Issues installing and launching Scotiabank

nathanielus

Hello.

I am currently trying to install Scotiabank to my fresh GrapheneOS device. Google pixel 10a. I have never used grapheneOS before.

I am attempting to install scotiabank through the Aurora Store, as I do not wish to connect to my google account.
Upon launching the app, I get an error where I have to uninstall and install the app again through the play store.

Have any of you managed to get the Scotiabank app to work on Graphene? If so, how?

Johnnyloans

Upon launching the app, I get an error where I have to uninstall and install the app again through the play store.

Strange, maybe google changed something to get this behavior again. It was fixed in 2026060600

replace implementation of using Play Store source stamps as a substitute for Play Store installer checks included as part of Play Store anti-tampering protection enabled by certain apps (this prevents using the apps when combined with the Play Integrity API store lising toggles)
-https://grapheneos.org/releases#2026060600

IndigoMizumi

I have Scotiabank installed in private space but I did it via the proper Play Store and it works fine. Ideally I'd like to go without it myself but they don't seem to have any alternative 2FA methods (I'd prefer email 2FA).

nathanielus

Man.
It could also be the Scotiabank app itself doing whatevery sorcery, as most reports say that it requires the play store to properly function

I do also know that Scotiabank requires that 2FA on their app be used, which is a shame because I could use those SHA1 tokens that apps use for 2FA instead.

Novaliss

nathanielus here's two GrapheneOS compatibility reports from a simple search on https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/

https://github.com/PrivSec-dev/banking-apps-compat-report/issues/176
https://github.com/PrivSec-dev/banking-apps-compat-report/issues/678

I posted both since one report is like three years fresher.

IndigoMizumi

nathanielus Yeah, it might. I know for sure it requires Play Services to function since I've tried without and it didn't work. And I wish they had another 2FA method.

nathanielus

Novaliss These were the compatibility reports that i had found. So yeah, it seems to only work using the google play store.

Developer-Dude

nathanielus did you try enabling Exploit Protection Compatibility Mode? Using Scotia Bank, I'm assuming you are in Canada. I use Servus Credit Union in Canada installed from Aurora Store. Just had to enable Exploit Protection Compatibility Mode for it to work

Novaliss

nathanielus get an error where I have to uninstall and install the app again through the play store.

Just got past this prompt by just tapping 'back' one step. Sandboxed Google Play is installed but kept Disabled the whole time. This test installed Scotia Bank using Aurora store nightly, and the warning prompt shows, but seems dismissable.

tux_

Unless you can do without the app, this seems like a pretty good use case for Google Play in a segregated profile. I hear it is becoming harder to create throwaway Google accounts however. In the past, it was even possible to use your own (non-Google) email.

nathanielus

Novaliss
I'm honestly insulted by this "security measure."

Your fix has worked. The prompt is indeed dismissable
My next issue is now to use the app itself as the app for 2FA, as it claims the service is unavailable despite being required for using my bank account. Google services are enabled and I enabled Exploit Protection compatibility mode on the app.

The App is allowed to send notifications and access network.
The google services do not have network access.

Do you have any idea what approach I could take to make it work?

nathanielus

tux_
Google accounts require phone numbers now
The bank requires the app for 2fa, which I find to be silly but I'll have to live with it.

IndigoMizumi

tux_ Scotiabank is the main reason I even keep Google Play in private space. If I didn't need it for 2FA I wouldn't have it.

nathanielus

@IndigoMizumi
The Scotiabank app can be succesfully launched and used as detailed by Novaliss
I haven't been able to use it as THE 2fa app though. I'm experiencing similar issues with other services (Spotify, Facebook Messenger) and may start a thread if I can't find anything on creating another account.

Novaliss' solution also allows scotiabank to work without exploit protection compatibility mode, which is neat. But still cannot get 2fa on it regardless of if it's turned on or off

IndigoMizumi

nathanielus I've had no technical issues with the app. My only complaint is being forced to use it.

nathanielus

IndigoMizumi
How did you get 2fa to work on it? It does not on my device and I'm wondering what parameters I should look at to make it work. This could also solve my problems with Spotify and Messenger

IndigoMizumi

nathanielus I just opened the app and it got me to deactivate my old 2FA device and it sent a code to my new phone. I'm running it in private space with Google Play Services.

nathanielus

IndigoMizumi
Ah, right.
Mine doesn't allow that right now:
I have google play services installed and enabled.
I did not get the app from the Play Store.
May just go and complain to Scotiabank till they get hardware attestation rather than google stuff

Novaliss

Those successfully done 2fa through Scotia Banking, please provide some screenshots if this isn't hindered by app policy.
And,
is every user that has recently succeeded using this app doing this from Owner, or are there some of you using Scotia from secondary users, or Private Space?