Xe Money Transfer & Converter Security & Privacy Scorecard

Android

48
Overall trust score
Unsafe
42
Security
55
Privacy

In-app behavior and transfer activity is shared with advertising and analytics companies, including an ad network. Identity and financial account data passes through third-party verification services. Data protection practices for financial information stored on the device mean user data may not be fully protected.

Best for

Occasional currency conversions and international transfers

Avoid if

You want your financial activity kept out of ad networks

Findings

  • 0 critical
  • 0 high
  • 0 medium
  • 0 low
  • 0 info

0 issues identified across security and privacy analysis.

Top security issues

  • Overly Permissive WebView Allowlist
  • Hardcoded Accertify Fraud Detection Credentials
  • Weak Cryptographic Implementation with IV Reuse

Top privacy issues

  • Analytics Tracking Before User Consent
  • GPS Location Tracking for Analytics
  • Advertising ID Collection Without Disclosure

Full analysis

Xe Money Transfer & Converter

Overall Security Score: 42/100
Privacy Score: 55/100

What This Means for You

In-app behavior and transfer activity is shared with advertising and analytics companies, including an ad network. Identity and financial account data passes through third-party verification services. Data protection practices for financial information stored on the device mean user data may not be fully protected.

Recommendation: Use With Caution

Best For: Occasional currency conversions and international transfers
Avoid If: Keeping financial activity out of ad networks is a priority

Key Findings

Data Security - 7 findings (2 critical, 2 high, 3 medium)

Network Security - 2 findings (2 medium)

Code Safety - 0 findings

Privacy - 3 findings (2 high, 1 medium)

Privacy Concerns

What Data is Collected

The app collects identity information for account verification, financial transaction details, and behavioral data about how the app is used and which features are accessed.

Third-Party Data Sharing

Data is shared with the following third-party services:

  • Plaid Link - Financial account linking and verification
  • Veriff - Identity verification
  • Accertify InAuth - Device and fraud risk assessment
  • Segment - Customer data routing and analytics
  • Amplitude - Behavioral analytics
  • AppsFlyer - Marketing attribution and analytics
  • Iterable - Marketing communications
  • Firebase - App analytics and crash reporting
  • Google Analytics - Usage analytics
  • AppLovin - Advertising network

Understanding the Scores

Category Score
Security 42/100
Privacy 55/100
Data Security 35/100
Network Security 60/100
Code Safety 40/100
Data Collection 50/100
Data Sharing 65/100
User Control 45/100

Positive Security Features

  • No positive security features to report for this version.

Areas for Improvement

  • Financial data stored on the device has less protection than expected for a money transfer app, increasing the risk if the device is accessed by someone else.
  • In-app behavior is shared with an advertising network (AppLovin), which is unusual for a financial app and gives advertising companies insight into a user's financial habits.
  • Identity and account details pass through multiple third-party services, broadening the number of organizations that handle sensitive financial information.

About This Analysis

App Details

  • App: Xe Money Transfer & Converter
  • Package: com.xe.currency
  • Version: 7.30.3 (Build 73003138)
  • Scan Date: 2026-02-01

Versions & scan history

ScanDateOverall score
#1 (current) 48/100