Swiss Postfinance App stops working as of today

guardware

Hello
I have Swiss Postfinance App 5.17.0 since 07.06.25 and it stopped working with the message:
"Device with manupulated OS / Jailbreak/Rooting" Because of security reasons you cant use this app on this device"
Any advices or hints?
Thanks in advance

fid02

guardware

leafnose

s8n

KarlKlammer

The root message goes away for me when secure app spawning is disabled. Does that work for you as well? I'm doing this:

Disable exploit protection compatibility mode for the app
Disable secure app spawning in the Settings app > Security & privacy > Exploit protection > Secure app spawning
Reboot the device and open the app
If it still complains, clear the app data for it and try opening it again

leafnose

I saw this message for the first time on 05.06.25, I immediately thought ‘that’s it, it’s over with this app’, but closing the window and relaunching the app did the trick then.

I tried again just now, and my conclusion is that whatever protection they did implement, it is not working 100% of the time. It might take some attempts, but it eventually always works (max 2 minutes).
I tried fiddling with GOS exploit protection settings, but it doesn’t seem to make much difference. I can currently use Postfinance 5.17.0 with all exploit protection settings set to default, I just sometimes have to make multiple attempts.

For info, my app is running on the Owner profile, with Google Play services and Google Play Store disabled.
It’s not a good sign for future updates, though.

s8n

I have the same issue since last week. I tried calling support and explain my device is not actually rooted and that it was not very fair. They have escalated the issue to another team but they have never called back. I'm pretty sure they will just tell me that my device is not supported and bla bla bla.. Time to find another bank, or maybe to just use a web browser, getting tired of banking apps at this point.

guardware

s8n
Thanks - but to login with website you also need the app for verification :(
I really afraid this "new" what-ever-is-different now will come to other banking apps as well
For me it is a big problem when suddenly I can not use my bank account - I really think about to move away from GOS because I feel these issues increasing (had problem with another swiss bank app 4 weeks ago, but they sorted it out)
I will wait a few days to see what happen and also open a ticket with Postfinance, but I guess it will now work anymore

s8n

guardware With Postfinance, there is a way to do offline 2FA. They have a yellow "calculator" where you have to put your card in and input a number. It's not great but it works, maybe you can ask for one.

TrustExecutor

I do not use the app but the general recommendation from GrapheneOS developers, whenever an app blocks usage of GrapheneOS is to make a negative rating on Play Store (without any links!) and to simultaneously contact the developers and link them up with the GrapheneOS official information about hardware attestation and how to enable strong attestation and whitelisting of GrapheneOS.

s8n

TrustExecutor Thanks, I will bring it up if they ever get back to me.

KarlKlammer

Same problem here, the app stopped working after the update to 5.17.0 today. Tried all sorts of things (new profile, compatibility mode etc.). For me, the app consistently fails to work.
As a workaround, I installed the previous version with Aurora store: PostFinance App 5.16.1
(1745400968), knowing that this will only work for weeks/days.

2FA with the card reader also still works, as suggested by @s8n

TrustExecutor thanks for the guidance. Why no links in Play Store? Will this prevent the rating from being posted?

Murcielago

KarlKlammer

Why no links in Play Store? Will this prevent the rating from being posted?

Yes, it seems so:

It will get hidden and the developers will never see it. It's unclear if it will even count as a rating.

source: https://grapheneos.social/@GrapheneOS/114557967729184565

TrustExecutor

KarlKlammer thanks for the guidance. Why no links in Play Store? Will this prevent the rating from being posted?

You're welcome. Yes, exactly! Or shadow banned.

JollyRancher

If you have even a moderately substantial sum on deposit with them (or use them for any substantial amount of business) then go in person and tell them that you regret that you have to close out your account given that they are forcing the use of insecure mobile infrastructure that is entirely reliant on a foreign, third party, corporation to function.

If you own a business and do business banking, then tell them that your corporate security polices don't allow the usage of anything reliant on the Play Integrity API as they forbid allowing a Google root kit on your devices.

Random bitching online generally doesn't get you anywhere, concrete financial harm to them and provable lost business does.

It's pretty trivial for an app developer to whitelist GOS but the request isn't going to actually reach anyone able to do it until it starts costing them money.

guardware

fid02
Well done!!!
It works for me like a charm. Thanks a lot for this hint, I am happy ;)
I had to clear the APP data as well
Cheers!

s8n

fid02 Thanks. It seems to be working for me as well. A bit sad we have to disable a global setting for just one app, but it works so I can't complain.

dokmaistr

fid02 You saved my day. Sad to see that it's getting harder with bank apps but your guide also worked on my side without reboot of the phone.

leafnose

fid02
Thanks for the info! Although I won’t do it.
Could it explain why I don’t get the root message every time? (with secure app spawning on)

fid02

You should be aware that disabling secure app spawning will lower the security of your device, as explained here: https://grapheneos.org/usage#exec-spawning

Disabling the option reverts to using AOSP's app spawning model. I'm noting this because I read that someone recently switched back to stock PixelOS to get a banking app working with secure app spawning enabled, believing that stock OS uses the same app spawning model as GrapheneOS (it doesn't).

spl4tt

my swiss bois, just use neon or yapeal. Ditch the stupid traditional banks finally. Switching is easier than you think.

guardware

spl4tt
I guess it is independent from any bank here what can happen to their app. Even if you change the bank, tomorrow their app may suck, so whats then ? Specially for business accounts it is not that easy to change accounts.

spl4tt

guardware tbh, it's just the traditional banks doing stuff like this. I have my business account on yapeal and private account on neon. Both seem to be very open for user feedback, and actually listen to what we say (especially neon), or at least, that's my experience until now.
I would be quite shocked if those neo banks would turn their back on us.

Traditional banks just don't care. You pay them, so that they can make money with your money, without really caring about you because they don't have to. It's ridiculous.

But yes, if one of those banks would block grapheneos, I would terminate that account, no matter how difficult the switch would be.

dc32f0cfe84def651e0e

spl4tt I would be quite shocked if those neo banks would turn their back on us.

Revolut is like: hold my beer.