<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/04/Artboard-1-copy-8-1.webp" alt="M2P Fintech" title="" id="9ra9mwwfl" width="100%" height="362">Did you know? A majority of consumers say user experience is a top factor in whether they stay with a bank, credit card, or loan provider. Five years ago, that was already true. It's only become truer now that switching from one banking app to another takes a single tap.<h2 class="heading-node" id="3pt8ic6ff">Transforming transactions into experience</h2>Customer-centricity isn't a nice-to-have for banks anymore — it's a survival requirement. Turning transactions into personalized, low-friction experiences is what keeps customers from switching to a competitor's app.Neobanks led that shift by bridging conventional banking with evolving customer expectations. High on personalization and flexibility, they changed what "banking" looks like for a generation of Indian consumers and small businesses.None of that happens at the app layer alone, though. Behind every clean onboarding screen sits a stack of infrastructure the user never sees: a <a class="link" href="https://m2pfintech.com/kyc-suite/?utm_source=neobank&amp;utm_medium=blg&amp;utm_campaign=aug" target="_blank">digital KYC solution</a> that verifies identity in seconds, a <a class="link" href="https://m2pfintech.com/turing-core-banking/?utm_source=neobank&amp;utm_medium=blg&amp;utm_campaign=aug" target="_blank">core banking solution</a> that keeps the ledger accurate in real time, and fraud controls that quietly decide which transactions clear. As the neobanks below have scaled, this infrastructure layer — not just app design — has become the real differentiator.<h2 class="heading-node" id="lbxo3m7vx">New to the world of neobanks?</h2>Don't confuse <a class="link" href="https://m2pfintech.com/blog/neo-banking-101-all-you-need-to-know/?utm_source=neobank&amp;utm_medium=blg&amp;utm_campaign=aug" target="_blank">neobanks</a> with digital banks — they're not the same thing. Digital banks are traditional banks offering services online. <a class="link" href="https://m2pfintech.com/blog/neo-banking-the-rise-of-new-age-banking/?utm_source=neobank&amp;utm_medium=blg&amp;utm_campaign=aug" target="_blank">Neobanks</a> are fintechs and NBFCs delivering cost-efficient, personalized financial services to gig workers, blue-collar employees, and small businesses, usually in partnership with a licensed bank.Free from legacy infrastructure and rigid administrative structures, neobanks have always focused on convenience and alternative ways to assess creditworthiness. What's changed since 2021 is that they're now doing this inside a much tighter regulatory perimeter.<h2 class="heading-node" id="ekdcevgif">The ground has shifted since 2021</h2>A few regulatory moves reshaped this entire list:<ul class="list-node" id="prppq0092"><li>RBI's June 2022 clarification on prepaid instruments barred non-bank PPIs from being loaded via credit lines or credit cards. This hit the "spend now, settle later" model that several youth- and teen-focused neobanks had built their card economics around.</li><li>The 2022 Digital Lending Guidelines tightened how loans sourced through fintech apps must be disbursed, serviced, and disclosed — moving control of loan accounts and repayment flows more firmly onto regulated balance sheets.</li><li>The 2023–24 funding slowdown pushed the sector from growth-at-all-costs to unit economics. Several neobanks trimmed teams, narrowed product lines, or leaned harder into their B2B/business-banking lines, which had cleaner paths to revenue than consumer neobanking.</li></ul>The neobanks still standing in 2026 are, largely, the ones that adapted to all three. Here's where each of the original 14 stands today.In this list: RazorpayX · FamPay · Niyo · Open · Freo · Fi Money · Jupiter · InstantPay · Muvin · Finin · Akudo · SaveIn · Zikzuk · OCareNeo<hr><h3 class="heading-node" id="cjv5mhxeh">1. <a class="link" href="https://razorpay.com/x/" target="_blank">RazorpayX</a></h3>RazorpayX is the business banking product from Razorpay, the payments unicorn founded by Harshil Mathur and Shashank Kumar in Bangalore in 2014. It helps businesses manage payouts, payroll, vendor payments, and cash flow, with credit and lending features layered on for working-capital needs — the kind of ongoing repayment tracking a <a class="link" href="https://m2pfintech.com/loan-management-system/?utm_source=neobank&amp;utm_medium=blg&amp;utm_campaign=aug">loan management software</a> is built to handle at scale.Razorpay went on to raise further growth capital after 2021 and completed its reverse-flip redomiciliation from the US back to India in 2023 — a move several other Indian fintech unicorns have since followed. RazorpayX itself has expanded into payroll, current accounts, and embedded lending for the businesses that sit on top of Razorpay's payments stack.<h3 class="heading-node" id="lg4ncjdvx">2. <a class="link" href="https://www.fampay.in/" target="_blank">FamPay</a></h3>FamPay, founded by Kush Taneja and Sambhav Jain in Bangalore in 2019, built India's best-known neobank for teenagers — a numberless, co-branded prepaid card (with IDFC FIRST Bank) designed with VISA, rewarded with Famcoins, and usable under parental supervision.RBI's 2022 restriction on credit-line-loaded prepaid instruments landed squarely on this category of product, and FamPay — like most teen-focused card apps — had to rework parts of its model around UPI-first, prepaid-only flows rather than the credit-adjacent spending it originally offered. Its rewards layer, Famcoins, is the kind of feature that depends on a proper <a class="link" href="https://m2pfintech.com/rewards/">rewards management platform</a> sitting underneath it to track, redeem, and reconcile at volume.<h3 class="heading-node" id="dpcvzxkds">3. <a class="link" href="https://www.goniyo.com/" target="_blank">Niyo</a></h3>Niyo, founded by Vinay Bagri and Virender Bisht in Bangalore in 2015, remains one of the clearest financial-inclusion stories in Indian neobanking. NiyoX (a zero-balance savings account with Equitas Small Finance Bank) and Niyo Global (a multi-currency forex travel card with SBM Bank and DCB Bank) are both still core to its offering, and the company has continued to raise growth-stage funding in the years since.Niyo built much of its early infrastructure on <a class="link" href="https://m2pfintech.com/?utm_source=neobank&amp;utm_medium=blg&amp;utm_campaign=aug" target="_blank">M2P's</a> APIs.<h3 class="heading-node" id="gin1pm92b">4. <a class="link" href="https://www.open.money/" target="_blank">Open</a></h3>Open, founded in Bangalore in 2017 by Anish Achuthan, Ajeesh Achuthan, Mabel Chacko, and Deena Jacob, built a business banking platform for startups and SMEs — current accounts, payments, expense management, and auto-reconciliation, the kind of <a class="link" href="https://m2pfintech.com/recon360/?utm_source=neobank&amp;utm_medium=blg&amp;utm_campaign=aug">reconciliation software</a> capability that's now table stakes for any serious business banking product.Open went on to reach unicorn status in a later funding round backed by investors including Temasek and Google, and spun out its banking-as-a-service infrastructure (Zwitch) as a separate offering for other fintechs to build on.<h3 class="heading-node" id="4ix84e9wx">5. <a class="link" href="https://freo.money/" target="_blank">Freo</a> (formerly MoneyTap)</h3>Freo — rebranded from MoneyTap — was founded by Anuj Kacker, Bala Parthasarathy, and Kunal Varma in Bangalore, and remains India's clearest example of a credit-led neobank: it leads with credit lines and cards, then builds savings and spending around that credit relationship, in partnership with banks and NBFCs including IDFC FIRST Bank and RBL Bank.That model runs on two things end to end: originating the credit line — the job a <a class="link" href="https://m2pfintech.com/loan-origination-system/?utm_source=neobank&amp;utm_medium=blg&amp;utm_campaign=aug">digital loan origination system</a> is built to standardize — and then servicing it through repayment, which is exactly what a <a class="link" href="https://m2pfintech.com/loan-management-system/?utm_source=neobank&amp;utm_medium=blg&amp;utm_campaign=aug">loan management software</a> layer handles once the credit is live.<h3 class="heading-node" id="znb67klwf">6. <a class="link" href="https://fi.money/" target="_blank">Fi Money</a></h3>Fi Money, founded by Sujith Narayanan and Sumit Gwalani in Bangalore in 2019, partners with Federal Bank for its zero-balance savings account and debit card. Since 2021, Fi has broadened well past savings — adding a co-branded Fi-Federal credit card, mutual fund and stock investing, and account-aggregator-linked features that let users see accounts held elsewhere inside the Fi app.<h3 class="heading-node" id="thu6fgwxd">7. <a class="link" href="https://jupiter.money/" target="_blank">Jupiter</a></h3>Jupiter, founded by Citrus Pay founder Jitendra Gupta in Mumbai in 2019, launched with an invite-only model built around Federal Bank–backed savings accounts, debit cards, and "Pots" for goal-based saving. It has since broadened into salary accounts and a credit card product (Jupiter Edge).Like most of the sector, Jupiter navigated the 2022–23 funding slowdown by tightening cost discipline rather than chasing user growth for its own sake — a pattern that shows up across nearly every neobank on this list that survived the reset.<h3 class="heading-node" id="yhc5h8wjh">8. <a class="link" href="https://instantpay.in/" target="_blank">InstantPay</a></h3>InstantPay, founded by Shailendra Agarwal, Mohammad Rehan, and Sankalp Shangari in New Delhi in 2013, built full-stack banking for individuals, SMEs, and larger businesses via partnerships with ICICI Bank, Axis Bank, IndusInd Bank, and YES Bank. Its Digi Kendra branches extend banking, insurance, and bill-payment access to customers who aren't comfortable transacting online.At the volumes a business-correspondent network like this processes — cash-in, cash-out, remittances, bill pay, all happening through agents rather than a single app — a proper <a class="link" href="https://m2pfintech.com/frm-aml/?utm_source=neobank&amp;utm_medium=blg&amp;utm_campaign=aug">fraud and risk management solution</a> isn't optional. It's the only practical way to keep agent-led transactions safe at scale.<h3 class="heading-node" id="zkbo8obps">9. Muvin</h3>Muvin, founded by Vineet Gupta and Mukund Rao in Bangalore in 2020, launched a prepaid card and app aimed at teens and young adults. Its card-based model sat in the same category that RBI's 2022 prepaid-instrument restrictions reshaped most heavily.<h3 class="heading-node" id="016xy9xgy">10. Finin</h3>Finin, founded by Suman Gandham and Sudheer Maram in Bangalore in 2019, offered unified account views and automated money management for students and young professionals, built on M2P's APIs and a partnership with SBM Bank.<h3 class="heading-node" id="pc4rrlbz7">11. Akudo</h3>Akudo, founded by Lavika Aggarwal, Sajal Khanna, and Jagveer Gandhi in Bangalore in 2020, built a gamified debit card for teens in partnership with VISA and RBL Bank, aimed at building savings habits early.<h3 class="heading-node" id="if79gq972">12. SaveIn</h3>SaveIn, founded by Anurag Varma, Gaurav Luthra, and Jitin Bhasin in New Delhi in 2020, built a peer-to-peer lending and matchmaking platform connecting borrowers with trusted lenders through licensed banking and payment partners.<h3 class="heading-node" id="ussv8z4iq">13. Zikzuk</h3>Zikzuk, founded by Raj N in Telangana in 2020, targeted SMEs with a founder-focused credit card and AI/ML-driven business intelligence, plus connected banking that aggregates a business's accounts into one view.<h3 class="heading-node" id="wx2l9cf5q">14. OCareNeo</h3>OCareNeo, founded by Dr. Neeraj Sheth in 2015, positioned itself as India's first health-and-banking platform — QR-based medical history access, virtual cards for medical expenses, and a digital health passport tied to financial information.<hr><h2 class="heading-node" id="d81ym8ckm">Where the story goes from here</h2>The neobanks that make up this list in 2026 look noticeably different from their 2021 selves — not because the customer promise changed, but because the infrastructure underneath it had to grow up fast. Compliant onboarding, real-time ledgers, disclosed and properly serviced credit, and fraud detection built for scale aren't optional extras anymore; they're what separates a neobank that survives a regulatory reset from one that doesn't.That's the layer M2P works on with banks, NBFCs, and fintechs across this ecosystem — from <a class="link" href="https://m2pfintech.com/turing-core-banking/?utm_source=neobank&amp;utm_medium=blg&amp;utm_campaign=aug">core banking</a> and <a class="link" href="https://m2pfintech.com/kyc-suite/?utm_source=neobank&amp;utm_medium=blg&amp;utm_campaign=aug">KYC</a> to <a class="link" href="https://m2pfintech.com/loan-origination-system/?utm_source=neobank&amp;utm_medium=blg&amp;utm_campaign=aug">lending</a>, <a class="link" href="https://m2pfintech.com/recon360/?utm_source=neobank&amp;utm_medium=blg&amp;utm_campaign=aug">reconciliation</a>, and <a class="link" href="https://m2pfintech.com/frm-aml/?utm_source=neobank&amp;utm_medium=blg&amp;utm_campaign=aug">fraud and risk management</a> — so the neobanks building on top of it can focus on the customer experience.Want to talk about your neobanking journey? Reach us at <a class="link" href="mailto:business@m2pfintech.com">business@m2pfintech.com</a>.<a class="link" href="https://m2pfintech.com/newsletter/">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox.Follow us on&nbsp;<a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/">LinkedIn</a>&nbsp;and&nbsp;<a class="link" href="https://twitter.com/m2pfintech">Twitter</a>&nbsp;for insightful fintech tales curated for curious minds like you.

Top 14 Neobanks that Reinvent Banking Experience in India

&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2024/03/Creative-for-SSL.webp" alt="M2P Fintech" title="" width="100%" height="253">Welcome to our latest blog, where we dive into the critical security technique known as SSL Pinning. This method plays a pivotal role in thwarting eavesdropping attacks on the communication between an app and its server.SSL Pinning involves a process where, after the initial exchange of encryption keys, the app verifies the validity of the server's certificate. It achieves this by maintaining a list of trusted certificates on the device itself, which are then compared to the server's certificate in real time as the app operates.&nbsp;If there is a discrepancy, indicating that the server's certificate does not align with the trusted ones, the app promptly halts the connection.&nbsp;Types of SSL Pinning:<ul class="list-node" id="c5h0hkum0"><li>SSL Pinning using Certificate: This method has the drawback that we must update the app each time the pinned certificate expires. However, by anchoring upcoming certificates in the application, this problem may be resolved. We may use the hashed public key, which won't change for subsequent certifications, rather than pinning the entire certificate.&nbsp;</li></ul><ul class="list-node" id="8d24u2471"><li>SSL Pinning using server Public key:&nbsp;This method includes attaching the certificate's public key (certificate expiration need not be a concern here).</li></ul>Mobile applications must retrieve data from the server to display it to consumers. However, private data, such as the user's login and password, is occasionally transmitted between the program and the server. SSL Pinning is mainly used in the prevention of man-in-the-middle attacks.Man-In-The-Middle Attack &nbsp;This type of attack allows the attacker to covertly view data passed from the client to the server by using a specialized server called an SSL proxy. It is a tool that encrypts and decrypts data between the client and the server using different keys for each direction. Charles, a proxy server used for testing, is one such example. It works in several phases to intercept and analyze the data between the app and the server.  By sitting between the app and the internet, it allows you to examine and modify data in real-time to test the response of the application.&nbsp;<ol class="list-node" id="xyrs1alxr"><li>Instead of using the server's key to encrypt data, your app utilizes the public key of the Charles ProxyCertificate. The Charles Certificate is considered valid because the developer can install it on their device.&nbsp;</li><li><a class="link" href="https://www.kodeco.com/21931256-charles-proxy-tutorial-for-ios">Charles</a> may connect to the server using its public key after using its private key to decode all the data. Be aware that any developer can read all the data that your app sends over the network. &nbsp;</li></ol>SSL Pinning using Public Key &nbsp;<ul class="list-node" id="r0h4qy5p1"><li>Get public certificates using OpenSSL by typing a command in the terminal/console to get the PEM key. &nbsp;</li></ul>echo "Get HTTP/1.0" | openssl s_client -showcerts -connectwww.MyDomainName.com:443 &gt; myPemCertificateName.pem &nbsp;<ul class="list-node" id="93uejjeug"><li>Type this command to turn the created PEM key into .der format.</li></ul>openssl x509 -in "myPemFileName.pem" -inform PEM -out "myDerFileName.der" -outform DER &nbsp;<ul class="list-node" id="62sgzhr0g"><li>Use this command to get the public key from the URL in SHA256 format. &nbsp;</li></ul>openssl s_client -connect www.MyDomainName.com:443 | openssl x509 -pubkey -noout | openssl rsa -pubin -outform der | openssl dgst -sha256 -binary | openssl enc -base64 &nbsp;<ul class="list-node" id="bos2d0jr8"><li>443 is the safe port for HTTPS. If your website uses a different port, use that number instead of 443. &nbsp;</li><li>The result should look like this. &nbsp;</li></ul>A3r26k+KOMuKJHB5B67cpGqqPhF/GNUyNl2EPJKB65KJUe+hXMn1k= &nbsp;<ul class="list-node" id="munqf5sov"><li>Generate the Hash Key using this <a class="link" href="https://www.ssllabs.com/ssltest/">link</a> as well. &nbsp;</li></ul><ul class="list-node" id="a5wc1jmum"><li>Create a variable to store the Public key that we get from the certificate. &nbsp;</li></ul>static let sslPublicKey ="A3r26k+KOMuKJHB5B67cpGqqPhF/GNUyN2EPJKB6KJUe+hXMn1k=" &nbsp;Pinning with Alamofire &nbsp;<ul class="list-node" id="vlgnafls0"><li>Using the regular API can be complicated. Using Alamofire is recommended because it is an external library that offers a simpler way to work with APIs, making your life easier. &nbsp;</li><li>The ServerTrustEvaluating protocol is the foundation of everything. It allows us to evaluate server trust in various ways. Alamofire has several trust evaluators. You can read the full documentation <a class="link" href="https://github.com/Alamofire/Alamofire/blob/master/Documentation/AdvancedUsage.md#security">here</a>. &nbsp;</li><li>Select the ServerTrustEvaluator for each API. &nbsp;</li></ul> <img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2024/03/ss1.webp" alt="M2P Fintech" title="" width="100%" height="138"><ul class="list-node" id="7fgyhm915"><li>Then create a session with them, and you can customize your configuration. &nbsp;</li></ul> <img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2024/03/ss2.webp" alt="M2P Fintech" title="" width="100%" height="88"><ul class="list-node" id="p64ip70za"><li>rsa2048Asn1Header is a list of whole numbers that shows the algorithm and any additional information used with the public key. &nbsp;</li><li>This private func sha256(data: Data) -&gt; String function creates a coded hash using the sha256 method for the given data and encodes it in base64. &nbsp;</li><li>import CommonCrypto for sha256 algorithm &nbsp;</li><li>In SessionDelegate, the URLAuthenticationChallenge method is used to get ServerPublicKeyData &nbsp;</li></ul> <img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2024/03/ss3.webp" alt="M2P Fintech" title="" width="100%" height="44"><ul class="list-node" id="0b7oumb7i"><li>We can perform some actions using this delegate method and match our Public Key with Server Public Key. &nbsp;</li></ul> <img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2024/03/ss4.webp" alt="M2P Fintech" title="" width="100%" height="569">Implementing SSL pinning using a public key in iOS enhances security by ensuring that only trusted servers with specific public keys can establish connections. This method mitigates the risks associated with man-in-the-middle attacks and unauthorized access to sensitive data, providing users with a more secure experience.Stay tuned for more blogs on tech, engineering, and iOS development.&nbsp;This blog is written by <a class="link" href="https://teams.microsoft.com/l/message/19:2ef83816-29e0-4b52-8caa-64b0aeca1ec1_dd9ec8f1-8445-4b0a-92af-aa769014f3db@unq.gbl.spaces/1709882415989?context=%7B%22contextType%22%3A%22chat%22%7D">Senthilkumar</a>, SDE 2 – Product Engineering at M2P.

Setting up SSL Pinning using Public Key in Swift

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/CI-CD-Banner-1.webp" alt="M2P Fintech" title="" width="100%" height="253">Fixing a critical bug in your code can save the integrity of your project.&nbsp;&nbsp;What is equally important is continuously improving the quality of the code, testing, and automating it for new release. Developers must make sure they follow all these processes while seamlessly communicating the changes with their team members.&nbsp;&nbsp;That’s why development teams across the world practice a mechanism called Continuous Integration (CI) and Continuous Delivery (CD).&nbsp;Starting from generating a build using command line, uploading build to test flight using fast lane, interfacing Jenkins with bitbucket and Fastlane, CICD mechanism can simplify and automate the process of build generation for iOS developers.&nbsp;We are coming up with a 3-part series covering the A-Z of deploying CI/CD mechanism for automating build generation.&nbsp;&nbsp;In this blog, we will be talking about generating a local build using command line.&nbsp;Let’s dive in.&nbsp;This blog is written by <a class="link" href="https://www.linkedin.com/in/ranjith-ravichandran-73829793/">Ranjith Ravichandran</a>, Senior SDE, Product Engineering at M2P.&nbsp;<h2 class="heading-node" id="vixdomkir" style="text-align: justify">What is CI/CD?&nbsp;</h2>Continuous Integration is the practice of merging code changes to a shared repository many times a day. It includes automated building generation and testing. &nbsp;Continuous Delivery is continuous integration with additional processes which allows application release to the customers after each change or update. &nbsp;&nbsp;<h2 class="heading-node" id="gf7yuvxyf" style="text-align: justify">Why CI/CD?&nbsp;</h2>Continuous integration and continuous delivery (CI/CD) is a critical component of agile software development, which emphasizes the importance of delivering working software to users quickly and frequently. This allows stakeholders and users to access newly created features and provide feedback as soon as possible, so features can be iteratively improved.&nbsp;CI/CD is a valuable tool for software developers, regardless of the size of their team. For solo developers, CD may be even more important, as it can help to ensure that software is delivered to users quickly and reliably.&nbsp;In this blog, we will show you the behind the scenes of building, testing, archiving, and uploading an iOS application. Being aware of the native Apple developer tools and learning command line interaction is integral for anyone using CI/CD mechanism.&nbsp;Command line interactions can help you with the following.&nbsp;<ul class="list-node" id="pte7t3cwf"><li>Understanding apple technologies used for building and deploying an iOS application&nbsp;</li><li>Automating iOS development task for continuous integration or cloud-based servers&nbsp;</li><li>Understanding the background working of tools like <a class="link" href="https://fastlane.tools/">Fastlane</a>&nbsp;</li></ul><h2 class="heading-node" id="k829yqqxm" style="text-align: justify">Automating Build Generation – Overall Process</h2><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/CI-CD-img1.webp" alt="M2P Fintech" title="" width="100%" height="253"><ul class="list-node" id="2rh1i4is1"><li>Setting up the project and creating a repository in Bit Bucket&nbsp;</li><li>Connecting local Jenkins with Bit Bucket cloud to check out as project branch (to build as an IPA)&nbsp;</li><li>Connecting Jenkins and Fastlane for building and archiving the project</li><li>Moving the archived IPA to TestFlight from Fastlane</li></ul><h2 class="heading-node" id="718gbf2sl" style="text-align: justify">Build Generation using Command Line</h2><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/CI-CD-img2.webp" alt="M2P Fintech" title="" width="100%" height="261">Let’s assume that a project is developed by multiple engineers where they all must perform the following.&nbsp;<ul class="list-node" id="8xgwyb9oq"><li>Checking out the project from Bit Bucket to local system&nbsp;</li><li>Archiving the particular branch of the project using command line&nbsp;</li></ul>After following the above processes, the IPA is generated inside the project folder.&nbsp; To understand the command line deployment process, we should have the following things set up in advance before starting the build generation. &nbsp;<h2 class="heading-node" id="wl1vjw4rj" style="text-align: justify">Pre-requisites</h2><ul class="list-node" id="zxps2bfin"><li>Sample app with Xcode workspace - e.g., FintechBase.xcworkspace &nbsp;</li><li>Xcode Scheme with Release configuration - e.g., Developement &nbsp;</li></ul><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/MicrosoftTeams-image-3.webp" alt="M2P Fintech" title="" width="100%" height="270"><ul class="list-node" id="yyqu3ol0l"><li>Certificates, AppID, Provisioning profiles setup for production in iTunes Connect - Use <a class="link" href="https://help.apple.com/xcode/mac/current/#/dev60b6fbbc7">Apple’s documentation</a> for setting up&nbsp;</li><li>macOS with Distribution certificate in the keychain &nbsp;</li></ul><h3 class="heading-node" id="8sncc4746" style="text-align: justify">Analyzing &nbsp;</h3>We perform static analysis of the source code. The xcodebuild has the ability to clean and analyze the source code for any common syntax errors. &nbsp;<h3 class="heading-node" id="ceoujw6ub" style="text-align: justify">Code for analyzing the project using the terminal&nbsp;&nbsp;</h3>xcodebuild - workspace FintechBase.xcworkspace -scheme Development -sdkiphonesimulator10.3 clean analyze &nbsp;<h3 class="heading-node" id="kfx4bsyjr" style="text-align: justify">Building &nbsp; &nbsp;</h3>We can build an iOS app using xcodebuild ‘build’ action which can generate the derived data for our iOS app. Once the application is built, it can run inside the simulator or can be used by the test bundle. &nbsp;<h3 class="heading-node" id="2l3qqcg9r" style="text-align: justify">Build for running &nbsp;</h3>We can simply build our app to run inside simulators by using the command &nbsp;xcodebuild -workspace FintechBase.xcworkspace -scheme Development -configuration Release -allowProvisioningUpdates build &nbsp;<h3 class="heading-node" id="qpt6jm8bp" style="text-align: justify"> Archiving </h3>Most of the iOS engineers face difficulties in archiving an iOS application as it deals with provisioning profiles, certificates, and build configurations.&nbsp;To upload an app to iTunes Connect or deploy it on to the provisioned devices, we need to build an app for generic iOS device destination as well as export it in the IPA format. &nbsp;Next step is building our application with release configuration scheme ‘Development’ with generic iOS device destination. &nbsp; &nbsp;There are two steps involved.&nbsp;<ul class="list-node" id="lt01qgpu1"><li>Building an archive with xcodebuild archive &nbsp;</li><li>Creating the .ipa file with xcodebuild -exportArchive &nbsp;</li></ul><h4 class="heading-node" id="uimw8zxqa" style="text-align: justify">Without Team ID &nbsp;</h4>xcodebuild archive -workspace FintechBase.xcworkspace -scheme Development clean build archive  -archivePath ./build/FintechBase.xcarchive &nbsp;<h4 class="heading-node" id="lw00yqpeu" style="text-align: justify">With Team ID &nbsp;</h4>xcodebuild archive -workspace FintechBase.xcworkspace -scheme Development DEVELOPMENT_TEAM="XXXXXXXXXX" -allowProvisioningUpdates  -archivePath ./build/FintechBase.xcarchive &nbsp;<h4 class="heading-node" id="b1r52lons" style="text-align: justify">Note&nbsp;</h4><ul class="list-node" id="r267dseji"><li>The build is created using the above command build/FintechBase.xcarchive&nbsp;</li><li>Replace ‘XXXXXXXXX’ with your team ID&nbsp;</li></ul>We now export the .ipa using the command&nbsp;xcodebuild -exportArchive -allowProvisioningUpdates -archivePath  ./build/FintechBase.xcarchive -exportPath ./build/ -exportOptionsPlist ./build/ExportOptions.plist &nbsp;Note that the above command requires a ExportOptions argument that points to a .plist file with export options. For a complete list of what you can put in that plist, run xcodebuild -help.&nbsp;&nbsp;Create build folder in a project and add ExportOptions.plist<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/MicrosoftTeams-image-1-1.webp" alt="M2P Fintech" title="" width="100%" height="530"><h4 class="heading-node" id="q4fzt0obs" style="text-align: justify">Find the sample code for ExportOptions</h4><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/MicrosoftTeams-image-2-1.webp" alt="M2P Fintech" title="" width="100%" height="199">&lt;?xml version="1.0" encoding="UTF-8"?&gt; &nbsp;&lt;!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN""<a class="link" href="http://www.apple.com/DTDs/PropertyList-1.0.dtd">http://www.apple.com/DTDs/PropertyList-1.0.dtd</a>"&gt; &nbsp;&lt;plist version="1.0"&gt; &nbsp;&lt;dict&gt; &nbsp;&lt;key&gt;generateAppStoreInformation&lt;/key&gt; &nbsp;&lt;false/&gt; &nbsp;&lt;key&gt;manageAppVersionAndBuildNumber&lt;/key&gt; &nbsp;&lt;true/&gt; &nbsp;&lt;key&gt;method&lt;/key&gt; &nbsp;&lt;string&gt;app-store&lt;/string&gt; &nbsp;&lt;key&gt;signingStyle&lt;/key&gt; &nbsp;&lt;string&gt;automatic&lt;/string&gt; &nbsp;&lt;key&gt;stripSwiftSymbols&lt;/key&gt; &nbsp;&lt;true/&gt; &nbsp;&lt;key&gt;teamID&lt;/key&gt; &nbsp;&lt;string&gt;XXXXXXXXXX&lt;/string&gt; &nbsp;&lt;key&gt;uploadSymbols&lt;/key&gt; &nbsp;&lt;true/&gt; &nbsp;&lt;/dict&gt; &nbsp;&lt;/plist&gt; &nbsp; &nbsp;<h4 class="heading-node" id="ga13psli6" style="text-align: justify">Export Options</h4><ul class="list-node" id="kmyta6keu"><li>method: (String) The method of distribution, which can be set as any of the following: <ul class="list-node" id="vjjzjfgiv"><li>app-store &nbsp;</li><li>enterprise &nbsp;</li><li>ad-hoc </li><li>development &nbsp;</li></ul></li></ul><ul class="list-node" id="6jmqzfr7a"><li>teamID: (String) The development program team identifier. </li><li>signingtyle: (String) Automatic Signing “automatic”, incase of manual signing mention “manual” add provisioningProfiles and signingCertificate </li><li>uploadBitcode: (Boolean) Option to include Bitcode. </li><li>manageAppVersionAndBuildNumber: to ensure that you have already updated your version/build number before archiving</li><li>generateAppStoreInformation: For App Store exports, should Xcode generate App Store Information for uploading with iTMSTransporter. Defaults to NO </li><li>uploadSymbols: Should symbols be stripped from Swift libraries in your IPA. Defaults to YES</li></ul> &nbsp;After successfully running the command, the ipa file will be generated inside the build folder in the name of FintechBase.ipa&nbsp;The next step involves automating the build generation using Fastlane and pushing it to TestFlight which we will be covering in the next blog.&nbsp;Till then, Stay tuned!&nbsp;Have any questions/suggestions?&nbsp;&nbsp;&nbsp;Write to us at <a class="link" href="mailto:business@m2pfintech.com">business@m2pfintech.com</a>. Our expert team will get in touch with you.&nbsp;&nbsp;&nbsp;<a class="link" href="https://m2pfintech.com/newsletter/">Subscribe</a> to our newsletter and get the latest fintech news, views, and insights, directly to your inbox.&nbsp;Follow us on <a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/">LinkedIn</a> and <a class="link" href="https://twitter.com/m2pfintech">Twitter</a> for insightful fintech bytes curated for curious minds like you.&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;

CI/CD Pipeline for iOS build generation using Jenkins

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/05/banner-1-1.webp" alt="M2P Fintech" title="" width="100%" height="358">Payment Tokenization — One technology to make all the stakeholders of digital transactions happy!<blockquote class="block-node" id="pcv6p2tv7">“Tokenization market worth is estimated to be $4.8 Billion by 2025.”-&nbsp;Markets and Markets</blockquote>Simply put, the word “Tokenize” means substituting, and it is an ingenious concept introduced in 2005 by Shift4payments to protect cardholder data. It factored in data security at its core and is now a popular term due to the surge in online transactions.In fact, a token is a concept that has been long around; for example, the coins that we buy in the gaming arcade or a casino have no value outside the premises. But inside the building, you get to buy your stakes or favorite superhero toy. Likewise, tokens replace or mask the sensitive data in the online transaction by replacing it with random alphanumeric characters.By enabling payment tokenization, the merchants and networks can move data without the hovering threat of payments fraud or identity theft. Tokenization helps in finding a perfect balance between “data security” and “user experience.”<h2 class="heading-node" id="5806" style="text-align: justify">What is ‘Tokenization’ in payments?</h2>In the world of payments, the card account number is masked by a single-use randomized alphanumeric character of the same length. This camouflage is called tokenization in payments. Meaning, each account number is now a ‘Token’ representing the original confidential information. In contrast, the actual data is stored safely in a digital token vault.It is also referred to as ‘Credit Card tokenization’&nbsp;interchangeably. It helps in removing the credit card information from the internal network or database. The concept is more popular with <a class="link" href="https://m2pfintech.com/blog/credit-card-processing-a-definitive-guide/">credit cards</a> as it involves a higher magnitude of the fraud.<h2 class="heading-node" id="8f6f" style="text-align: justify">Why do we need Payment tokenization?</h2>Pandemic fostered digital transactions at a faster pace than ever before indeed. As there is an increase in digital commerce, businesses came up with enhanced solutions that facilitated online transactions to confront consumer preferences.Improved digital transactions put security under question. While the consumers are worried about their sensitive data being visible to many online platforms, the merchants fret about losing loyal customers.‘Tokens — the trustworthy representatives,’ alleviates these roadblocks effectively as the original data (ex: credit card number) never reaches the merchant’s server. The merchants enjoy retaining the customers without compromising the reputation while staying <a class="link" href="https://m2pfintech.com/blog/pci-dss-the-payments-armour/">PCI-DSS</a> (Payment Card Industry Data Security Standard) compliant.<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/05/int.webp" alt="M2P Fintech" title="" id="92tjhlk3p" width="100%" height="358"><h2 class="heading-node" id="aa74" style="text-align: justify">How does Payment Tokenization/Credit Card tokenization work in action?</h2>Tokenization is not a costlier technology as it sounds. Any organization can adopt it irrespective of the structure and size. It is ideal for organizations that cannot afford to spend more on sophisticated encryption algorithms or infrastructure to secure the data.Let’s see an example,<ul class="list-node" id="a9ehiej48"><li>Sara orders a pair of sports shoes on Amazon. After choosing all her preferences, she reaches the payment section.</li><li>She enters the sensitive data on the portal (credit card number, cardholder name, etc.)</li><li>This goes straight to the tokenization server without storing any data in the amazon application’s server</li><li>There are many tokenization providers in the market like Fiserv, Mastercard, American Express, TokenEx, 3D Delta Systems, Meawallet, etc.</li><li>Then it reaches the token vault, where the original data is secure. It, in turn, returns a&nbsp;token&nbsp;of randomized alphanumeric representation of the same length.</li><li>This has no relation to the original data, like in the typical&nbsp;‘data encryption&nbsp;process. The actual data is contained within the ciphered text. Tokens are, in general, generated by mathematical algorithms.</li><li>This token is now passed to the merchant’s acquirer bank, and this bank passes the token to the credit card network.</li><li>Then the card network processes the token and maps it to the customer’s account number, authorizes and passes it to the issuing bank.</li><li>The issuer bank now authorizes or denies the transaction based on the fund balance.</li><li>After the successful transaction, a unique token returns to the merchant.</li><li>Amazon now has no record of Sara’s sensitive original information but her tokens. In this way, Amazon can enable Sara to make one-click payments the next time she shops.</li></ul>It is evident that&nbsp;tokenization checks all the mandates of refined digital transactions. Sara is now happy with her brand-new sports shoes while securing her data in the vault. Getting the data from the vault is not an easy piece of cake. It requires multiple authentication levels, service charges, etc., to verify if a trusted party raised it.<h2 class="heading-node" id="4357" style="text-align: justify">Then it also brings forth the question is Tokenization and Encryption one and the same?</h2>The answer is definitely no.The tokenized data cannot be reversed to reveal the original card number. In contrast, encryption takes a card number, transforms it into ciphertext by running it through an algorithm. To unlock the ciphertext, it has to be decrypted using an encryption key.On the other hand, tokenization uses no algorithm or requires a key to unlock the original data.<h2 class="heading-node" id="b70f" style="text-align: justify">Does Credit Card Tokenization impact a change in the payment process?</h2>No.The end-user will not find any difference in their transactions even after the implementation of tokenization. The entire process happens at the backend without intervening in the user experience. Tokens are generated online and eliminate the need to wait.<h2 class="heading-node" id="744e" style="text-align: justify">Why is Payment Tokenization a ‘Fintech Asset’?</h2>The boom of technology in the Financial services domain has been rapid in the past decade. Card-less transactions, <a class="link" href="https://m2pfintech.com/blog/remittance-with-upi-a-giant-leap-for-cross-border-payments/">UPI payments</a>, <a class="link" href="https://m2pfintech.com/blog/what-is-a-payment-gateway-and-payment-switch-understanding-the-basics-of-payments-architecture/">Payment Gateways</a>, etc., increases online consumers each day. As we enjoy the perks of digital banking with one-click transactions, we cannot deny the fact that our data is vulnerable to “Social Engineering.”Social Engineering is everywhere. We may fall into the trap of hackers and leave a lot of confidential information during digital transactions. There are multiple intrusion points for the hackers to lure in when the transactions float over the network and wipe away our savings.Given this scenario, tokenization is indeed an asset to Fintech. Because even if a hacker tries to sneak into the network, all he can find is randomized alphanumeric and characters with no relation to the original data (PAN number, credit card number, etc.)It is expensive for merchants to become <a class="link" href="https://m2pfintech.com/blog/pci-dss-a-quick-guide-to-its-levels/">PCI DSS</a> compliant and qualify themselves as a trustworthy eCommerce merchant for the consumers. They have to undergo a lengthy auditing process, and it is an ongoing process. With the help of&nbsp;‘Tokenization,’&nbsp;merchants can save a hefty amount of money as the scope of <a class="link" href="https://m2pfintech.com/blog/pci-dss-the-payments-armour/">PCI DSS</a> compliance is reduced in storing the user’s confidential information.Apart from banking,&nbsp;‘credit card tokenization’&nbsp;builds confidence among the investors as it secures the money with ease. We could see the boom of Blockchain technology-based fintech solutions gaining momentum across the nations.&nbsp;“Tokenization”&nbsp;is also seen as the key to drive blockchain implementation in the future by accompanying cryptocurrency transactions.Finally, it also offers substantial benefits to all stakeholders involved in the transaction:<ul class="list-node" id="nexhxh9e5"><li>Issuers witness a notable decrease in payment fraud in both channels of online and mobile transactions.</li><li>Acquirers, merchants, and processors experience a lower risk of accessible, sensitive cardholder data if compromised by cyber attacks.</li><li>Merchants will wield a powerful mechanism that lets them innovate better retail experiences minus the responsibility of storing and handling sensitive data.</li><li>Customers need not enter their details every time they make an online purchase from smartphones, tablets, or PCs.</li></ul>Payments tokenization makes all the parties — consumers; merchants; payment gateway providers, banking institutions, regulatory bodies feel safe, secure, and happy with their buying and selling processes.Tokenizing confidential data makes way for turbulence-free secure digital transactions!<a class="link" href="https://m2pfintech.com/newsletter/">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox. Follow us on&nbsp;<a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/">LinkedIn</a>&nbsp;and&nbsp;<a class="link" href="https://twitter.com/m2pfintech">Twitter</a>&nbsp;for insightful fintech tales curated for curious minds like you.

How Does Payment Tokenization Work?

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/04/Penetration-testing-banner1.webp" alt="M2P Fintech" title="" width="100%" height="253">The $158.9 billion fintech industry thrives on mobile apps. Android dominates the mobile app market with a whopping 71.65% market share. Though in demand globally, its open-source&nbsp;nature makes data security a vulnerability in Android apps. Even <a class="link" href="https://m2pfintech.com/blog/super-apps-in-consumer-banking-what-role-does-open-banking-play/">super apps</a> are no exception.&nbsp;Developing and releasing a fully functional and secure Android application is a critical challenge for app developers. Managing app functionality is the easy part; but the real challenge is making the Android application secure and resilient to cyberattacks. &nbsp;What’s the best way to do this?&nbsp;Our Software Development Engineer, <a class="link" href="https://www.linkedin.com/in/sundaramanikandan-l-80957014b/">Sundaramanikandan</a> has hands-on experience in developing highly secure Android apps and will take us through every step in mitigating cyberattacks while developing an app. &nbsp;First things first, every developer must prioritize security to protect users and their data. The security-first approach will benefit the 6.92 billion smartphone users in the world, who constitute over 86.29% of the global population.&nbsp;&nbsp;Remember that the advances in digitization and technology also apply to hackers and cybercriminals. Technology that makes lives easier has increased our exposure to risks. Fraudsters ride on the vulnerabilities by using more sophisticated techniques to exploit loopholes and evade detection while breaking into systems to access sensitive data.&nbsp;<h2 class="heading-node" id="sdulm87wi" style="text-align: justify">How to secure Android devices from attackers?&nbsp;</h2>Developers and organizations need to deploy secure software development lifecycle practices to protect against data breaches or theft. Public Wi-Fi networks and other wireless communication systems should be blocked to prevent man-in-the-middle attacks and other unsecured communication exploits. Attackers can pretend to be real web services, steal data, or listen in on calls and texts by taking over a user's mobile signal.&nbsp;<h2 class="heading-node" id="d5lk42h71" style="text-align: justify">Smartphone rooting to get superuser permissions&nbsp;&nbsp;&nbsp;</h2>Firstly, the process called rooting is done, i.e., removing the limitations on a mobile or tablet running the Android operating system. It lets you get root access to the code of the Android operating system (the equivalent term for Apple devices is jailbreaking). It gives permission to change the device's software code or install software that the manufacturer wouldn't normally let us do.&nbsp;<h2 class="heading-node" id="oj87o5xpb" style="text-align: justify">Cons of running apps on a rooted device&nbsp;</h2>Simply put, it opens higher risks like spoofing, cheating, and abuse of core functionalities. A root-level app can easily set up backdoors that let unauthorized users get into the device and then into the secure corporate network. When you "root" your Android device, you give apps unauthorized access to your operating system and sensitive data. It further leads to the theft of user data, finances, intellectual property, and piracy. Some malware apps specifically go after rooted devices to infect system-level files. So, you must be careful what you install.&nbsp;Targeted cyberattacks on corporates are on the rise as more and more business transactions are done on mobile devices. Rooted Android devices make it easier to sneak into the corporate network. For a financial app, if an attacker can intercept a network call and change the address, the victim could lose a lot of money, and the company that developed the app will lose its reputation.&nbsp;As having a user-friendly mobile app is a key differentiator, banks and financial institutions are in a dilemma to choose between allowing their app, which contains excellent payment functionalities and extremely sensitive data, to run on rooted/jailbroken devices or risk losing their target audience. Or they can opt for the middle ground by mitigating the risks of the app running on rooted devices. This compromise is critical. Or else, risks such as malware, man-in-the-middle attacks, and system API hijacking could lead to user data exfiltration. &nbsp;Therefore, Android app installation must be blocked on rooted devices to prevent attacks specifically targeting users who have rooted their smartphones.&nbsp;<h2 class="heading-node" id="78wzaxox3" style="text-align: justify">How can app developers block Android installation on a rooted device?&nbsp;</h2>Every Android app developer should understand the following pointers below to steer clear of the hazards of rooted devices.&nbsp; What’s the common way an app can be tampered with?&nbsp;<ol class="list-node" id="lwmuzqjzn"><li>ByPassing root detection logic implemented&nbsp;&nbsp;</li><li>ByPassing the SSL Pinning&nbsp;</li></ol>What are the commonly used hacking tools?&nbsp;<ol class="list-node" id="tym0kml1c"><li>Magisk&nbsp;</li><li>LSXposed Framework&nbsp;</li></ol>Dos and Don’ts - for infosec clearance to block Android app installation&nbsp;Don’ts&nbsp;❌ Install the app on a rooted device&nbsp;❌ Tapjack&nbsp;❌ Copy/paste sensitive data&nbsp;❌ Take screenshots&nbsp;&nbsp;Dos&nbsp;Now, the following method will help create the most comprehensive approach:&nbsp;✅ Check if the app is running in emulator&nbsp;This is the first thing we need to look at when the app is launched. If a hacker extracts the APK and tries to run it in an emulator/simulator, we should stop running the app if it is a production version. This functionality can be built as an extension function and utilized in the application's base activity.&nbsp;<pre class="block-node"><code>val isRunningOnEmulator: Boolean by lazy {
&nbsp;&nbsp;&nbsp; // Android SDK emulator
&nbsp;&nbsp;&nbsp; return@lazy ((Build.FINGERPRINT.startsWith(“google/sdk_gphone_”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &amp;&amp; Build.FINGERPRINT.endsWith(“:user/release-keys”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &amp;&amp; Build.MANUFACTURER == “Google” &amp;&amp; 
Build.PRODUCT.startsWith(“sdk_gphone_”) &amp;&amp; Build.BRAND == “google”
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &amp;&amp; Build.MODEL.startsWith(“sdk_gphone_”))
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.HARDWARE.contains(“goldfish”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.HARDWARE.contains(“ranchu”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.PRODUCT.contains(“sdk_gphone64_arm64”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.PRODUCT.contains(“vbox86p”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.PRODUCT.contains(“emulator”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.PRODUCT.contains(“simulator”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.FINGERPRINT.startsWith(“generic”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.FINGERPRINT.startsWith(“unknown”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.PRODUCT.contains(“sdk_google”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.MODEL.contains(“google_sdk”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.PRODUCT.contains(“sdk_x86”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.MODEL.contains(“Emulator”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.MODEL.contains(“Android SDK built for x86”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || “QC_Reference_Phone” == Build.BOARD &amp;&amp; !“Xiaomi”.equals(
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Build.MANUFACTURER,
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ignoreCase = true
&nbsp;&nbsp;&nbsp; )
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.MANUFACTURER.contains(“Genymotion”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.HOST.startsWith(“Build”) //MSI App Player
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.BRAND.startsWith(“generic”) &amp;&amp; Build.DEVICE.startsWith(“generic”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.PRODUCT == “google_sdk”)
}&nbsp;

✅ Check developer options&nbsp;

Hooking an app is as simple as enabling the developer settings on the device and connecting to the Android SDK tool. Hence, when the app is launched, we must determine whether the developer option is enabled or not by writing an extension function.&nbsp;

fun isDevMode(context: Context): Boolean {&nbsp;
&nbsp;&nbsp;&nbsp; return when {&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Build.VERSION.SDK_INT &gt; Build.VERSION_CODES.JELLY_BEAN -&gt; {&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Settings.Secure.getInt(&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; context.contentResolver,&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Settings.Global.DEVELOPMENT_SETTINGS_ENABLED, 0&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ) != 0&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Build.VERSION.SDK_INT == Build.VERSION_CODES.JELLY_BEAN -&gt; {&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; @Suppress(“DEPRECATION”)&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Settings.Secure.getInt(&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; context.contentResolver,&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Settings.Secure.DEVELOPMENT_SETTINGS_ENABLED, 0&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ) != 0&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; else -&gt; false&nbsp;
&nbsp;&nbsp;&nbsp; }&nbsp;
}&nbsp;

✅ Check if the device is rooted&nbsp;&nbsp;

The Util class is commonly used to determine whether a device is rooted, or the super user “SU” is enabled.&nbsp;

private val binaryPaths = arrayOf(
&nbsp;&nbsp;&nbsp; “/data/local/”,
&nbsp;&nbsp;&nbsp; “/data/local/bin/”,
&nbsp;&nbsp;&nbsp; “/data/local/tmp/”,
&nbsp;&nbsp;&nbsp; “/data/local/xbin/”,
&nbsp;&nbsp;&nbsp; “/sbin/”,
&nbsp;&nbsp;&nbsp; “/su/bin/”,
&nbsp;&nbsp;&nbsp; “/system/bin/”,
&nbsp;&nbsp;&nbsp; “/system/bin/.ext/”,
&nbsp;&nbsp;&nbsp; “/system/bin/failsafe/”,
&nbsp;&nbsp;&nbsp; “/system/sd/xbin/”,
&nbsp;&nbsp;&nbsp; “/system/usr/we-need-root/”,
&nbsp;&nbsp;&nbsp; “/system/xbin/”,
&nbsp;&nbsp;&nbsp; “/system/app/Superuser.apk”,
&nbsp;&nbsp;&nbsp; “/cache”,
&nbsp;&nbsp;&nbsp; “/data”,
&nbsp;&nbsp;&nbsp; “/dev”,

&nbsp;&nbsp;&nbsp; “/sbin/su”,
&nbsp;&nbsp;&nbsp; “/system/bin/su”,
&nbsp;&nbsp;&nbsp; “/system/xbin/su”,
&nbsp;&nbsp;&nbsp; “/data/local/xbin/su”,
&nbsp;&nbsp;&nbsp; “/data/local/bin/su”,
&nbsp;&nbsp;&nbsp; “/system/sd/xbin/su”,
&nbsp;&nbsp;&nbsp; “/system/bin/failsafe/su”,
&nbsp;&nbsp;&nbsp; “/data/local/su”,
&nbsp;&nbsp;&nbsp; “/su/bin/su”,
&nbsp;&nbsp;&nbsp; “./frida-server”,
&nbsp;&nbsp;&nbsp; “/data/local/tmp/frida-server”

)&nbsp;

&nbsp;When this class is called upon app launch, it checks to see whether any of the aforementioned binaries are present on the device and returns “rooted” if any are.&nbsp;

✅ Integrate root detection library like RootBear&nbsp;

RootBear is a popular open-source library that can be utilized in our app to detect root causes.&nbsp;

implementation ‘com.scottyab:rootbeer-lib:0.1.0′&nbsp;

After adding this library in the app build Gradle file, it can be implemented in a base activity like:&nbsp;

if (!BuildConfig.DEBUG &amp;&amp; rootBeer.isRooted) {
&nbsp;&nbsp;&nbsp; showRootedDeviceDialog(getString(R.string.device_rooted))
&nbsp;&nbsp;&nbsp; isRootedDeviceBool = true
} else if (!BuildConfig.DEBUG &amp;&amp; rootBeer.isRootedWithBusyBoxCheck) {
&nbsp;&nbsp;&nbsp; showRootedDeviceDialog(getString(R.string.device_rooted))
&nbsp;&nbsp;&nbsp; isRootedDeviceBool = true
}&nbsp;&nbsp; 
</code></pre>Now, all the steps discussed around a great way to prevent an Android app from being installed or functioning on a rooted device. &nbsp;But this is not all. There is more.&nbsp;There is another tool called ‘Frida’ that helps bypass all the above logics implemented in an app.&nbsp;Want to know how to block Frida?&nbsp;Stay tuned to our next blog!&nbsp;This article is authored by&nbsp;<a class="link" href="https://www.linkedin.com/in/sundaramanikandan-l-80957014b/">Sundaramanikandan.</a><a class="link fui-Link ___1qmgydl f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1hu3pq6 f11qmguv f19f4twv f1tyq0we f1g0x7ka fhxju0i f1qch9an f1cnd47f fqv5qza f1vmzxwi f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh ftqa4ok f2hkw1w fhgqx19 f1olyrje f1p93eir f1h8hb77 f1x7u7e9 f10aw75t fsle3fq" href="https://m2pfintech.com/newsletter/" target="_blank" rel="noreferrer noopener">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox.Follow us on&nbsp;<a class="link fui-Link ___1qmgydl f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1hu3pq6 f11qmguv f19f4twv f1tyq0we f1g0x7ka fhxju0i f1qch9an f1cnd47f fqv5qza f1vmzxwi f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh ftqa4ok f2hkw1w fhgqx19 f1olyrje f1p93eir f1h8hb77 f1x7u7e9 f10aw75t fsle3fq" href="https://www.linkedin.com/company/m2pfintech/mycompany/" target="_blank" rel="noreferrer noopener">LinkedIn</a>&nbsp;and&nbsp;<a class="link fui-Link ___1qmgydl f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1hu3pq6 f11qmguv f19f4twv f1tyq0we f1g0x7ka fhxju0i f1qch9an f1cnd47f fqv5qza f1vmzxwi f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh ftqa4ok f2hkw1w fhgqx19 f1olyrje f1p93eir f1h8hb77 f1x7u7e9 f10aw75t fsle3fq" href="https://twitter.com/m2pfintech" target="_blank" rel="noreferrer noopener">Twitter</a>&nbsp;for insightful fintech tales curated for curious minds like you.

How to block Android App installation in a Rooted Device

10 Banking and Fintech Trends That Will Redefine 2026 and Beyond

Central Bank Digital Currency (CBDC) 101- A Primer

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/09/MicrosoftTeams-image-9.webp" alt="M2P Fintech" title="" width="100%" height="253">The world of banking has transformed over the years. Customer experience has now become a key differentiator. Personalization, speed, convenience, and security have evolved as factors that determine profitability.To keep pace with the changing customer expectations and the competitive landscape, banks need to modernize their core banking systems. Only then can they scale technology innovation, upgrade processes, and re-engineer their workforce to deliver mobile-first, personalized customer experiences while reducing cost and complexities.Go beyond the surface and explore more.<ul class="list-node" id="dnjdyenon"><li><a class="link" href="#21">What are Core Banking Systems?</a></li><li><a class="link" href="#11">Evolution of Core Banking Systems</a></li><li><a class="link" href="#31">Turing Core Banking System (CBS)</a></li><li><a class="link" href="#41">What’s New in Core Banking?</a></li><li><a class="link" href="#51">Final Word</a></li></ul><h2 class="heading-node" id="21" style="text-align: left">What are Core Banking Systems?</h2>Centralized Online Real-time Environment (CORE) banking systems serve as the technical infrastructure that enables banks to manage their day-to-day operations efficiently and seamlessly. They facilitate branch agnostic transactions across multiple touchpoints worldwide.Hosted on-premise or in the cloud, core banking provide a singular view of customer data to facilitate information flow and operational excellence across delivery channels. It simplifies services such as new account creation, customer relationship management, transaction processing, loan issuing, and servicing. Banks can achieve greater cost and operational efficiencies by making the big shift from legacy to modern <a class="link" href="https://m2pfintech.com/blog/core-banking-essentials-types-components-advantages/">core banking solutions</a>.<h2 class="heading-node" id="11" style="text-align: left">Evolution of Core Banking Systems</h2>Core banking is not a new phenomenon. It had a humble beginning in the 1970s with rigid codes and basic computerizations and evolved with technological advances, product innovations, and customer requirements to be what it is today.<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/09/Infpgraphic-1.webp" alt="M2P Fintech" title="" width="100%" height="253"><h3 class="heading-node" id="hefhm2ugl" style="text-align: left">1st Generation Core Banking System – Basic Computerization</h3>From 1970 to 1990 CBS began taking root in the banking industry. At its most primal form, the system functioned on basic computerization techniques and was developed in-house by most banks.The 1st gen CBS used monolithic applications that were based on complex codes. The IT costs were quite high, and it offered only a few basic features like transaction execution, record-keeping, and customer data management. Sequential data were stored in silos, and transactions were processed in batches at the end of the day.So, <a class="link" href="https://m2pfintech.com/blog/tale-of-money-transfers-from-hawala-to-one-click-remittances/">money transfers</a> and <a class="link" href="https://m2pfintech.com/blog/future-of-payments-processing-matched-with-industry-needs/">payments</a> could not be processed in real-time. The applications were accessible to users only during counter hours. The system was prone to data loss and was difficult to replace without causing a service disruption.<h3 class="heading-node" id="lk1xsezsg" style="text-align: left">2nd Generation Core Banking System - Product-centric Digital Interface</h3>From 1990 to 2005, CBS was in its product-centric avatar with a penchant for digital interfaces. The infrastructure developments were outsourced to external parties that focused on building a vibrant user interface for 24/7 access to banking services.Software modules and a few subroutines were introduced to improve the flexibility of the code. But, even after several optimization trials, the code remained complex. This made processing large volumes of transactions tougher. And banking data were still organized in silos.Client programs were slowly added even though the standards were still mainframes. Software that was previously accessible through branch networks now became available to customers at ATMs and payment terminals. However, during maintenance, the system still faced prolonged service disruption.<h3 class="heading-node" id="i8wq3v74b" style="text-align: left">3rd Generation Core Banking System - Customer-centric Processes</h3>2010 was the year 3rd generation CBS came into prevalence. It was a major leap from the yesteryear computerizations and product-centric interfaces. CBS became more customer-centric, and banks began building a digital layer to improve flexibility.The first programming interfaces appeared, and the core banking software was accessible on the Internet. The software architecture became less monolithic, and the system started to adapt to newer structures, such as Application Service Providers (ASPs) and Service-Oriented Architectures (SOAs).On the user experience side, newer milestones were achieved, and now version changes could be performed in a shorter span of time. Truly graphic interfaces in HTML and Windows pages were introduced.The infrastructure was completely customer focused. But things started to change when the pandemic struck in 2020. Customer needs, expectations, journeys, and touchpoints underwent a radical transformation.Modern core banking systems came around to save the day. It kickstarted digital transformation in traditional banks and helped new-age banks accelerate next-gen customer experience. API-led core banking architectures enable banks to scale reliable and strong banking ecosystems with frictionless, rapid integrations.<h3 class="heading-node" id="2ndpajyzi" style="text-align: left">4th Generation - Next-gen Core Banking via Platformization</h3>After 2020, 4th generation core banking systems came into prevalence. Platformization of CBS evolved as a crucial development, transforming the core from being only a system to becoming a complete platform.Going beyond traditional models, modern core banking platforms give banks the agility to scale and fully leverage the potential of digital revolution to satisfy stakeholders such as customers, employees, regulators, and partners.&nbsp;However, traditional banks with legacy core banking platforms still grapple with silos, code rigidity, and complexities. Even though their financial processes are automated and newer distribution channels are in place, legacy systems hinder adaptive flexibility to changing customer journeys and behavior, closed ecosystems, and vendor lock-ins. They also result in higher maintenance costs, slower GTM speed, and do not support instant releases.<a class="link" href="https://m2pfintech.com/blog/unlock-the-future-of-banking-with-next-gen-core-banking-solutions/">Next-generation core banking</a> platform breaks down all the barriers that legacy systems impose. They accelerate digital transformation using modern, scalable, and open architectures and lightweight codes. Leveraging APIs and advanced technologies like machine learning, core platforms deliver simplicity, cost efficiency, speed, interoperability, flexibility, security, and future readiness.<h3 class="heading-node" id="c3fg1qz8n" style="text-align: left">Benefits of Next-gen Core Banking Systems</h3><ul class="list-node" id="zkhhkcwra"><li>Simplicity in scaling up</li><li>Agility to accelerate new product launches</li><li>Incredible go-to-market speed</li><li>Onboarding and setting up happen in a few clicks</li><li>Advanced security systems for data storage and fraud prevention</li><li>Centralized access to account aggregators, mobile and third-party applications</li></ul><h2 class="heading-node" id="31" style="text-align: left">Turing Core Banking System (CBS)</h2>Turing Core Banking System (CBS) is a next-gen platform that focuses on customer experience, operational excellence, and security well within the regulatory framework. It is built on the latest micro-services architecture with low code and an <a class="link" href="https://m2pfintech.com/blog/api-the-power-that-drives-new-age-banking-ecosystems/">API</a>-first, cloud-agnostic platform making it a modern and futuristic core banking system.<h3 class="heading-node" id="lb5majzyt" style="text-align: left">Unique Features of Turing</h3><ul class="list-node" id="mlvnqk619"><li>Incredible Speed of innovation (using <a class="link" href="https://m2pfintech.com/blog/how-is-ai-changing-the-financial-industry-top-6-use-cases-in-fintech-and-banking/">AI and ML</a>)</li><li>Flexibility (low code capabilities)</li><li>Agility (hyper-personalized products)</li><li>Pre-integrated with Fraud Risk Management (FRM) engine</li></ul>Furthermore, the primary vantage point of 4th Generation CBS is its ability to evolve and adapt to emerging trends in the financial industry.&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/09/Whats-new-in-core-banking.webp" alt="M2P Fintech" title="" width="100%" height="253"><h3 class="heading-node" id="ee2asr4hj" style="text-align: left">Open Banking and APIs&nbsp;&nbsp;</h3><a class="link" href="https://m2pfintech.com/blog/open-banking-a-primer-2/">Open banking</a> and the utilization of APIs are key drivers in the next generation of core banking platforms. APIs empower financial institutions to seamlessly integrate with third-party banking solutions, enhancing their service offerings and expanding their reach within the digital ecosystem. This synergy facilitates innovation and the creation of a comprehensive banking experience.&nbsp;<h3 class="heading-node" id="ezrisfcla" style="text-align: left">AI and Machine Learning&nbsp;</h3>The integration of artificial intelligence (AI) and machine learning revolutionizes core banking software. These technologies provide predictive analytics, bolster fraud detection, and deliver personalized customer experiences. Harnessing the insights from vast data pools, AI and machine learning empower banks to make informed decisions, streamline operations, and foster heightened customer satisfaction.&nbsp;<h3 class="heading-node" id="z6cl9klc2" style="text-align: left">Enhanced Security Protocols&nbsp;</h3>As digital transactions become more common, security remains paramount. Multi-layered security protocols, including biometric authentication, two-factor authentication, and end-to-end encryption, are being woven into the fabric of core banking systems. These measures are crucial in safeguarding sensitive customer data and maintaining trust in an increasingly digital landscape.&nbsp;<h3 class="heading-node" id="muek4aumh" style="text-align: left">User-Centric Design&nbsp;&nbsp;</h3>Modern core banking software centers on user-centric design principles. Intuitive interfaces, personalized dashboards, and mobile responsiveness are integrated to ensure that both bank employees and customers enjoy a seamless and intuitive banking experience.&nbsp;<h3 class="heading-node" id="ivow0e1u7" style="text-align: left">Sustainable Banking&nbsp;</h3>The evolution of core banking goes beyond technological advancements and encompasses sustainability, embracing the principles of <a class="link" href="https://m2pfintech.com/blog/climate-fintech-fintechs-leading-the-green-tech/">green fintech</a>. Core solutions align with global concerns about climate change and social responsibility by integrating features that facilitate green investments and enable carbon footprint tracking.&nbsp;<h3 class="heading-node" id="i4q9dhpvd" style="text-align: left">Integrating Decentralized Finance (DeFi)</h3>Blockchain technology and cryptocurrencies are reshaping the financial system. Some core banking software is now incorporating DeFi integrations, enabling banks to offer services related to crypto trading, lending, and borrowing.&nbsp;<h3 class="heading-node" id="x6n64jqoo" style="text-align: left">Chatbot Interfaces&nbsp;</h3>Voice assistants and chatbots are being integrated into banking systems to provide instant customer support and assist with transactions. Customers can perform banking tasks using natural language, simplifying interactions, and reducing the need for manual assistance.&nbsp;<h2 class="heading-node" id="51" style="text-align: left">Final Word</h2>The future of banking is driven by digital innovation, connectivity, and a steadfast focus on customers. Modernizing the core is no longer a choice, it is a dire requirement for banks to grow with agility, efficiency, and customer-centricity.&nbsp;Want to know more about modernizing your core banking system?Write to us at <a class="link" href="mailto:business@m2pfintech.com">business@m2pfintech.com</a>.<a class="link" href="https://m2pfintech.com/newsletter/">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox.Follow us on&nbsp;<a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/">LinkedIn</a>&nbsp;and&nbsp;<a class="link" href="https://twitter.com/m2pfintech">Twitter</a> for insightful fintech bytes curated for curious minds like you.

Future of Core Banking Systems

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/MicrosoftTeams-image-11-1.webp" alt="M2P Fintech" title="" id="kkcc1k5hr" width="100%" height="317">Video KYC is a game changer in digital onboarding. Since 2020, video-based identity verification has been effective in preventing fraud, reducing onboarding costs, and speeding up the authentication process.&nbsp;&nbsp;A robust face liveness detection is a key part of the <a class="link" href="https://m2pfintech.com/blog/transform-digital-onboarding-with-vkyc/" target="_blank" rel="noopener">VKYC</a> process. It is basically a selfie-based check that scans the user’s facial expressions and blinking gestures to differentiate a real user from a fake impersonator or a bot.&nbsp;<h2 class="heading-node" id="m7mrkrgp6" style="text-align: justify">How can you Create a Robust Face Liveness Detection Application?&nbsp;</h2>There are several tools and technologies available in the market, but the simplest cost-effective method involves using Flutter and Google ML Kit. Using these, you can easily create a face liveness detection application.&nbsp;Wonder how? &nbsp;We have our Flutter experts <a class="link" href="https://www.linkedin.com/in/chinnadurai-viswanathan-b2b6b7a5/" target="_blank" rel="noopener">Chinnadurai Viswanathan</a> and&nbsp;<a class="link" href="https://www.linkedin.com/in/nandhakumar-k-14828813a/" target="_blank" rel="noopener">Nandhakumar Krishnan </a>explain how a face liveness detection application can be created using Google ML Kit. &nbsp;So, here you go. &nbsp;To start with, facial&nbsp;images will be detected by doing the following gestures.<ol class="list-node" id="kg1t9mjv2"><li>Left - Turn&nbsp;</li><li>Right - Turn&nbsp;</li><li>Look - UP&nbsp;</li><li>Look - Down&nbsp;</li><li>Wink 😉&nbsp;</li><li>Smile 😃&nbsp;</li></ol>We will use Google’s library named <a class="link" href="https://firebase.google.com/docs/ml-kit" target="_blank" rel="noopener">Firebase ML Kit</a> to detect the faces within an image. <a class="link" href="https://pub.dev/packages/camera" target="_blank" rel="noopener">CameraPreview</a> is used to capture the user’s image, and then it will be sent to the <a class="link" href="https://firebase.google.com/docs/ml-kit" target="_blank" rel="noopener">Firebase ML Kit</a> library, which provides the face values.&nbsp; &nbsp;Now, let’s explore the Firebase ML Kit further.&nbsp;<h2 class="heading-node" id="ecwzez33o" style="text-align: justify">Firebase ML (<a class="link Hyperlink SCXW22502046 BCX0" href="https://firebase.google.com/docs/ml-kit" target="_blank" rel="noreferrer noopener">Firebase ML Kit</a>):&nbsp;</h2>Firebase ML Kit’s Face Detection API is a powerful tool to&nbsp;detect faces within images, which allows you to identify important facial features and obtain the contours of detected faces.&nbsp;&nbsp;This technology performs exceptionally well in the pre-processing phase of the image and detects different zones of the face accurately. The API can also identify many facial expressions and emotions, making it a valuable tool for developers looking to create facial recognition with greater accuracy and precision.&nbsp;&nbsp;After the images are captured from <a class="link" href="https://pub.dev/packages/camera" target="_blank" rel="noopener">CameraPreview</a>, it is tested using the following dependencies.&nbsp;<ol class="list-node" id="7f90uhnxd"><li><a class="link" href="https://pub.dev/packages/google_ml_kit" target="_blank" rel="noopener">Google MLKit (google_mlkit)</a>&nbsp;</li><li><a class="link" href="https://pub.dev/packages/camera" target="_blank" rel="noopener">Camera (camera)</a>&nbsp;</li></ol><h2 class="heading-node" id="pv2dvk5be" style="text-align: justify">Flutter Dependencies&nbsp;</h2><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/1.webp" alt="M2P Fintech" title="" width="100%" height="120"><h2 class="heading-node" id="d7sjvjvno" style="text-align: justify">Android Dependencies&nbsp;</h2><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/2.webp" alt="M2P Fintech" title="" width="100%" height="91"><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/3.webp" alt="M2P Fintech" title="" width="100%" height="117"><h2 class="heading-node" id="i0796e05v" style="text-align: justify">How to Get Face Values using Flutter &amp; Android dependencies?</h2>The following steps will help you get face values using Flutter and Android dependencies.&nbsp;Step 1The first step is to set the preview of the camera in Flutter.&nbsp;&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/4.webp" alt="M2P Fintech" title="" width="100%" height="120">In Flutter, the camera controller needs 3 parameters.&nbsp;<ol class="list-node" id="aj57jbroc"><li>List of cameras (List&lt;CameraDescription&gt; cameras = [];)&nbsp;</li><li>Resolution of Photo&nbsp;</li><li>Audio needs — Based on your requirement&nbsp;</li></ol><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/5.webp" alt="M2P Fintech" title="" width="100%" height="189">Using StreamBuilder, we can get the photo from the camera every second to process the images.&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/6.webp" alt="M2P Fintech" title="" width="100%" height="104">The cameraController?.startImageStream() method returns a ‘CameraImage’ which can be used for ML image processing. If you use Firebase ML for Flutter, you can directly pass the CameraImage to it for processing. Once the processing is complete, you can return the result and display it in a User Interface (UI).&nbsp;&nbsp;Note: The ‘cameraController?.startImageStream()’ method provides ‘CameraImage’ instance, but Google ML Kit requires an ‘InputImage’ object to perform face detection. Therefore, we need to convert the ‘CameraImage’ to an ‘InputImage’ object to build the face detection logic. In case you’re not familiar with ‘InputImage’, it is an ML Kit class that offers a common representation of images used as input data for machine learning models. It can be created from various sources such as bitmap, media image, or Byte Buffer.&nbsp;&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/7.webp" alt="M2P Fintech" title="" width="100%" height="74">Step 2Once you have implemented the above code, you can design your camera view in your application.&nbsp;&nbsp;Note: The below onImage method code is our special requirement, so we’ve implemented a few things.&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/8.webp" alt="M2P Fintech" title="" width="100%" height="454">Now we have obtained the InputImage from the camera stream, then the next step is to process the image and detect faces using the FaceDetector from the google_mlkit_commons library. This will display a list of all the faces present in the image, that can be used for further processing.&nbsp;&nbsp;Step 3Using this faceDetector instance, we will get the list of faces from InputImages objects.<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/9.webp" alt="M2P Fintech" title="" width="100%" height="368">The output of the image will be as below.&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/MicrosoftTeams-image-9.webp" alt="M2P Fintech" title="" width="100%" height="254">If you are interested in reusing the above codes in your existing native applications, you can refer to this article on <a class="link" href="https://m2pfintech.com/blog/the-implications-of-flutter-in-fintech/" target="_blank" rel="noopener">The Implications of Flutter in Fintech</a>.&nbsp; With the power of ML and Flutter, the possibilities are endless for creating intelligent apps that offer a better user experience.&nbsp;&nbsp;If you want to know more about how we implement face liveness detection in Flutter and Google ML Kit, write to us at <a class="link" href="mailto:business@m2pfintech.com" target="_blank" rel="noopener">business@m2pfintech.com</a>!&nbsp;This article is authored by <a class="link" href="https://www.linkedin.com/in/chinnadurai-viswanathan-b2b6b7a5/" target="_blank" rel="noopener">Chinnadurai Viswanathan</a>.<a class="link" href="https://m2pfintech.com/newsletter/" target="_blank" rel="noopener">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox.Follow us on&nbsp;<a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/" target="_blank" rel="noopener">LinkedIn</a>&nbsp;and&nbsp;<a class="link" href="https://twitter.com/m2pfintech" target="_blank" rel="noopener">Twitter</a>&nbsp;for insightful fintech tales curated for curious minds like you.

Product

About

Compliance

Resources