ANZ goMoney New Zealand Security & Privacy Scorecard

Android

88
Overall trust score
Trustworthy
92
Security
85
Privacy

Tap and swipe patterns are continuously monitored by a behavioral biometrics service to detect fraud. In-app activity is shared with Adobe Analytics. Third-party services also handle identity verification, meaning personal data passes through providers outside ANZ directly.

Best for

ANZ customers comfortable with behavioral monitoring

Avoid if

Users who object to behavioral biometric tracking

Findings

  • 0 critical
  • 3 high
  • 1 medium
  • 1 low
  • 2 info

1 issue identified across security and privacy analysis.

Top security issues

  • Deep Link Handler Logic Not Verifiable Due to Obfuscation
  • JavaScript Enabled in Banking WebView
  • Client-Side API Keys in Manifest and Resources

Top privacy issues

  • BioCatch SDK Pre-Consent Data Collection
  • Biometric Data Processing Without Explicit Consent
  • BioCatch Session Recording Without Explicit Disclosure

Full analysis

ANZ goMoney New Zealand

nz.co.anz.android.mobilebanking | Version 7.0.3522 | Scanned 2026-02-15

Security: 92/100 | Privacy: 85/100

What This Means for You

Tap and swipe patterns are continuously monitored by a behavioral biometrics service to detect fraud. In-app activity is shared with Adobe Analytics. Third-party services also handle identity verification, meaning personal data passes through providers outside ANZ directly.

Recommendation: Trustworthy

Best For: ANZ customers comfortable with behavioral monitoring
Avoid If: Users who object to behavioral biometric tracking

Key Findings

Data Security - 1 finding (1 info)

Network Security - 1 finding (1 low)

Code Safety - 0 findings

Privacy - 3 findings (3 high)

Privacy Concerns

What Data is Collected

The app collects behavioral biometric data reflecting how a user physically interacts with their device, crash and performance diagnostics, in-app activity patterns, and personal details submitted during identity verification. Location data is accessed through Google Maps integration.

Third-Party Data Sharing

User data is shared with the following external services:

  • BioCatch - Receives behavioral biometric data for fraud detection
  • Adobe Analytics - Receives in-app activity for analytics
  • IDVerse - Receives personal details for identity verification
  • Firebase Messaging - Handles push notification delivery
  • Firebase Crashlytics - Receives crash reports and diagnostic data
  • Atomic SDK - Handles in-app messaging
  • Google Maps - Accesses location for map features
  • MLKit - On-device processing for certain features
  • Glide / Picasso / Lottie - Used for media rendering

Understanding the Scores

Category Score
Security 92/100
Privacy 85/100
Data Security 100/100
Network Security 100/100
Code Safety 95/100
Data Collection 85/100
Data Sharing 92/100
User Control 80/100

Positive Security Features

  • All data stored on the device is fully protected, earning a perfect score in data security
  • All network communications are fully secured, with no weaknesses observed in how the app transmits data
  • The app's code is well-structured with strong protections in place, reflected in the high code safety score
  • Behavioral biometric monitoring actively works to detect unauthorized access to user accounts in real time

Areas for Improvement

  • Behavioral biometric data is shared with a third-party provider; the app gives users limited visibility into how long that data is kept or how it may be used beyond fraud detection.
  • Identity verification involves external providers, so sensitive personal details pass through services outside of ANZ's direct control.
  • User controls over data collection and sharing could be clearer, giving users more straightforward options to understand and manage what information is shared with third parties.

About This Analysis

App Details

Field Value
App Name ANZ goMoney New Zealand
Package nz.co.anz.android.mobilebanking
Version 7.0.3522
Platform Android
Scan Date 2026-02-15

This scorecard is produced by automated static analysis of the app's code and configuration. Scores reflect observed practices, data flows, and third-party integrations at the time of the scan. This report is intended to help users make informed decisions about the apps they use.

Versions & scan history

ScanDateOverall score
#1 (current) 88/100