Scotiabank Mobile Banking Security & Privacy Scorecard
Android
Device behavior and session activity is analyzed by fraud-detection services to verify identity. Adobe and Firebase collect usage data, and interactions are monitored to personalize the in-app experience. Integrated third parties include Interac, Western Union, and TransUnion for financial features.
Best for
Scotiabank customers banking on the go
Findings
- 0 critical
- 2 high
- 3 medium
- 2 low
- 2 info
1 issue identified across security and privacy analysis.
Top security issues
- Hardcoded Acuant ID Verification Credentials
- Unprotected Broadcast Receivers for Inter-App Communication
- Third-Party SDK WebView with Universal File Access
Top privacy issues
- Pre-Consent Analytics SDK Initialization
- BioCatch Behavioral Biometrics Device Fingerprinting
- Advertising ID Permissions Declared
Full analysis
Scotiabank Mobile Banking
Version: 2508.0.0 (build 212)
Platform: Android
Analyzed: February 16, 2026
Security Score: 82/100 Privacy Score: 78/100
What This Means for You
Device behavior and session activity is analyzed by fraud-detection services to verify identity. Adobe and Firebase collect usage data, and interactions are monitored to personalize the in-app experience. Integrated third parties include Interac, Western Union, and TransUnion for financial features.
Recommendation: Trustworthy
Best For: Scotiabank customers banking on the go
Key Findings
Data Security - 0 findings
Network Security - 2 findings (2 info)
Code Safety - 0 findings
Privacy - 3 findings (1 high, 1 medium, 1 low)
Privacy Concerns
What Data is Collected
The app collects behavioral signals from the device, including touch patterns, typing rhythm, and session timing, to support fraud detection and identity verification. Usage analytics are gathered by Adobe Experience Cloud and Firebase, covering screens visited, features used, and session duration. Device identifiers and interaction history may also be retained to personalize the in-app experience.
Third-Party Data Sharing
BioCatch and ThreatMetrix receive behavioral and device signals to assess fraud risk during sessions. Adobe Experience Cloud and Firebase receive usage and interaction data for analytics and personalization. Acuant and Top Image Systems receive document images to support identity verification flows. Western Union, Interac, and TransUnion receive financial data to facilitate transfers, payments, and credit-related features. Scene+ and Personetics receive transaction and preference data to support rewards and financial insights. OneTrust is used for consent and privacy preference management.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 82/100 |
| Privacy | 78/100 |
| Data Security | 85/100 |
| Network Security | 98/100 |
| Code Safety | 80/100 |
| Data Collection | 75/100 |
| Data Sharing | 90/100 |
| User Control | 82/100 |
Positive Security Features
- Network communication received a near-perfect score of 98/100, reflecting strong practices for protecting data as it travels between the device and the bank's servers.
Areas for Improvement
- Multiple behavioral profiling services monitor how users interact with the device. Reviewing the app's privacy settings and the linked privacy policy can help users understand what is retained and for how long.
- Third-party analytics services receive data about in-app activity, which may contribute to profiles of banking behavior beyond what is needed for core app functionality.
- The range of identity and financial data shared with services such as TransUnion warrants a closer look at the consent options available within the app's settings.
About This Analysis
This scorecard is produced through automated analysis of the app's code and configuration. Scores and findings reflect the security and privacy posture of the version examined and may change as the app is updated.
App Details
- Package ID: com.scotiabank.banking
- Version: 2508.0.0 (build 212)
- Platform: Android
- Scan Date: February 16, 2026
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #5 (current) | 80/100 |