CITT

    Scan results

    maibank

    Android

    maibank is Moldova's leading digital banking app offering fully secure account management, instant digital cards, fast payments, loans, deposits, and utility bill payments. Experience state-of-the-art security with advanced encryption, biometric authentication, and innovative banking tools.

    CITT SCORE
    50
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Everyday banking with standard analytics tradeoffs

    Not For: You bank on public or untrusted Wi-Fi networks

    What It Means For You

    In-app behavior is tracked by Firebase, Amplitude, and Adjust, sharing usage patterns with multiple analytics and attribution companies. Network protection for banking sessions does not meet the expected standard, meaning data may travel with less protection than expected on public or unsecured connections. Account data handling has areas where sensitive information may not be fully protected from improper storage or access.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (25)

    Data Security

    15 total
    3 High
    6 Medium
    5 Low
    1 Info

    Network Security

    2 total
    1 Critical
    1 High

    Code Security

    3 total
    1 Critical
    1 Medium
    1 Low

    Privacy

    3 total
    1 High
    2 Medium

    Third-Party Risk

    2 total
    2 Medium

    Third-Party Services

    Firebase Analytics, Amplitude, Adjust, Google Maps, Druid (customer support), Lokalise (localization), Yandex DivKit, Realm Database, PairIP LicenseCheck

    Security Strengths

    • ✓Realm Database Encryption (AES-256)
    • ✓Android Keystore Integration (hardware-backed)
    • ✓HTTPS Enforced (usesCleartextTraffic=false)
    • ✓Biometric Authentication
    • ✓Multi-Factor Authentication for transactions
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    banking
    sensitive data
    payment processing
    kyc
    children accounts
    biometric
    location
    webview security
    third party analytics
    gdpr

    Package

    md.maib.maibank

    Version

    1.0.635 (versionCode: 629)

    Analysis Date

    Feb 10, 2026

    Classes Analyzed

    82,570

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 15 findings (3 high, 6 medium, 5 low, 1 info)

    Network Security - 2 findings (1 critical, 1 high)

    Code Safety - 0 findings

    Privacy - 3 findings (1 high, 2 medium)

    Privacy Concerns

    What Data is Collected

    maibank collects behavioral data including in-app interactions, session activity, and device identifiers. This data feeds into both internal analytics and the third-party services listed below.

    Third-Party Data Sharing

    Usage data is shared with the following services:

    • Firebase Analytics - Tracks in-app behavior and session activity on Google's platform.
    • Amplitude - Collects detailed behavioral data to build usage profiles tied to user activity.
    • Adjust - Links in-app actions to advertising campaigns for attribution purposes.
    • Google Maps - Mapping features may share location data with Google.
    • Druid - Customer support platform with access to user support interaction data.
    • Lokalise - Localization service used for translating app content.
    • Yandex DivKit - A UI framework component from Yandex integrated into the app.
    • Realm Database - A local on-device database library handling data storage.
    • PairIP LicenseCheck - A licensing verification service that contacts external servers.

    Understanding the Scores

    CategoryScore
    Security45/100
    Privacy55/100
    Data Security65/100
    Network Security35/100
    Code Safety40/100
    Data Collection50/100
    Data Sharing55/100
    User Control60/100

    Positive Security Features

    • No specific positive security practices were identified in this version of the app.

    Areas for Improvement

    • The app's network communication provides less protection than expected on untrusted connections, meaning data transmitted during active use may not be fully protected.
    • Sensitive account data is handled with insufficient protections, increasing the risk that personal or financial information could be stored or accessed in ways that are not fully secure.
    • The scope of third-party analytics means in-app behavior is shared with multiple external companies, with limited controls available to users.

    About This Analysis

    This scorecard reflects the state of the app at the time of analysis and may not reflect subsequent updates.

    App Details

    • App: maibank
    • Package ID: md.maib.maibank
    • Version: 1.0.635 (build 629)
    • Scan Date: 2026-02-10

    Right of Reply

    Developer not yet contacted