Scotiabank Mobile Banking Security & Privacy Scorecard

Android

80
Overall trust score
Acceptable
82
Security
78
Privacy

Device behavior and session activity is analyzed by fraud-detection services to verify identity. Adobe and Firebase collect usage data, and interactions are monitored to personalize the in-app experience. Integrated third parties include Interac, Western Union, and TransUnion for financial features.

Best for

Scotiabank customers banking on the go

Findings

  • 0 critical
  • 2 high
  • 3 medium
  • 2 low
  • 2 info

1 issue identified across security and privacy analysis.

Top security issues

  • Hardcoded Acuant ID Verification Credentials
  • Unprotected Broadcast Receivers for Inter-App Communication
  • Third-Party SDK WebView with Universal File Access

Top privacy issues

  • Pre-Consent Analytics SDK Initialization
  • BioCatch Behavioral Biometrics Device Fingerprinting
  • Advertising ID Permissions Declared

Full analysis

Scotiabank Mobile Banking

Version: 2508.0.0 (build 212)
Platform: Android
Analyzed: February 16, 2026

Security Score: 82/100    Privacy Score: 78/100

What This Means for You

Device behavior and session activity is analyzed by fraud-detection services to verify identity. Adobe and Firebase collect usage data, and interactions are monitored to personalize the in-app experience. Integrated third parties include Interac, Western Union, and TransUnion for financial features.

Recommendation: Trustworthy

Best For: Scotiabank customers banking on the go

Key Findings

Data Security - 0 findings

Network Security - 2 findings (2 info)

Code Safety - 0 findings

Privacy - 3 findings (1 high, 1 medium, 1 low)

Privacy Concerns

What Data is Collected

The app collects behavioral signals from the device, including touch patterns, typing rhythm, and session timing, to support fraud detection and identity verification. Usage analytics are gathered by Adobe Experience Cloud and Firebase, covering screens visited, features used, and session duration. Device identifiers and interaction history may also be retained to personalize the in-app experience.

Third-Party Data Sharing

BioCatch and ThreatMetrix receive behavioral and device signals to assess fraud risk during sessions. Adobe Experience Cloud and Firebase receive usage and interaction data for analytics and personalization. Acuant and Top Image Systems receive document images to support identity verification flows. Western Union, Interac, and TransUnion receive financial data to facilitate transfers, payments, and credit-related features. Scene+ and Personetics receive transaction and preference data to support rewards and financial insights. OneTrust is used for consent and privacy preference management.

Understanding the Scores

Category Score
Security 82/100
Privacy 78/100
Data Security 85/100
Network Security 98/100
Code Safety 80/100
Data Collection 75/100
Data Sharing 90/100
User Control 82/100

Positive Security Features

  • Network communication received a near-perfect score of 98/100, reflecting strong practices for protecting data as it travels between the device and the bank's servers.

Areas for Improvement

  • Multiple behavioral profiling services monitor how users interact with the device. Reviewing the app's privacy settings and the linked privacy policy can help users understand what is retained and for how long.
  • Third-party analytics services receive data about in-app activity, which may contribute to profiles of banking behavior beyond what is needed for core app functionality.
  • The range of identity and financial data shared with services such as TransUnion warrants a closer look at the consent options available within the app's settings.

About This Analysis

This scorecard is produced through automated analysis of the app's code and configuration. Scores and findings reflect the security and privacy posture of the version examined and may change as the app is updated.

App Details

  • Package ID: com.scotiabank.banking
  • Version: 2508.0.0 (build 212)
  • Platform: Android
  • Scan Date: February 16, 2026

Versions & scan history

ScanDateOverall score
#5 (current) 80/100