Maliciously in what way? assuming they’re transactions you don’t want people to see you could try hiding the app in a folder but for someone to see/open the app they’ll need to unlock your device
I don’t think hiding the app is the way forward. If someone has recovered the phone’s PIN then they would likely have access to text messages, emails, Monzo transaction data, and could use the phone to make calls to those making regular payments into the account.
tbutz
(🏳️🌈 Producer of "low value commentary")
12
This scenario is very unlikely. Surely you use biometrics to access your phone, the PIN should be a fall back or used when booting up from cold. How are people getting your PIN?
If said someone had access to your texts/emails they’ll be able to bypass most 2FA with most companies anyway.
I would think if they’ve put in so much effort to do this the last thing they’ll try to do is look at your transactions just to phone your contacts.
If they’ve gotten your mobile pin to the phone it self, they’ll be allowed to make mobile payments such as Apple Pay / GPay etc for all the cards on the device without even touching the apps.
You can add extra security on Monzo savings such as a QR Code or friends to verify its you.
The best way forward is to make your phones pin more complicated and don’t inform anyone to what the pin is or could be and always use biometrics when possible
I read an article today about someone whose phone was snatched whilst unlocked which seems to be on the rise.
They managed to bypass the security on the Monzo app as they had access to emails and also change account passwords and biometrics. This meant they could send payments out of the account.
At this point they weren’t aware of the added security feature which probably would have helped.
Monzo did refund them in the end but I guess don’t just take for granted your current security methods will stop everything.
Don’t believe everything you read on the internet.
They would need the PIN to transfer money regardless of whether the phone is unlocked. You also can’t change the PIN on the phone without knowing what the original PIN is.
There’s a bunch of reasons I can think of. Fingerprint sensors can be hacked. Updates can stop them working. But for myself, ointment and I sometimes need to wear gloves to keep it in place. I also have a preference for long unique PINs for apps containing sensitive information, such as the other banking and email apps I have on my phone.