioral data, and for what purpose, would give users greater control over their information.

    About This Analysis

    This scorecard is based on automated analysis of the app's code and configuration. Scores reflect the security and privacy practices observed in this version of the app.

    App Details

    FieldValue
    App NameEasy Banking App
    Package IDcom.bnpp.easybanking
    Version40.55.8
    Scan Date2026-02-01

    Right of Reply

    Developer not yet contacted