CITT

    Scan results

    Xe Money Transfer & Converter

    Android

    Xe Money Transfer & Converter is a trusted currency conversion and international money transfer app by XE.com Inc. Monitor real-time exchange rates, send money to 200+ countries with competitive rates, and choose from flexible payment and payout options including bank deposits, cash pickup, and mobi

    CITT SCORE
    48
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Occasional currency conversions and international transfers

    Not For: You want your financial activity kept out of ad networks

    What It Means For You

    In-app behavior and transfer activity is shared with advertising and analytics companies, including an ad network. Identity and financial account data passes through third-party verification services. Data protection practices for financial information stored on the device mean user data may not be fully protected.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (20)

    Data Security

    7 total
    2 Critical
    2 High
    3 Medium

    Network Security

    2 total
    2 Medium

    Code Security

    4 total
    1 Critical
    2 High
    1 Low

    Privacy

    3 total
    2 High
    1 Medium

    Third-Party Risk

    3 total
    1 High
    2 Medium

    Permission Usage

    1 total
    1 Medium

    Third-Party Services

    Plaid Link, Veriff, Accertify InAuth, Segment, Amplitude, AppsFlyer, Iterable, Firebase, Google Analytics, AppLovin

    Security Strengths

    • ✓Cleartext traffic disabled
    • ✓Android backup disabled
    • ✓Form data caching disabled in WebView
    • ✓Some sensitive data encrypted with Android Keystore (2FA device ID, user password)
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    sensitive data
    banking
    money transfer
    location
    contacts
    phone state
    ads

    Package

    com.xe.currency

    Version

    7.30.3 (Build 73003138)

    Analysis Date

    Feb 1, 2026

    Classes Analyzed

    20,298

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 7 findings (2 critical, 2 high, 3 medium)

    Network Security - 2 findings (2 medium)

    Code Safety - 0 findings

    Privacy - 3 findings (2 high, 1 medium)

    Privacy Concerns

    What Data is Collected

    The app collects identity information for account verification, financial transaction details, and behavioral data about how the app is used and which features are accessed.

    Third-Party Data Sharing

    Data is shared with the following third-party services:

    • Plaid Link - Financial account linking and verification
    • Veriff - Identity verification
    • Accertify InAuth - Device and fraud risk assessment
    • Segment - Customer data routing and analytics
    • Amplitude - Behavioral analytics
    • AppsFlyer - Marketing attribution and analytics
    • Iterable - Marketing communications
    • Firebase - App analytics and crash reporting
    • Google Analytics - Usage analytics
    • AppLovin - Advertising network

    Understanding the Scores

    CategoryScore
    Security42/100
    Privacy55/100
    Data Security35/100
    Network Security60/100
    Code Safety40/100
    Data Collection50/100
    Data Sharing65/100
    User Control45/100

    Positive Security Features

    • No positive security features to report for this version.

    Areas for Improvement

    • Financial data stored on the device has less protection than expected for a money transfer app, increasing the risk if the device is accessed by someone else.
    • In-app behavior is shared with an advertising network (AppLovin), which is unusual for a financial app and gives advertising companies insight into a user's financial habits.
    • Identity and account details pass through multiple third-party services, broadening the number of organizations that handle sensitive financial information.

    About This Analysis

    App Details

    • App: Xe Money Transfer & Converter
    • Package: com.xe.currency
    • Version: 7.30.3 (Build 73003138)
    • Scan Date: 2026-02-01

    Right of Reply

    Developer not yet contacted