NewApp Digest
search bot

mobile payments

More Than 700 Malicious Android Apps Using NFC Relay to Exfiltrate Banking Credentials
AppWizard
October 30, 2025

More Than 700 Malicious Android Apps Using NFC Relay to Exfiltrate Banking Credentials

Cybersecurity researchers at zLabs have identified over 760 malicious Android applications that exploit Near Field Communication (NFC) and Host Card Emulation (HCE) technologies to steal payment data and facilitate fraudulent transactions. Since April 2024, these applications have evolved into a coordinated global operation targeting financial institutions in countries such as Russia, Poland, the Czech Republic, Slovakia, and Brazil. The threat actors have established around 70 command-and-control servers and use Telegram bots for data exfiltration. The malicious apps impersonate about 20 legitimate entities, focusing on Russian banks and international institutions like Santander and Google Pay. They utilize various strategies to compromise payment credentials, including scanner and tapper tools, and employ simplified interfaces resembling legitimate banking portals. The malware activates a Host Card Emulation service during NFC payment events for real-time data relay. To evade detection, the threat actors use name masquerading, code obfuscation, and software packing techniques. This campaign represents a significant escalation in NFC-based financial fraud, highlighting the risks associated with NFC payment privileges.
CBE, banks to launch card tokenization on Android mobile apps
AppWizard
September 13, 2025

CBE, banks to launch card tokenization on Android mobile apps

The Central Bank of Egypt (CBE) is collaborating with local banks to introduce card tokenization services for mobile applications on Android devices, following a similar launch on Apple Pay. This initiative involves partnerships with Visa, Mastercard, and Egypt’s national payment system, Meeza, to enhance digital financial transactions and consumer confidence. As of December 2024, there are over 41.5 million Meeza national cards and 50.4 million mobile wallet accounts, which facilitated 1.1 billion transactions totaling EGP 1.54 trillion in the latter half of 2024. The CBE is also upgrading Egypt’s instant payments network, InstaPay, to improve user experience and efficiency.
Russia pushes mandatory messaging app Max on all new devices
AppWizard
August 23, 2025

Russia pushes mandatory messaging app Max on all new devices

Russia is introducing a government-backed messenger app called Max, developed by VK, which will be mandatory for all new mobile phones and tablets starting in September. The app offers messaging, video calls, mobile payments, and access to state services. Critics express concerns that Max could function as a surveillance tool, collecting personal data such as financial information and location tracking. The Russian government aims to reduce reliance on Western apps, with recent restrictions on services like WhatsApp and Telegram. Max has reportedly achieved 18 million downloads, though some features are still being tested. Additionally, by 2026, Russia plans to require all smart TVs to come preloaded with a state-backed service for government channels.
Google Wallet rolls out quick access feature with new 'double-tap' shortcut on Pixel
AppWizard
August 14, 2025

Google Wallet rolls out quick access feature with new ‘double-tap’ shortcut on Pixel

A Reddit user reported that their Pixel 9 Pro Fold with Android 16 received a new shortcut overlay for Google Wallet, allowing quick access by double-tapping the power button if Wallet is set as the designated app. This overlay provides a streamlined interface for navigating cards and using the NFC scanner for transactions. The rollout coincides with customization options in Android 16, but not all users with similar devices have experienced the feature yet. Google Wallet has been enhancing its offerings throughout 2024, expanding bank support and introducing features like real-time train status alerts for users with train passes, currently available only in India and Canada. Additionally, users can now add Loyalty and Gift card passes from the app's homepage on their computers.
Inside Putin’s attempt to construct a ‘digital gulag’ spy app to snoop on Russians
AppWizard
July 27, 2025

Inside Putin’s attempt to construct a ‘digital gulag’ spy app to snoop on Russians

The new messenger app Max, developed by VK, will be a standard feature on all new digital devices sold in Russia starting this September. It aims to integrate messaging, video calls, government services, and mobile payments. Experts express concerns that Max could enhance Kremlin surveillance capabilities, as its servers will be governed by local laws allowing the FSB to access user data. There is an increasing likelihood of a ban on WhatsApp, which is currently used by over 70% of Russians, as part of a strategy to promote Max. Opposition journalist Andrey Okun describes Max as a tool for creating a "digital gulag," while experts note it normalizes state surveillance of internet usage in Russia. The Russian government has designated WhatsApp as an extremist organization, and tactics may be employed to transition users to Max. Although the shift may not change the organized opposition landscape significantly, it could discourage casual dissent. Historically, the government has attempted to block services like Telegram, with renewed efforts expected by the end of the year.
Crypto Getting Inside the Messaging Apps
AppWizard
October 17, 2024

Crypto Getting Inside the Messaging Apps

Global cryptocurrency ownership surpassed 295 million people in 2021, with messaging applications like Telegram, Facebook Messenger, and WeChat integrating cryptocurrency wallets and payment systems. Telegram introduced The Open Network (TON) for seamless cryptocurrency transactions and has contributed to the growth of Bitcoin casinos. WeChat is exploring the incorporation of China's digital yuan into its payment system. Signal allows users to send MobileCoin, while Japan's Line has launched its own cryptocurrency, LINK. Key drivers for this trend include the demand for financial autonomy, speed and convenience of transactions, and the need for cross-border payment solutions. Younger demographics, particularly Millennials and Gen Z, are leading adoption rates. In-app crypto payments utilize blockchain technology for secure transactions, with a straightforward process for sending and receiving cryptocurrencies. Benefits include convenience, lower fees, and financial inclusion for the unbanked, while challenges involve regulatory hurdles, cryptocurrency volatility, and privacy concerns. The integration of crypto in messaging apps could disrupt traditional banking, affect remittance markets, and prompt partnerships between banks and messaging platforms. Future growth in cryptocurrency adoption within messaging apps is anticipated, with potential mainstream acceptance akin to credit cards and mobile payments.
Integrating Messaging, Payments and Social Updates Into One Master App
AppWizard
August 13, 2024

Integrating Messaging, Payments and Social Updates Into One Master App

The founder of a mobile advertising startup, acquired by Blackstone in 2019, notes the evolution of integrated applications like China's WeChat, which has over 1.3 billion monthly active users and combines messaging, gaming, photo sharing, video conferencing, and mobile payments. Current payment solutions like PayPal operate independently, lacking the desired seamless integration. Regulatory challenges hinder the development of similar all-in-one apps in the U.S., despite interest from tech giants like Facebook and Elon Musk, who aims to transform Twitter (now X) into a comprehensive "everything app." Telegram has also introduced USDT stablecoin payments and is pursuing a similar goal despite past regulatory setbacks. The successful launch of a master app could unlock significant revenue opportunities, though rigorous regulatory scrutiny is anticipated.
Search