Revolut mobile finance - not supported on devices with custom firmware problem

Ranakan

Great Revolut doesn't even allow their app to work on Bluestack nor NoxPlayer...
There is no really alternative for now but spreading the message how outrageous this is.
I gave a negative review on Google Play, talked to them directly in the app : same result as always...

What solutions do we have ? A petition ? organise a demonstration ? or just wait for God to actually change devs' mind and remove this stupid Play Integrity API ?

cdflasdkesalkjfkdfkjsdajfd

N1b the crDroid alternative is working without root and, if you want a "philosophical" answer: Nothing in life is forever ;)

DeletedUser370

cdflasdkesalkjfkdfkjsdajfd Nothing in life is forever ;)

Perhaps, but in this case it's clear that the workaround you are suggesting will only work within a very limited timeframe. Personally I don't see the point of trying to work around a block just to have the workaround stop functioning next month.

Personally, I'm hopeful that a legislative ban of this monopolistic system will be implemented in the end. At least in the EU, its history shows that they do not tend to shy away from regulating monopolistic business behaviour.

cdflasdkesalkjfkdfkjsdajfd

DeletedUser370 Personally, I'm hopeful that a legislative ban of this monopolistic system will be implemented in the end. At least in the EU, its history shows that they do not tend to shy away from regulating monopolistic business behaviour.

Keep dreaming ;)

DeletedUser370

cdflasdkesalkjfkdfkjsdajfd Keep dreaming ;)

If the definition of "dreaming" includes something that has not yet happened but that might come to pass in the future, then sure, I'll keep "dreaming". You are free to keep repeatedly implying that it's never going to happen, but so far, I have not been convinced by any arguments in this thread.

N1b

I like Revolut and would prefer using it in the future.

We as the end users have more power than most people think. Many things have changed for the better because users collectively demanded it and because talented people started delivering solutions. Look at the right to repair movement, look at Linux, Wikipedia, VLC, Signal, Bitcoin. And of course look at GrapheneOS.

None of these things happen because of pessimists giving up. Let's do our part and maybe enjoy the change it might create.

Last but not least: Being a proactive optimist means living a happier live. That alone makes it worth trying for me.

traveller

Are there a lot of popular apps that use this play integrity APIs? Or is it mostly banking apps?
Should we be concerned that this may become a widespread thing?

de0u

traveller Are there a lot of popular apps that use this play integrity APIs?

So far it seems to be mostly some bank apps and some medical-device apps. Here is a (partial) list: Apps banning GrapheneOS.

traveller Should we be concerned that this may become a widespread thing?

On the one hand, it does seem to be a direction that Google is encouraging app developers to move. On the other hand, it does not seem particularly consistent with the direction that EU regulators have been forcing companies to move.

"It is difficult to make predictions, especially about the future" (source).

DeletedUser370

GrapheneOS on X: There's no valid reason this should be the case and we intend to get this problem solved. EU Commission contacted us about it over a year ago and is well into the process of starting to deal with it now. We expect it's going to be dealt with and Google will face consequences.

https://xcancel.com/GrapheneOS/status/1877794672547897539#m

Magic

While Revolut doesn't work, I tried to use an emulator, but https://imgur.com/a/T1QF0sW, also cap.
I'm thinking about a virtual machine inside the phone, will it work?

focalor

I had no issues until yesterday, when I tried to create a new one-time debit card. That was kinda weird, because after trying to see the card details, the app asked me to log in again and took a picture of my face. Seems like the debit card request started the problem for me.
Now, I have no access to my crypto and can't sell when the time comes, which is clearly a hostile act on behalf of Revolut - it causes real financial damage.
Revolut web app has almost no functionality w/o the app confirmation or the push confirmation.
I see only two solutions:

Revolut enables GOS again
I install the stupid app on another phone only to move my money away and remove the account.

Kindkey4468

focalor yes the webapp with email confirmation in stead of push does not even show your balance, really q joke.

MasterOne

I have just skimmed through the last few comments and as it seem, GrapheneOS + Revolut is still a no-go, right?

To be clear, the Revolut apps detecting that they are running on a custom ROM during the login phase has nothing to do with the usual suspects, especially it has nothing to do with:

Play Integrity / SafetyNet
a certain string (like "lineage") in the Build Number
microG
unlocked bootloader
enabled developer or debugging settings
SELinux

I have tried several different ROMs on my POCO X3 NFC and the only one that works with the Revolut apps is crDroid, so if someone with the required knowledge and time could find out what they are doing differently, there may be hope.

DeletedUser370

MasterOne Play Integrity

It's using the Play Integrity API.

GrapheneOS

MasterOne crDroid is doing temporary workarounds to spoof the Play Integrity API device integrity level which is not a reliable or long term solution. It's something we could do and then we'll get endless rounds of people saying it stopped working when something changes, followed by substantial resources going into it again and again only to have it eventually stop working at all. It would take the place of a large amount of our privacy and security work. Counterintuitively, sandboxed Google Play also makes it harder to pretend it's the stock OS on a device rather than easier since it's easy for it to see how restricted it is and the way they do the weak software attestation for device integrity enforcement is super naive which makes it easiest to bypass in an OS doing away with the security model.

MasterOne

GrapheneOS DeletedUser370

Where does that info come from? Because that certainly is not the case, I tried with a plain vanilla crDroid installation without GAPPS or microG and the Revolut apps just worked!

On the other hand, I tried with another custom ROM which the Revolut apps detect as custom ROM, applied Magisk Alpha (because that's currently the only root variant that is not detected by the Revolut apps) and a Play Integrity Fix Magisk module (which got confirmed device integrity) and Revolut still detected it as custom ROM.

MasterOne

GrapheneOS If that were true, GrapheneOS + Magisk Alpha + Play Integrity Fix Magisk Module should work, but I'm pretty sure it doesn't. Anyone willing to try? Can't do it myself, because I don't have a device compatible with GrapheneOS yet (but I will get a Pixel Tablet and a Pixel 8a soon, hopefully).

MasterOne

GrapheneOS I really was hoping for another feedback from you, because that issue almost definitely is not connected to Play Integrity, because otherwise the Revolut apps would not run on plain vanilla crDroid without GAPPS/microG.

The catch is, this issue really is a show-stopper for a lot of people (including myself and my whole family), because Revolut can just not be replaced by any other service, as it's more than just a personal banking app, but also investing, for business and a crypto currency exchange (hence three different apps: Revolut, Revolut Business and Revolut X; all three causing the same issue).

temptemp

MasterOne I am not using GrapheneOS but rather a custom LineageOS ROM and I'm having the exact same problem as GrapheneOS users. I'm also running Magisk Alpha with PIF and Shamiko but as you said, it does not seem to be a Play Integrity issue. I think it might have something to do with DexProtector as mentioned by the creator of the custom LineageOS ROM on XDA

There does seem to exist some DexProtector bypasses for other banking apps like this github repo but I don't know if it could be easily applied to Revolut, since the problem is not root detection but rather detection of custom ROMs.

MasterOne

temptemp Never heard of DexProtector, but I do not assume it has to do with any of such, because the crDroid team surely did not implement a DexProtector bypass.

It really is totally awkward, I have tried several different custom ROMs on my POCO X3 NFC, and crDroid was the only one on which the Revolut apps work (as said, even on a vanilla installation without GAPPS/microG, just installed the ROM, installed Aurora Store, used Aurora Store to install Revolut and Revolut just worked without "custom ROM detected").

focalor

New Revolut 10.62.1 (1006205097) - still broken :(
What a shame, I was hoping the amount of complains they've received will make them change their mind.

« Previous Page Next Page »