ANZ goMoney New Zealand Security & Privacy Scorecard
Android
Tap and swipe patterns are continuously monitored by a behavioral biometrics service to detect fraud. In-app activity is shared with Adobe Analytics. Third-party services also handle identity verification, meaning personal data passes through providers outside ANZ directly.
Best for
ANZ customers comfortable with behavioral monitoring
Avoid if
Users who object to behavioral biometric tracking
Findings
- 0 critical
- 3 high
- 1 medium
- 1 low
- 2 info
1 issue identified across security and privacy analysis.
Top security issues
- Deep Link Handler Logic Not Verifiable Due to Obfuscation
- JavaScript Enabled in Banking WebView
- Client-Side API Keys in Manifest and Resources
Top privacy issues
- BioCatch SDK Pre-Consent Data Collection
- Biometric Data Processing Without Explicit Consent
- BioCatch Session Recording Without Explicit Disclosure
Full analysis
ANZ goMoney New Zealand
nz.co.anz.android.mobilebanking | Version 7.0.3522 | Scanned 2026-02-15
Security: 92/100 | Privacy: 85/100
What This Means for You
Tap and swipe patterns are continuously monitored by a behavioral biometrics service to detect fraud. In-app activity is shared with Adobe Analytics. Third-party services also handle identity verification, meaning personal data passes through providers outside ANZ directly.
Recommendation: Trustworthy
Best For: ANZ customers comfortable with behavioral monitoring
Avoid If: Users who object to behavioral biometric tracking
Key Findings
Data Security - 1 finding (1 info)
Network Security - 1 finding (1 low)
Code Safety - 0 findings
Privacy - 3 findings (3 high)
Privacy Concerns
What Data is Collected
The app collects behavioral biometric data reflecting how a user physically interacts with their device, crash and performance diagnostics, in-app activity patterns, and personal details submitted during identity verification. Location data is accessed through Google Maps integration.
Third-Party Data Sharing
User data is shared with the following external services:
- BioCatch - Receives behavioral biometric data for fraud detection
- Adobe Analytics - Receives in-app activity for analytics
- IDVerse - Receives personal details for identity verification
- Firebase Messaging - Handles push notification delivery
- Firebase Crashlytics - Receives crash reports and diagnostic data
- Atomic SDK - Handles in-app messaging
- Google Maps - Accesses location for map features
- MLKit - On-device processing for certain features
- Glide / Picasso / Lottie - Used for media rendering
Understanding the Scores
| Category | Score |
|---|---|
| Security | 92/100 |
| Privacy | 85/100 |
| Data Security | 100/100 |
| Network Security | 100/100 |
| Code Safety | 95/100 |
| Data Collection | 85/100 |
| Data Sharing | 92/100 |
| User Control | 80/100 |
Positive Security Features
- All data stored on the device is fully protected, earning a perfect score in data security
- All network communications are fully secured, with no weaknesses observed in how the app transmits data
- The app's code is well-structured with strong protections in place, reflected in the high code safety score
- Behavioral biometric monitoring actively works to detect unauthorized access to user accounts in real time
Areas for Improvement
- Behavioral biometric data is shared with a third-party provider; the app gives users limited visibility into how long that data is kept or how it may be used beyond fraud detection.
- Identity verification involves external providers, so sensitive personal details pass through services outside of ANZ's direct control.
- User controls over data collection and sharing could be clearer, giving users more straightforward options to understand and manage what information is shared with third parties.
About This Analysis
App Details
| Field | Value |
|---|---|
| App Name | ANZ goMoney New Zealand |
| Package | nz.co.anz.android.mobilebanking |
| Version | 7.0.3522 |
| Platform | Android |
| Scan Date | 2026-02-15 |
This scorecard is produced by automated static analysis of the app's code and configuration. Scores reflect observed practices, data flows, and third-party integrations at the time of the scan. This report is intended to help users make informed decisions about the apps they use.
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 88/100 |