# Security & Privacy Scorecard

## ANZ goMoney New Zealand

**nz.co.anz.android.mobilebanking** | Version 7.0.3522 | Scanned 2026-02-15

**Security: 92/100** | **Privacy: 85/100**

## What This Means for You

Tap and swipe patterns are continuously monitored by a behavioral biometrics service to detect fraud. In-app activity is shared with Adobe Analytics. Third-party services also handle identity verification, meaning personal data passes through providers outside ANZ directly.

## Recommendation: Trustworthy

**Best For:** ANZ customers comfortable with behavioral monitoring
**Avoid If:** Users who object to behavioral biometric tracking

## Key Findings

**Data Security** - 1 finding (1 info)

**Network Security** - 1 finding (1 low)

**Code Safety** - 0 findings

**Privacy** - 3 findings (3 high)

## Privacy Concerns

### What Data is Collected

The app collects behavioral biometric data reflecting how a user physically interacts with their device, crash and performance diagnostics, in-app activity patterns, and personal details submitted during identity verification. Location data is accessed through Google Maps integration.

### Third-Party Data Sharing

User data is shared with the following external services:

- **BioCatch** - Receives behavioral biometric data for fraud detection
- **Adobe Analytics** - Receives in-app activity for analytics
- **IDVerse** - Receives personal details for identity verification
- **Firebase Messaging** - Handles push notification delivery
- **Firebase Crashlytics** - Receives crash reports and diagnostic data
- **Atomic SDK** - Handles in-app messaging
- **Google Maps** - Accesses location for map features
- **MLKit** - On-device processing for certain features
- **Glide / Picasso / Lottie** - Used for media rendering

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 92/100 |
| Privacy | 85/100 |
| Data Security | 100/100 |
| Network Security | 100/100 |
| Code Safety | 95/100 |
| Data Collection | 85/100 |
| Data Sharing | 92/100 |
| User Control | 80/100 |

## Positive Security Features

- All data stored on the device is fully protected, earning a perfect score in data security
- All network communications are fully secured, with no weaknesses observed in how the app transmits data
- The app's code is well-structured with strong protections in place, reflected in the high code safety score
- Behavioral biometric monitoring actively works to detect unauthorized access to user accounts in real time

## Areas for Improvement

- Behavioral biometric data is shared with a third-party provider; the app gives users limited visibility into how long that data is kept or how it may be used beyond fraud detection.
- Identity verification involves external providers, so sensitive personal details pass through services outside of ANZ's direct control.
- User controls over data collection and sharing could be clearer, giving users more straightforward options to understand and manage what information is shared with third parties.

---

## About This Analysis

### App Details

| Field | Value |
|---|---|
| App Name | ANZ goMoney New Zealand |
| Package | nz.co.anz.android.mobilebanking |
| Version | 7.0.3522 |
| Platform | Android |
| Scan Date | 2026-02-15 |

This scorecard is produced by automated static analysis of the app's code and configuration. Scores reflect observed practices, data flows, and third-party integrations at the time of the scan. This report is intended to help users make informed decisions about the apps they use.