Monzo with Friends: New Monzo iOS Update Out Now

6 Likes

What does Monzo do with my contacts?
We never send or store your full address book on our servers and we won’t spam or get in touch with your contacts without your permission, nor share their information outside of Monzo. If you’re interested in the details, you can read more below.

What do people see when I pay them?
Anyone you send money to from within the Monzo app will see your name, any message you added, and the amount of the payment. Additionally, those who don’t already have your phone number will be able to see your number and add it to their address book so they can send money back to you.

The details
We wanted to build Monzo payments in the most privacy friendly way we could, whilst still making it as simple and easy to use for our customers as possible. We never send or store your full address book on our servers, instead we use the following process to check if your contacts already use Monzo:

  1. Your device generates a hash for each of the contacts in your address book
  2. Your device then uploads a portion of that hash to the Monzo servers
  3. The server checks if the hash matches any existing users and if it does, sends your device a slightly larger portion of the hashed contact
  4. Your device then matches the larger hash with its existing hash to confirm the correct contact record has been matched
  5. If there’s a match, we show you that contact as a Monzo contact. If there’s no match, the hash is deleted from the server and Monzo never sees any of the contact’s information.
  6. The server never receives any of your contacts’ phone numbers, names or any other personal details during this process. The only time we transmit their full phone number is when you actually send money to that person and this is fully encrypted in transit, stored securely as part of our banking infrastructure, and only sent once you’ve confirmed the payment using your PIN or fingerprint.

I have other questions
We’d love to chat! Message us through the in-app chat with your thoughts, questions and feedback.

16 Likes

That hashed contact check sounds awesome, good work!

2 Likes

What is the ‘Location-based security’ toggle switch?

I would assume if your phone is in the UK and a transaction comes up in europe Monzo would look a bit closer at the actual transaction regarding a fraudulent transaction

This is a truly excellent explanation, thank you.

In the future, is there any chance of these kinds of security and privacy explanations being compiled into an easily linkable support page/document? Thinking along the lines of Apple’s iOS security documents. It nicely fills that gap between the more marketing messages and revealing exact implementation details, a huge step to being transparent (and more importantly, understandable) about what’s going on with user data IMO.

5 Likes

The update sounds great. The “What’s New” message in the App Store … not so much. A couple weeks ago the jokes might have worked, but this week it’s too raw. Please reconsider.

Thanks for designing with privacy in mind from the beginning. Privacy is the biggest concern I have with a lot of new services. If not considered from the outset, you either end up with something that is a hassle/inconvenient to use, or something that has no regard for keeping my data private. I’m very glad to see the Monzo team thinking this through and building a good foundation!

Having just updated the Monzo app and checking out the contacts tab, I have a suggestion for improving this feature. Could you add the option to filter the contacts list to just those who are already on Monzo? If I want to see whether I can send a friend money, I’m not going to invite them to Monzo. I might later, but at that moment, I want to see if I can send it through Monzo (and then do it), and if not I’ll sort it out another way. Inviting friends to use Monzo is a separate action and I feel that it currently subverts the usefulness of the Contacts tab. My contacts list is way too long to scroll through to find out who I can send :pound: to!

I’d like to know what the location-based security switch does as well. Can’t find an explanation on these forums. What are the implications of enabling it?

Anyone you’re able to send money to (i.e. who’s already enabled Payments with Friends) will already appear at the top of the Contacts list, so you don’t have to scroll through to find them :slight_smile:

I definitely think that “All Contacts”, which for me is full of hundreds of random people, could be hidden behind a “Show all contacts” button, for clarity’s sake.

Ah, my mistake – thanks @ned. In that case, the contacts of mine who I know have :mondo: either haven’t updated their app yet, or haven’t enabled the Send Money feature. Good to know they will appear at the top when they do. :slight_smile:

In the interest of privacy, some of us may not want our contacts to have our phone number. Contacts aren’t just close friends and relatives. They might be companies, they can be imported from Facebook, Twitter, can be manually entered and just contain an email or postal address, plus I’m sure there are other scenarios.

I understand it’d be a lot more work and we’re all keen to see the launch of the current account, but I’d like to see the iOS Contacts app (plus Android if it’s possible) extended with a Monzo integration. Instead of sharing our phone number it could share our Monzo user ID or perhaps a unique public token that we share with contacts if the user ID is meant to be kept secret.

2 Likes

@beningreenjam Don’t worry, your contacts don’t get your phone number. The only time someone will get your phone number is if you send a payment to them (using their phone number) :slight_smile:

3 Likes

I would like to write a comprehensive Security post that details all of those things at some point. I’d like to finalise the details around account recovery and authentication before I write this though.

4 Likes

Hope this is the best place for this pedantic bug report. I’m on iOS, v1.9.1.

In the Contacts tab, the “Contacts on Monzo”, and “All Contacts” headers are currently pinned to the viewport rather than the list below - so they remain visible when scrolling and overlap contact names. Could this be changed so that they scroll out of sight as expected?

A single list header remains visible while you’re scrolling, right? I wouldn’t expect it to scroll out of site personally, I think this is a design choice & it doesn’t get in the way for me (on an iPhone 6S)…

Hi Alex, thanks for the screenshot - leads me to wonder whether the fact I’m still on iOS 9.3.3 is the issue - I don’t have the white “header row” behind All Contacts - it’s simply transparent, which doesn’t look great when it overlaps with contact names. Screenshot here.

1 Like

Is your phone jailbroken?

2 Likes

Nope. iPhone SE, on vanilla 9.3.3 (by choice - avoiding iOS 10 for the moment!).